$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: RaQ7lzU7CnpvAMsBsr9f8zYUhTZa4MNBy0WJS8rbcms= Subject key identifier: EB:6D:34:83:C3:79:ED:BC:5D:66:2B:58:12:E8:48:58:0E:53:D2:68 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 1609AE54A16D6E268F55456FB804CD823C018164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03E2 Signing time: Wed 15 Apr 2026 17:52:19 +0000 Manifest this update: Wed 15 Apr 2026 17:47:19 +0000 Manifest next update: Sat 18 Apr 2026 19:04:19 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: dVMffcES/DOUKr8eB8uMTjUwePxmI/7b8CGd7sObISc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:09:ae:54:a1:6d:6e:26:8f:55:45:6f:b8:04:cd:82:3c:01:81:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Apr 15 17:47:19 2026 GMT Not After : Apr 18 19:04:19 2026 GMT Subject: CN=EB6D3483C379EDBC5D662B5812E848580E53D268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:4f:88:32:c9:af:2e:70:1c:44:6e:ca:62: 53:6d:8a:1d:63:b6:39:f5:9b:48:af:e7:e0:83:fa: 67:a3:29:03:2b:e3:b7:ce:d8:79:3c:c0:b2:db:5a: c3:30:91:f7:e7:75:a6:df:83:ba:00:06:28:1d:20: f1:d2:49:54:e2:ba:c1:a1:82:88:60:69:ca:e5:8d: c7:93:a3:78:a4:f8:7d:5c:ad:54:66:df:38:94:35: 1e:02:a9:c0:7f:c7:3c:cd:64:93:0a:d9:31:80:15: f7:10:40:cf:a3:f8:4e:58:dc:d6:79:2a:06:f7:76: 78:21:0f:ac:a2:69:56:36:32:e5:76:b5:67:d4:14: 33:d5:99:1c:b9:98:74:31:06:51:f0:a4:19:aa:dc: 61:c4:f9:e0:6a:99:1d:04:5d:c7:21:02:35:ad:3e: e2:f9:5f:57:e1:78:65:d1:5d:24:a3:40:47:39:4f: bd:f8:bf:56:5a:c9:72:b7:72:74:bc:6c:44:5b:c8: 95:65:94:8c:2f:1b:ab:a5:87:50:a8:af:de:0b:ab: 3e:aa:ec:d4:62:82:3e:ac:ab:ab:0f:9f:3c:4e:39: b3:23:c2:98:41:0a:32:56:fe:dd:51:a4:f6:7a:8a: bf:7b:e9:26:12:87:30:e7:0c:72:7a:d8:f6:5c:d0: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:34:83:C3:79:ED:BC:5D:66:2B:58:12:E8:48:58:0E:53:D2:68 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:3c:37:43:9c:af:2e:d3:df:ce:2c:6d:30:4b:67:1b:17:4b: b3:66:66:bc:1d:bb:98:e0:4b:f7:43:e6:62:56:f1:0b:d8:e6: a0:5b:86:9e:05:2d:6a:85:69:95:4c:a9:79:0d:e6:40:fc:62: 9d:e6:11:9a:ae:9c:33:35:39:19:95:a1:bf:6d:53:69:9a:30: a4:48:b1:1e:79:20:60:6a:48:e1:0b:e4:7b:5a:fb:e1:47:e1: c4:a0:c8:c7:52:66:62:34:0f:7d:09:9c:97:a3:ef:7d:ac:09: 53:12:7d:50:f3:10:bf:6c:54:6d:34:c7:9b:52:a8:bc:76:c4: ea:56:75:b1:0e:ae:29:3d:0c:bd:cf:75:13:c9:81:43:92:54: a0:34:22:6f:5c:37:29:88:4e:96:31:62:b4:22:30:41:f9:6e: 57:a7:83:d1:bc:f3:1e:f7:31:7f:06:41:29:bf:67:42:20:44: 15:bd:d9:b1:bc:3c:bc:d8:dc:de:a6:7d:99:62:91:c0:7d:68: df:f0:c7:28:67:82:cc:8d:10:c2:51:46:aa:39:68:c0:42:7a: 0f:0c:ca:54:25:b6:3f:b4:11:d5:46:d0:8c:8c:ab:85:ee:ff: d6:6b:75:c7:77:60:8d:78:0c:8b:03:ed:5e:f3:d4:02:31:c2: d7:e3:03:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgmuVKFtbiaPVUVvuATNgjwBgWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNjA0MTUxNzQ3MTlaFw0yNjA0MTgxOTA0MTlaMDMxMTAvBgNV BAMTKEVCNkQzNDgzQzM3OUVEQkM1RDY2MkI1ODEyRTg0ODU4MEU1M0QyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK40+IMsmvLnAcRG7KYlNtih1j tjn1m0iv5+CD+mejKQMr47fO2Hk8wLLbWsMwkffndabfg7oABigdIPHSSVTiusGh gohgacrljceTo3ik+H1crVRm3ziUNR4CqcB/xzzNZJMK2TGAFfcQQM+j+E5Y3NZ5 Kgb3dnghD6yiaVY2MuV2tWfUFDPVmRy5mHQxBlHwpBmq3GHE+eBqmR0EXcchAjWt PuL5X1fheGXRXSSjQEc5T734v1ZayXK3cnS8bERbyJVllIwvG6ulh1Cor94Lqz6q 7NRigj6sq6sPnzxOObMjwphBCjJW/t1RpPZ6ir976SYShzDnDHJ62PZc0CVDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6200g8N57bxdZitYEuhIWA5T0mgwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJI8N0Ocry7T384sbTBLZxsXS7NmZrwdu5jg S/dD5mJW8QvY5qBbhp4FLWqFaZVMqXkN5kD8Yp3mEZqunDM1ORmVob9tU2maMKRI sR55IGBqSOEL5Hta++FH4cSgyMdSZmI0D30JnJej732sCVMSfVDzEL9sVG00x5tS qLx2xOpWdbEOrik9DL3PdRPJgUOSVKA0Im9cNymITpYxYrQiMEH5bleng9G88x73 MX8GQSm/Z0IgRBW92bG8PLzY3N6mfZlikcB9aN/wxyhngsyNEMJRRqo5aMBCeg8M ylQltj+0EdVG0IyMq4Xu/9Zrdcd3YI14DIsD7V7z1AIxwtfjA6U= -----END CERTIFICATE-----Generated at Fri Apr 17 20:28:39 2026 by rpki-client