$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: EiGvw0PUs3Lim1QdkawukdsTeC2ZGPq79CFuA+Hds8g= Subject key identifier: 76:A6:F6:89:89:FA:2D:B2:23:71:44:E8:AC:90:3F:8E:FB:3A:88:25 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 4D39B447BF67E72028D3EDD7FA1342524CA1EF12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 013B Signing time: Wed 15 Apr 2026 14:40:46 +0000 Manifest this update: Wed 15 Apr 2026 14:35:46 +0000 Manifest next update: Sat 18 Apr 2026 22:19:46 +0000 Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: EpR7hgvgTJcl2rp2YSzEBFtUbrRVhAiJcEgGSZz4x1k=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: oUnLaY5QLKq7msdrsSjPpVYbhTetk+RaEux8Uav3LJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:39:b4:47:bf:67:e7:20:28:d3:ed:d7:fa:13:42:52:4c:a1:ef:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Apr 15 14:35:46 2026 GMT Not After : Apr 18 22:19:46 2026 GMT Subject: CN=76A6F68989FA2DB2237144E8AC903F8EFB3A8825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:89:65:68:f6:60:66:36:59:73:72:ad:7d: b7:0c:57:d1:18:1a:21:49:ae:fd:fa:82:79:a6:c6: dc:c9:b3:1f:ad:d2:a8:d8:4a:7b:61:ef:de:95:82: 67:49:8c:0f:8f:9c:25:e1:ab:25:58:1b:3f:ad:cc: 21:9b:03:26:44:aa:f8:e3:26:16:03:3f:14:10:a7: 97:90:8f:e0:2d:5e:3b:b0:0a:59:fd:e2:fd:b0:eb: b1:d8:43:07:1e:e3:65:85:5e:20:a3:b5:2e:ab:eb: a3:52:4a:3a:07:28:80:fb:67:e5:ce:20:ee:28:51: dc:5f:40:86:70:49:4d:d6:ee:ae:a3:18:57:ac:d5: 7b:fd:c0:05:43:ea:c6:fc:31:b9:14:ef:e5:e0:3e: 6a:cb:83:23:f3:8f:de:4c:ef:bd:d5:5e:47:6f:72: 97:9f:5d:4d:c8:ce:40:86:2a:90:18:3b:ff:21:f4: e6:af:8a:ea:d9:d5:22:11:0a:96:15:52:d5:77:c0: f5:4b:c1:a4:aa:9a:5c:5e:4d:04:d4:78:4c:a8:bb: 15:85:1a:38:2b:24:98:06:fb:ca:7c:bc:d9:0c:d0: 30:6e:90:bd:2a:be:5e:60:98:5c:0d:89:96:ba:33: 1b:c2:2b:d6:c6:8c:21:67:5c:f9:4a:71:4e:35:c9: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:F6:89:89:FA:2D:B2:23:71:44:E8:AC:90:3F:8E:FB:3A:88:25 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3f:5b:a6:e3:4d:4a:85:d1:83:9e:d8:27:37:c4:1a:36:cb: dc:29:59:95:da:3f:5a:71:f9:60:d9:bb:1d:05:49:40:16:7d: 43:98:ce:2e:5f:fc:96:53:e2:bc:49:98:59:55:63:49:b9:be: 7d:d7:b5:b5:f5:bb:16:e8:15:59:47:90:97:03:1b:ee:06:3e: 85:88:e4:e4:7e:ab:38:64:ac:13:92:b4:97:e7:ad:bc:9b:66: 53:97:b6:4b:a8:c8:50:96:4a:dc:1d:db:61:29:de:7b:db:37: 21:ba:43:01:fc:ee:73:13:b5:e9:cc:9d:d7:71:03:b7:5b:c0: 34:e7:22:6b:0a:e6:57:6a:e4:10:8c:49:3a:1b:28:86:a9:c8: 37:56:aa:3a:27:a2:c1:f0:8d:00:30:55:de:74:b2:9c:ef:b7: b1:32:30:0a:b9:c9:27:1a:84:ef:db:f0:1a:ab:cd:37:ab:94: b7:c3:14:ea:23:2d:19:9e:7f:e2:80:a8:82:b1:c9:e3:29:ac: 25:db:da:06:89:19:38:de:5e:df:2b:44:38:50:7e:d3:d0:b4: 28:c0:ee:a1:54:fe:b5:9f:3d:2b:1b:78:19:03:ca:df:72:b5: c2:bd:52:00:4b:fc:0e:bc:1a:40:36:0b:f8:17:fd:a3:41:b2: de:82:3c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTm0R79n5yAo0+3X+hNCUkyh7xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNjA0MTUxNDM1NDZaFw0yNjA0MTgyMjE5NDZaMDMxMTAvBgNV BAMTKDc2QTZGNjg5ODlGQTJEQjIyMzcxNDRFOEFDOTAzRjhFRkIzQTg4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8ollaPZgZjZZc3KtfbcMV9EY GiFJrv36gnmmxtzJsx+t0qjYSnth796VgmdJjA+PnCXhqyVYGz+tzCGbAyZEqvjj JhYDPxQQp5eQj+AtXjuwCln94v2w67HYQwce42WFXiCjtS6r66NSSjoHKID7Z+XO IO4oUdxfQIZwSU3W7q6jGFes1Xv9wAVD6sb8MbkU7+XgPmrLgyPzj95M773VXkdv cpefXU3IzkCGKpAYO/8h9OaviurZ1SIRCpYVUtV3wPVLwaSqmlxeTQTUeEyouxWF GjgrJJgG+8p8vNkM0DBukL0qvl5gmFwNiZa6MxvCK9bGjCFnXPlKcU41yYO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqb2iYn6LbIjcUTorJA/jvs6iCUwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALo/W6bjTUqF0YOe2Cc3xBo2y9wpWZXaP1px +WDZux0FSUAWfUOYzi5f/JZT4rxJmFlVY0m5vn3XtbX1uxboFVlHkJcDG+4GPoWI 5OR+qzhkrBOStJfnrbybZlOXtkuoyFCWStwd22Ep3nvbNyG6QwH87nMTtenMnddx A7dbwDTnImsK5ldq5BCMSTobKIapyDdWqjonosHwjQAwVd50spzvt7EyMAq5ySca hO/b8BqrzTerlLfDFOojLRmef+KAqIKxyeMprCXb2gaJGTjeXt8rRDhQftPQtCjA 7qFU/rWfPSsbeBkDyt9ytcK9UgBL/A68GkA2C/gX/aNBst6CPMM= -----END CERTIFICATE-----Generated at Fri Apr 17 22:43:38 2026 by rpki-client