$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: bCFvn4AEozpMtEkpjMrJuwBkcSv26Z16zD7Lm4o53fk= Subject key identifier: AB:78:01:09:6D:B4:78:5E:C0:D0:AC:22:22:59:76:A5:AF:13:C2:3C Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 52DFE6B3B7A10A7A3CDEC6F6B7C036EF0D8E5A67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 018C Signing time: Fri 17 Apr 2026 04:22:34 +0000 Manifest this update: Fri 17 Apr 2026 04:17:34 +0000 Manifest next update: Mon 20 Apr 2026 14:02:34 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: 4RsOS42eqArq7mUY2GnhREyL9hSy1/zaHWv+7xINwaI=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:df:e6:b3:b7:a1:0a:7a:3c:de:c6:f6:b7:c0:36:ef:0d:8e:5a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Apr 17 04:17:34 2026 GMT Not After : Apr 20 14:02:34 2026 GMT Subject: CN=AB7801096DB4785EC0D0AC22225976A5AF13C23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8e:76:92:87:42:4d:e5:7c:11:4a:68:5e:30: f1:15:57:65:4c:3d:ec:38:a3:d1:c0:40:bd:11:8d: 9e:c6:83:6b:20:ff:a6:08:19:15:90:93:d8:95:11: e6:95:c2:a5:61:25:44:a5:0f:4a:c4:15:ca:02:36: da:cd:f5:b1:e2:9a:ef:45:f0:90:4b:f4:e5:00:d8: 0c:1c:46:e7:ea:f4:ec:40:b5:d3:95:49:d3:01:2d: b2:9f:e9:f5:b0:b7:37:94:9b:c5:fb:8b:2e:d0:d1: fd:ef:7c:e6:ae:b6:3d:48:1c:80:c1:80:4e:fb:15: f0:fb:5c:3f:86:a6:6b:dd:44:45:16:e2:4f:41:d4: 8f:7f:1a:bc:23:b9:c6:8a:b1:1c:ea:bf:c4:01:e3: 6e:2e:da:ee:51:2a:2d:b8:3b:6e:48:79:b1:a1:5d: d5:88:4f:f6:71:ca:41:d0:a3:3b:3a:54:10:11:67: 31:28:5b:27:5c:84:4a:60:c2:98:d9:ac:a0:5e:5b: 6b:be:39:da:9b:04:25:7d:27:9c:90:f7:01:a5:a5: 7b:20:78:f0:53:7f:95:21:9e:ac:61:12:cd:c9:05: af:9a:19:37:5a:c3:ef:a1:c3:dd:94:1c:23:01:06: be:55:57:9a:f3:84:0a:16:a1:d3:8f:4f:33:9c:11: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:78:01:09:6D:B4:78:5E:C0:D0:AC:22:22:59:76:A5:AF:13:C2:3C X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ce:36:01:0e:76:e5:7e:c1:9a:fa:12:cc:36:d3:94:ce:ab: 7b:26:3d:cd:4d:f5:a4:a9:bc:22:f1:18:ca:4c:56:ab:d3:2a: bf:a9:db:11:85:b4:4c:2a:bc:35:2b:62:39:bc:da:ac:88:e6: ed:76:30:4b:4e:4d:7a:3d:89:eb:2f:c0:ee:03:ff:c5:06:64: ea:36:3a:0b:0f:96:a8:b0:f7:bc:1d:75:ee:35:1e:88:75:33: a4:07:01:51:eb:f6:b8:d7:35:2a:5f:c0:f6:5f:0e:40:0f:7e: b9:af:2a:d7:6d:f5:ca:5b:fd:6b:f1:1a:ff:dd:96:54:f0:47: 10:aa:e2:19:5b:3c:09:3e:09:76:92:6e:0c:fb:4e:f3:74:77: 41:8c:37:3f:e6:0e:29:d1:b8:d3:f5:e2:22:ae:d1:30:70:9d: c8:e5:c8:3e:ee:bc:71:7f:b4:3c:e4:9d:b5:84:82:03:9b:b7: aa:34:a3:ff:72:2c:b4:b8:38:ea:74:39:31:7a:ba:1f:e1:de: 3c:2e:47:3d:c3:f0:23:3d:76:25:b1:51:c8:d4:83:de:2a:b2: 5e:68:f0:c0:2a:7a:dd:15:43:5a:cc:13:be:76:98:35:63:9c: 9e:ee:47:e6:e3:25:4e:45:77:4c:98:f6:4c:2c:e6:4b:ef:ec: 2e:48:65:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt/ms7ehCno83sb2t8A27w2OWmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNjA0MTcwNDE3MzRaFw0yNjA0MjAxNDAyMzRaMDMxMTAvBgNV BAMTKEFCNzgwMTA5NkRCNDc4NUVDMEQwQUMyMjIyNTk3NkE1QUYxM0MyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojnaSh0JN5XwRSmheMPEVV2VM Pew4o9HAQL0RjZ7Gg2sg/6YIGRWQk9iVEeaVwqVhJUSlD0rEFcoCNtrN9bHimu9F 8JBL9OUA2AwcRufq9OxAtdOVSdMBLbKf6fWwtzeUm8X7iy7Q0f3vfOautj1IHIDB gE77FfD7XD+GpmvdREUW4k9B1I9/GrwjucaKsRzqv8QB424u2u5RKi24O25IebGh XdWIT/ZxykHQozs6VBARZzEoWydchEpgwpjZrKBeW2u+OdqbBCV9J5yQ9wGlpXsg ePBTf5UhnqxhEs3JBa+aGTdaw++hw92UHCMBBr5VV5rzhAoWodOPTzOcEW49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3gBCW20eF7A0KwiIll2pa8TwjwwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7ONgEOduV+wZr6Esw205TOq3smPc1N9aSp vCLxGMpMVqvTKr+p2xGFtEwqvDUrYjm82qyI5u12MEtOTXo9iesvwO4D/8UGZOo2 OgsPlqiw97wdde41Hoh1M6QHAVHr9rjXNSpfwPZfDkAPfrmvKtdt9cpb/WvxGv/d llTwRxCq4hlbPAk+CXaSbgz7TvN0d0GMNz/mDinRuNP14iKu0TBwncjlyD7uvHF/ tDzknbWEggObt6o0o/9yLLS4OOp0OTF6uh/h3jwuRz3D8CM9diWxUcjUg94qsl5o 8MAqet0VQ1rME752mDVjnJ7uR+bjJU5Fd0yY9kws5kvv7C5IZfM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:05:57 2026 by rpki-client