$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: 61SuAPNS27ZFVp9iyZIk7AY5FFoM5Bidce5q9933QnY= Subject key identifier: 2C:02:0C:A4:17:54:DF:EC:1E:37:A1:A0:ED:E9:6E:D3:FF:15:4C:24 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 51314320AF3286420C26377E4F81FC55C919527D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0380 Signing time: Wed 25 Mar 2026 15:22:40 +0000 Manifest this update: Wed 25 Mar 2026 15:17:40 +0000 Manifest next update: Sun 29 Mar 2026 01:34:40 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: 1smIctgtHiB3kP6UTquQoWKKDZR72AaVu7qX3c0YVVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:31:43:20:af:32:86:42:0c:26:37:7e:4f:81:fc:55:c9:19:52:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Mar 25 15:17:40 2026 GMT Not After : Mar 29 01:34:40 2026 GMT Subject: CN=2C020CA41754DFEC1E37A1A0EDE96ED3FF154C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f1:29:03:9a:bf:4d:98:92:70:73:f1:8c:0e: c9:74:a9:04:75:a0:c9:6a:e5:33:bf:b3:73:fe:a1: 6c:75:c3:cb:db:88:66:94:2a:5d:d1:66:87:0e:6d: 02:62:54:81:3c:49:15:96:6f:cb:9f:07:a5:4e:e9: ff:f6:59:cc:a3:a0:3d:63:fe:63:f3:f6:a5:ce:b5: d3:64:6a:09:6a:60:56:ca:39:0d:39:a3:4b:39:b9: d7:15:70:ef:79:92:29:c4:83:3c:a6:37:ba:54:fb: 95:43:cb:95:da:24:6f:88:15:c0:87:f8:fc:5d:46: 20:53:36:99:3a:26:a7:2f:ba:1b:a4:15:71:53:d6: 2d:50:db:87:0e:34:b7:2e:ec:a8:9c:be:ec:b9:45: 07:af:13:bd:e7:e2:35:1e:ef:89:12:81:f0:ff:3b: d4:e9:74:d8:ae:d9:59:0e:1d:a9:1e:32:27:1b:0f: 8d:85:b8:65:3f:d2:5d:5b:2a:a7:3e:b7:0d:6f:d3: 2e:60:cf:f7:8c:32:0c:cf:de:22:03:a6:06:e6:19: 70:8f:b7:a1:93:f7:bd:74:d8:56:5e:7f:dc:b6:cb: ed:97:4b:e7:4d:83:21:ea:28:eb:d5:a6:87:35:cf: 99:73:de:60:8e:6d:8e:60:ca:bf:49:df:0c:42:d5: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:0C:A4:17:54:DF:EC:1E:37:A1:A0:ED:E9:6E:D3:FF:15:4C:24 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a6:3a:95:74:7a:50:3b:7d:28:b9:c3:39:7c:77:0d:bc:1c: 8a:fe:28:84:68:a6:52:16:0e:09:14:61:b3:78:71:95:c4:18: 0e:d5:a4:d9:57:2f:bc:59:39:91:d1:26:b7:41:06:b1:18:c2: cc:9c:8c:b2:01:a3:6a:8d:77:b1:de:7f:d3:25:9c:aa:e9:fe: 36:1c:54:1e:e2:69:a2:da:ef:55:78:ad:56:40:37:a9:6e:b6: cb:85:c5:32:c1:88:30:84:17:ee:1a:06:6f:7e:d2:bc:61:d6: af:b0:c3:ca:0f:91:d6:07:02:97:16:13:c0:1b:93:62:a7:b9: 63:e0:56:d2:92:f0:a4:30:a5:0d:00:66:4a:63:ea:02:39:df: 29:a5:4b:c9:ac:a9:ee:b3:85:05:4c:b4:ab:eb:af:c3:c0:60: ec:b6:af:74:00:7b:3a:c2:3a:da:1e:73:9c:86:36:c2:10:21: 6f:e0:27:67:4f:3f:ec:9a:3d:c1:4d:47:09:e9:b5:38:4a:54: 60:0b:1c:f2:01:d1:9a:f3:b9:84:4f:44:a4:32:c5:0a:5c:e0: 15:20:ee:a4:92:aa:62:e1:48:c0:1f:d0:8a:09:22:38:7b:8f: 96:71:5b:b2:6b:ae:1b:6a:e8:eb:79:45:05:81:db:a8:13:d6: cd:fe:64:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTFDIK8yhkIMJjd+T4H8VckZUn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNjAzMjUxNTE3NDBaFw0yNjAzMjkwMTM0NDBaMDMxMTAvBgNV BAMTKDJDMDIwQ0E0MTc1NERGRUMxRTM3QTFBMEVERTk2RUQzRkYxNTRDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8SkDmr9NmJJwc/GMDsl0qQR1 oMlq5TO/s3P+oWx1w8vbiGaUKl3RZocObQJiVIE8SRWWb8ufB6VO6f/2WcyjoD1j /mPz9qXOtdNkaglqYFbKOQ05o0s5udcVcO95kinEgzymN7pU+5VDy5XaJG+IFcCH +PxdRiBTNpk6JqcvuhukFXFT1i1Q24cONLcu7Kicvuy5RQevE73n4jUe74kSgfD/ O9TpdNiu2VkOHakeMicbD42FuGU/0l1bKqc+tw1v0y5gz/eMMgzP3iIDpgbmGXCP t6GT97102FZef9y2y+2XS+dNgyHqKOvVpoc1z5lz3mCObY5gyr9J3wxC1S2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAIMpBdU3+weN6Gg7elu0/8VTCQwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGmOpV0elA7fSi5wzl8dw28HIr+KIRoplIW DgkUYbN4cZXEGA7VpNlXL7xZOZHRJrdBBrEYwsycjLIBo2qNd7Hef9MlnKrp/jYc VB7iaaLa71V4rVZAN6lutsuFxTLBiDCEF+4aBm9+0rxh1q+ww8oPkdYHApcWE8Ab k2KnuWPgVtKS8KQwpQ0AZkpj6gI53ymlS8msqe6zhQVMtKvrr8PAYOy2r3QAezrC Otoec5yGNsIQIW/gJ2dPP+yaPcFNRwnptThKVGALHPIB0ZrzuYRPRKQyxQpc4BUg 7qSSqmLhSMAf0IoJIjh7j5ZxW7Jrrhtq6Ot5RQWB26gT1s3+ZNY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:53:08 2026 by rpki-client