$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json) Hash identifier: DrPCRXUocrj4eSJ/6amU8Ahu5eFo/yy54nPMwNTc/kA= Subject key identifier: D8:B8:85:8E:69:32:87:DD:08:34:C3:BA:FA:AF:32:82:8A:D1:1E:72 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: 039A5F740EA63B264FD7ACA5A85F0A240B9BB364 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft Manifest number: 055A Signing time: Fri 20 Mar 2026 16:02:05 +0000 Manifest this update: Fri 20 Mar 2026 15:57:05 +0000 Manifest next update: Mon 23 Mar 2026 21:55:05 +0000 Files and hashes: 1: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=) 2: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=) 3: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=) 4: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=) 5: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=) 6: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=) 7: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=) 8: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: FMIJm/k16PpWYOeqBqYYdrswuvmyx3om5TLMg8ACybY=) 9: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=) 10: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=) 11: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=) 12: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=) 13: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=) 14: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=) 15: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=) 16: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=) 17: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=) 18: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=) 19: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=) 20: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=) 21: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=) 22: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=) 23: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=) 24: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=) 25: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=) 26: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=) 27: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=) 28: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=) 29: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 21:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9a:5f:74:0e:a6:3b:26:4f:d7:ac:a5:a8:5f:0a:24:0b:9b:b3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Mar 20 15:57:05 2026 GMT Not After : Mar 23 21:55:05 2026 GMT Subject: CN=D8B8858E693287DD0834C3BAFAAF32828AD11E72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:53:e8:3c:70:b7:ae:38:bd:3f:0d:7c:1d: d3:f9:b5:6f:fc:8a:9c:19:a9:d2:fe:2e:fa:04:fe: 95:6a:9e:82:48:94:a3:f2:57:ad:50:68:44:d7:6e: 98:7e:94:88:2b:e4:6a:4e:c3:a7:4a:94:3f:af:d9: 26:b1:7d:25:18:9d:62:bf:60:6d:52:29:fc:45:e9: 80:1d:b9:bf:2c:11:58:a5:11:78:df:85:52:1c:b1: e5:08:ee:95:26:50:63:8a:93:c9:ea:d1:45:18:ca: 95:2d:26:05:26:50:01:54:16:50:f3:dd:49:bd:cd: aa:fb:82:9e:7d:df:f0:a5:34:90:ec:fd:59:bc:64: 40:15:49:61:21:4d:d3:6a:85:c6:39:b0:fc:1d:2f: da:a1:92:91:4a:9f:80:e7:89:31:9a:bc:25:4f:fa: 01:8d:e6:0b:a0:20:2a:0a:9d:60:d5:f2:37:9e:38: 91:61:95:93:f1:01:c5:86:32:bb:44:41:84:d1:a0: 16:f7:f0:4f:15:4c:10:a6:b1:f1:cb:b3:1a:58:75: b6:4b:13:c7:b9:14:fe:cf:34:15:88:60:2e:4f:f4: 7d:93:7d:e1:22:95:6a:d0:2b:52:d6:57:f1:39:3c: 4d:c8:8e:67:79:49:a4:99:ad:a6:65:cb:3f:3b:96: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:85:8E:69:32:87:DD:08:34:C3:BA:FA:AF:32:82:8A:D1:1E:72 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:6d:c1:52:2f:07:29:47:bd:5b:5f:9e:08:2e:53:40:3f:b1: 43:6c:35:a3:7f:46:8f:75:7c:ac:c8:d4:49:39:14:e6:71:d0: fe:a7:28:c0:71:64:2f:cd:28:a9:80:9d:70:06:40:ea:0c:50: 81:79:a8:cf:59:a0:15:2c:e4:2c:c1:6a:c9:ea:b4:3a:2f:a3: 6f:68:ed:4d:28:b5:a2:f6:0e:75:6d:00:c2:75:3b:84:42:28: d9:4e:fa:d9:0b:7d:6f:0a:9f:87:fd:b5:38:73:d4:54:c1:f7: 81:56:c6:b1:b3:a7:6f:35:d1:4e:c6:a2:49:54:94:a3:ab:fe: 1b:e3:35:e9:78:b6:7c:f9:9c:3c:56:7b:cf:66:08:32:ac:22: 59:b4:06:6b:ad:ce:42:f8:25:41:31:28:2c:c1:0a:26:94:92: f2:fa:62:1d:f0:7f:90:4c:cb:cd:c9:46:33:77:48:eb:73:19: 13:73:14:a3:0c:25:d6:38:07:7f:c3:e7:b0:1f:c1:73:fb:8c: e3:3a:f8:75:c4:c1:40:89:a9:42:fb:20:55:be:b6:a0:65:cf: 7f:b2:33:45:30:14:4e:d8:e2:ba:9a:d9:ff:b9:94:82:85:83: 6a:09:54:e4:2c:00:04:bc:b3:a8:a6:f0:6b:4c:d9:cd:54:3e: 70:d5:7b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5pfdA6mOyZP16ylqF8KJAubs2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNjAzMjAxNTU3MDVaFw0yNjAzMjMyMTU1MDVaMDMxMTAvBgNV BAMTKEQ4Qjg4NThFNjkzMjg3REQwODM0QzNCQUZBQUYzMjgyOEFEMTFFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTb1PoPHC3rji9Pw18HdP5tW/8 ipwZqdL+LvoE/pVqnoJIlKPyV61QaETXbph+lIgr5GpOw6dKlD+v2SaxfSUYnWK/ YG1SKfxF6YAdub8sEVilEXjfhVIcseUI7pUmUGOKk8nq0UUYypUtJgUmUAFUFlDz 3Um9zar7gp593/ClNJDs/Vm8ZEAVSWEhTdNqhcY5sPwdL9qhkpFKn4DniTGavCVP +gGN5gugICoKnWDV8jeeOJFhlZPxAcWGMrtEQYTRoBb38E8VTBCmsfHLsxpYdbZL E8e5FP7PNBWIYC5P9H2TfeEilWrQK1LWV/E5PE3Ijmd5SaSZraZlyz87lhK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LiFjmkyh90INMO6+q8ygorRHnIwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRtwVIvBylHvVtfngguU0A/sUNsNaN/Ro91 fKzI1Ek5FOZx0P6nKMBxZC/NKKmAnXAGQOoMUIF5qM9ZoBUs5CzBasnqtDovo29o 7U0otaL2DnVtAMJ1O4RCKNlO+tkLfW8Kn4f9tThz1FTB94FWxrGzp2810U7GoklU lKOr/hvjNel4tnz5nDxWe89mCDKsIlm0BmutzkL4JUExKCzBCiaUkvL6Yh3wf5BM y83JRjN3SOtzGRNzFKMMJdY4B3/D57AfwXP7jOM6+HXEwUCJqUL7IFW+tqBlz3+y M0UwFE7Y4rqa2f+5lIKFg2oJVOQsAAS8s6im8GtM2c1UPnDVe68= -----END CERTIFICATE-----Generated at Sat Mar 21 00:17:49 2026 by rpki-client