$ rpki-client -vvf repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft File: 282881E6B43D206FAFBD1879ED5678ECBA70A822.mft (raw, json) Hash identifier: n9qCyxXA07gBllaS2QCaOmlGlCg2vhZ1LLAN/3bDHgg= Subject key identifier: 16:8A:2A:F3:8E:09:4E:CB:D6:95:34:5C:83:69:57:03:37:DE:54:ED Authority key identifier: 28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 Certificate issuer: /CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Certificate serial: 7FA1ACB776B941E327AC3F7938A46471A1810F22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject info access: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft Manifest number: 026A Signing time: Thu 16 Apr 2026 16:11:28 +0000 Manifest this update: Thu 16 Apr 2026 16:06:28 +0000 Manifest next update: Mon 20 Apr 2026 02:52:28 +0000 Files and hashes: 1: 282881E6B43D206FAFBD1879ED5678ECBA70A822.crl (hash: JWi9+ICF7GIb47QzsfBSXzVwsIn0GuIPEN7MbpcsSRQ=) 2: 323030313a6466323a313238303a3a2f34382d3438203d3e20313339343437.roa (hash: xWPV5+5tytyj6XWbvI5IR1i7fAvHk6PI4WH0xczvRcA=) 3: 3130332e3134352e3132352e302f32342d3234203d3e20313339343437.roa (hash: tGBrE+oUpgj94wIHMM93fQpwszSHXN/ehjuYmbZG0vo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:52:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a1:ac:b7:76:b9:41:e3:27:ac:3f:79:38:a4:64:71:a1:81:0f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=282881E6B43D206FAFBD1879ED5678ECBA70A822 Validity Not Before: Apr 16 16:06:28 2026 GMT Not After : Apr 20 02:52:28 2026 GMT Subject: CN=168A2AF38E094ECBD695345C8369570337DE54ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:96:d8:66:57:ed:65:ad:56:e7:de:9b:9e: 1a:9d:ce:a4:76:ea:d9:99:b9:b4:b5:61:8f:66:4c: 52:8e:7e:81:f9:57:8c:44:ec:d1:ba:9d:d4:9f:04: 52:fc:53:63:a1:b9:62:fb:37:15:27:bb:ef:f1:33: f6:82:02:4a:12:aa:23:9e:19:79:d1:73:4c:37:71: 1e:d0:cc:d3:22:5b:2b:3e:e3:2e:84:76:0a:bb:89: 5f:8d:c5:c7:4d:21:82:5a:ef:a0:c7:d0:57:6e:df: 76:fd:e3:3a:80:cc:98:fd:c9:b0:51:ae:64:7f:94: 2b:83:b9:3e:b2:74:40:a8:ce:60:a7:af:81:13:9c: 4f:ab:1b:4c:74:1f:c8:96:db:00:50:6b:8a:83:eb: da:55:ad:4f:45:18:10:db:e7:9c:9b:a7:35:a4:27: f6:5f:0e:63:e1:b1:8f:de:bb:34:cd:1b:59:ec:c7: 5f:8a:a6:f4:40:5e:e5:e7:18:d7:8e:c1:c4:e5:71: f0:d7:21:e7:65:a9:34:ff:0f:7d:96:11:94:2a:59: d6:04:97:d9:eb:84:84:49:2b:09:8e:87:a6:c7:4e: 77:56:e4:2a:53:a4:2d:30:7d:9f:10:23:4a:8c:25: a9:94:e5:dc:8f:a9:b8:01:10:a5:83:21:f4:86:2c: 6f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8A:2A:F3:8E:09:4E:CB:D6:95:34:5C:83:69:57:03:37:DE:54:ED X509v3 Authority Key Identifier: keyid:28:28:81:E6:B4:3D:20:6F:AF:BD:18:79:ED:56:78:EC:BA:70:A8:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/282881E6B43D206FAFBD1879ED5678ECBA70A822.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/057d4d81-3be8-4230-8959-2dc2af9d085e/0/282881E6B43D206FAFBD1879ED5678ECBA70A822.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c7:ad:10:a2:ab:6c:51:f4:cc:10:4b:d3:b7:b4:ab:28:4b: fd:71:c8:e8:dd:d9:4c:7c:ab:99:1e:82:b1:01:bd:55:29:18: 24:ed:6f:18:8f:8f:e6:07:56:5f:6e:6e:50:74:0d:e8:63:b3: 92:46:0b:06:ea:4a:ad:6c:51:c9:34:e0:51:b2:e0:a0:c8:1d: a7:de:b8:81:ba:bf:07:db:4e:43:24:29:f6:ae:18:a0:f9:69: ae:da:e2:fe:a1:a9:45:ca:62:c3:8d:76:6d:7e:83:fa:5e:32: 3d:38:3d:48:4d:8d:cc:01:c4:ac:0d:8a:ab:2c:a1:61:1f:c9: 19:08:12:f8:c4:6d:60:06:c7:2c:17:cc:92:62:4c:62:48:62: 73:a5:37:b4:bc:8a:2e:bb:f3:28:77:8a:bc:8a:74:4d:b2:88: a3:40:a3:ff:16:c9:0b:cf:51:27:89:b2:8d:47:83:25:10:12: 1d:bb:ea:d4:04:4e:a5:db:72:24:19:0e:03:3d:8b:f5:5e:cc: d4:d2:55:9c:53:72:51:6e:29:98:9a:41:cb:23:2b:b0:87:6a: 40:e6:21:b5:4a:4b:a0:7d:59:82:d7:ab:e9:08:98:92:35:ad: b7:63:eb:1d:8a:06:e6:46:2e:de:ac:7c:da:00:0d:49:f2:c9: 52:c6:80:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6Gst3a5QeMnrD95OKRkcaGBDyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNC QTcwQTgyMjAeFw0yNjA0MTYxNjA2MjhaFw0yNjA0MjAwMjUyMjhaMDMxMTAvBgNV BAMTKDE2OEEyQUYzOEUwOTRFQ0JENjk1MzQ1QzgzNjk1NzAzMzdERTU0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IpbYZlftZa1W596bnhqdzqR2 6tmZubS1YY9mTFKOfoH5V4xE7NG6ndSfBFL8U2OhuWL7NxUnu+/xM/aCAkoSqiOe GXnRc0w3cR7QzNMiWys+4y6Edgq7iV+NxcdNIYJa76DH0Fdu33b94zqAzJj9ybBR rmR/lCuDuT6ydECozmCnr4ETnE+rG0x0H8iW2wBQa4qD69pVrU9FGBDb55ybpzWk J/ZfDmPhsY/euzTNG1nsx1+KpvRAXuXnGNeOwcTlcfDXIedlqTT/D32WEZQqWdYE l9nrhIRJKwmOh6bHTndW5CpTpC0wfZ8QI0qMJamU5dyPqbgBEKWDIfSGLG8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFooq844JTsvWlTRcg2lXAzfeVO0wHwYDVR0j BBgwFoAUKCiB5rQ9IG+vvRh57VZ47LpwqCIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTdkNGQ4MS0zYmU4LTQyMzAtODk1OS0yZGMyYWY5ZDA4NWUvMC8yODI4ODFFNkI0 M0QyMDZGQUZCRDE4NzlFRDU2NzhFQ0JBNzBBODIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4RUNCQTcw QTgyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU3ZDRkODEtM2JlOC00MjMwLTg5 NTktMmRjMmFmOWQwODVlLzAvMjgyODgxRTZCNDNEMjA2RkFGQkQxODc5RUQ1Njc4 RUNCQTcwQTgyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/HrRCiq2xR9MwQS9O3tKsoS/1xyOjd2Ux8 q5kegrEBvVUpGCTtbxiPj+YHVl9ublB0Dehjs5JGCwbqSq1sUck04FGy4KDIHafe uIG6vwfbTkMkKfauGKD5aa7a4v6hqUXKYsONdm1+g/peMj04PUhNjcwBxKwNiqss oWEfyRkIEvjEbWAGxywXzJJiTGJIYnOlN7S8ii678yh3iryKdE2yiKNAo/8WyQvP USeJso1HgyUQEh276tQETqXbciQZDgM9i/VezNTSVZxTclFuKZiaQcsjK7CHakDm IbVKS6B9WYLXq+kImJI1rbdj6x2KBuZGLt6sfNoADUnyyVLGgLc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:12:11 2026 by rpki-client