$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: vpsGhrqkd/mKGZmi0817j/akNHqVh3Pe8hF9UWUFz8M= Subject key identifier: 70:35:04:B0:AC:FA:80:4F:1E:A4:A1:33:FB:C6:69:2B:47:2D:98:64 Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 534EA3D455264C561C3E991AF9D361AB2152287A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 056B Signing time: Sat 18 Apr 2026 12:41:41 +0000 Manifest this update: Sat 18 Apr 2026 12:36:41 +0000 Manifest next update: Tue 21 Apr 2026 18:33:41 +0000 Files and hashes: 1: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) 2: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) 3: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: TyWcDQ8ozHB/xS6CeQiXk0B+ssIMzk/2IXJEMhm2i9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4e:a3:d4:55:26:4c:56:1c:3e:99:1a:f9:d3:61:ab:21:52:28:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Apr 18 12:36:41 2026 GMT Not After : Apr 21 18:33:41 2026 GMT Subject: CN=703504B0ACFA804F1EA4A133FBC6692B472D9864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ac:ab:4a:4f:63:3e:e6:ba:0c:fc:01:ed:b5: 35:cb:83:99:e2:84:42:10:78:33:6a:e5:c2:b5:a6: 37:d6:98:d2:a7:96:8a:0c:06:22:cc:08:bf:ad:4c: bd:94:2f:cc:ce:46:b3:f4:d0:a5:ef:8b:72:9f:bd: 1b:2e:b7:40:a7:e5:b6:bb:2d:34:7c:85:06:db:f7: 93:ef:72:9c:7b:f7:ca:52:47:cd:b1:b1:f1:c1:12: 91:3b:af:17:29:0b:15:f1:79:7e:35:67:62:7a:b1: 2e:36:33:b7:96:85:84:b6:82:d8:41:e5:c6:a2:89: 60:03:fb:a3:18:7a:d5:52:30:1c:0d:a7:c5:af:e1: 93:e6:f2:e0:79:88:d4:02:b0:db:41:a9:ce:e3:43: d7:13:fa:6a:90:27:f0:e6:8c:7d:4e:b8:79:c7:ea: 8c:d4:b1:4e:9c:75:0f:5d:d4:f7:bc:86:6c:81:a3: 0e:e3:e1:6b:00:28:51:8d:8c:0b:cf:e7:e4:57:59: db:f4:19:46:fe:a9:54:60:21:89:49:ba:f3:e5:ba: 21:87:9a:22:66:8f:2f:dc:24:35:c2:9c:a0:ac:23: b7:e3:c0:85:0b:d2:6f:a5:33:ab:49:7b:38:0b:fb: 06:9f:51:e9:80:fb:76:6b:d7:88:58:f3:d7:d3:c1: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:35:04:B0:AC:FA:80:4F:1E:A4:A1:33:FB:C6:69:2B:47:2D:98:64 X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b5:a4:56:5b:6c:12:6b:6c:8f:d3:2c:ce:5f:e4:af:3a:e7: b9:35:da:68:6e:0f:1a:7b:d5:6f:1c:66:2b:6a:85:21:94:65: 61:33:25:76:26:f4:35:86:3f:89:39:84:d1:c4:ac:5e:5f:02: e1:0d:89:8a:7e:7a:06:15:9f:f7:cd:15:e0:55:18:eb:f4:b7: 47:b6:cc:53:14:2d:6f:76:36:ca:25:a8:2b:b6:2e:42:d8:92: 8f:78:74:6f:97:33:c4:ed:14:92:cf:b3:00:b9:bb:f5:21:71: 68:4f:b2:59:58:e4:cb:fe:3c:c7:31:bb:6a:21:5c:39:ee:d5: 9e:ae:10:0b:a1:a7:b5:d3:ac:5a:4c:ca:1d:0e:0e:72:06:7f: 06:c5:5f:3a:6c:af:b6:8c:1e:0d:3d:9b:d4:38:90:b1:71:93: 73:ff:8a:d1:f9:ab:10:de:aa:c3:16:86:61:8f:0e:68:da:52: e6:90:1e:eb:b6:09:ab:c8:e8:3c:32:c3:8e:cb:1f:38:74:6e: e9:85:6a:7b:40:ef:d0:99:17:f3:c8:29:28:0f:07:a7:1c:ed: 1b:35:95:ea:7b:fc:dc:61:18:0d:22:0d:c3:be:8c:5c:46:3b: 65:cc:04:bd:16:8a:ff:1e:fc:1c:da:5e:b9:eb:54:b9:f4:01: 67:37:16:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU06j1FUmTFYcPpka+dNhqyFSKHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNjA0MTgxMjM2NDFaFw0yNjA0MjExODMzNDFaMDMxMTAvBgNV BAMTKDcwMzUwNEIwQUNGQTgwNEYxRUE0QTEzM0ZCQzY2OTJCNDcyRDk4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrKtKT2M+5roM/AHttTXLg5ni hEIQeDNq5cK1pjfWmNKnlooMBiLMCL+tTL2UL8zORrP00KXvi3KfvRsut0Cn5ba7 LTR8hQbb95Pvcpx798pSR82xsfHBEpE7rxcpCxXxeX41Z2J6sS42M7eWhYS2gthB 5caiiWAD+6MYetVSMBwNp8Wv4ZPm8uB5iNQCsNtBqc7jQ9cT+mqQJ/DmjH1OuHnH 6ozUsU6cdQ9d1Pe8hmyBow7j4WsAKFGNjAvP5+RXWdv0GUb+qVRgIYlJuvPluiGH miJmjy/cJDXCnKCsI7fjwIUL0m+lM6tJezgL+wafUemA+3Zr14hY89fTwW2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDUEsKz6gE8epKEz+8ZpK0ctmGQwHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO1pFZbbBJrbI/TLM5f5K8657k12mhuDxp7 1W8cZitqhSGUZWEzJXYm9DWGP4k5hNHErF5fAuENiYp+egYVn/fNFeBVGOv0t0e2 zFMULW92NsolqCu2LkLYko94dG+XM8TtFJLPswC5u/UhcWhPsllY5Mv+PMcxu2oh XDnu1Z6uEAuhp7XTrFpMyh0ODnIGfwbFXzpsr7aMHg09m9Q4kLFxk3P/itH5qxDe qsMWhmGPDmjaUuaQHuu2CavI6Dwyw47LHzh0bumFantA79CZF/PIKSgPB6cc7Rs1 lep7/NxhGA0iDcO+jFxGO2XMBL0Wiv8e/BzaXrnrVLn0AWc3Fi8= -----END CERTIFICATE-----Generated at Sun Apr 19 11:36:05 2026 by rpki-client