$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: iH8hSyO5hxSxVo1UBT5uUbMnWp3daQBVgVvRD8Nl1tE= Subject key identifier: 4E:FF:77:6B:44:F6:C4:A2:79:46:61:20:C7:BD:B5:8E:E9:AB:5F:6C Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 5D44A4F7BA830EAFD0338DBD1746496B7A795926 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 056A Signing time: Thu 16 Apr 2026 11:21:36 +0000 Manifest this update: Thu 16 Apr 2026 11:16:36 +0000 Manifest next update: Sun 19 Apr 2026 16:57:36 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) 2: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) 3: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: 72DVRD/5P/uzPQYVhuNPlWPySdASzHZxzK4MQRwHPx4=) 4: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:44:a4:f7:ba:83:0e:af:d0:33:8d:bd:17:46:49:6b:7a:79:59:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Apr 16 11:16:36 2026 GMT Not After : Apr 19 16:57:36 2026 GMT Subject: CN=4EFF776B44F6C4A279466120C7BDB58EE9AB5F6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:25:88:77:0c:f8:04:a4:8e:1b:21:61:3a: 8d:7e:fe:df:e1:7c:ef:83:21:8c:d4:c3:05:a9:d8: 70:39:56:62:2e:85:62:e0:08:c6:5f:38:2e:aa:58: 67:a9:7b:49:14:cd:98:b9:31:1f:0d:29:57:e0:32: db:7b:6f:3e:09:16:ab:f3:4c:a2:cb:df:90:81:95: 46:50:16:20:0f:eb:f9:9a:a7:ff:22:8c:e5:11:92: db:f2:e2:2b:fc:1a:6c:0c:e3:1a:39:61:40:a1:5d: 8a:a6:cb:4a:3e:dd:26:4b:3e:ed:ab:91:ec:64:61: 02:5a:e4:e7:f0:17:1d:52:7e:04:46:10:e9:87:78: 0a:f7:fd:19:f3:6b:b0:c3:77:6b:fb:ad:c7:53:20: 38:7b:88:e2:4c:34:64:30:06:59:60:67:c8:87:20: f7:33:00:b1:0f:df:70:a8:23:49:d5:20:1d:6a:18: 0f:e4:69:97:a2:44:dc:25:61:6a:19:89:5b:fb:55: 18:a8:e8:0a:09:59:27:62:5c:58:ca:3b:13:fa:fa: ac:3d:83:a5:b2:ee:79:1d:2b:e1:28:5d:1b:b2:00: c7:fe:62:26:4a:33:64:2d:69:c3:3c:d4:b7:c2:93: b3:7a:94:dd:97:16:b8:c4:cd:de:d9:d5:7e:4b:0a: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:77:6B:44:F6:C4:A2:79:46:61:20:C7:BD:B5:8E:E9:AB:5F:6C X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:84:7c:fc:a6:de:7e:e6:3e:5b:6b:33:d3:48:89:c0:73:ca: 79:07:06:31:98:56:6f:10:a5:81:c2:d5:bd:59:f1:ca:c5:35: ac:76:f0:57:7f:69:c3:00:11:b1:0b:b5:3d:90:a0:3c:f2:0f: b1:80:20:aa:4f:37:2c:45:8e:5b:51:39:6d:dc:b5:20:e1:16: 2c:69:1f:a0:ec:f6:89:b1:cf:dd:92:3e:c3:67:10:79:86:98: 36:e5:91:1f:1e:fc:c1:24:2c:4c:12:01:ea:f3:d4:b6:21:1b: 50:24:fe:b8:47:8f:17:b0:e8:be:95:eb:a1:35:ef:11:38:65: b6:c1:20:2e:c3:94:83:08:76:72:95:10:ef:9d:a3:02:48:0c: c5:ca:db:6b:94:5a:0b:af:cf:bc:85:4d:b8:fc:2a:b5:60:08: b5:b8:18:c6:3f:53:48:04:e9:30:01:12:89:0f:60:32:a1:33: 4f:34:83:03:13:34:96:d5:16:6e:16:a5:24:1c:21:63:09:64: 6e:5c:98:a0:90:2b:af:ef:07:d9:27:19:35:47:74:ad:b3:f1: 1b:e2:9b:d9:41:2e:01:83:6b:d1:ea:78:13:ef:f3:a8:6d:c0: 1c:9c:dd:66:7b:f3:ca:5b:9a:40:3b:ca:a7:03:34:82:26:9c: 4d:81:7f:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUSk97qDDq/QM429F0ZJa3p5WSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNjA0MTYxMTE2MzZaFw0yNjA0MTkxNjU3MzZaMDMxMTAvBgNV BAMTKDRFRkY3NzZCNDRGNkM0QTI3OTQ2NjEyMEM3QkRCNThFRTlBQjVGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqCCWIdwz4BKSOGyFhOo1+/t/h fO+DIYzUwwWp2HA5VmIuhWLgCMZfOC6qWGepe0kUzZi5MR8NKVfgMtt7bz4JFqvz TKLL35CBlUZQFiAP6/map/8ijOURktvy4iv8GmwM4xo5YUChXYqmy0o+3SZLPu2r kexkYQJa5OfwFx1SfgRGEOmHeAr3/Rnza7DDd2v7rcdTIDh7iOJMNGQwBllgZ8iH IPczALEP33CoI0nVIB1qGA/kaZeiRNwlYWoZiVv7VRio6AoJWSdiXFjKOxP6+qw9 g6Wy7nkdK+EoXRuyAMf+YiZKM2QtacM81LfCk7N6lN2XFrjEzd7Z1X5LCvD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTv93a0T2xKJ5RmEgx721jumrX2wwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOEfPym3n7mPltrM9NIicBzynkHBjGYVm8Q pYHC1b1Z8crFNax28Fd/acMAEbELtT2QoDzyD7GAIKpPNyxFjltROW3ctSDhFixp H6Ds9omxz92SPsNnEHmGmDblkR8e/MEkLEwSAerz1LYhG1Ak/rhHjxew6L6V66E1 7xE4ZbbBIC7DlIMIdnKVEO+dowJIDMXK22uUWguvz7yFTbj8KrVgCLW4GMY/U0gE 6TABEokPYDKhM080gwMTNJbVFm4WpSQcIWMJZG5cmKCQK6/vB9knGTVHdK2z8Rvi m9lBLgGDa9HqeBPv86htwByc3WZ788pbmkA7yqcDNIImnE2Bf+M= -----END CERTIFICATE-----Generated at Fri Apr 17 21:25:15 2026 by rpki-client