$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: CBygsii5iwCDv2JpH/T8EWIW4QGM+t2cyz4YTEJrsd4= Subject key identifier: 73:AA:C3:1A:61:57:67:74:C6:9C:28:14:70:9B:DA:CD:12:9B:F1:14 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 0FE2256863515C81A60FA53BE64B35A4B4D26244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: 0135 Signing time: Wed 15 Apr 2026 22:22:24 +0000 Manifest this update: Wed 15 Apr 2026 22:17:24 +0000 Manifest next update: Sun 19 Apr 2026 02:10:24 +0000 Files and hashes: 1: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: 1tWyjTIrhW+PQZ71Zwnr8j+0ysnqSvzsoAKiVeJ5BxM=) 2: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:10:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e2:25:68:63:51:5c:81:a6:0f:a5:3b:e6:4b:35:a4:b4:d2:62:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Apr 15 22:17:24 2026 GMT Not After : Apr 19 02:10:24 2026 GMT Subject: CN=73AAC31A61576774C69C2814709BDACD129BF114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:db:a4:42:9a:66:54:d6:37:44:fb:de:cd: b6:29:33:ce:5c:8c:48:9a:12:dc:d3:22:cc:9b:5e: 74:c6:ec:f0:87:2d:62:43:28:f1:39:1a:c0:20:28: 09:f2:c7:4b:be:af:2e:0e:d4:c1:5f:96:4d:dd:a2: 33:49:c7:d4:62:60:a4:3f:13:0a:cc:c8:37:31:9c: 26:3e:30:34:5a:34:8a:68:bd:48:6f:ea:05:f5:eb: ac:e6:93:26:28:47:67:ea:d8:97:89:3a:a8:8e:c4: 78:b9:42:67:f7:1d:c3:3c:ea:00:a9:19:76:1f:53: 4a:41:7f:fb:58:7a:bc:98:b2:e9:61:32:cc:13:16: c4:1b:4c:c4:66:63:48:a6:1e:c4:6d:bd:ae:5e:96: d5:35:76:79:2b:6d:af:7a:7b:4d:fc:36:66:37:73: 66:43:fd:e5:c7:f3:1b:31:77:4f:6a:ae:ad:11:3d: b7:5f:0f:c9:a4:12:1b:cb:55:86:81:e0:a2:5f:d8: 03:54:a6:3d:f9:20:d4:a1:94:7f:cb:c4:4e:c9:77: 17:46:b5:00:5b:7e:e0:5e:7a:ad:38:47:1d:41:2f: dd:01:22:c0:9e:05:ef:d8:06:07:6a:cf:25:3e:a1: 25:f0:a9:33:1c:18:7b:72:71:51:4b:2c:80:80:c8: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:C3:1A:61:57:67:74:C6:9C:28:14:70:9B:DA:CD:12:9B:F1:14 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b3:d5:6b:79:16:79:30:e3:91:75:a6:ee:96:61:86:b3:60: ac:d9:b9:30:29:99:22:68:fd:d8:2b:cd:7e:70:a5:3c:f2:ff: 3d:1b:13:63:5a:d4:5c:df:4d:74:fd:7c:4f:95:c4:e6:5c:e3: 73:ea:c6:40:4f:26:58:66:f1:35:48:13:a0:6f:19:81:b8:ab: e3:a4:07:a1:8e:60:62:bb:cb:3c:91:62:fd:da:9f:6c:f7:a6: 58:1e:bf:6e:ec:ca:65:73:0d:40:79:b5:d0:8a:16:a2:25:c0: 33:6a:e0:c4:57:b1:46:69:4e:0d:6b:2a:81:65:a7:cc:8f:3e: e7:94:50:20:ff:48:62:2a:f5:8d:47:44:aa:48:00:18:91:bb: b1:30:dd:b0:7d:81:98:45:cb:2a:5d:a6:ac:5f:f8:79:50:a1: a7:f7:e7:db:1f:82:87:7c:a4:af:eb:d4:c3:e9:6b:df:96:8b: b6:41:60:8d:66:d4:9b:45:7a:d2:2a:c6:d4:58:40:6d:76:c0: 98:b8:33:9e:d3:67:6c:0c:6a:48:91:dd:9c:af:cf:7d:c4:a7: 3b:a9:49:da:0f:57:f8:7b:84:e3:af:37:32:07:ed:e2:a9:3e: 91:a7:70:fb:04:97:3f:ba:55:fc:c7:24:ea:59:b0:10:cd:76: 59:c7:0d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+IlaGNRXIGmD6U75ks1pLTSYkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNjA0MTUyMjE3MjRaFw0yNjA0MTkwMjEwMjRaMDMxMTAvBgNV BAMTKDczQUFDMzFBNjE1NzY3NzRDNjlDMjgxNDcwOUJEQUNEMTI5QkYxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bNukQppmVNY3RPvezbYpM85c jEiaEtzTIsybXnTG7PCHLWJDKPE5GsAgKAnyx0u+ry4O1MFflk3dojNJx9RiYKQ/ EwrMyDcxnCY+MDRaNIpovUhv6gX166zmkyYoR2fq2JeJOqiOxHi5Qmf3HcM86gCp GXYfU0pBf/tYeryYsulhMswTFsQbTMRmY0imHsRtva5eltU1dnkrba96e038NmY3 c2ZD/eXH8xsxd09qrq0RPbdfD8mkEhvLVYaB4KJf2ANUpj35INShlH/LxE7JdxdG tQBbfuBeeq04Rx1BL90BIsCeBe/YBgdqzyU+oSXwqTMcGHtycVFLLICAyDQ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6rDGmFXZ3TGnCgUcJvazRKb8RQwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiz1Wt5Fnkw45F1pu6WYYazYKzZuTApmSJo /dgrzX5wpTzy/z0bE2Na1FzfTXT9fE+VxOZc43PqxkBPJlhm8TVIE6BvGYG4q+Ok B6GOYGK7yzyRYv3an2z3plgev27symVzDUB5tdCKFqIlwDNq4MRXsUZpTg1rKoFl p8yPPueUUCD/SGIq9Y1HRKpIABiRu7Ew3bB9gZhFyypdpqxf+HlQoaf359sfgod8 pK/r1MPpa9+Wi7ZBYI1m1JtFetIqxtRYQG12wJi4M57TZ2wMakiR3Zyvz33Epzup SdoPV/h7hOOvNzIH7eKpPpGncPsElz+6VfzHJOpZsBDNdlnHDYQ= -----END CERTIFICATE-----Generated at Fri Apr 17 13:43:41 2026 by rpki-client