$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: vyosGt0QJQEtRBhqfSD+EwQ2fOnmwDxKnWhj8g6WdNc= Subject key identifier: 6C:53:BB:8C:DB:28:0E:98:50:11:34:7C:08:6B:5C:B0:1B:36:BD:F1 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 7BC9F7BEF873C6FC8DA0817CAD982C250E04ED8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 013C Signing time: Sat 18 Apr 2026 09:40:42 +0000 Manifest this update: Sat 18 Apr 2026 09:35:42 +0000 Manifest next update: Tue 21 Apr 2026 18:39:42 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: EMSMLydCIMgCCDM5A6KpCinITeakN2yfPogDrJvRIew=) 3: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: QjZ2K1T9fotU8Au21aP5sVvfSeCK8Vv/I/QYFruvSnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c9:f7:be:f8:73:c6:fc:8d:a0:81:7c:ad:98:2c:25:0e:04:ed:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Apr 18 09:35:42 2026 GMT Not After : Apr 21 18:39:42 2026 GMT Subject: CN=6C53BB8CDB280E985011347C086B5CB01B36BDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:b4:67:fb:a0:ae:a8:f8:b1:ef:22:a7:8e: 0f:df:4b:b4:e7:7d:7a:fa:1d:70:bc:7f:ef:39:38: 4e:ab:d0:a4:ab:2b:ba:fc:8c:50:22:3d:ae:09:3a: 99:88:2d:88:96:2f:15:80:35:2e:13:c6:72:cb:53: f3:f3:1e:84:ca:2d:15:6e:77:b6:d2:90:40:45:db: f2:5e:41:b0:78:24:29:a5:9d:43:7d:9a:41:86:e4: b0:06:48:86:8a:56:e4:ff:8f:04:01:51:aa:b1:39: 21:a1:5d:6f:38:f6:86:ad:8d:05:35:41:66:fd:ae: 9c:91:65:c3:da:b9:b8:da:3e:eb:e2:ff:5c:20:69: 02:fa:35:53:f8:2d:ce:95:94:43:6f:f8:8f:1d:ce: 2b:98:e7:3f:48:c4:48:2d:c8:8b:cd:25:91:97:fb: d5:0d:ae:5e:4f:5f:4d:98:77:94:48:7a:31:6c:26: 67:59:c6:45:ec:a9:2c:45:d7:51:12:e4:26:5c:a0: 5c:79:72:80:f3:bf:f6:a6:90:83:09:38:62:de:b4: e8:97:5a:b6:e1:ce:35:2c:37:a2:55:cd:4f:8c:07: fd:6b:18:bb:0c:1c:ea:fc:0d:f6:3c:3b:ac:44:ec: f0:70:cf:76:a0:53:2c:77:3b:3e:8c:cc:1c:72:da: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:53:BB:8C:DB:28:0E:98:50:11:34:7C:08:6B:5C:B0:1B:36:BD:F1 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:98:f2:26:74:78:2c:90:eb:db:d7:57:68:3e:89:ba:d0:27: 38:c3:57:79:62:68:05:f1:3c:fe:3b:2e:bd:4f:9e:c5:7e:af: 4d:fe:e3:a3:11:c5:4b:76:c9:ca:5f:fb:35:33:ec:86:75:ce: a5:8a:17:6c:cc:9d:e1:fb:58:22:ab:40:7e:04:b1:ac:99:90: 24:f6:e7:9f:f1:b8:fe:10:6e:18:11:c1:86:c9:ac:31:63:a7: 54:02:7a:33:3d:70:fe:bb:4c:cf:d3:cd:41:e4:22:42:14:fc: d5:50:f3:d7:ec:a3:2a:e7:9f:29:29:8c:58:ae:b2:d7:a8:69: 05:04:f4:d8:d5:a5:5c:98:29:34:59:57:d0:1b:c2:45:2c:7a: 77:89:b8:1b:18:75:ad:3c:80:16:8c:be:7a:8e:3a:b7:c4:e1: cd:5b:eb:99:aa:06:f5:70:03:72:08:bb:c8:c1:24:6d:e4:40: 52:31:70:e4:65:79:ad:6c:cb:ab:ad:c0:38:cc:90:69:41:70: d1:2e:15:be:9b:56:81:37:93:58:dc:1c:30:2a:10:46:81:c9: 32:3d:00:ea:46:ce:6e:c7:c8:5a:c1:32:2e:03:cb:8a:f2:47: 94:9c:3c:df:43:d2:b2:a0:1a:9d:41:43:dd:08:d4:d2:1f:cf: a9:05:15:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8n3vvhzxvyNoIF8rZgsJQ4E7YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNjA0MTgwOTM1NDJaFw0yNjA0MjExODM5NDJaMDMxMTAvBgNV BAMTKDZDNTNCQjhDREIyODBFOTg1MDExMzQ3QzA4NkI1Q0IwMUIzNkJERjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJp7Rn+6CuqPix7yKnjg/fS7Tn fXr6HXC8f+85OE6r0KSrK7r8jFAiPa4JOpmILYiWLxWANS4TxnLLU/PzHoTKLRVu d7bSkEBF2/JeQbB4JCmlnUN9mkGG5LAGSIaKVuT/jwQBUaqxOSGhXW849oatjQU1 QWb9rpyRZcPaubjaPuvi/1wgaQL6NVP4Lc6VlENv+I8dziuY5z9IxEgtyIvNJZGX +9UNrl5PX02Yd5RIejFsJmdZxkXsqSxF11ES5CZcoFx5coDzv/amkIMJOGLetOiX WrbhzjUsN6JVzU+MB/1rGLsMHOr8DfY8O6xE7PBwz3agUyx3Oz6MzBxy2kwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbFO7jNsoDphQETR8CGtcsBs2vfEwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6Y8iZ0eCyQ69vXV2g+ibrQJzjDV3liaAXx PP47Lr1PnsV+r03+46MRxUt2ycpf+zUz7IZ1zqWKF2zMneH7WCKrQH4EsayZkCT2 55/xuP4QbhgRwYbJrDFjp1QCejM9cP67TM/TzUHkIkIU/NVQ89fsoyrnnykpjFiu steoaQUE9NjVpVyYKTRZV9AbwkUseneJuBsYda08gBaMvnqOOrfE4c1b65mqBvVw A3IIu8jBJG3kQFIxcORlea1sy6utwDjMkGlBcNEuFb6bVoE3k1jcHDAqEEaByTI9 AOpGzm7HyFrBMi4Dy4ryR5ScPN9D0rKgGp1BQ90I1NIfz6kFFXg= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:43 2026 by rpki-client