$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: BZIIfAAsm9wWXFNJqIj8H3i5E+kFaWN1uRp/CuZDgYs= Subject key identifier: D1:E2:BE:60:92:C0:AC:0A:83:E7:83:EC:73:B4:4E:F6:A0:49:F4:85 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 2D07ECBC0944AC6971B1143C9C26B9E0E7F11A28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: FB Signing time: Thu 26 Mar 2026 08:41:15 +0000 Manifest this update: Thu 26 Mar 2026 08:36:15 +0000 Manifest next update: Sun 29 Mar 2026 12:38:15 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: zbC1p6Ilhviu/m910ekKc7LyBoXnQeSPs/mFpi012Co=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) 3: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:07:ec:bc:09:44:ac:69:71:b1:14:3c:9c:26:b9:e0:e7:f1:1a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Mar 26 08:36:15 2026 GMT Not After : Mar 29 12:38:15 2026 GMT Subject: CN=D1E2BE6092C0AC0A83E783EC73B44EF6A049F485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:13:e6:40:c0:40:62:2a:47:70:3c:f4:44: 33:c8:56:da:32:27:e1:a1:b6:91:ff:46:d5:95:31: 44:cb:89:0d:43:4e:77:14:70:2c:6c:08:a1:a3:d5: 92:63:40:2e:fb:f1:e8:5d:0c:48:b5:99:ca:af:e4: 39:6e:ff:28:90:90:b0:3a:5a:9f:e0:11:51:29:2c: c4:2d:56:06:04:0c:c5:a5:72:6b:73:82:d1:fa:38: 74:51:55:12:84:1d:45:47:cd:3b:2b:1f:e8:a9:b9: 05:8e:47:9f:e4:12:a5:02:9e:54:2a:50:0e:e8:84: 64:88:c7:a0:c6:f1:0d:20:a0:8c:38:65:b5:3f:8e: cb:c1:dc:54:ea:02:46:18:4a:7b:29:76:e3:63:f0: 81:9b:bc:18:f7:9d:05:98:f0:85:74:6f:1b:7e:6a: f7:4e:75:eb:88:4a:12:c8:b8:50:99:d6:3a:3a:18: 4a:f1:61:8c:85:df:4e:b0:12:ef:1a:da:7b:03:86: 66:fa:95:d1:56:da:05:2c:50:b6:c1:bb:ca:13:94: ae:51:40:fa:d0:d8:84:74:ea:10:57:a3:96:2b:48: 7a:3e:01:50:a0:5b:17:4b:95:21:6e:6b:43:30:90: b3:97:bd:39:79:4d:23:e8:57:44:3b:7f:fc:00:32: 8b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:BE:60:92:C0:AC:0A:83:E7:83:EC:73:B4:4E:F6:A0:49:F4:85 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5c:29:ba:40:bb:05:12:15:c3:d5:4d:e0:f2:ab:a1:14:b2: 76:00:90:98:5e:c7:ae:b1:50:1c:54:25:0d:94:11:42:25:2b: 4a:90:94:fc:53:44:61:92:a1:37:86:58:86:cc:9c:34:2a:29: 52:99:57:7c:f7:ac:c9:e8:3e:b8:4d:b2:82:8e:f1:0b:d5:5e: 38:00:45:db:51:66:ba:7e:34:92:ec:f0:d1:c7:22:01:76:74: 05:0e:53:b4:6a:4a:fd:19:dc:29:cc:8c:38:a4:ef:11:5a:5c: 92:53:97:c9:47:bd:dd:f8:9d:92:35:f9:9b:7f:2e:72:38:34: 47:23:20:f4:e8:4b:37:bc:67:0c:de:5b:d8:25:8f:8d:1e:80: 7d:21:3f:81:fe:3b:62:e1:a2:e7:62:b1:c1:33:8e:87:bb:d3: 54:32:64:47:59:f1:bb:e2:c1:71:83:b9:06:e1:d6:5f:a1:0d: 3b:48:22:97:87:ee:29:46:c3:f9:09:3f:37:bd:07:e7:ef:0c: 33:01:1a:8b:24:74:4a:da:59:77:c6:65:b2:d3:b2:41:bd:5c: ae:a9:01:ee:aa:96:cd:1c:04:36:90:d5:b5:b0:0b:7c:14:b7: f9:eb:42:b2:94:87:a3:13:a5:f5:4e:0b:8b:63:67:e7:0d:ce: 7d:e9:87:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQfsvAlErGlxsRQ8nCa54OfxGigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNjAzMjYwODM2MTVaFw0yNjAzMjkxMjM4MTVaMDMxMTAvBgNV BAMTKEQxRTJCRTYwOTJDMEFDMEE4M0U3ODNFQzczQjQ0RUY2QTA0OUY0ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4xPmQMBAYipHcDz0RDPIVtoy J+GhtpH/RtWVMUTLiQ1DTncUcCxsCKGj1ZJjQC778ehdDEi1mcqv5Dlu/yiQkLA6 Wp/gEVEpLMQtVgYEDMWlcmtzgtH6OHRRVRKEHUVHzTsrH+ipuQWOR5/kEqUCnlQq UA7ohGSIx6DG8Q0goIw4ZbU/jsvB3FTqAkYYSnspduNj8IGbvBj3nQWY8IV0bxt+ avdOdeuIShLIuFCZ1jo6GErxYYyF306wEu8a2nsDhmb6ldFW2gUsULbBu8oTlK5R QPrQ2IR06hBXo5YrSHo+AVCgWxdLlSFua0MwkLOXvTl5TSPoV0Q7f/wAMosxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0eK+YJLArAqD54Psc7RO9qBJ9IUwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9cKbpAuwUSFcPVTeDyq6EUsnYAkJhex66x UBxUJQ2UEUIlK0qQlPxTRGGSoTeGWIbMnDQqKVKZV3z3rMnoPrhNsoKO8QvVXjgA RdtRZrp+NJLs8NHHIgF2dAUOU7RqSv0Z3CnMjDik7xFaXJJTl8lHvd34nZI1+Zt/ LnI4NEcjIPToSze8ZwzeW9glj40egH0hP4H+O2LhoudiscEzjoe701QyZEdZ8bvi wXGDuQbh1l+hDTtIIpeH7ilGw/kJPze9B+fvDDMBGoskdEraWXfGZbLTskG9XK6p Ae6qls0cBDaQ1bWwC3wUt/nrQrKUh6MTpfVOC4tjZ+cNzn3ph70= -----END CERTIFICATE-----Generated at Thu Mar 26 16:53:37 2026 by rpki-client