$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: hYrHNVP2Bcj7mmiDyOGcLOPOc5SXMzDjALBbDP/4kaM= Subject key identifier: B9:18:5A:EB:BB:6A:8F:2D:68:DC:B0:2E:5A:C0:33:35:BD:5C:2A:C0 Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 643106DE5E27BD8EDC999C0E4EAAD4810363F112 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 022E Signing time: Thu 19 Mar 2026 17:21:03 +0000 Manifest this update: Thu 19 Mar 2026 17:16:03 +0000 Manifest next update: Sun 22 Mar 2026 21:02:03 +0000 Files and hashes: 1: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: nxYZnXzCnu/G6Di5JhS1WLXdlQHk8fuEdbh3UpU3Jf8=) 2: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: s7xt6atAlnuk0NCp/3UKrnkCS/YpsE7vKEiGKhHlUBE=) 3: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: 8UXs0GNyx/mDmmOS+NRGsuveLtxgR+PDycG4FXpXgc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 21:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:31:06:de:5e:27:bd:8e:dc:99:9c:0e:4e:aa:d4:81:03:63:f1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Mar 19 17:16:03 2026 GMT Not After : Mar 22 21:02:03 2026 GMT Subject: CN=B9185AEBBB6A8F2D68DCB02E5AC03335BD5C2AC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:a9:a0:c8:77:45:2f:eb:ef:5c:b4:b0:60: 0a:b5:85:e2:f8:44:e9:c4:bd:f5:b4:27:8c:4e:cc: 93:88:fd:a5:ff:22:7b:c2:3e:b2:f0:25:8d:82:a5: 9a:61:6e:60:8c:1a:1b:dd:4f:99:fc:ea:6f:41:5c: 48:6f:bd:a8:c7:44:c6:3d:63:3c:08:5d:8f:72:80: fd:a5:c7:ba:8b:1f:d2:79:8e:f5:b7:81:ae:1f:44: b4:52:26:6a:c6:26:6d:1e:6f:93:76:7c:19:5c:11: 96:9b:e5:ba:e0:da:2f:2f:cc:b0:63:8a:d4:e2:db: 3a:05:f4:04:85:29:d2:fd:ce:46:c4:8b:9a:71:b0: e5:e0:f8:2d:09:f6:ff:bd:21:61:85:36:0b:ce:53: a9:5d:78:4f:14:c3:ac:d5:ba:84:82:a1:cd:5e:0b: 90:c5:9d:55:e1:e9:78:f7:77:f6:0f:a9:f4:43:31: 0a:54:cc:00:66:2c:06:5e:5f:ba:87:70:3a:57:9a: ee:92:41:4a:42:5d:91:ef:df:84:75:fe:ff:e7:d3: a8:7b:02:a0:fc:43:cf:e4:3a:75:6f:e2:1f:4e:99: 72:d4:e9:4f:69:3b:c5:49:1f:d4:ac:e0:e9:da:07: f3:4c:ed:95:5d:58:b5:02:64:9f:d0:5a:b0:4e:55: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:18:5A:EB:BB:6A:8F:2D:68:DC:B0:2E:5A:C0:33:35:BD:5C:2A:C0 X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7a:67:53:b9:3b:99:07:7b:bf:aa:ca:5f:4c:a5:57:bb:d6: e1:e2:72:ac:c3:56:b9:18:60:ed:84:5d:c7:6d:ea:5f:8d:f9: ce:4a:f2:5b:51:78:9a:4f:a6:f1:db:f3:a2:40:54:5a:44:a3: 87:23:2f:6b:dd:43:aa:82:06:ae:40:bb:ee:bb:46:22:b0:32: 9f:6a:6a:5f:e1:40:0e:d8:ee:6e:99:b8:c9:b4:32:8f:b3:5a: a8:64:dd:4e:ec:92:00:3c:36:85:1b:2d:47:a8:5f:c9:44:52: 99:51:c2:cf:31:4a:a2:3a:01:89:ae:2b:a2:d5:22:dc:9a:ea: 27:22:68:80:cd:0b:65:bc:e9:64:12:49:4d:77:c4:ee:7b:65: 06:8b:07:45:9e:57:88:40:6d:73:ff:b0:8d:00:14:a8:a2:05: 88:85:75:90:c4:62:84:99:62:56:8f:7c:86:70:2d:3b:a0:2c: 77:6a:4e:7f:4d:95:43:b3:4b:f8:5f:c1:25:7e:ec:c0:01:e0: f4:c5:90:6a:20:87:ab:4f:19:35:7d:5a:cc:31:71:d4:b3:e2: a0:d6:e8:79:5a:b2:ed:a3:1a:10:8c:2d:ea:8d:06:71:0d:b3: d9:ce:d0:2d:c3:7a:97:52:3d:91:f3:e2:8b:26:c2:5f:13:5b: 9e:90:ae:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDEG3l4nvY7cmZwOTqrUgQNj8RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNjAzMTkxNzE2MDNaFw0yNjAzMjIyMTAyMDNaMDMxMTAvBgNV BAMTKEI5MTg1QUVCQkI2QThGMkQ2OERDQjAyRTVBQzAzMzM1QkQ1QzJBQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lamgyHdFL+vvXLSwYAq1heL4 ROnEvfW0J4xOzJOI/aX/InvCPrLwJY2CpZphbmCMGhvdT5n86m9BXEhvvajHRMY9 YzwIXY9ygP2lx7qLH9J5jvW3ga4fRLRSJmrGJm0eb5N2fBlcEZab5brg2i8vzLBj itTi2zoF9ASFKdL9zkbEi5pxsOXg+C0J9v+9IWGFNgvOU6ldeE8Uw6zVuoSCoc1e C5DFnVXh6Xj3d/YPqfRDMQpUzABmLAZeX7qHcDpXmu6SQUpCXZHv34R1/v/n06h7 AqD8Q8/kOnVv4h9OmXLU6U9pO8VJH9Ss4OnaB/NM7ZVdWLUCZJ/QWrBOVRfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRha67tqjy1o3LAuWsAzNb1cKsAwHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ6Z1O5O5kHe7+qyl9MpVe71uHicqzDVrkY YO2EXcdt6l+N+c5K8ltReJpPpvHb86JAVFpEo4cjL2vdQ6qCBq5Au+67RiKwMp9q al/hQA7Y7m6ZuMm0Mo+zWqhk3U7skgA8NoUbLUeoX8lEUplRws8xSqI6AYmuK6LV Itya6iciaIDNC2W86WQSSU13xO57ZQaLB0WeV4hAbXP/sI0AFKiiBYiFdZDEYoSZ YlaPfIZwLTugLHdqTn9NlUOzS/hfwSV+7MAB4PTFkGogh6tPGTV9WswxcdSz4qDW 6Hlasu2jGhCMLeqNBnENs9nO0C3DepdSPZHz4osmwl8TW56Qrqg= -----END CERTIFICATE-----Generated at Sat Mar 21 00:37:44 2026 by rpki-client