$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: ltpN1iX3QZGT52jG8Qgur+hTCgdU+YazRnbvaVQU6KI= Subject key identifier: 5C:B7:4A:C5:23:77:7B:E0:55:01:C9:18:CA:4C:70:EE:78:10:B9:CE Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 74FDD467C281A0D8B541D5D39F7A854510F7BF3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 028C Signing time: Fri 17 Apr 2026 06:42:15 +0000 Manifest this update: Fri 17 Apr 2026 06:37:15 +0000 Manifest next update: Mon 20 Apr 2026 18:12:15 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: TlT7mEBXZN9gZkArLfpWvUyCTJZ7tPB7IXGcEWOXiBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fd:d4:67:c2:81:a0:d8:b5:41:d5:d3:9f:7a:85:45:10:f7:bf:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Apr 17 06:37:15 2026 GMT Not After : Apr 20 18:12:15 2026 GMT Subject: CN=5CB74AC523777BE05501C918CA4C70EE7810B9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:cd:60:17:45:c1:54:d1:7f:5c:1c:58:a0: 08:1f:09:04:06:22:37:e8:9c:80:e8:b6:92:1b:8d: 3f:8c:ba:07:03:ad:8f:aa:21:b4:e7:f7:0a:e1:6a: 80:28:45:1e:cd:52:c9:81:53:c4:48:cd:f8:d9:df: 99:f9:dd:c7:d3:50:85:67:68:cd:33:ac:dc:14:a9: 68:1a:5b:04:ac:93:3d:f4:9c:08:c3:33:ec:b1:00: 9d:f8:ea:fa:91:0d:26:43:07:40:4d:af:fa:ab:93: f7:63:21:eb:41:bd:bf:f9:3d:d3:e7:08:c1:0c:9b: 45:43:5b:4b:d5:10:a3:fb:df:39:b4:8d:52:ca:81: 5a:ee:bd:db:0a:a9:e5:01:a0:7a:89:e1:1d:1c:84: b1:30:54:cf:74:79:57:da:07:56:1d:50:eb:38:d7: ac:98:a7:e4:5f:4f:10:56:b2:e3:91:38:2e:ab:69: d0:cf:1f:4b:24:c1:25:75:84:2b:2d:00:3c:6b:de: 03:6a:47:fb:df:f7:2e:0e:52:9a:31:50:7e:c3:87: 66:14:10:ed:cc:fa:b9:de:b5:68:c7:1b:eb:ea:42: ea:89:7c:94:bb:37:d8:90:95:dd:e1:1b:01:e0:a8: 8e:0a:73:ec:e9:d5:a6:4a:c1:d5:bb:0e:34:a9:7c: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:4A:C5:23:77:7B:E0:55:01:C9:18:CA:4C:70:EE:78:10:B9:CE X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c3:83:67:86:96:2a:2e:c4:a2:b2:41:cb:78:71:30:40:52: dc:70:9f:6c:06:5c:28:aa:03:77:55:cc:1d:fe:16:6a:bd:0b: bb:a0:e5:ac:df:51:60:f3:27:25:0c:1e:b9:df:61:ed:ea:13: 00:4e:bf:a8:81:ae:62:e6:cd:f9:21:db:3d:f2:a3:c8:d2:51: bd:c6:1c:da:fd:f6:bc:ba:b5:25:b0:d1:98:18:a0:35:f8:ee: 18:3f:4d:7b:a0:31:08:b9:38:5c:c3:97:dc:3d:cd:c1:7f:ab: 15:64:4f:3c:b7:1d:85:c6:81:c4:49:1b:cf:58:08:3b:f8:82: 99:89:1b:9a:a4:9a:36:fe:cd:ef:48:e0:99:31:74:d1:dc:9c: 25:6a:8b:7f:9e:29:3a:7b:f8:c9:3e:8e:40:a4:ac:0c:2f:0a: c3:9b:c8:e2:d8:17:9a:1c:b0:c8:3c:d4:99:d9:2d:34:eb:f1: f2:26:e5:05:44:c7:d7:eb:34:91:97:dc:cf:bc:03:e1:b6:e9: 19:3d:68:75:39:7f:b9:88:d5:a5:6c:55:d4:a1:19:fd:ad:e8: 63:67:8f:ba:f8:8e:bd:a3:c9:3f:59:9a:b3:ed:33:3d:ac:af: d1:1d:13:7a:09:4a:5d:d5:bb:a4:d8:bf:69:83:29:ce:6f:db: 92:17:1c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdP3UZ8KBoNi1QdXTn3qFRRD3vz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNjA0MTcwNjM3MTVaFw0yNjA0MjAxODEyMTVaMDMxMTAvBgNV BAMTKDVDQjc0QUM1MjM3NzdCRTA1NTAxQzkxOENBNEM3MEVFNzgxMEI5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfQ81gF0XBVNF/XBxYoAgfCQQG IjfonIDotpIbjT+MugcDrY+qIbTn9wrhaoAoRR7NUsmBU8RIzfjZ35n53cfTUIVn aM0zrNwUqWgaWwSskz30nAjDM+yxAJ346vqRDSZDB0BNr/qrk/djIetBvb/5PdPn CMEMm0VDW0vVEKP73zm0jVLKgVruvdsKqeUBoHqJ4R0chLEwVM90eVfaB1YdUOs4 16yYp+RfTxBWsuOROC6radDPH0skwSV1hCstADxr3gNqR/vf9y4OUpoxUH7Dh2YU EO3M+rnetWjHG+vqQuqJfJS7N9iQld3hGwHgqI4Kc+zp1aZKwdW7DjSpfFIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXLdKxSN3e+BVAckYykxw7ngQuc4wHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXDg2eGliouxKKyQct4cTBAUtxwn2wGXCiq A3dVzB3+Fmq9C7ug5azfUWDzJyUMHrnfYe3qEwBOv6iBrmLmzfkh2z3yo8jSUb3G HNr99ry6tSWw0ZgYoDX47hg/TXugMQi5OFzDl9w9zcF/qxVkTzy3HYXGgcRJG89Y CDv4gpmJG5qkmjb+ze9I4JkxdNHcnCVqi3+eKTp7+Mk+jkCkrAwvCsObyOLYF5oc sMg81JnZLTTr8fIm5QVEx9frNJGX3M+8A+G26Rk9aHU5f7mI1aVsVdShGf2t6GNn j7r4jr2jyT9ZmrPtMz2sr9EdE3oJSl3Vu6TYv2mDKc5v25IXHDo= -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:41 2026 by rpki-client