$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: a3wyOmBtgi8/8H4OqIbSy/pLq/EwC2UZ5tfw2zJ0s/E= Subject key identifier: F9:5D:2B:07:3D:CF:04:E8:00:BC:F7:7D:B5:39:5E:E2:BE:29:05:C7 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 4B1C9433F42564C3050FCD355527CD4931A8139D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 010B Signing time: Sat 07 Mar 2026 15:01:54 +0000 Manifest this update: Sat 07 Mar 2026 14:56:54 +0000 Manifest next update: Wed 11 Mar 2026 00:20:54 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: MbGqZxnWeHMHA5SE9Ykc3UUCLJC3fBIKkUxdEue2HWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1c:94:33:f4:25:64:c3:05:0f:cd:35:55:27:cd:49:31:a8:13:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Mar 7 14:56:54 2026 GMT Not After : Mar 11 00:20:54 2026 GMT Subject: CN=F95D2B073DCF04E800BCF77DB5395EE2BE2905C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:95:95:ae:77:35:eb:9e:98:33:eb:b5:21: 7f:d3:f0:e9:d6:47:59:90:fd:1c:fa:68:28:0f:01: 9a:69:1d:2b:a5:25:d8:30:0e:cd:e5:40:db:d6:0e: 95:d9:36:2b:b3:f7:c7:4a:bd:ad:02:50:f9:e1:3d: 54:97:cc:4b:9c:b9:39:56:d4:63:e5:98:33:4a:66: da:d5:b0:eb:5d:d0:10:e5:4d:34:97:5a:9e:ce:7e: 6d:1b:df:fc:55:1e:28:73:a9:6e:03:11:5b:f8:3f: ce:6d:d6:f5:e1:d6:d4:3f:ca:d7:07:f9:08:d1:c1: 35:50:4a:6b:44:59:d5:38:66:14:79:06:3b:53:a5: 12:be:cd:78:4c:e1:07:01:fb:98:86:3d:6f:62:79: 10:73:54:7c:79:16:71:94:8d:d5:69:3d:8a:26:00: 9a:6d:95:24:77:a1:b2:b1:aa:e5:93:89:7c:3a:c9: d3:0a:c3:e6:09:b6:f6:e6:a5:4e:39:29:90:24:c0: 97:7d:bb:29:13:d4:b8:0b:ec:ed:26:12:0c:08:11: 82:19:a3:69:17:66:00:ed:09:5a:d0:7c:fd:84:89: cc:55:9c:db:5a:c2:9e:b0:20:1c:72:b2:bf:fb:06: 45:46:ab:d5:eb:c7:c2:56:f9:39:28:63:fb:32:16: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5D:2B:07:3D:CF:04:E8:00:BC:F7:7D:B5:39:5E:E2:BE:29:05:C7 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e7:37:6e:9e:2e:37:42:75:d9:8e:d6:2b:d2:ab:16:78:d1: b1:05:f7:16:f7:a9:16:8e:f8:38:92:bb:b7:fb:b6:e8:e3:da: e9:2b:9d:47:d3:7f:ac:e6:b5:a2:8a:dd:7e:55:44:5a:14:18: 20:ba:c1:21:0c:54:90:58:67:2d:e4:22:f4:99:22:34:81:9b: 9f:45:e8:50:5b:c8:70:d3:a4:ed:fa:1b:1a:27:b8:11:b3:85: 62:8a:d8:79:a9:a5:41:80:ba:07:c4:60:9f:99:7d:e7:5b:3a: e6:70:2a:eb:f8:ca:4c:96:b9:ef:ae:19:43:ce:a7:db:57:3f: 9e:cb:92:75:84:41:46:8f:8a:42:cd:c9:d1:b5:a4:ae:8e:e0: 4f:3b:0c:46:4f:3a:a6:5e:7e:9b:5b:56:f4:c6:f2:1a:34:d7: 99:66:12:63:57:50:66:10:36:c6:78:4a:0a:a7:1d:02:9d:e5: 8c:d8:6c:71:2d:1a:ea:16:a1:5e:7a:46:a2:16:1f:47:09:92: 34:67:63:62:63:31:d0:0e:3a:af:84:a0:a3:2c:23:6f:3f:8a: c2:d2:4f:ad:b5:c3:66:17:36:b0:c6:e5:e0:f0:3f:24:24:f9: 28:b6:9f:dc:a4:a2:5b:18:97:4a:5b:f1:a9:ed:4b:02:5e:9f: a1:d3:2a:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxyUM/QlZMMFD801VSfNSTGoE50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNjAzMDcxNDU2NTRaFw0yNjAzMTEwMDIwNTRaMDMxMTAvBgNV BAMTKEY5NUQyQjA3M0RDRjA0RTgwMEJDRjc3REI1Mzk1RUUyQkUyOTA1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXT5WVrnc1656YM+u1IX/T8OnW R1mQ/Rz6aCgPAZppHSulJdgwDs3lQNvWDpXZNiuz98dKva0CUPnhPVSXzEucuTlW 1GPlmDNKZtrVsOtd0BDlTTSXWp7Ofm0b3/xVHihzqW4DEVv4P85t1vXh1tQ/ytcH +QjRwTVQSmtEWdU4ZhR5BjtTpRK+zXhM4QcB+5iGPW9ieRBzVHx5FnGUjdVpPYom AJptlSR3obKxquWTiXw6ydMKw+YJtvbmpU45KZAkwJd9uykT1LgL7O0mEgwIEYIZ o2kXZgDtCVrQfP2EicxVnNtawp6wIBxysr/7BkVGq9Xrx8JW+TkoY/syFp8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+V0rBz3PBOgAvPd9tTle4r4pBccwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7nN26eLjdCddmO1ivSqxZ40bEF9xb3qRaO +DiSu7f7tujj2ukrnUfTf6zmtaKK3X5VRFoUGCC6wSEMVJBYZy3kIvSZIjSBm59F 6FBbyHDTpO36GxonuBGzhWKK2HmppUGAugfEYJ+ZfedbOuZwKuv4ykyWue+uGUPO p9tXP57LknWEQUaPikLNydG1pK6O4E87DEZPOqZefptbVvTG8ho015lmEmNXUGYQ NsZ4SgqnHQKd5YzYbHEtGuoWoV56RqIWH0cJkjRnY2JjMdAOOq+EoKMsI28/isLS T621w2YXNrDG5eDwPyQk+Si2n9ykolsYl0pb8antSwJen6HTKoc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:04 2026 by rpki-client