$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: graVT2CPsqFxadYhO/RYvwyYErxTwDbXl+XJviYWWTk= Subject key identifier: E0:F1:4C:99:A2:61:48:EB:83:DE:8A:12:60:CE:96:8B:6B:78:B8:AC Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 207C89FBFAFDE466D9660A7FE5B036AC4635EF5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03D7 Signing time: Sat 21 Mar 2026 17:12:20 +0000 Manifest this update: Sat 21 Mar 2026 17:07:20 +0000 Manifest next update: Wed 25 Mar 2026 03:46:20 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: knXvF2Aj42T3P4xCQfIP06zq/NAiPsvYSpkOF/JPp9s=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 03:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7c:89:fb:fa:fd:e4:66:d9:66:0a:7f:e5:b0:36:ac:46:35:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Mar 21 17:07:20 2026 GMT Not After : Mar 25 03:46:20 2026 GMT Subject: CN=E0F14C99A26148EB83DE8A1260CE968B6B78B8AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:df:30:64:bc:fc:5e:c1:79:b6:39:4a:1c: 16:d9:19:ce:3a:4a:60:0f:2c:02:ae:cc:7c:ad:4e: 98:80:6c:5c:4b:b3:40:20:2e:b9:21:5c:55:7e:c6: 01:1d:71:d4:15:89:01:55:5d:6b:15:a9:48:4b:10: 2d:82:c5:9c:29:a6:82:62:f1:95:15:b4:b1:af:ef: ae:fb:65:eb:a8:cd:64:56:5a:71:ed:c2:37:d7:c1: 5c:84:63:85:e7:ad:1a:94:d1:94:9b:30:64:d5:e0: 8c:8e:2e:cc:1e:1c:25:78:80:1f:1c:17:b6:d3:cf: ee:0c:14:f4:d8:1e:8f:49:51:ee:3e:70:ac:91:26: d3:57:d6:94:b6:ff:13:a6:4c:d4:94:11:d6:45:29: 0d:1d:cf:0a:1c:06:5a:62:61:72:1d:1a:a9:12:89: 31:0b:91:6f:19:ea:cc:ad:7d:1e:9a:07:6d:34:18: a4:ee:4d:02:cf:9d:ba:5f:11:4d:dc:e4:7c:62:30: ec:66:7e:d9:d5:c7:fd:5c:c7:d4:0c:16:63:f9:3f: e1:99:8d:bf:73:36:af:d9:13:0e:99:97:19:72:8c: bd:6c:8f:05:e4:f1:96:5c:58:a9:b4:49:b7:20:1d: 6c:60:8a:4e:4d:02:e5:83:36:d1:b3:b9:b3:48:a4: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F1:4C:99:A2:61:48:EB:83:DE:8A:12:60:CE:96:8B:6B:78:B8:AC X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b2:1c:66:ea:81:9d:89:6c:6c:6c:03:81:4e:b1:88:b7:7d: 7b:e0:09:70:9c:fc:62:b4:18:77:8c:19:af:24:a6:d2:2a:ee: b5:c3:e5:cd:4e:05:21:e2:aa:b5:dc:7d:00:a3:d1:b6:de:fa: c1:bb:77:08:7e:f9:4d:d5:17:ad:aa:32:61:27:9e:2b:b0:dd: fe:ed:90:b6:c7:e1:6b:66:7f:e6:67:69:b5:6d:91:05:30:fb: 5e:f7:f4:4d:c5:9e:de:4a:9d:eb:ea:47:a4:9c:1b:b8:a3:ff: 38:a6:96:91:88:4a:11:e7:72:d1:0c:8a:b9:2c:da:19:cb:bf: 12:71:f4:75:eb:5e:3b:b6:9e:5f:6b:e1:eb:bf:ee:92:3c:d1: b7:fd:54:86:9d:00:0d:f2:29:69:30:d9:c8:48:58:1d:4a:60: db:ea:c7:00:6d:96:ae:ca:56:ad:cd:3e:a4:b1:78:39:4e:bc: 65:dc:bc:7f:c6:f6:19:53:26:64:4d:35:dd:44:aa:9b:88:7b: d7:1e:ff:98:b5:6f:2d:61:b1:22:75:3c:1b:ac:ef:82:6b:9f: 13:66:ce:56:b9:42:ed:0b:57:8c:a0:ea:b2:87:ca:af:6d:cb: 61:d7:14:a4:13:29:ce:b4:1d:c0:ee:0f:ca:2b:c5:be:7d:4c: 54:3b:91:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIHyJ+/r95GbZZgp/5bA2rEY171swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNjAzMjExNzA3MjBaFw0yNjAzMjUwMzQ2MjBaMDMxMTAvBgNV BAMTKEUwRjE0Qzk5QTI2MTQ4RUI4M0RFOEExMjYwQ0U5NjhCNkI3OEI4QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHN8wZLz8XsF5tjlKHBbZGc46 SmAPLAKuzHytTpiAbFxLs0AgLrkhXFV+xgEdcdQViQFVXWsVqUhLEC2CxZwppoJi 8ZUVtLGv7677ZeuozWRWWnHtwjfXwVyEY4XnrRqU0ZSbMGTV4IyOLsweHCV4gB8c F7bTz+4MFPTYHo9JUe4+cKyRJtNX1pS2/xOmTNSUEdZFKQ0dzwocBlpiYXIdGqkS iTELkW8Z6sytfR6aB200GKTuTQLPnbpfEU3c5HxiMOxmftnVx/1cx9QMFmP5P+GZ jb9zNq/ZEw6ZlxlyjL1sjwXk8ZZcWKm0SbcgHWxgik5NAuWDNtGzubNIpC8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4PFMmaJhSOuD3ooSYM6Wi2t4uKwwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeyHGbqgZ2JbGxsA4FOsYi3fXvgCXCc/GK0 GHeMGa8kptIq7rXD5c1OBSHiqrXcfQCj0bbe+sG7dwh++U3VF62qMmEnniuw3f7t kLbH4Wtmf+ZnabVtkQUw+1739E3Fnt5KnevqR6ScG7ij/zimlpGIShHnctEMirks 2hnLvxJx9HXrXju2nl9r4eu/7pI80bf9VIadAA3yKWkw2chIWB1KYNvqxwBtlq7K Vq3NPqSxeDlOvGXcvH/G9hlTJmRNNd1EqpuIe9ce/5i1by1hsSJ1PBus74JrnxNm zla5Qu0LV4yg6rKHyq9ty2HXFKQTKc60HcDuD8orxb59TFQ7kd4= -----END CERTIFICATE-----Generated at Tue Mar 24 01:51:13 2026 by rpki-client