$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: tMfJRQ2la2Ypw70VZ28LsYWO7Ha9GRXabRGFpLB847A= Subject key identifier: 42:66:7E:03:60:6A:35:E4:C6:99:02:E9:D9:5A:89:76:E5:AF:FF:C5 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 6F524B22B1589AB316CB2F2764922AF92194F298 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: CB Signing time: Sat 07 Mar 2026 11:12:21 +0000 Manifest this update: Sat 07 Mar 2026 11:07:21 +0000 Manifest next update: Tue 10 Mar 2026 14:55:21 +0000 Files and hashes: 1: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: B9dkfAuQSGFkOUPXQNcOnfZc9f5rLPsJ947+ZcqQIGc=) 2: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: K9djVkSLZL7Bw4K3e9tKRF4aAw6JK34iXwFmQ3sWP34=) 3: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: 5+7EpoRHiM1GiIon48eKxVuE1jLZPngRC9OVhAPzb0k=) 4: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: OEo60QvXJ7pTC0cWI4pnoi9m1OSJ1sruMZNoPBK+URY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:52:4b:22:b1:58:9a:b3:16:cb:2f:27:64:92:2a:f9:21:94:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Mar 7 11:07:21 2026 GMT Not After : Mar 10 14:55:21 2026 GMT Subject: CN=42667E03606A35E4C69902E9D95A8976E5AFFFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:66:52:47:66:a5:90:bd:54:58:16:cf:cd: 78:78:ac:d2:60:86:8d:d2:7f:6c:57:a4:69:0f:22: 13:1c:4b:0b:09:ab:fa:8b:e0:77:64:ca:b4:b1:c2: 7b:51:01:af:e0:8f:bd:a6:e0:d6:a9:24:42:cc:6c: d3:2c:27:f5:70:5c:88:1e:4e:6a:20:aa:c8:b6:02: 3f:19:1b:3f:33:3d:49:c0:cb:75:68:7a:ff:49:0d: e0:e1:71:db:c8:80:c6:42:64:07:bd:16:d0:b5:18: 70:6f:7a:f7:d3:c2:4a:84:89:cf:ed:23:47:c6:57: 1c:11:5c:63:f3:fc:32:69:49:b8:cb:91:a6:50:19: 24:37:72:e0:ff:a2:09:dc:dd:ba:9e:2b:91:2a:ce: 84:8c:8e:7d:15:cd:50:1b:01:65:2e:41:a2:11:28: 0b:98:46:09:c5:40:a4:b7:6f:e3:09:30:4b:a0:97: 5a:61:e0:47:63:70:d2:22:ed:5d:b4:b9:1c:19:9a: e8:a0:3d:04:59:f7:68:48:a1:f6:c7:e0:1e:46:ba: 38:ab:77:53:34:75:6a:7e:c2:39:30:82:b2:3e:78: 37:4f:f4:23:ec:45:27:66:13:d2:b8:2f:ca:dc:0c: 36:5a:86:5f:ab:91:e8:db:1c:6d:f3:3f:24:b5:7f: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:66:7E:03:60:6A:35:E4:C6:99:02:E9:D9:5A:89:76:E5:AF:FF:C5 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ef:4f:24:5a:72:05:9b:ce:97:ac:4a:a3:b1:82:23:fc:75: 4a:e5:32:2c:b3:b4:6e:ab:de:5e:03:22:81:6a:2c:65:bb:14: 0f:a4:ce:a5:d2:85:18:7d:01:d0:15:0b:af:a9:c0:92:99:d4: b6:82:6c:07:e1:bb:84:df:e1:ce:7f:48:c3:37:c3:33:33:e5: 7b:d5:7f:ad:b3:4b:37:26:14:01:b0:da:55:a0:53:0b:e6:8e: 65:41:c8:07:9c:3e:c7:46:69:c9:81:56:9e:23:61:35:67:37: 78:ad:d7:98:ce:37:49:d4:db:b3:94:91:14:6c:42:94:54:d2: 01:a1:a0:41:1e:f7:ad:f7:45:45:7e:b2:f2:f0:1d:8b:9e:f3: 92:35:cf:b6:cb:d6:ab:5b:15:7e:53:26:49:6c:23:08:4d:04: 3d:57:42:ed:37:b7:92:42:c2:9b:74:73:66:c7:7d:49:c6:2c: dd:44:e4:79:42:cb:a6:3d:ff:f8:8e:f7:72:d2:92:e2:0b:32: a8:6c:0e:bf:e1:17:05:9d:e1:38:e0:f1:3a:f9:44:59:5e:7c: 5b:38:74:f3:27:21:dc:98:c5:6c:94:79:5e:73:65:0f:ae:dc: dc:5e:11:ec:60:ab:1b:83:98:d8:98:17:02:c2:cb:8d:4e:f1: 58:b8:ff:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1JLIrFYmrMWyy8nZJIq+SGU8pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNjAzMDcxMTA3MjFaFw0yNjAzMTAxNDU1MjFaMDMxMTAvBgNV BAMTKDQyNjY3RTAzNjA2QTM1RTRDNjk5MDJFOUQ5NUE4OTc2RTVBRkZGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/62ZSR2alkL1UWBbPzXh4rNJg ho3Sf2xXpGkPIhMcSwsJq/qL4HdkyrSxwntRAa/gj72m4NapJELMbNMsJ/VwXIge Tmogqsi2Aj8ZGz8zPUnAy3Voev9JDeDhcdvIgMZCZAe9FtC1GHBvevfTwkqEic/t I0fGVxwRXGPz/DJpSbjLkaZQGSQ3cuD/ognc3bqeK5EqzoSMjn0VzVAbAWUuQaIR KAuYRgnFQKS3b+MJMEugl1ph4EdjcNIi7V20uRwZmuigPQRZ92hIofbH4B5Gujir d1M0dWp+wjkwgrI+eDdP9CPsRSdmE9K4L8rcDDZahl+rkejbHG3zPyS1f+L1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmZ+A2BqNeTGmQLp2VqJduWv/8UwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHvTyRacgWbzpesSqOxgiP8dUrlMiyztG6r 3l4DIoFqLGW7FA+kzqXShRh9AdAVC6+pwJKZ1LaCbAfhu4Tf4c5/SMM3wzMz5XvV f62zSzcmFAGw2lWgUwvmjmVByAecPsdGacmBVp4jYTVnN3it15jON0nU27OUkRRs QpRU0gGhoEEe9633RUV+svLwHYue85I1z7bL1qtbFX5TJklsIwhNBD1XQu03t5JC wpt0c2bHfUnGLN1E5HlCy6Y9//iO93LSkuILMqhsDr/hFwWd4Tjg8Tr5RFlefFs4 dPMnIdyYxWyUeV5zZQ+u3NxeEexgqxuDmNiYFwLCy41O8Vi4//M= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:29 2026 by rpki-client