$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: Ty3cnj6y/9EzdAlVfMsm/ij7UfHiBiJPM3EsCdvjlP4= Subject key identifier: 92:03:9D:67:A2:6B:E4:6F:2D:D8:37:3E:D1:50:F8:97:34:B6:6E:F6 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 440B5BB60770B253232B0DABC52087B683CF5100 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 028E Signing time: Sat 18 Apr 2026 02:11:16 +0000 Manifest this update: Sat 18 Apr 2026 02:06:16 +0000 Manifest next update: Tue 21 Apr 2026 05:01:16 +0000 Files and hashes: 1: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: 1HQUgBaMMc8FXO2SWeKN9gV36q4emO7zTpOs+ZYJF8Y=) 2: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: f3iYF0M8FkM4hGKA4iorWprTCuoZoRxR8EjYY0xE66E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 05:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0b:5b:b6:07:70:b2:53:23:2b:0d:ab:c5:20:87:b6:83:cf:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Apr 18 02:06:16 2026 GMT Not After : Apr 21 05:01:16 2026 GMT Subject: CN=92039D67A26BE46F2DD8373ED150F89734B66EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:63:e9:9a:ce:9d:73:5c:db:cf:4c:2e:ef: 12:a9:64:e1:14:f1:e9:94:44:84:cf:c7:d5:27:f8: 78:52:ba:c3:e9:3a:af:63:3a:65:f1:a4:7d:fc:0a: 3f:67:76:90:48:d7:f1:4c:f6:4c:87:bf:29:de:14: 3e:40:d4:22:c9:50:95:c5:27:30:06:5a:79:3f:75: fb:0c:c6:a9:63:16:8f:ee:32:e5:7d:8f:11:2c:88: 38:9f:26:33:58:31:e8:46:9a:dd:99:a0:22:3f:a3: bf:f6:ed:8f:8a:e0:b0:62:48:16:0b:89:cd:ad:57: ab:7e:05:5f:1e:41:08:7b:c2:b2:62:fe:3d:22:9a: 22:46:cc:3b:6b:35:cd:c9:95:9f:4e:22:3e:fe:3b: 44:da:9e:a6:8c:52:53:ac:5f:5f:16:87:0e:cf:6f: 3b:31:c5:49:71:c0:61:dc:46:8f:9d:eb:2f:e5:b1: c1:4c:89:74:cf:b0:bc:78:48:dc:27:9a:59:a7:7d: 6d:f9:6f:58:cd:89:ca:57:e3:6e:d1:8b:39:d2:96: 09:db:2b:41:59:e5:f8:62:a8:4e:a5:10:69:6f:ea: 56:9f:22:f9:af:51:09:11:c0:bc:1d:32:fa:56:3f: 43:46:37:f1:0a:b4:a4:f7:c5:52:f7:f0:ee:31:d3: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:03:9D:67:A2:6B:E4:6F:2D:D8:37:3E:D1:50:F8:97:34:B6:6E:F6 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0c:d1:ed:c4:59:b9:96:91:75:88:46:c8:58:2c:c3:d0:f0: 7e:30:5c:83:e3:81:80:06:e5:ca:f8:15:9b:c6:7f:05:4c:32: 3e:3c:cc:3f:82:6c:cc:8c:7a:96:99:b8:a0:7c:a8:a0:25:01: f8:31:c1:cc:2b:ec:88:5e:8c:ba:2a:19:f5:2c:9f:70:7a:12: 20:d8:3c:9a:1c:10:22:76:8f:15:02:ba:c6:80:07:8f:3d:35: 29:b8:c4:37:b8:e0:e7:db:bc:c0:15:55:da:a0:d1:37:66:fc: d1:09:a6:6f:f5:20:7f:f9:b6:c1:e8:99:1a:93:68:6d:67:02: 7b:6e:8e:85:42:dc:b9:dc:55:5a:43:0a:23:93:da:20:55:7e: 09:d9:c4:2c:10:94:12:9b:40:72:2d:92:9e:65:43:5f:20:ab: 93:04:d9:9b:6b:19:81:7f:de:cb:86:4d:35:99:88:4c:45:ca: 2b:56:4b:58:ab:40:d9:d9:c7:79:86:f8:4f:59:8d:2e:09:d4: 20:4d:ae:3d:26:7b:6f:c8:84:08:8c:72:33:a8:02:d3:06:e3: b8:ec:6a:80:a9:0d:2f:db:99:a7:16:6e:2f:d7:0f:f8:2c:b3: da:11:13:06:36:00:01:17:12:93:bc:de:47:eb:d1:91:1e:57: 9f:fb:d3:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAtbtgdwslMjKw2rxSCHtoPPUQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNjA0MTgwMjA2MTZaFw0yNjA0MjEwNTAxMTZaMDMxMTAvBgNV BAMTKDkyMDM5RDY3QTI2QkU0NkYyREQ4MzczRUQxNTBGODk3MzRCNjZFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6f2Ppms6dc1zbz0wu7xKpZOEU 8emURITPx9Un+HhSusPpOq9jOmXxpH38Cj9ndpBI1/FM9kyHvyneFD5A1CLJUJXF JzAGWnk/dfsMxqljFo/uMuV9jxEsiDifJjNYMehGmt2ZoCI/o7/27Y+K4LBiSBYL ic2tV6t+BV8eQQh7wrJi/j0imiJGzDtrNc3JlZ9OIj7+O0TanqaMUlOsX18Whw7P bzsxxUlxwGHcRo+d6y/lscFMiXTPsLx4SNwnmlmnfW35b1jNicpX427RiznSlgnb K0FZ5fhiqE6lEGlv6lafIvmvUQkRwLwdMvpWP0NGN/EKtKT3xVL38O4x07gtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkgOdZ6Jr5G8t2Dc+0VD4lzS2bvYwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEM0e3EWbmWkXWIRshYLMPQ8H4wXIPjgYAG 5cr4FZvGfwVMMj48zD+CbMyMepaZuKB8qKAlAfgxwcwr7IhejLoqGfUsn3B6EiDY PJocECJ2jxUCusaAB489NSm4xDe44OfbvMAVVdqg0Tdm/NEJpm/1IH/5tsHomRqT aG1nAntujoVC3LncVVpDCiOT2iBVfgnZxCwQlBKbQHItkp5lQ18gq5ME2ZtrGYF/ 3suGTTWZiExFyitWS1irQNnZx3mG+E9ZjS4J1CBNrj0me2/IhAiMcjOoAtMG47js aoCpDS/bmacWbi/XD/gss9oREwY2AAEXEpO83kfr0ZEeV5/70+4= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:03 2026 by rpki-client