$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: TCv56qxkHotyGLgQ/ATBXmXYFZeC/p5n8t9T/3iqp/A= Subject key identifier: A3:09:34:9A:37:82:EA:EC:FE:5A:F4:44:30:EF:4B:6F:26:04:A4:91 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 2B1628A6D771EB91D2612E49EE76E4030D60958C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 020E Signing time: Thu 16 Apr 2026 17:21:20 +0000 Manifest this update: Thu 16 Apr 2026 17:16:20 +0000 Manifest next update: Mon 20 Apr 2026 00:06:20 +0000 Files and hashes: 1: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: o6xh9ZmeUkW54lbLFnSG54IoYTtHKw0vyrbfABLw2qM=) 2: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: Uf94eviIXWirYbKJ+30Tbjb7W9SbFVOHhXl8pMAiGWY=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: 8ALFBF9HwCBiqRlbp4pItk5eubZkWUc5/ZoPPFKzTcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:16:28:a6:d7:71:eb:91:d2:61:2e:49:ee:76:e4:03:0d:60:95:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Apr 16 17:16:20 2026 GMT Not After : Apr 20 00:06:20 2026 GMT Subject: CN=A309349A3782EAECFE5AF44430EF4B6F2604A491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:9a:92:fd:e6:7c:b4:0a:c6:f9:cd:96:e8: 1f:15:df:6a:8a:81:7c:f1:6e:72:c1:c1:12:3f:82: 2c:70:1e:41:7b:ae:2c:90:f3:33:02:ca:18:2a:23: e8:43:67:e3:d2:1d:19:cb:92:0b:cd:1a:4a:2a:9d: 0c:b6:39:50:0c:bc:0d:ea:b8:be:0d:f0:4b:f4:5a: 80:30:65:24:34:c2:61:d9:ca:db:e7:af:68:3e:2f: d4:ee:1b:4d:f8:81:a9:8c:cd:6f:13:c6:e4:c2:66: ec:a1:2b:8f:de:a8:02:19:18:9d:76:0c:1f:42:81: 6f:ce:60:cd:7c:cb:09:1c:f0:6c:67:dc:38:e2:39: e4:fe:1b:a5:36:3b:83:f4:22:a0:bf:4a:54:5a:66: 7e:7a:3c:da:0d:cb:d9:d2:63:79:10:7b:d3:d2:f8: d5:74:c3:5e:9c:6f:72:69:3c:d0:85:a7:83:af:e6: 3c:e2:cf:70:51:f8:ab:bf:a0:94:bd:bb:94:16:73: ae:0a:ef:04:53:d4:64:4b:3d:ec:04:ee:27:ee:63: 66:cd:7b:c7:b3:de:d2:12:7a:2e:d3:e0:c8:00:96: af:4c:6b:a7:d1:01:d2:e1:3b:4c:a4:9d:f6:1e:29: 50:59:34:6e:f4:fa:0a:e6:2b:14:ca:7f:db:05:4d: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:09:34:9A:37:82:EA:EC:FE:5A:F4:44:30:EF:4B:6F:26:04:A4:91 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2e:12:99:63:d1:39:b7:93:eb:45:f8:4f:c9:43:53:93:00: cf:ad:a0:60:35:1f:68:12:18:1a:e1:6d:d1:0f:0d:fe:f2:7c: a6:b1:31:e5:b6:09:35:fc:f0:dc:3a:29:04:f8:a2:3a:cc:82: 5b:53:13:60:e9:47:ac:9c:b7:67:63:07:5b:2a:cf:c7:c5:13: ac:c4:66:dd:c5:35:77:b8:5b:49:af:b6:4f:5e:73:c5:ec:a0: b2:9f:64:56:83:1c:fc:d4:37:6b:ea:0f:05:53:26:3c:ec:24: 00:0e:72:2c:ee:3f:ed:8a:b8:e5:19:bf:7d:b9:6c:e5:22:93: a7:a0:5c:8d:46:29:05:2f:28:3e:eb:05:96:dd:45:ba:5b:cb: 89:c8:fc:bc:ac:dc:62:c4:13:fa:8c:59:da:a6:02:02:cf:63: 20:63:60:3a:c4:f0:b3:58:c1:52:f0:53:d3:2d:d4:44:5e:57: b1:d7:73:20:88:9c:6f:4f:c7:95:c8:78:13:1f:09:cd:3a:09: 6f:98:d8:5f:f4:21:48:78:97:23:a5:08:c3:c3:22:a7:d3:c4: 13:83:fa:b7:12:1b:55:67:1b:0e:b1:55:cb:fc:b4:64:92:24: c7:58:e3:70:4b:5f:a7:24:b0:a3:77:ff:2f:67:22:78:6d:95: 7e:47:06:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxYoptdx65HSYS5J7nbkAw1glYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNjA0MTYxNzE2MjBaFw0yNjA0MjAwMDA2MjBaMDMxMTAvBgNV BAMTKEEzMDkzNDlBMzc4MkVBRUNGRTVBRjQ0NDMwRUY0QjZGMjYwNEE0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i5qS/eZ8tArG+c2W6B8V32qK gXzxbnLBwRI/gixwHkF7riyQ8zMCyhgqI+hDZ+PSHRnLkgvNGkoqnQy2OVAMvA3q uL4N8Ev0WoAwZSQ0wmHZytvnr2g+L9TuG034gamMzW8TxuTCZuyhK4/eqAIZGJ12 DB9CgW/OYM18ywkc8Gxn3DjiOeT+G6U2O4P0IqC/SlRaZn56PNoNy9nSY3kQe9PS +NV0w16cb3JpPNCFp4Ov5jziz3BR+Ku/oJS9u5QWc64K7wRT1GRLPewE7ifuY2bN e8ez3tISei7T4MgAlq9Ma6fRAdLhO0yknfYeKVBZNG70+grmKxTKf9sFTSUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUowk0mjeC6uz+WvREMO9LbyYEpJEwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4uEplj0Tm3k+tF+E/JQ1OTAM+toGA1H2gS GBrhbdEPDf7yfKaxMeW2CTX88Nw6KQT4ojrMgltTE2DpR6yct2djB1sqz8fFE6zE Zt3FNXe4W0mvtk9ec8XsoLKfZFaDHPzUN2vqDwVTJjzsJAAOcizuP+2KuOUZv325 bOUik6egXI1GKQUvKD7rBZbdRbpby4nI/Lys3GLEE/qMWdqmAgLPYyBjYDrE8LNY wVLwU9Mt1EReV7HXcyCInG9Px5XIeBMfCc06CW+Y2F/0IUh4lyOlCMPDIqfTxBOD +rcSG1VnGw6xVcv8tGSSJMdY43BLX6cksKN3/y9nInhtlX5HBm0= -----END CERTIFICATE-----Generated at Sat Apr 18 02:32:46 2026 by rpki-client