$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json) Hash identifier: +Nc7r4NoPXN1ZIRyEIZk826PRi+NK5mKXZaPpCqb328= Subject key identifier: 18:AE:25:F1:37:7F:C9:2C:46:5D:C2:48:6B:98:66:18:2D:14:D9:AB Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A Certificate serial: 34759167CAE8C6C47E176DF13D06C98B81757082 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft Manifest number: 0205 Signing time: Wed 25 Mar 2026 19:30:55 +0000 Manifest this update: Wed 25 Mar 2026 19:25:55 +0000 Manifest next update: Sun 29 Mar 2026 06:20:55 +0000 Files and hashes: 1: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: 8qt4SIb1mxiip7IcFZV96oGPqS13CVWvxWU7M0Nu0no=) 2: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: NLpjQTON2Z80uPvHtmw/0JAegSKn6kWFoxLR7SImnLM=) 3: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: drpnX7LNds+SOXSdHiRDgAYvfRWRRqxqcpLfxpLhPmM=) 4: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: C79vzTgAfsGSSc4gNZfEhC+/ZQRPXp9nU63pK44dLyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:75:91:67:ca:e8:c6:c4:7e:17:6d:f1:3d:06:c9:8b:81:75:70:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A Validity Not Before: Mar 25 19:25:55 2026 GMT Not After : Mar 29 06:20:55 2026 GMT Subject: CN=18AE25F1377FC92C465DC2486B9866182D14D9AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:bd:7c:77:b3:95:2a:54:5a:83:08:8a:6c: c3:d3:e1:0d:11:17:e1:de:fd:77:8d:1e:59:40:53: 90:dd:13:ba:7f:f1:64:56:d1:46:11:bb:85:38:83: bb:95:f6:36:be:37:74:90:d7:0a:9f:33:1b:a3:ae: 24:f5:f2:b0:e7:25:ca:21:7f:ba:ee:8f:9a:42:10: e0:2d:1d:92:64:1d:5e:fc:a3:9c:90:76:02:2f:e5: e2:73:14:6c:93:0d:00:0c:a6:7e:a5:b0:bf:f0:07: 30:81:b1:0c:ed:54:55:90:8d:1b:19:aa:26:5e:cc: 13:65:ec:9e:e9:f5:9b:ee:04:cc:76:57:ee:15:ed: c4:93:40:b1:d0:8a:f1:f0:bc:4f:83:4f:a9:cb:42: f3:d0:0d:88:f9:ea:1a:cd:37:40:4c:7e:f0:66:bb: e2:9c:bc:00:6f:98:3c:14:27:65:77:8e:09:ab:fb: 1d:15:b4:13:3a:2d:81:18:47:5e:eb:a4:b2:77:b2: ac:76:25:33:73:d7:da:38:6e:58:5f:5f:03:c1:1c: 0a:ea:ab:8e:93:85:f7:71:4c:a1:91:6c:a8:a9:48: e7:53:48:67:7c:43:c0:3b:77:f8:c2:2d:a1:b1:02: 74:fc:15:47:f7:53:3f:f5:8f:d7:f7:ba:e0:b9:f7: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:AE:25:F1:37:7F:C9:2C:46:5D:C2:48:6B:98:66:18:2D:14:D9:AB X509v3 Authority Key Identifier: keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:04:36:09:86:eb:cf:b6:93:1b:c5:9c:09:b9:f7:e7:dd:4c: 0a:24:e2:8a:f5:e2:50:1b:22:e8:7b:17:21:19:c2:d9:d5:9e: dd:eb:66:f3:e9:b0:b8:c4:99:f3:d0:7a:61:12:55:de:92:7e: 39:72:ff:e1:00:07:7a:5c:19:35:ad:13:a3:14:00:49:c5:03: ba:a3:fa:5e:28:7d:33:5f:da:10:46:8e:d7:96:c4:03:ac:75: 67:c1:76:bc:6d:4e:29:ef:c1:a5:99:21:cf:58:a9:af:f1:94: ef:1b:7f:8c:8f:c6:58:83:9e:77:33:6a:47:58:f7:4b:f7:49: b7:fe:4b:45:59:6c:ff:fc:da:ee:72:35:c1:c3:12:f0:8e:27: 15:d2:e0:82:bb:24:44:d8:5b:7a:2b:c5:3d:75:fe:c8:8c:49: bb:b3:bc:b8:8d:f0:3d:3f:4e:8e:fb:3f:e4:4e:1a:13:c6:70: a2:ad:e1:e8:23:8d:01:6d:82:23:2a:e9:74:f3:c6:57:5c:78: e2:e3:eb:13:36:07:9a:39:90:a4:b9:15:18:d5:72:8e:14:64: cf:01:d3:66:0b:78:e0:d0:00:a0:5f:24:7c:a1:ad:40:5b:4e: 51:6b:f9:4e:6e:4d:93:b5:22:e2:18:cd:42:79:19:99:f0:1c: f2:5f:16:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHWRZ8roxsR+F23xPQbJi4F1cIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1 MDJCODg0QTAeFw0yNjAzMjUxOTI1NTVaFw0yNjAzMjkwNjIwNTVaMDMxMTAvBgNV BAMTKDE4QUUyNUYxMzc3RkM5MkM0NjVEQzI0ODZCOTg2NjE4MkQxNEQ5QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0b18d7OVKlRagwiKbMPT4Q0R F+He/XeNHllAU5DdE7p/8WRW0UYRu4U4g7uV9ja+N3SQ1wqfMxujriT18rDnJcoh f7ruj5pCEOAtHZJkHV78o5yQdgIv5eJzFGyTDQAMpn6lsL/wBzCBsQztVFWQjRsZ qiZezBNl7J7p9ZvuBMx2V+4V7cSTQLHQivHwvE+DT6nLQvPQDYj56hrNN0BMfvBm u+KcvABvmDwUJ2V3jgmr+x0VtBM6LYEYR17rpLJ3sqx2JTNz19o4blhfXwPBHArq q46ThfdxTKGRbKipSOdTSGd8Q8A7d/jCLaGxAnT8FUf3Uz/1j9f3uuC5999NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGK4l8Td/ySxGXcJIa5hmGC0U2aswHwYDVR0j BBgwFoAUKty/KQqYd25vWTUzUch5oVAriEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMC8yQURDQkYyOTBB OTg3NzZFNkY1OTM1MzM1MUM4NzlBMTUwMkI4ODRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1MDJC ODg0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5 QTE1MDJCODg0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0ENgmG68+2kxvFnAm59+fdTAok4or14lAb Iuh7FyEZwtnVnt3rZvPpsLjEmfPQemESVd6Sfjly/+EAB3pcGTWtE6MUAEnFA7qj +l4ofTNf2hBGjteWxAOsdWfBdrxtTinvwaWZIc9Yqa/xlO8bf4yPxliDnnczakdY 90v3Sbf+S0VZbP/82u5yNcHDEvCOJxXS4IK7JETYW3orxT11/siMSbuzvLiN8D0/ To77P+ROGhPGcKKt4egjjQFtgiMq6XTzxldceOLj6xM2B5o5kKS5FRjVco4UZM8B 02YLeODQAKBfJHyhrUBbTlFr+U5uTZO1IuIYzUJ5GZnwHPJfFuo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:08 2026 by rpki-client