$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json) Hash identifier: xDLGCm0rNdDHh/CcUvlo/JZ7cfEDq+cf6zRtcD/w+sI= Subject key identifier: 78:88:E4:8B:86:F4:41:0E:16:75:2D:46:7A:80:89:F5:B1:4C:30:CB Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 3F7ADE60B86C696F71101FEB6869DE094EF5CA49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft Manifest number: 0164 Signing time: Fri 17 Apr 2026 02:30:55 +0000 Manifest this update: Fri 17 Apr 2026 02:25:55 +0000 Manifest next update: Mon 20 Apr 2026 09:06:55 +0000 Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: sTQiXQPTUn8HIqNQ+b3wvUaJvQWDXNesHzrzHQ54ZJs=) 2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: pLqvOv027q1lkUkKnxdWorB0KkMJndkjulYOg7JJ6yE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7a:de:60:b8:6c:69:6f:71:10:1f:eb:68:69:de:09:4e:f5:ca:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Apr 17 02:25:55 2026 GMT Not After : Apr 20 09:06:55 2026 GMT Subject: CN=7888E48B86F4410E16752D467A8089F5B14C30CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:09:34:34:78:9e:3d:6f:09:89:d3:dd:00: 51:f2:49:85:1e:57:9e:f5:89:45:44:dc:66:22:0d: fe:61:09:20:c4:5f:96:8a:56:99:a4:3a:e3:82:55: 0f:b8:53:81:cc:1c:67:9a:56:93:22:f7:bf:a2:f3: 0b:27:72:02:8d:7d:6d:28:bb:58:60:d2:96:6d:35: 5a:0e:17:90:ec:16:48:29:7a:ef:d5:09:0b:b6:0b: cb:d6:f7:a0:ae:36:73:c7:08:47:af:bd:be:1c:e1: c0:c0:03:f5:8e:d4:d7:10:cc:3c:e2:25:d3:32:bb: cf:67:b0:46:86:e4:3e:ef:a9:58:a1:a6:46:66:04: 98:79:5e:f0:99:00:81:8a:63:33:0f:f4:05:41:aa: a4:3b:e2:cd:96:ee:e3:28:bb:50:02:2c:dd:0d:d5: 5e:27:9f:2a:5e:44:89:0f:8b:66:14:f2:d0:7e:29: 7f:70:e3:b8:af:c3:ba:17:da:d8:d9:bd:58:23:68: a3:ab:98:fc:ca:e0:39:42:90:38:b8:03:ad:a8:6f: dd:ff:10:4f:ec:3d:06:55:35:01:6a:1e:15:bb:d1: 6d:42:5c:3a:ba:08:b4:98:f3:56:cd:f0:f1:2c:ee: d1:62:c3:0d:fa:06:b8:9a:69:5b:9e:13:b4:3f:22: 27:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:88:E4:8B:86:F4:41:0E:16:75:2D:46:7A:80:89:F5:B1:4C:30:CB X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:d3:78:a3:3b:fb:3e:44:24:f7:89:dc:f1:36:6b:d1:ce: 76:3e:1e:8f:7a:83:40:16:4a:5d:f5:90:48:f4:4b:ec:f0:27: 8e:1e:e3:1a:64:1b:e3:d3:71:bc:58:5b:3c:33:3b:80:f2:d3: 4c:8e:57:08:63:e7:db:3c:77:40:47:b9:53:a9:96:e1:c6:5a: 41:bc:48:25:91:cc:29:16:81:a3:b0:92:82:66:bd:89:c4:b6: 8b:27:36:30:41:71:e5:b3:04:26:ea:59:d6:9c:7f:eb:15:b2: 16:5c:b7:70:69:03:26:ee:b9:81:2d:01:fd:98:4e:c9:eb:4c: a4:c3:65:62:54:00:0f:75:fa:69:43:83:34:b1:2e:0f:ac:ee: 67:4f:19:76:d1:18:37:60:f7:fb:57:c2:51:b5:27:d2:95:0f: 8d:83:f1:32:18:3e:3c:1a:25:6d:7b:5f:e1:17:65:9b:19:ad: 46:91:5f:b5:48:f6:be:9d:36:f3:7f:cc:19:2f:b4:7e:b6:78: ed:7d:11:f5:81:f6:8d:44:6f:85:e0:b9:e1:cb:c5:32:c5:19: c4:2a:92:ef:5c:d1:0e:c6:d0:5e:aa:4a:13:af:16:7b:d5:9e: ef:2e:6a:e2:12:cf:15:2f:2e:d6:8e:15:f5:ca:5c:c0:83:ba: 9f:e1:8a:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3reYLhsaW9xEB/raGneCU71ykkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNjA0MTcwMjI1NTVaFw0yNjA0MjAwOTA2NTVaMDMxMTAvBgNV BAMTKDc4ODhFNDhCODZGNDQxMEUxNjc1MkQ0NjdBODA4OUY1QjE0QzMwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7Qk0NHiePW8JidPdAFHySYUe V571iUVE3GYiDf5hCSDEX5aKVpmkOuOCVQ+4U4HMHGeaVpMi97+i8wsncgKNfW0o u1hg0pZtNVoOF5DsFkgpeu/VCQu2C8vW96CuNnPHCEevvb4c4cDAA/WO1NcQzDzi JdMyu89nsEaG5D7vqVihpkZmBJh5XvCZAIGKYzMP9AVBqqQ74s2W7uMou1ACLN0N 1V4nnypeRIkPi2YU8tB+KX9w47ivw7oX2tjZvVgjaKOrmPzK4DlCkDi4A62ob93/ EE/sPQZVNQFqHhW70W1CXDq6CLSY81bN8PEs7tFiww36BriaaVueE7Q/IidFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeIjki4b0QQ4WdS1GeoCJ9bFMMMswHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVE NzEzOTgyRTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjP03ijO/s+RCT3idzxNmvRznY+Ho96g0AW Sl31kEj0S+zwJ44e4xpkG+PTcbxYWzwzO4Dy00yOVwhj59s8d0BHuVOpluHGWkG8 SCWRzCkWgaOwkoJmvYnEtosnNjBBceWzBCbqWdacf+sVshZct3BpAybuuYEtAf2Y TsnrTKTDZWJUAA91+mlDgzSxLg+s7mdPGXbRGDdg9/tXwlG1J9KVD42D8TIYPjwa JW17X+EXZZsZrUaRX7VI9r6dNvN/zBkvtH62eO19EfWB9o1Eb4XgueHLxTLFGcQq ku9c0Q7G0F6qShOvFnvVnu8uauISzxUvLtaOFfXKXMCDup/hihU= -----END CERTIFICATE-----Generated at Fri Apr 17 23:50:38 2026 by rpki-client