$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: 7rpVylQfSo2Bv01WRLnq2PVO5RZysDlqFs64VGDf2Pc= Subject key identifier: A6:3F:CB:22:D8:C2:7A:74:90:D8:F0:24:4D:95:10:E4:1D:49:B0:31 Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 6FB021D2A80011290D438D55CAB3324E23A323FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 055A Signing time: Tue 17 Mar 2026 14:20:53 +0000 Manifest this update: Tue 17 Mar 2026 14:15:53 +0000 Manifest next update: Fri 20 Mar 2026 23:23:53 +0000 Files and hashes: 1: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: q6S8X/TpD/yjwhxJt9IgD0RwmCPOPNJgoc+RD9iiRJU=) 2: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=) 3: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: MJzwkeAeDIIHbvzCyYoNIOj+cbb5++mSci1EoFNlAV0=) 4: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: gVdR11t5fw1Z3vuhsrv3YNa5sWCtSlARbhSmJWiHvO4=) 5: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU=) 6: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: E2uu1x+I6SmKuq0aJgDdyKaobr6kyHxRsZ9a/8jvA7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 23:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b0:21:d2:a8:00:11:29:0d:43:8d:55:ca:b3:32:4e:23:a3:23:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Mar 17 14:15:53 2026 GMT Not After : Mar 20 23:23:53 2026 GMT Subject: CN=A63FCB22D8C27A7490D8F0244D9510E41D49B031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:f0:10:48:50:dc:0a:77:06:36:9a:f8:9f: 7f:9c:73:b0:5f:fe:ef:86:e9:2e:6d:23:32:fb:5b: ae:48:b7:ef:d1:c4:d0:d6:38:b4:52:83:6a:f0:02: 90:48:1a:fa:42:09:22:6a:12:47:07:a2:16:82:c8: 1f:f9:43:01:15:fe:f0:65:f1:57:70:e0:23:46:f9: 26:87:72:1a:bc:49:d7:f5:0d:90:cc:8e:dd:af:59: 85:2c:98:0b:42:b3:7e:cb:84:c6:85:c7:d9:7e:a2: 7d:10:43:fa:f7:a9:70:94:a6:26:c3:90:7e:18:88: b3:9b:9c:4a:9d:55:5b:a5:c0:c8:ab:71:e7:23:7b: c7:6f:cf:69:78:11:8d:f9:23:f3:a1:4b:86:96:4d: 5b:b0:07:19:d6:c2:6a:ce:de:1b:7a:d2:86:ac:4f: aa:d2:d3:fc:e1:a9:38:9d:63:59:d0:62:e6:6c:37: 8e:c2:05:08:7a:67:c8:f6:21:3a:2b:b9:b2:5d:a4: f4:90:7c:53:53:2a:2e:e6:c1:b2:70:b6:80:06:98: 56:ef:3f:ea:b6:f7:cd:04:fe:32:0d:33:92:97:b9: 19:e9:90:3a:37:e5:7d:7a:b2:70:11:61:85:58:32: 2b:c1:f2:6b:25:49:da:fe:02:dd:f8:a9:aa:c3:27: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3F:CB:22:D8:C2:7A:74:90:D8:F0:24:4D:95:10:E4:1D:49:B0:31 X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a1:2e:e7:14:0d:46:c2:e0:31:aa:27:89:84:bf:16:03:55: b8:b3:9d:d9:87:b7:12:74:20:c5:c3:89:b4:fb:c6:48:b6:1a: 44:a5:04:8d:ae:38:7e:06:18:d2:69:55:a7:44:35:f1:0c:90: 4c:d4:74:1d:1a:a5:38:92:01:80:c4:1b:de:bb:3f:36:c6:d6: e4:fc:8c:e7:73:e2:1c:e7:91:df:f7:8c:47:fd:b3:50:93:db: bf:be:7a:e3:0f:1a:38:70:ef:b7:ae:a0:ab:ed:c5:0a:05:e0: ea:e8:9e:32:71:f6:27:44:1f:cb:97:c3:96:ca:c6:84:1c:e0: 2d:fa:34:db:7c:7b:e8:3f:9b:5a:bb:db:65:55:88:8d:0f:1d: d9:84:bc:59:e9:c7:2a:c4:f3:c1:2e:77:38:e6:ee:16:1b:1f: 1d:e1:6a:ba:df:4a:b7:c5:6f:92:0e:87:e1:5e:fc:97:2a:84: 6c:b1:3f:5c:ef:d6:de:bb:03:94:00:6c:f4:a3:ca:88:ab:c4: 3c:e0:92:07:5d:b9:10:12:8a:76:23:62:11:43:24:61:6e:5a: d7:dc:68:0b:c9:64:3a:e9:51:d1:a4:9f:d6:2e:5c:f3:9f:1d: 11:95:eb:25:1d:bb:a1:c2:ba:88:64:32:17:9d:26:f9:f8:5b: 53:07:83:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7Ah0qgAESkNQ41VyrMyTiOjI/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNjAzMTcxNDE1NTNaFw0yNjAzMjAyMzIzNTNaMDMxMTAvBgNV BAMTKEE2M0ZDQjIyRDhDMjdBNzQ5MEQ4RjAyNDREOTUxMEU0MUQ0OUIwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRfAQSFDcCncGNpr4n3+cc7Bf /u+G6S5tIzL7W65It+/RxNDWOLRSg2rwApBIGvpCCSJqEkcHohaCyB/5QwEV/vBl 8Vdw4CNG+SaHchq8Sdf1DZDMjt2vWYUsmAtCs37LhMaFx9l+on0QQ/r3qXCUpibD kH4YiLObnEqdVVulwMircecje8dvz2l4EY35I/OhS4aWTVuwBxnWwmrO3ht60oas T6rS0/zhqTidY1nQYuZsN47CBQh6Z8j2ITorubJdpPSQfFNTKi7mwbJwtoAGmFbv P+q2980E/jINM5KXuRnpkDo35X16snARYYVYMivB8mslSdr+At34qarDJ+PVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpj/LItjCenSQ2PAkTZUQ5B1JsDEwHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGChLucUDUbC4DGqJ4mEvxYDVbizndmHtxJ0 IMXDibT7xki2GkSlBI2uOH4GGNJpVadENfEMkEzUdB0apTiSAYDEG967PzbG1uT8 jOdz4hznkd/3jEf9s1CT27++euMPGjhw77euoKvtxQoF4OronjJx9idEH8uXw5bK xoQc4C36NNt8e+g/m1q722VViI0PHdmEvFnpxyrE88Eudzjm7hYbHx3harrfSrfF b5IOh+Fe/JcqhGyxP1zv1t67A5QAbPSjyoirxDzgkgdduRASinYjYhFDJGFuWtfc aAvJZDrpUdGkn9YuXPOfHRGV6yUdu6HCuohkMhedJvn4W1MHg38= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:56 2026 by rpki-client