$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: +kiErgQprIPR0RvAInMZsu86abEtosKnkRbFgc7M/r0= Subject key identifier: 46:0A:D2:E8:80:FE:93:C9:45:21:93:CC:BF:F1:13:02:31:B8:4A:A8 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 55604E2E77026172B9D1DAD3796A4C603C130815 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 0260 Signing time: Sat 21 Mar 2026 11:21:00 +0000 Manifest this update: Sat 21 Mar 2026 11:16:00 +0000 Manifest next update: Tue 24 Mar 2026 17:17:00 +0000 Files and hashes: 1: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: ZakMgEklHLBySdNwwnLg2zh/gT7rWrzuKOeTPK7JxYY=) 2: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: 0aiQ+HFFp3E4Ul7yjl9vQqZoXMc39/Rc/wytdZ1Fqvc=) 3: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: X3HIEEwQlR4yfqmx+zkvxJkm3aSOmIor+tLiUzbXopk=) 4: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 17:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:60:4e:2e:77:02:61:72:b9:d1:da:d3:79:6a:4c:60:3c:13:08:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Mar 21 11:16:00 2026 GMT Not After : Mar 24 17:17:00 2026 GMT Subject: CN=460AD2E880FE93C9452193CCBFF1130231B84AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:e9:ab:78:9a:76:15:66:8f:02:c1:47:49: 3a:3b:ea:21:e6:2a:c6:8b:20:b5:cc:28:bf:a1:19: 69:6b:00:a7:4c:2c:65:fb:1b:14:ae:ad:db:3c:95: ed:81:68:6b:28:cb:81:f5:1e:b2:37:ed:e8:20:f0: aa:7d:f6:45:d6:cd:e7:a5:98:35:bd:8d:7c:69:7b: 4b:17:36:b8:29:52:c5:e9:c8:73:6b:6f:3e:f7:fe: c7:37:32:48:e7:ad:94:65:62:94:14:e9:35:1f:0a: e0:c7:4c:df:ba:92:63:a2:11:3e:7a:59:dc:8c:c8: 4f:67:29:b2:02:c0:1f:e9:21:e7:92:56:29:d0:79: 6f:7e:b2:ca:91:65:29:3c:d0:c1:60:2b:0d:fe:19: ec:f2:37:75:b5:04:39:ad:ba:43:c8:75:d0:23:7a: 24:ac:ae:05:c3:6e:78:99:15:ad:77:a2:33:93:72: 1c:64:b3:72:9c:dd:77:f8:b6:1c:8b:0e:32:4a:d2: f4:42:99:33:5c:24:ff:3b:06:5c:c5:e8:20:2c:98: 79:a7:cd:6f:7a:e5:3b:cb:c4:46:8d:cc:c9:b2:4c: 7e:d3:63:8c:50:b7:51:1d:03:e4:d4:d4:df:f5:97: 12:91:aa:d8:16:2c:98:ad:71:ac:37:4a:1a:22:98: 89:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0A:D2:E8:80:FE:93:C9:45:21:93:CC:BF:F1:13:02:31:B8:4A:A8 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0c:b7:80:77:c3:06:e4:4c:ce:08:c3:bf:2d:eb:48:61:9c: 3b:2d:ce:00:7d:3c:50:91:6b:06:c1:0c:3a:91:1d:24:3d:7f: 76:51:1f:8d:fe:77:bb:a3:50:f6:6b:2a:62:58:30:19:14:0e: e8:98:fe:25:fa:40:09:d0:7a:e5:b1:8a:11:f6:c6:4f:52:ab: d0:76:a7:5d:57:99:37:69:2b:c8:37:2a:25:83:54:40:ae:51: a9:fb:bf:a7:21:b0:91:3d:ba:5d:eb:4e:13:37:f3:a9:f2:46: d9:07:75:26:6d:01:9f:ba:8b:b9:a2:90:9f:0f:b7:a6:10:b6: f0:ca:da:9b:0e:d7:d5:28:ca:ca:76:e9:ab:df:5f:dd:30:13: 42:13:39:68:e5:2d:bf:a8:4c:de:5e:2d:c8:46:11:78:5f:e2: 5a:10:f4:03:22:3d:ac:40:dc:61:88:f0:0d:53:0b:e6:5f:59: bf:e2:59:d0:41:5e:20:a6:f0:ea:1f:2c:88:9d:fd:fe:4c:bc: 12:04:b7:34:45:ae:88:dc:96:cd:f6:2e:8a:a8:2b:6c:4e:a5: c1:dd:9b:29:34:fa:a5:6c:4b:2b:55:9f:1d:05:be:2a:51:bb: 8f:39:3a:81:c8:03:22:69:e4:85:ed:86:fc:32:b4:b6:78:9a: af:5b:74:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWBOLncCYXK50drTeWpMYDwTCBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNjAzMjExMTE2MDBaFw0yNjAzMjQxNzE3MDBaMDMxMTAvBgNV BAMTKDQ2MEFEMkU4ODBGRTkzQzk0NTIxOTNDQ0JGRjExMzAyMzFCODRBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPOmreJp2FWaPAsFHSTo76iHm KsaLILXMKL+hGWlrAKdMLGX7GxSurds8le2BaGsoy4H1HrI37egg8Kp99kXWzeel mDW9jXxpe0sXNrgpUsXpyHNrbz73/sc3MkjnrZRlYpQU6TUfCuDHTN+6kmOiET56 WdyMyE9nKbICwB/pIeeSVinQeW9+ssqRZSk80MFgKw3+GezyN3W1BDmtukPIddAj eiSsrgXDbniZFa13ojOTchxks3Kc3Xf4thyLDjJK0vRCmTNcJP87BlzF6CAsmHmn zW965TvLxEaNzMmyTH7TY4xQt1EdA+TU1N/1lxKRqtgWLJitcaw3ShoimIn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgrS6ID+k8lFIZPMv/ETAjG4SqgwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIMt4B3wwbkTM4Iw78t60hhnDstzgB9PFCR awbBDDqRHSQ9f3ZRH43+d7ujUPZrKmJYMBkUDuiY/iX6QAnQeuWxihH2xk9Sq9B2 p11XmTdpK8g3KiWDVECuUan7v6chsJE9ul3rThM386nyRtkHdSZtAZ+6i7mikJ8P t6YQtvDK2psO19Uoysp26avfX90wE0ITOWjlLb+oTN5eLchGEXhf4loQ9AMiPaxA 3GGI8A1TC+ZfWb/iWdBBXiCm8OofLIid/f5MvBIEtzRFrojcls32LoqoK2xOpcHd myk0+qVsSytVnx0FvipRu485OoHIAyJp5IXthvwytLZ4mq9bdMs= -----END CERTIFICATE-----Generated at Sun Mar 22 09:25:06 2026 by rpki-client