$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft File: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft (raw, json) Hash identifier: 22HSixm/B1tY8cRc7tZUeuAmHoRbejPyXp7HR/jQQfU= Subject key identifier: BE:80:4A:3A:3A:57:41:79:C8:71:B0:C0:87:E0:0B:16:2D:58:93:8C Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 Certificate issuer: /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Certificate serial: 6366E9ABECAF594B2EA3517B2BC62835652E30B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft Manifest number: 024D Signing time: Sat 18 Apr 2026 21:51:43 +0000 Manifest this update: Sat 18 Apr 2026 21:46:43 +0000 Manifest next update: Wed 22 Apr 2026 01:53:43 +0000 Files and hashes: 1: 3130332e3138392e3234392e302f32342d3234203d3e20313439383838.roa (hash: yz9DrhiZMU3eHWMSo1Oy5Cw6+/2sDeBXKj2G3NoDN0k=) 2: 3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (hash: r4fgqA47qTlb3GhP6gzYmrPLdVv6QpS/f5hXYEC/f/k=) 3: E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl (hash: lVTMyYCUJGDPbhMKceDhg/KR5GtrcCe0vRU08co2epQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 01:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:66:e9:ab:ec:af:59:4b:2e:a3:51:7b:2b:c6:28:35:65:2e:30:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9 Validity Not Before: Apr 18 21:46:43 2026 GMT Not After : Apr 22 01:53:43 2026 GMT Subject: CN=BE804A3A3A574179C871B0C087E00B162D58938C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:68:6d:d0:8b:8f:cc:c0:cd:85:d1:72:c2: 2f:36:dd:d9:e5:74:98:97:1b:cd:05:db:6a:6f:00: d5:e5:14:03:a3:4e:2f:5c:95:37:d2:05:a8:af:aa: c3:63:2c:49:54:14:c0:06:d9:19:63:d3:ed:bd:b5: 2a:48:2c:d2:e5:67:bc:32:d9:56:ba:b2:c1:eb:02: 08:e8:47:58:ec:6f:33:4e:8e:74:fb:6f:73:2c:44: 0a:b8:7f:be:ff:f0:dc:a5:37:f9:65:5f:63:27:95: 6a:3a:f4:59:b9:22:33:27:5f:05:69:da:61:db:37: a5:d4:e7:50:2f:89:ad:c6:38:07:c5:7b:af:b1:0b: ff:48:d2:c7:e1:1e:b2:b8:98:29:c8:c5:8a:df:bb: 41:27:fc:b6:19:f9:87:d6:53:96:f3:74:8d:a9:bc: e8:f6:c2:83:eb:60:67:c1:9f:97:d1:26:f9:13:b5: 1f:1f:5a:a9:69:1a:2f:26:d8:9b:cc:98:7d:50:aa: 08:06:32:36:95:ec:1e:fb:95:7d:d5:da:b0:80:a6: 37:36:68:a8:f6:30:17:d8:c6:61:e9:c3:ba:80:5d: 3e:58:6b:f9:cd:4e:f2:7c:78:22:0a:86:b7:80:92: ca:ed:1a:1f:2e:1a:59:76:6b:8e:8f:57:a2:17:7f: 58:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:80:4A:3A:3A:57:41:79:C8:71:B0:C0:87:E0:0B:16:2D:58:93:8C X509v3 Authority Key Identifier: keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:16:59:38:a8:93:73:a8:07:85:56:dd:7b:ca:07:72:09:28: cc:1a:08:c3:e1:fe:e8:66:f8:85:ca:98:ee:b9:c4:95:96:1b: 18:69:c1:7f:a3:27:f8:bc:4e:21:72:47:c6:1a:e9:e4:0d:d5: b2:ee:d8:43:5a:a8:d7:6c:04:0f:b8:15:f7:9b:84:f2:ab:f2: 69:a2:d0:a8:ae:03:e5:08:00:df:94:1b:ab:69:c6:2f:60:55: 18:e2:2a:52:d7:91:c3:16:b3:53:0c:77:54:17:e9:63:22:09: c7:11:fb:0d:5c:b0:c2:f6:19:5f:ef:14:82:7d:0f:02:66:fc: bd:b2:71:f0:27:24:8f:ca:78:91:59:5e:4d:8d:33:86:8a:dc: a4:ed:68:a1:05:5e:79:df:bc:ed:e5:1d:f0:cc:8b:e9:38:0b: 47:e3:90:6d:4f:09:3b:2f:8d:30:32:8f:c9:0c:ad:18:5f:82: 87:ad:b6:c9:82:84:ca:97:a8:91:97:8e:e8:56:e2:4d:a1:48: 45:31:01:d5:cd:88:6c:79:97:86:b7:1e:e2:e1:30:3a:a0:be: 00:77:be:c1:87:a5:46:ef:58:39:62:03:c7:18:65:7e:ec:17: f4:06:26:4f:8f:5c:7d:1c:ca:6b:bd:a6:e2:7f:cb:d6:62:a4: a4:99:27:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2bpq+yvWUsuo1F7K8YoNWUuMLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx QzlGMjFDOTAeFw0yNjA0MTgyMTQ2NDNaFw0yNjA0MjIwMTUzNDNaMDMxMTAvBgNV BAMTKEJFODA0QTNBM0E1NzQxNzlDODcxQjBDMDg3RTAwQjE2MkQ1ODkzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKWht0IuPzMDNhdFywi823dnl dJiXG80F22pvANXlFAOjTi9clTfSBaivqsNjLElUFMAG2Rlj0+29tSpILNLlZ7wy 2Va6ssHrAgjoR1jsbzNOjnT7b3MsRAq4f77/8NylN/llX2MnlWo69Fm5IjMnXwVp 2mHbN6XU51Avia3GOAfFe6+xC/9I0sfhHrK4mCnIxYrfu0En/LYZ+YfWU5bzdI2p vOj2woPrYGfBn5fRJvkTtR8fWqlpGi8m2JvMmH1QqggGMjaV7B77lX3V2rCApjc2 aKj2MBfYxmHpw7qAXT5Ya/nNTvJ8eCIKhreAksrtGh8uGll2a46PV6IXf1inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvoBKOjpXQXnIcbDAh+ALFi1Yk4wwHwYDVR0j BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG MjFDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWRmNDE2NGUtNzRlNS00MGQ2LTlh MzAtYjM3MmE0ZDJhNDU0LzAvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VE MjExQzlGMjFDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgWWTiok3OoB4VW3XvKB3IJKMwaCMPh/uhm +IXKmO65xJWWGxhpwX+jJ/i8TiFyR8Ya6eQN1bLu2ENaqNdsBA+4FfebhPKr8mmi 0KiuA+UIAN+UG6tpxi9gVRjiKlLXkcMWs1MMd1QX6WMiCccR+w1csML2GV/vFIJ9 DwJm/L2ycfAnJI/KeJFZXk2NM4aK3KTtaKEFXnnfvO3lHfDMi+k4C0fjkG1PCTsv jTAyj8kMrRhfgoettsmChMqXqJGXjuhW4k2hSEUxAdXNiGx5l4a3HuLhMDqgvgB3 vsGHpUbvWDliA8cYZX7sF/QGJk+PXH0cymu9puJ/y9ZipKSZJ88= -----END CERTIFICATE-----Generated at Sun Apr 19 14:21:34 2026 by rpki-client