$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: ttKQcGl85nG9IA3P9XJLsWPzlNXMUOHSw7uOq8zv4ZM= Subject key identifier: 74:F0:DD:B1:DB:E2:59:23:02:0D:E8:8B:50:8D:C3:8C:F4:2E:27:78 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 71FB7C77C68371682F5D1E104635760B1039B6CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 03CC Signing time: Fri 17 Apr 2026 04:21:39 +0000 Manifest this update: Fri 17 Apr 2026 04:16:39 +0000 Manifest next update: Mon 20 Apr 2026 08:33:39 +0000 Files and hashes: 1: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 3: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: KJKj8iArjmrsd12wDfhZSEzZbBDlaSbuDdR31W4HfVQ=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fb:7c:77:c6:83:71:68:2f:5d:1e:10:46:35:76:0b:10:39:b6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Apr 17 04:16:39 2026 GMT Not After : Apr 20 08:33:39 2026 GMT Subject: CN=74F0DDB1DBE25923020DE88B508DC38CF42E2778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:a6:60:60:2b:ad:f7:bc:a0:fd:c6:13:e7: 47:0f:91:f4:9e:25:f5:3c:2d:de:c8:d8:64:19:f1: 83:e5:dc:76:d3:5f:9b:82:89:49:d8:6a:f6:1c:01: 45:40:ea:a4:3f:07:2d:3d:77:a0:f7:c7:31:d1:3a: a2:db:b8:e0:5e:2b:7d:03:38:d3:ec:ef:d6:86:d3: 65:ca:f9:ee:7c:f0:a0:d8:98:94:12:cd:9d:46:26: 47:16:22:92:70:3f:16:6a:04:9b:42:93:20:eb:58: fe:2c:d5:5c:15:3d:5a:0d:38:3f:43:1a:c5:83:7e: 08:64:cb:3f:8c:58:e1:d0:dd:fa:9a:0b:03:10:99: a7:20:41:2b:aa:c1:97:84:b0:81:07:f3:f1:92:aa: e8:52:6d:32:e4:7f:87:60:33:34:87:4b:e1:5e:34: 8a:e5:2f:bd:31:18:92:6a:19:d5:7b:e2:98:24:fb: 60:09:ec:d7:88:54:58:0d:47:fa:7c:6c:a3:06:19: 44:53:4a:a3:3d:f6:99:24:61:09:5c:76:a3:d7:3f: 87:ca:9c:14:79:33:57:ae:8b:dc:5d:b5:8f:48:72: 73:61:d4:99:c5:f0:77:6f:38:8d:62:f0:8f:47:03: 1c:ac:c4:d6:3f:14:a4:7b:c5:61:59:b4:69:33:5c: 54:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F0:DD:B1:DB:E2:59:23:02:0D:E8:8B:50:8D:C3:8C:F4:2E:27:78 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:28:45:d4:15:9d:d0:ce:56:fd:4c:b0:27:3b:3a:3c:06:6b: d5:5b:c5:0f:92:5e:ac:fc:d0:0e:f3:27:e4:b5:66:c1:4b:19: 9d:bc:8e:48:a3:be:48:d6:2d:3f:2e:8e:af:f4:0c:da:93:ce: 79:6b:3b:5b:92:3b:7f:57:73:9f:cb:c6:f8:15:e2:b9:0b:9e: 2a:2c:3c:11:b6:d2:01:f5:17:c6:d6:89:1a:3d:b8:b6:be:93: 24:4e:2d:24:77:aa:3d:d6:bb:0c:70:66:61:1a:39:b0:a5:e0: f7:ec:8a:ab:d3:35:d2:64:d7:b6:a0:b5:6f:41:44:f8:40:24: 38:18:a4:0b:bb:f1:b3:6e:2a:97:2c:69:03:3d:63:49:a0:1a: cb:c9:79:71:6b:a8:62:e2:c9:eb:05:01:d6:ea:2e:d5:da:ce: 47:00:2f:46:97:0b:10:5f:e9:02:59:26:d1:b0:0f:50:e7:44: 00:bf:c8:6d:49:05:39:8b:78:05:62:23:a2:4e:88:39:75:dd: cf:bf:6b:8e:df:c6:f9:f5:cf:26:57:5d:f2:56:23:93:49:6a: 38:b0:31:ba:72:5d:32:66:d8:6a:c5:80:45:c1:f8:ce:91:56: c0:3c:ee:32:df:1d:4f:d7:a9:ea:5b:87:9c:ee:a7:5d:5f:03: 22:db:63:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcft8d8aDcWgvXR4QRjV2CxA5ts4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNjA0MTcwNDE2MzlaFw0yNjA0MjAwODMzMzlaMDMxMTAvBgNV BAMTKDc0RjBEREIxREJFMjU5MjMwMjBERTg4QjUwOERDMzhDRjQyRTI3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYaZgYCut97yg/cYT50cPkfSe JfU8Ld7I2GQZ8YPl3HbTX5uCiUnYavYcAUVA6qQ/By09d6D3xzHROqLbuOBeK30D ONPs79aG02XK+e588KDYmJQSzZ1GJkcWIpJwPxZqBJtCkyDrWP4s1VwVPVoNOD9D GsWDfghkyz+MWOHQ3fqaCwMQmacgQSuqwZeEsIEH8/GSquhSbTLkf4dgMzSHS+Fe NIrlL70xGJJqGdV74pgk+2AJ7NeIVFgNR/p8bKMGGURTSqM99pkkYQlcdqPXP4fK nBR5M1eui9xdtY9IcnNh1JnF8HdvOI1i8I9HAxysxNY/FKR7xWFZtGkzXFT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdPDdsdviWSMCDeiLUI3DjPQuJ3gwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAoRdQVndDOVv1MsCc7OjwGa9VbxQ+SXqz8 0A7zJ+S1ZsFLGZ28jkijvkjWLT8ujq/0DNqTznlrO1uSO39Xc5/LxvgV4rkLnios PBG20gH1F8bWiRo9uLa+kyROLSR3qj3WuwxwZmEaObCl4PfsiqvTNdJk17agtW9B RPhAJDgYpAu78bNuKpcsaQM9Y0mgGsvJeXFrqGLiyesFAdbqLtXazkcAL0aXCxBf 6QJZJtGwD1DnRAC/yG1JBTmLeAViI6JOiDl13c+/a47fxvn1zyZXXfJWI5NJajiw MbpyXTJm2GrFgEXB+M6RVsA87jLfHU/Xqepbh5zup11fAyLbY9s= -----END CERTIFICATE-----Generated at Fri Apr 17 21:40:32 2026 by rpki-client