$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: OpC6axxRzLJJBwxUL3v/3xtsxz46ZJXilitUzg/Ok64= Subject key identifier: AC:F6:DB:FA:96:79:3E:2F:2F:76:1C:3F:6A:DE:4E:BE:4F:58:0B:D3 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 52B7610FD5F8A67D91CB2079E5C30315170FA216 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 037D Signing time: Wed 18 Mar 2026 17:52:37 +0000 Manifest this update: Wed 18 Mar 2026 17:47:37 +0000 Manifest next update: Sun 22 Mar 2026 00:07:37 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: TsvczPrG0vz1KJSSznne4dcCMbYzGt6obTN80KUEgW0=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 00:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b7:61:0f:d5:f8:a6:7d:91:cb:20:79:e5:c3:03:15:17:0f:a2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Mar 18 17:47:37 2026 GMT Not After : Mar 22 00:07:37 2026 GMT Subject: CN=ACF6DBFA96793E2F2F761C3F6ADE4EBE4F580BD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:a4:30:21:fa:c4:5b:68:35:a0:e9:69:60: 11:5f:3d:1c:2e:5c:06:e1:d9:73:3b:12:3d:95:dc: 8b:23:04:73:75:b7:7a:a2:68:64:e3:1d:94:4e:df: e6:e8:16:10:c9:e7:0f:3d:a9:4a:38:68:3e:fc:7c: e4:31:6d:b3:99:68:24:51:d5:4a:7e:d5:28:22:37: 41:c0:1d:23:d2:e7:bc:7d:6b:60:d8:dd:80:a3:69: da:f8:1f:06:f4:08:3c:a7:dc:b9:84:5e:55:0d:be: 79:13:a9:b1:35:01:44:a1:f7:57:69:1e:29:28:06: 74:e6:cd:bf:0a:54:a8:50:e5:17:56:34:6e:8a:02: 7a:40:05:df:b8:d3:16:54:a6:e0:8c:23:f7:20:4a: da:f7:ba:36:96:4a:77:d4:fa:8c:80:6b:aa:2c:fa: bc:e3:5c:ff:a2:e8:59:8f:96:b5:0c:3d:58:02:2b: f9:ef:b0:74:92:95:ea:ba:d8:bd:dc:f4:42:4f:89: 41:d7:3f:8f:08:81:07:ea:49:c9:d7:c4:4b:98:71: cf:9a:79:6f:4d:6c:58:20:b4:b9:32:56:91:06:8f: db:91:ee:56:e4:89:28:fa:c2:0b:b6:5c:d6:10:11: 7b:69:6b:fd:99:f6:9a:1f:0c:5f:cd:7a:05:28:b5: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:DB:FA:96:79:3E:2F:2F:76:1C:3F:6A:DE:4E:BE:4F:58:0B:D3 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2e:d8:d8:c6:13:29:7c:b4:68:63:1e:3e:b7:d7:ae:7c:bb: 7c:5f:47:2e:ed:70:e6:7b:d3:d8:6c:d4:ca:48:57:a2:35:a2: 8f:a8:f5:a3:a0:85:ce:2e:5e:0d:4e:79:66:f8:bd:9f:fb:44: cd:12:fa:41:32:33:ac:08:ed:b4:d9:b3:4c:4f:19:62:25:c2: b4:f4:f2:f8:7a:23:26:4e:6a:31:4b:eb:dc:79:93:af:53:df: 8a:22:4e:0b:d2:ca:14:db:71:be:ae:fa:03:0e:53:72:83:df: 5f:9a:2f:ae:bf:92:0c:87:03:81:63:40:d3:8f:33:ce:ef:b1: 27:c3:9b:35:46:65:98:35:56:ce:42:f6:d8:5e:97:5d:ff:91: 00:2c:72:a8:4f:45:85:4c:ac:50:d7:b2:56:ef:80:07:df:14: d6:27:b8:81:64:8a:9e:6a:27:6a:99:02:29:27:89:46:ff:f1: d6:a3:ab:e9:77:51:66:8d:fd:96:2d:38:86:f9:86:fd:6a:10: ff:fc:86:ee:89:64:4f:61:a6:a1:d0:a5:0c:70:af:3e:e7:22: f3:6e:6b:d2:3c:4a:13:4f:d2:22:a7:c4:b3:a9:6c:2b:eb:31: ff:cb:e3:d4:79:33:1c:69:e9:31:5c:6b:63:6e:8b:7a:99:f7: d2:ec:73:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrdhD9X4pn2RyyB55cMDFRcPohYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNjAzMTgxNzQ3MzdaFw0yNjAzMjIwMDA3MzdaMDMxMTAvBgNV BAMTKEFDRjZEQkZBOTY3OTNFMkYyRjc2MUMzRjZBREU0RUJFNEY1ODBCRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaKQwIfrEW2g1oOlpYBFfPRwu XAbh2XM7Ej2V3IsjBHN1t3qiaGTjHZRO3+boFhDJ5w89qUo4aD78fOQxbbOZaCRR 1Up+1SgiN0HAHSPS57x9a2DY3YCjadr4Hwb0CDyn3LmEXlUNvnkTqbE1AUSh91dp HikoBnTmzb8KVKhQ5RdWNG6KAnpABd+40xZUpuCMI/cgStr3ujaWSnfU+oyAa6os +rzjXP+i6FmPlrUMPVgCK/nvsHSSleq62L3c9EJPiUHXP48IgQfqScnXxEuYcc+a eW9NbFggtLkyVpEGj9uR7lbkiSj6wgu2XNYQEXtpa/2Z9pofDF/NegUotf6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrPbb+pZ5Pi8vdhw/at5Ovk9YC9MwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgu2NjGEyl8tGhjHj631658u3xfRy7tcOZ7 09hs1MpIV6I1oo+o9aOghc4uXg1OeWb4vZ/7RM0S+kEyM6wI7bTZs0xPGWIlwrT0 8vh6IyZOajFL69x5k69T34oiTgvSyhTbcb6u+gMOU3KD31+aL66/kgyHA4FjQNOP M87vsSfDmzVGZZg1Vs5C9thel13/kQAscqhPRYVMrFDXslbvgAffFNYnuIFkip5q J2qZAikniUb/8dajq+l3UWaN/ZYtOIb5hv1qEP/8hu6JZE9hpqHQpQxwrz7nIvNu a9I8ShNP0iKnxLOpbCvrMf/L49R5Mxxp6TFca2Nui3qZ99Lsc7E= -----END CERTIFICATE-----Generated at Thu Mar 19 09:22:49 2026 by rpki-client