$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: NzcgiZEzfLCZ+7zG7n2rsaCXpmCU9+YbwCTCGHbqIg8= Subject key identifier: E5:37:3C:23:C2:9F:86:E9:09:7E:08:87:3B:6B:03:2E:F6:6A:46:02 Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 11EBAAA4BE7A0DF425E9F014A50BFB1DAC92FBD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: EF Signing time: Fri 17 Apr 2026 16:02:07 +0000 Manifest this update: Fri 17 Apr 2026 15:57:07 +0000 Manifest next update: Tue 21 Apr 2026 01:05:07 +0000 Files and hashes: 1: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: jtLym6cWlzEvD+Pbi+gH1m/QRIEpJqAnNsFRD6EBxsc=) 2: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: 0PyZ1Izmcdz8RbI4pvamYzCkDML//PlzpXnY61vINZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:eb:aa:a4:be:7a:0d:f4:25:e9:f0:14:a5:0b:fb:1d:ac:92:fb:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Apr 17 15:57:07 2026 GMT Not After : Apr 21 01:05:07 2026 GMT Subject: CN=E5373C23C29F86E9097E08873B6B032EF66A4602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:ce:37:8c:bd:da:81:ad:e9:e8:5b:a4:08: 08:d3:bf:b1:59:29:ca:18:38:df:9b:92:bc:8e:39: f5:db:72:b9:18:62:aa:e2:ab:ed:a5:96:d9:01:b5: 5c:dd:9f:77:b0:c2:92:e0:a8:66:97:41:5a:67:ba: a8:81:0a:ba:72:ae:7a:85:90:04:c1:a9:9f:c7:78: 81:32:a9:f5:84:07:06:9d:c4:3b:af:f8:6d:02:6a: d7:32:90:1e:75:46:68:f0:05:7a:bf:be:10:8e:e6: 7c:87:ca:71:7b:53:72:46:1d:cf:00:b9:dd:bd:34: 18:67:14:a8:29:1e:07:02:bb:94:9b:d1:a8:8c:d7: 5a:9a:d7:6b:02:16:1a:84:a1:60:ae:75:13:07:36: 4e:9d:f8:dd:39:0e:34:f7:99:00:0f:21:6c:58:14: 0f:3b:1d:3c:a1:71:52:36:af:6e:a7:47:68:6d:69: 5d:2b:2e:4f:2a:6e:9c:02:40:ea:45:5a:cb:42:f0: 7a:a3:e3:24:6a:f6:97:23:27:5b:99:26:0b:c2:17: 03:b3:39:9d:47:d4:d4:c3:d5:43:4d:a3:25:8c:d2: c3:31:ad:96:fd:64:12:42:09:33:a7:40:1a:b8:ad: 85:79:93:49:56:05:bf:ca:f4:d0:db:d6:74:c1:e9: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:37:3C:23:C2:9F:86:E9:09:7E:08:87:3B:6B:03:2E:F6:6A:46:02 X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:da:09:42:92:52:7f:d9:cc:13:14:b6:9c:ac:04:4b:60:92: 8b:c9:a3:28:82:8e:fc:84:22:03:d2:09:ea:67:3f:3b:d5:5d: 8a:be:f3:c0:92:07:49:1b:3c:92:b9:d6:a8:3c:d7:83:5c:79: 9c:f0:9a:8b:95:cd:53:c8:96:15:4d:b1:87:bc:43:1c:21:f0: 78:49:79:31:f8:d9:6d:1a:aa:32:1e:b8:49:7e:e9:2b:ee:c5: 95:b1:47:2a:ac:3e:56:e5:d8:4a:ee:d6:68:af:93:90:93:7d: 11:94:6d:b1:29:91:9d:c1:b8:79:1b:95:80:85:04:89:8e:0c: 7a:3f:b1:5b:7a:22:63:b3:9a:bc:b8:ad:a6:46:9d:21:0b:42: ef:0c:33:6d:fb:8c:52:94:78:93:1a:50:44:c5:55:9b:13:e4: ce:86:84:af:d2:58:94:a1:ef:49:fe:12:91:c0:91:40:8a:27: 30:04:99:69:d2:23:aa:ef:94:15:93:a5:dc:76:a3:20:b7:d3: d8:53:c3:c2:2a:bf:b4:b8:9b:7d:aa:0c:32:cd:bb:ab:c0:aa: fc:89:f1:56:e1:24:db:3e:d0:e0:09:e9:45:14:db:5b:93:c0: 58:a3:2d:46:1a:91:7b:2b:41:b4:62:ae:62:13:92:28:e6:45: f4:fa:8a:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeuqpL56DfQl6fAUpQv7HayS+9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNjA0MTcxNTU3MDdaFw0yNjA0MjEwMTA1MDdaMDMxMTAvBgNV BAMTKEU1MzczQzIzQzI5Rjg2RTkwOTdFMDg4NzNCNkIwMzJFRjY2QTQ2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4M43jL3aga3p6FukCAjTv7FZ KcoYON+bkryOOfXbcrkYYqriq+2lltkBtVzdn3ewwpLgqGaXQVpnuqiBCrpyrnqF kATBqZ/HeIEyqfWEBwadxDuv+G0CatcykB51RmjwBXq/vhCO5nyHynF7U3JGHc8A ud29NBhnFKgpHgcCu5Sb0aiM11qa12sCFhqEoWCudRMHNk6d+N05DjT3mQAPIWxY FA87HTyhcVI2r26nR2htaV0rLk8qbpwCQOpFWstC8Hqj4yRq9pcjJ1uZJgvCFwOz OZ1H1NTD1UNNoyWM0sMxrZb9ZBJCCTOnQBq4rYV5k0lWBb/K9NDb1nTB6Q0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Tc8I8KfhukJfgiHO2sDLvZqRgIwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzaCUKSUn/ZzBMUtpysBEtgkovJoyiCjvyE IgPSCepnPzvVXYq+88CSB0kbPJK51qg814NceZzwmouVzVPIlhVNsYe8Qxwh8HhJ eTH42W0aqjIeuEl+6SvuxZWxRyqsPlbl2Eru1mivk5CTfRGUbbEpkZ3BuHkblYCF BImODHo/sVt6ImOzmry4raZGnSELQu8MM237jFKUeJMaUETFVZsT5M6GhK/SWJSh 70n+EpHAkUCKJzAEmWnSI6rvlBWTpdx2oyC309hTw8Iqv7S4m32qDDLNu6vAqvyJ 8VbhJNs+0OAJ6UUU21uTwFijLUYakXsrQbRirmITkijmRfT6iq0= -----END CERTIFICATE-----Generated at Sun Apr 19 14:21:55 2026 by rpki-client