$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: bWHuSGD+mPyse3hGZG04i/sLfreSb7Y4pEs4uz8ydk8= Subject key identifier: 71:B8:7C:D2:65:4A:8D:7B:CB:EE:21:E7:6C:06:F9:82:00:23:6F:07 Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 0A2BAA8E3AA33B530247076358E6A999D641B56B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: F2 Signing time: Fri 06 Mar 2026 03:41:14 +0000 Manifest this update: Fri 06 Mar 2026 03:36:14 +0000 Manifest next update: Mon 09 Mar 2026 08:14:14 +0000 Files and hashes: 1: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) 2: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) 3: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: cTF2WQ88RXtGYkKYy0rxzRwp9rUQR2JQynXo0j3Pgro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:2b:aa:8e:3a:a3:3b:53:02:47:07:63:58:e6:a9:99:d6:41:b5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Mar 6 03:36:14 2026 GMT Not After : Mar 9 08:14:14 2026 GMT Subject: CN=71B87CD2654A8D7BCBEE21E76C06F98200236F07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:ba:0e:dd:c5:33:0a:25:7a:46:63:07:2d: d6:42:5f:7e:e1:71:0c:c1:90:f8:6f:be:e9:b5:9c: 3a:49:78:cc:cf:92:a3:05:a6:40:22:ea:6a:44:10: c1:7c:93:c0:83:76:3b:46:f6:1f:50:c5:1a:86:05: a8:75:6e:f8:e9:72:40:22:c4:eb:bf:5f:99:e0:fa: 4a:56:32:11:2f:43:a9:e3:82:8b:28:c1:b1:78:12: 29:45:22:74:5a:ec:92:15:a6:a0:f9:f3:4c:d9:cd: fe:b3:ac:53:96:be:2d:10:85:3f:2d:26:ba:20:88: b5:8a:63:8a:60:a5:ef:24:46:9f:69:99:2f:3e:6e: 8d:91:81:1f:ab:1c:78:bf:66:c9:43:c5:a2:55:42: 2d:ca:c5:7c:40:c2:81:c9:9d:9a:e7:44:75:7d:75: 62:6c:3f:14:f4:14:c5:7d:8d:6a:3e:4d:58:51:a9: 05:92:3f:0c:41:b7:7f:90:25:9c:f6:c7:72:11:46: ac:85:de:0e:a1:69:92:c9:66:dc:f5:00:05:36:ed: 42:62:4b:2e:71:2a:72:0c:34:d7:c8:3d:5f:80:6e: f3:2e:81:55:c7:7c:28:e2:8c:45:36:ce:1d:cc:e4: 0a:29:38:c0:57:86:dc:74:80:4b:31:92:fd:79:38: 63:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B8:7C:D2:65:4A:8D:7B:CB:EE:21:E7:6C:06:F9:82:00:23:6F:07 X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:fa:1d:fa:7f:cf:af:63:ba:d1:dc:29:10:77:7e:a4:fb:22: 6e:81:cd:8d:d6:a3:b9:a8:76:a4:70:22:29:c1:5d:a9:b1:91: bc:0d:83:6b:ba:de:3d:a7:e5:d6:db:52:2c:25:97:99:b4:1b: 80:ee:ff:7c:a0:9e:fd:c6:cb:2a:a2:8d:79:35:74:b7:c1:5b: b3:1e:25:11:aa:74:ec:f4:34:92:09:15:8a:3e:ec:e4:b4:59: 8f:33:6e:16:f7:3d:45:d6:e4:bd:46:8d:c2:76:2f:d1:94:a4: fd:66:d3:e3:c6:06:83:04:f7:88:a8:44:23:16:cf:5e:47:82: 88:0d:65:db:44:eb:60:df:86:4e:8e:7e:ca:56:c4:b3:81:d3: 64:aa:be:5d:02:7a:0d:20:a0:33:5f:84:1a:33:1d:3b:b2:08: 25:ef:9f:9f:6a:08:18:30:90:2c:2c:ef:7f:48:0c:76:1d:2b: 23:dd:73:c7:93:b2:6f:3d:d0:64:30:3e:b1:c3:4e:51:58:73: 3c:65:16:2a:fd:93:41:80:a5:2f:c2:aa:e1:6f:e3:80:15:ba: 8b:09:f0:5f:2e:83:e0:ab:fd:e5:b8:b5:a9:41:4c:65:99:9f: d8:ac:b4:7a:78:04:5e:33:1d:2d:01:dd:d4:ac:b1:9e:50:e2: d8:96:46:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCiuqjjqjO1MCRwdjWOapmdZBtWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNjAzMDYwMzM2MTRaFw0yNjAzMDkwODE0MTRaMDMxMTAvBgNV BAMTKDcxQjg3Q0QyNjU0QThEN0JDQkVFMjFFNzZDMDZGOTgyMDAyMzZGMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3roO3cUzCiV6RmMHLdZCX37h cQzBkPhvvum1nDpJeMzPkqMFpkAi6mpEEMF8k8CDdjtG9h9QxRqGBah1bvjpckAi xOu/X5ng+kpWMhEvQ6njgosowbF4EilFInRa7JIVpqD580zZzf6zrFOWvi0QhT8t JrogiLWKY4pgpe8kRp9pmS8+bo2RgR+rHHi/ZslDxaJVQi3KxXxAwoHJnZrnRHV9 dWJsPxT0FMV9jWo+TVhRqQWSPwxBt3+QJZz2x3IRRqyF3g6haZLJZtz1AAU27UJi Sy5xKnIMNNfIPV+AbvMugVXHfCjijEU2zh3M5AopOMBXhtx0gEsxkv15OGPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcbh80mVKjXvL7iHnbAb5ggAjbwcwHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMb6Hfp/z69jutHcKRB3fqT7Im6BzY3Wo7mo dqRwIinBXamxkbwNg2u63j2n5dbbUiwll5m0G4Du/3ygnv3GyyqijXk1dLfBW7Me JRGqdOz0NJIJFYo+7OS0WY8zbhb3PUXW5L1GjcJ2L9GUpP1m0+PGBoME94ioRCMW z15HgogNZdtE62Dfhk6OfspWxLOB02Sqvl0Ceg0goDNfhBozHTuyCCXvn59qCBgw kCws739IDHYdKyPdc8eTsm890GQwPrHDTlFYczxlFir9k0GApS/CquFv44AVuosJ 8F8ug+Cr/eW4talBTGWZn9istHp4BF4zHS0B3dSssZ5Q4tiWRtk= -----END CERTIFICATE-----Generated at Sat Mar 7 17:59:03 2026 by rpki-client