$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: YBFUOHoEtBxyHWtz+j2pD0lmSk5C+L45wla1XdI9BSg= Subject key identifier: 09:3F:12:F6:EC:A3:B2:75:EB:10:D2:23:DD:31:A4:24:40:55:FB:30 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 0E639A23F98F4C674A93538E5F1CC299550C4C41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 02B9 Signing time: Thu 16 Apr 2026 01:21:21 +0000 Manifest this update: Thu 16 Apr 2026 01:16:21 +0000 Manifest next update: Sun 19 Apr 2026 01:34:21 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: DtBcm0ltPe/4GCpEli4oO4C7c/PlSIDkkp3PQumAirk=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:63:9a:23:f9:8f:4c:67:4a:93:53:8e:5f:1c:c2:99:55:0c:4c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Apr 16 01:16:21 2026 GMT Not After : Apr 19 01:34:21 2026 GMT Subject: CN=093F12F6ECA3B275EB10D223DD31A4244055FB30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e3:19:f1:98:51:b9:97:f7:e6:c6:9e:82:fd: 56:f9:24:ed:b7:2b:96:8f:5f:a2:67:10:e5:45:28: de:33:84:de:8e:45:15:1c:59:5a:ed:36:bc:90:85: a2:e1:ad:ec:d1:90:c2:53:4e:5a:5b:a5:55:e1:14: 0b:b2:c6:5b:10:6e:96:d4:4b:44:f9:59:df:07:d5: 9d:7c:f6:15:32:b1:22:eb:ff:99:08:65:41:3d:d4: 68:9f:11:b6:43:5a:5e:b4:92:20:59:a7:c9:4c:06: 7a:22:f4:a3:8c:06:fc:6e:6f:58:80:3b:d3:7a:b9: e1:b4:9b:72:ab:68:73:e4:fa:4a:0b:51:b6:55:ae: 18:aa:1e:27:25:cf:7d:d1:19:69:23:84:73:90:84: 4d:96:46:00:50:07:f0:f7:33:1f:1c:6e:1b:fc:79: 03:ce:51:90:a4:b4:ad:35:36:70:ba:33:9c:a9:fa: fd:e5:12:07:f2:8f:90:80:ec:ea:af:b0:84:6f:b6: 2b:2e:93:cb:dc:38:76:7d:cb:21:a8:2d:30:60:93: dc:d0:e6:29:9e:88:cf:16:1c:37:10:26:55:0e:b7: c4:98:1f:72:d1:04:99:05:c2:7c:9e:b8:af:bf:98: 67:b9:eb:41:e4:91:81:10:7b:d6:4a:83:95:ad:f8: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3F:12:F6:EC:A3:B2:75:EB:10:D2:23:DD:31:A4:24:40:55:FB:30 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2b:d7:fc:05:38:a7:6a:11:ce:a2:81:ee:ab:5e:a7:38:4f: 98:8b:7c:8f:8b:77:47:6f:76:dc:b3:a0:68:e6:39:e9:04:07: 19:5c:57:55:68:2d:39:6f:d3:20:92:d8:4f:2b:8a:1d:9d:c2: 7a:d5:f1:3d:7a:29:b3:1e:3b:2c:bb:c5:e2:1e:05:ef:81:da: f3:72:3f:2f:5e:5d:e2:99:54:25:c0:3d:81:7b:0c:9e:db:e0: 36:2c:74:ef:e2:67:00:e6:3a:3b:82:a2:21:78:5e:e8:73:6d: ea:46:b5:f8:70:0c:5b:91:14:1e:45:82:23:1d:9d:71:92:15: d8:d6:3c:80:3f:d0:82:eb:f2:4c:1d:04:5b:7c:34:7c:24:58: 3b:8c:29:71:f7:cc:9c:70:4f:d6:8f:66:93:eb:98:2f:77:bc: aa:da:ad:a6:67:f4:ba:c1:e9:82:29:16:7a:d8:e7:2e:38:6e: a7:5a:51:5c:5f:d3:93:57:0a:05:61:03:38:73:ea:67:a7:dc: 56:6a:f4:40:22:eb:d1:90:a6:9f:5b:43:0f:53:42:6e:f4:c3: 23:a8:fd:7f:8c:68:e7:73:b6:46:11:ec:a8:3e:90:95:9d:ae: f8:5f:ba:b1:c7:81:1c:f4:4d:44:7b:e4:94:73:22:bb:19:7e: ed:39:cf:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmOaI/mPTGdKk1OOXxzCmVUMTEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNjA0MTYwMTE2MjFaFw0yNjA0MTkwMTM0MjFaMDMxMTAvBgNV BAMTKDA5M0YxMkY2RUNBM0IyNzVFQjEwRDIyM0REMzFBNDI0NDA1NUZCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4xnxmFG5l/fmxp6C/Vb5JO23 K5aPX6JnEOVFKN4zhN6ORRUcWVrtNryQhaLhrezRkMJTTlpbpVXhFAuyxlsQbpbU S0T5Wd8H1Z189hUysSLr/5kIZUE91GifEbZDWl60kiBZp8lMBnoi9KOMBvxub1iA O9N6ueG0m3KraHPk+koLUbZVrhiqHiclz33RGWkjhHOQhE2WRgBQB/D3Mx8cbhv8 eQPOUZCktK01NnC6M5yp+v3lEgfyj5CA7OqvsIRvtisuk8vcOHZ9yyGoLTBgk9zQ 5imeiM8WHDcQJlUOt8SYH3LRBJkFwnyeuK+/mGe560HkkYEQe9ZKg5Wt+L9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCT8S9uyjsnXrENIj3TGkJEBV+zAwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUr1/wFOKdqEc6ige6rXqc4T5iLfI+Ld0dv dtyzoGjmOekEBxlcV1VoLTlv0yCS2E8rih2dwnrV8T16KbMeOyy7xeIeBe+B2vNy Py9eXeKZVCXAPYF7DJ7b4DYsdO/iZwDmOjuCoiF4XuhzbepGtfhwDFuRFB5FgiMd nXGSFdjWPIA/0ILr8kwdBFt8NHwkWDuMKXH3zJxwT9aPZpPrmC93vKraraZn9LrB 6YIpFnrY5y44bqdaUVxf05NXCgVhAzhz6men3FZq9EAi69GQpp9bQw9TQm70wyOo /X+MaOdztkYR7Kg+kJWdrvhfurHHgRz0TUR75JRzIrsZfu05z24= -----END CERTIFICATE-----Generated at Fri Apr 17 17:00:56 2026 by rpki-client