$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: vt8Hom4QSCXw+CUOiraFf87kq9Sgm3hZdDFcU+XiXvc= Subject key identifier: 3F:32:74:AE:B5:09:67:52:74:7B:0D:E7:CC:1A:CE:45:0E:1D:AB:EB Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 463FA40ADE631B07FCBC35DD22F1477D1D477E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 038C Signing time: Fri 20 Mar 2026 03:02:15 +0000 Manifest this update: Fri 20 Mar 2026 02:57:15 +0000 Manifest next update: Mon 23 Mar 2026 11:54:15 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: 2q/3gSBp55bB6jLPHmyrp2ItVx+YklqhcB16htU91dE=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 11:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3f:a4:0a:de:63:1b:07:fc:bc:35:dd:22:f1:47:7d:1d:47:7e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Mar 20 02:57:15 2026 GMT Not After : Mar 23 11:54:15 2026 GMT Subject: CN=3F3274AEB5096752747B0DE7CC1ACE450E1DABEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:6c:0e:5b:68:8f:ad:a3:c8:cc:1d:11:a5: a7:de:d0:e6:79:7e:6d:65:c1:9e:c2:98:06:a8:0e: 4b:3f:a3:3b:56:2c:80:e9:12:43:bb:59:24:5b:05: 05:49:c7:eb:14:37:29:79:1d:a0:98:98:61:a4:5c: 92:ee:c7:0f:9b:ce:30:16:5e:e8:a1:23:b2:1e:5e: 8c:11:87:21:88:6a:c0:9c:48:02:b2:a2:3d:5f:b2: 83:3a:5b:83:b2:d6:ea:d9:b6:ec:11:89:8d:70:45: c7:90:3e:92:fd:e6:f4:a8:99:a2:fc:b7:bd:55:c8: b8:47:b6:b5:07:d3:8e:8b:fe:f9:88:81:14:3d:fa: 2c:bc:08:5d:ad:cc:eb:43:c2:b1:6d:ee:90:48:6a: a3:6f:ca:9c:3d:50:89:98:db:b8:a8:61:c1:b9:fe: 0e:a1:14:84:52:99:3b:72:d8:5f:65:51:67:47:06: 31:db:55:4e:0b:13:fc:b3:fa:db:b3:7c:ef:ff:4f: b6:70:4b:29:26:d4:fc:7d:54:c4:e8:8e:49:8c:ea: 86:cd:18:91:d7:f0:6a:fe:f2:51:94:98:30:ad:f8: 8c:39:7d:01:92:0d:1d:dc:c9:05:c5:40:17:97:2f: 5f:d2:fc:7f:ae:0c:f2:39:8d:cc:ef:6d:4f:1a:84: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:74:AE:B5:09:67:52:74:7B:0D:E7:CC:1A:CE:45:0E:1D:AB:EB X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f2:8f:03:82:cb:20:86:55:d1:17:6a:2a:c4:d2:c0:38:99: fe:fc:11:e9:18:eb:5e:bc:07:23:59:45:db:3b:5e:e5:ba:16: 39:f5:6a:1e:fc:61:d7:26:cd:13:1b:9d:8b:14:30:09:2e:af: 2a:2b:c1:c1:6a:ac:10:ca:f1:91:fc:0c:ce:65:a9:a4:4b:2a: 0e:9c:93:71:2f:19:6f:0f:15:30:7b:ca:94:40:04:66:cf:35: 74:ef:dc:ab:50:d4:1e:6e:7f:7f:00:fe:2d:02:4d:7e:8e:fc: 7b:2c:d2:02:f1:aa:85:dd:63:69:7d:1d:ee:2d:95:43:41:3b: f8:99:68:a7:de:ec:d3:41:ab:2f:3d:2b:46:70:26:bc:c6:ba: 0d:2a:ce:59:e5:30:51:33:1a:71:0e:6b:39:c0:12:3d:c8:2f: 4c:84:2a:c9:b0:b4:90:29:a0:98:5c:ec:49:23:9d:a2:a8:80: 20:f1:10:51:94:3b:20:cb:47:e9:d9:f7:ec:56:14:ef:da:19: d1:43:9f:d8:a3:b4:c7:d3:2d:7f:78:5c:8f:4a:c6:7a:d2:9d: 4a:4e:38:46:ba:fa:a3:f3:75:f3:f0:4d:fc:eb:60:ac:14:98: c2:73:ae:05:91:60:b1:bd:01:34:9e:8e:bf:dc:e7:a3:7d:8a: 15:e5:eb:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURj+kCt5jGwf8vDXdIvFHfR1Hfl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNjAzMjAwMjU3MTVaFw0yNjAzMjMxMTU0MTVaMDMxMTAvBgNV BAMTKDNGMzI3NEFFQjUwOTY3NTI3NDdCMERFN0NDMUFDRTQ1MEUxREFCRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiF2wOW2iPraPIzB0Rpafe0OZ5 fm1lwZ7CmAaoDks/oztWLIDpEkO7WSRbBQVJx+sUNyl5HaCYmGGkXJLuxw+bzjAW XuihI7IeXowRhyGIasCcSAKyoj1fsoM6W4Oy1urZtuwRiY1wRceQPpL95vSomaL8 t71VyLhHtrUH046L/vmIgRQ9+iy8CF2tzOtDwrFt7pBIaqNvypw9UImY27ioYcG5 /g6hFIRSmTty2F9lUWdHBjHbVU4LE/yz+tuzfO//T7ZwSykm1Px9VMTojkmM6obN GJHX8Gr+8lGUmDCt+Iw5fQGSDR3cyQXFQBeXL1/S/H+uDPI5jczvbU8ahH2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPzJ0rrUJZ1J0ew3nzBrORQ4dq+swHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbyjwOCyyCGVdEXairE0sA4mf78EekY6168 ByNZRds7XuW6Fjn1ah78YdcmzRMbnYsUMAkuryorwcFqrBDK8ZH8DM5lqaRLKg6c k3EvGW8PFTB7ypRABGbPNXTv3KtQ1B5uf38A/i0CTX6O/Hss0gLxqoXdY2l9He4t lUNBO/iZaKfe7NNBqy89K0ZwJrzGug0qzlnlMFEzGnEOaznAEj3IL0yEKsmwtJAp oJhc7EkjnaKogCDxEFGUOyDLR+nZ9+xWFO/aGdFDn9ijtMfTLX94XI9KxnrSnUpO OEa6+qPzdfPwTfzrYKwUmMJzrgWRYLG9ATSejr/c56N9ihXl6zE= -----END CERTIFICATE-----Generated at Fri Mar 20 21:57:16 2026 by rpki-client