$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: X+d3F2g9roT0YlxC267xBoASYsaaT7FNywIzFhA93Qo= Subject key identifier: 54:39:D1:A5:EB:EB:48:0A:22:A8:82:35:54:40:05:5E:63:EE:96:05 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 15417F1A80D43352ED5454BF6F94A7FD15CB4E2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 02A7 Signing time: Thu 05 Mar 2026 10:51:19 +0000 Manifest this update: Thu 05 Mar 2026 10:46:19 +0000 Manifest next update: Sun 08 Mar 2026 21:33:19 +0000 Files and hashes: 1: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) 2: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: d7A43MGa0oRvKSGSmGaxfxPnpA4xgzOR7GR1AtHrYcU=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 21:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:41:7f:1a:80:d4:33:52:ed:54:54:bf:6f:94:a7:fd:15:cb:4e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Mar 5 10:46:19 2026 GMT Not After : Mar 8 21:33:19 2026 GMT Subject: CN=5439D1A5EBEB480A22A882355440055E63EE9605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:81:0d:50:2d:cb:68:13:1e:49:b2:b6:44: cd:a4:7f:1c:0b:4c:3f:27:02:b8:58:ec:aa:4f:13: 28:ee:55:ab:aa:c6:40:4f:44:bf:eb:50:f2:a5:f0: ed:51:bc:c8:d0:2b:d3:89:c3:a8:96:d9:dd:23:9c: 61:3f:2d:40:ae:f1:13:15:fa:67:96:0f:36:a8:55: d2:e1:c8:2b:9b:d5:04:1a:ad:b6:94:bc:a5:21:cf: 92:91:f4:00:07:f6:32:31:9e:db:2c:60:eb:25:63: 26:cb:03:d0:f8:ca:1e:2a:59:5a:3f:ed:a9:fc:72: a9:26:1b:4d:62:9b:3f:35:74:fa:92:44:ba:fd:b3: c6:02:fe:ea:dc:76:b4:ae:73:8d:b7:bf:90:72:1f: 7c:2d:ce:8e:d1:05:51:84:e4:7b:1e:86:ac:28:60: 66:08:ca:c2:f5:ed:53:dc:4e:93:32:2b:50:c0:26: 9e:00:6d:7a:9d:1c:49:1f:bf:c9:19:0f:38:b1:05: d4:d6:1b:50:b4:90:50:65:1d:fb:ad:67:18:32:af: 04:8c:53:14:53:af:3f:8c:b9:7a:8c:ab:4c:6b:ae: 02:8a:5d:c7:11:3e:54:31:d3:27:2d:34:26:06:3c: 14:8c:7a:4e:62:6a:82:4c:00:96:53:87:84:cc:48: 5b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:D1:A5:EB:EB:48:0A:22:A8:82:35:54:40:05:5E:63:EE:96:05 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:61:ef:b9:8a:d9:95:90:0d:39:33:09:04:be:a0:6d:6f:2a: ae:50:85:8a:5c:81:a2:34:d8:6e:68:04:ca:d7:54:b2:bc:00: d7:74:df:a0:63:50:a6:5c:21:c2:8c:c2:b2:28:4b:dc:17:8a: 7e:18:ab:09:f9:30:1e:23:5f:3d:cd:02:28:cc:0a:77:97:f4: a3:54:7a:c1:6d:77:9e:90:80:2d:9c:38:21:10:60:81:96:ef: a1:4e:e8:e9:d4:50:2a:de:bf:8e:91:45:a4:3f:32:de:cb:c0: cc:2f:14:aa:56:cf:6d:19:38:3f:86:b5:e4:4d:7e:47:4e:46: 17:ca:e0:89:ad:7c:07:ab:8a:55:ad:a7:f9:ff:5d:83:c0:93: 5b:ae:64:45:9d:72:79:87:d0:34:33:f5:6a:ee:ac:6c:ec:8d: 7e:b6:30:cb:90:ec:16:ea:f8:e3:e4:b9:b8:6c:b4:56:f2:19: 4f:ba:79:c4:8b:05:78:27:e0:3e:d5:73:a5:5c:f5:6e:a8:2a: f1:d2:e5:d9:99:8d:8e:76:a6:97:8a:df:71:b0:8d:db:8b:9d: 0d:90:f4:fd:9d:fc:9a:5e:74:6c:2d:32:1d:7c:85:cb:c5:44: e6:bc:b5:a2:7a:6c:cc:ea:ed:25:47:d9:68:a0:17:e7:e9:12: aa:ca:d2:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUF/GoDUM1LtVFS/b5Sn/RXLTi8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNjAzMDUxMDQ2MTlaFw0yNjAzMDgyMTMzMTlaMDMxMTAvBgNV BAMTKDU0MzlEMUE1RUJFQjQ4MEEyMkE4ODIzNTU0NDAwNTVFNjNFRTk2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo3YENUC3LaBMeSbK2RM2kfxwL TD8nArhY7KpPEyjuVauqxkBPRL/rUPKl8O1RvMjQK9OJw6iW2d0jnGE/LUCu8RMV +meWDzaoVdLhyCub1QQarbaUvKUhz5KR9AAH9jIxntssYOslYybLA9D4yh4qWVo/ 7an8cqkmG01imz81dPqSRLr9s8YC/urcdrSuc423v5ByH3wtzo7RBVGE5Hsehqwo YGYIysL17VPcTpMyK1DAJp4AbXqdHEkfv8kZDzixBdTWG1C0kFBlHfutZxgyrwSM UxRTrz+MuXqMq0xrrgKKXccRPlQx0yctNCYGPBSMek5iaoJMAJZTh4TMSFvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVDnRpevrSAoiqII1VEAFXmPulgUwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBh77mK2ZWQDTkzCQS+oG1vKq5QhYpcgaI0 2G5oBMrXVLK8ANd036BjUKZcIcKMwrIoS9wXin4Yqwn5MB4jXz3NAijMCneX9KNU esFtd56QgC2cOCEQYIGW76FO6OnUUCrev46RRaQ/Mt7LwMwvFKpWz20ZOD+GteRN fkdORhfK4ImtfAerilWtp/n/XYPAk1uuZEWdcnmH0DQz9WrurGzsjX62MMuQ7Bbq +OPkubhstFbyGU+6ecSLBXgn4D7Vc6Vc9W6oKvHS5dmZjY52ppeK33GwjduLnQ2Q 9P2d/JpedGwtMh18hcvFROa8taJ6bMzq7SVH2WigF+fpEqrK0u0= -----END CERTIFICATE-----Generated at Sat Mar 7 21:05:12 2026 by rpki-client