$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: IE1zxfkv41v5fpwQ3cZZGUoBSN+pD7F0jFiW5GrbdfE= Subject key identifier: E7:1C:96:D4:ED:F7:56:B0:23:EF:C7:CA:64:EC:68:B0:ED:FE:5B:D0 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 11939BE7A4096A6CC976E4ED55183075223D894E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 01D2 Signing time: Sun 19 Apr 2026 00:11:57 +0000 Manifest this update: Sun 19 Apr 2026 00:06:57 +0000 Manifest next update: Wed 22 Apr 2026 02:14:57 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: vVFtcDy4aPivFUPPIcMbLhe9f28+1kgtEKXIpm8Qbe4=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: BomqdPcEWc7ThbBvhWDgZwYqBISDPqqeOo30nwHFh5Y=) 3: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: Xf4DcFTafo0uIvChDJbPvC1kUZwhAh9Fgq8RjfIsIM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 02:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:93:9b:e7:a4:09:6a:6c:c9:76:e4:ed:55:18:30:75:22:3d:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Apr 19 00:06:57 2026 GMT Not After : Apr 22 02:14:57 2026 GMT Subject: CN=E71C96D4EDF756B023EFC7CA64EC68B0EDFE5BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:26:d1:19:4a:fd:9d:a6:6f:e5:c9:a9:44: 4b:76:dc:c3:21:17:85:31:a7:1e:ea:ad:2e:92:c1: 76:8d:9e:5b:fb:02:05:14:c1:c2:33:e8:e4:3e:ce: 30:36:07:af:fc:b5:0d:b1:5b:d0:48:37:9b:b9:9a: 36:de:73:6e:f6:7a:06:94:40:41:7a:83:2a:13:b5: 1f:d4:af:12:d4:de:f4:f1:e8:24:a7:bc:f1:19:fb: a2:34:53:24:d0:d2:6a:fa:79:8c:94:c8:4a:1b:d4: 73:f1:3b:10:4f:59:1f:18:ff:7b:a0:1a:e3:70:5a: 3e:1c:af:95:47:ab:80:52:64:05:bf:c3:84:b7:39: dc:63:60:13:e9:62:39:23:01:42:af:bb:87:8a:e5: 59:00:ab:af:8f:85:9c:30:7f:3c:d6:14:b6:4c:5a: e7:7e:d6:6d:77:3b:a9:c5:8f:1c:57:6c:a6:b2:5e: 2c:24:90:3c:1b:98:c5:51:1d:a2:23:49:cd:c4:2e: ce:e3:e3:a9:12:fa:68:d9:40:32:88:e5:fb:c1:4a: a3:ce:dd:11:33:3e:0a:c7:37:b2:c0:7c:0b:cc:fc: 72:02:5a:99:b0:b0:11:65:9f:6e:63:39:76:c1:db: c2:21:d5:3e:e6:a4:6c:84:ae:f4:28:cb:fc:08:6e: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1C:96:D4:ED:F7:56:B0:23:EF:C7:CA:64:EC:68:B0:ED:FE:5B:D0 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a6:5e:89:b0:46:0c:db:6d:38:e2:7c:2b:28:12:96:06:5e: 18:c6:fd:bc:5c:86:0c:8e:a5:ea:4c:f5:28:42:96:b2:c7:29: ec:ca:ac:5f:d5:a6:dd:c9:3e:98:69:53:21:d6:59:ba:ed:3e: 12:8c:c3:f7:2b:a4:3c:8f:aa:71:1b:58:cd:b8:c9:2b:52:36: 80:d7:f2:ac:f1:e3:1d:99:a1:56:e2:0f:d8:eb:0d:17:c9:bc: 49:68:d6:dc:ab:bf:79:24:51:d7:aa:a2:37:c3:d0:7f:38:88: 53:dc:2e:b1:85:5e:cd:0f:be:b8:18:f4:22:aa:98:40:ab:a4: 2b:68:09:48:d8:01:59:2f:e1:c4:66:05:8a:2a:4a:f9:cd:e4: 7a:9f:72:cd:5a:ec:90:4b:fe:b0:23:b1:e3:4c:dd:fa:ea:e9: f8:70:f0:bc:37:e1:ed:00:92:66:6a:75:98:14:99:f9:7b:84: cf:33:05:9a:fe:e6:4b:40:dc:30:ce:e3:97:f9:f1:45:a3:f5: a0:7e:a1:40:fd:65:fc:b6:c4:05:f7:f1:9d:a7:65:ab:16:0a: de:0e:76:b0:00:f3:73:70:c3:5d:4c:fe:09:79:f3:b5:1f:5c: 6a:1a:e9:6a:6e:92:df:4d:9d:fb:04:6e:12:7e:a2:c6:fd:7b: 3f:68:1c:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZOb56QJamzJduTtVRgwdSI9iU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNjA0MTkwMDA2NTdaFw0yNjA0MjIwMjE0NTdaMDMxMTAvBgNV BAMTKEU3MUM5NkQ0RURGNzU2QjAyM0VGQzdDQTY0RUM2OEIwRURGRTVCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9XybRGUr9naZv5cmpREt23MMh F4Uxpx7qrS6SwXaNnlv7AgUUwcIz6OQ+zjA2B6/8tQ2xW9BIN5u5mjbec272egaU QEF6gyoTtR/UrxLU3vTx6CSnvPEZ+6I0UyTQ0mr6eYyUyEob1HPxOxBPWR8Y/3ug GuNwWj4cr5VHq4BSZAW/w4S3OdxjYBPpYjkjAUKvu4eK5VkAq6+PhZwwfzzWFLZM Wud+1m13O6nFjxxXbKayXiwkkDwbmMVRHaIjSc3ELs7j46kS+mjZQDKI5fvBSqPO 3REzPgrHN7LAfAvM/HICWpmwsBFln25jOXbB28Ih1T7mpGyErvQoy/wIbtQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xyW1O33VrAj78fKZOxosO3+W9AwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+mXomwRgzbbTjifCsoEpYGXhjG/bxchgyO pepM9ShClrLHKezKrF/Vpt3JPphpUyHWWbrtPhKMw/crpDyPqnEbWM24yStSNoDX 8qzx4x2ZoVbiD9jrDRfJvElo1tyrv3kkUdeqojfD0H84iFPcLrGFXs0PvrgY9CKq mECrpCtoCUjYAVkv4cRmBYoqSvnN5Hqfcs1a7JBL/rAjseNM3frq6fhw8Lw34e0A kmZqdZgUmfl7hM8zBZr+5ktA3DDO45f58UWj9aB+oUD9Zfy2xAX38Z2nZasWCt4O drAA83Nww11M/gl587UfXGoa6Wpukt9NnfsEbhJ+osb9ez9oHAo= -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:24 2026 by rpki-client