$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: HIWKY7qCnLEdPEM2+rurYW8+K9FvkpRepgjdb4FL7bM= Subject key identifier: 00:36:7C:8C:1B:84:17:D9:E3:B6:FE:A6:3F:F4:A3:05:91:55:1D:C9 Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 01AD38987E4C9CEFBFC721113B7E6824F2B429F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 0410 Signing time: Sun 19 Apr 2026 08:02:18 +0000 Manifest this update: Sun 19 Apr 2026 07:57:18 +0000 Manifest next update: Wed 22 Apr 2026 10:22:18 +0000 Files and hashes: 1: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: 73VvZzU4m43+fgjvOlr3Vv7ZHMtLS9jm+/QTGsOwFck=) 2: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: rwM5pp2A2v+clZClKYlS/oaTqBrJsRIvWgIFkHOjekw=) 3: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: XjGDHZwetIWHjLp7+uPq3/exRvIl0m5tUGNnQVZ+/fU=) 4: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: QZlEVkF+HK3hEYAiWRapnYHmq7/bX0k5ZRTsDh0lSOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ad:38:98:7e:4c:9c:ef:bf:c7:21:11:3b:7e:68:24:f2:b4:29:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Apr 19 07:57:18 2026 GMT Not After : Apr 22 10:22:18 2026 GMT Subject: CN=00367C8C1B8417D9E3B6FEA63FF4A30591551DC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:f8:9a:46:ff:36:24:3e:c7:c3:b0:3c:a1: 18:f4:ba:e8:22:b0:d7:f0:68:f9:cf:72:28:0e:f6: ac:78:a0:9d:c4:fd:fb:97:23:1c:76:90:01:46:0f: f1:46:f3:7c:e9:64:b5:42:11:4c:f5:35:ad:2f:c2: a9:f5:0c:c3:d7:93:e9:4c:2d:e4:72:1f:04:94:b5: d8:96:13:10:a9:32:92:e1:df:28:0e:e9:f9:6e:bc: fe:3c:96:be:6d:e4:6f:3a:d7:81:54:4b:d7:4d:f5: c1:83:ed:98:84:40:8c:25:31:33:d7:55:30:c9:a6: a0:b5:ad:3e:17:12:6d:c4:85:df:5e:e1:3b:9b:74: a4:f1:1f:ef:51:11:f2:db:19:5e:13:4f:12:96:cc: a8:d6:06:f9:9d:10:e3:12:ec:da:d1:87:ec:1c:54: e8:eb:d5:51:ff:d0:da:e1:df:a8:66:7d:41:2e:a3: 8a:8b:9c:56:da:01:ba:48:1c:f5:6d:c6:70:8f:f4: fa:89:ae:31:3a:15:62:97:74:f2:26:82:58:48:f9: 46:fd:8b:ca:de:81:f2:96:0d:ee:17:62:ec:0a:65: 1a:66:80:a5:aa:df:5b:36:4a:ed:c1:41:3d:b0:f2: d7:d9:5b:ca:7d:47:f4:f8:49:97:34:1a:7b:c6:1d: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:36:7C:8C:1B:84:17:D9:E3:B6:FE:A6:3F:F4:A3:05:91:55:1D:C9 X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:53:c7:49:a9:97:82:0d:90:d0:90:6c:32:48:d2:7e:d2:37: 7a:58:aa:82:05:1f:24:65:ca:a4:b1:b7:0b:ee:94:74:f7:4c: da:85:31:14:95:7c:d9:e2:ab:3a:85:70:46:97:0c:d1:5e:41: af:1e:e5:80:b8:0e:64:41:43:72:d6:28:90:83:fb:05:c8:28: 0d:ee:59:d3:da:cd:03:11:9d:84:ad:4d:7d:d0:91:d6:45:c9: b0:84:ad:69:4c:ba:20:1d:cd:ef:6d:9f:f0:22:6b:d5:84:51: 25:f9:2e:0c:cf:65:7c:6f:00:ef:71:37:df:71:aa:c8:38:12: f4:02:4e:34:e6:ad:84:9b:86:c0:d2:e7:b8:6e:54:5a:6c:8f: db:c4:e8:b3:6e:bf:29:51:69:d7:c9:41:f7:f2:94:c6:f8:2b: ce:53:bd:29:71:7f:9d:f3:74:74:fd:71:bf:41:8c:97:f5:81: 46:dc:71:6b:c5:e6:34:4b:a2:8a:19:18:db:f7:04:b5:c1:c4: 67:b4:3c:2f:bf:a2:56:ec:d6:18:d1:e9:c4:32:c1:3a:fd:a2: 62:ad:2d:59:b4:9b:71:46:c6:90:a0:0e:30:93:b6:43:31:64: 8f:14:5d:05:ff:4a:0c:26:cf:a7:d0:89:fe:6c:0a:5e:e6:7c: 2e:a8:0d:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAa04mH5MnO+/xyERO35oJPK0KfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNjA0MTkwNzU3MThaFw0yNjA0MjIxMDIyMThaMDMxMTAvBgNV BAMTKDAwMzY3QzhDMUI4NDE3RDlFM0I2RkVBNjNGRjRBMzA1OTE1NTFEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWffiaRv82JD7Hw7A8oRj0uugi sNfwaPnPcigO9qx4oJ3E/fuXIxx2kAFGD/FG83zpZLVCEUz1Na0vwqn1DMPXk+lM LeRyHwSUtdiWExCpMpLh3ygO6fluvP48lr5t5G8614FUS9dN9cGD7ZiEQIwlMTPX VTDJpqC1rT4XEm3Ehd9e4TubdKTxH+9REfLbGV4TTxKWzKjWBvmdEOMS7NrRh+wc VOjr1VH/0Nrh36hmfUEuo4qLnFbaAbpIHPVtxnCP9PqJrjE6FWKXdPImglhI+Ub9 i8regfKWDe4XYuwKZRpmgKWq31s2Su3BQT2w8tfZW8p9R/T4SZc0GnvGHeYFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADZ8jBuEF9njtv6mP/SjBZFVHckwHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZTx0mpl4INkNCQbDJI0n7SN3pYqoIFHyRl yqSxtwvulHT3TNqFMRSVfNniqzqFcEaXDNFeQa8e5YC4DmRBQ3LWKJCD+wXIKA3u WdPazQMRnYStTX3QkdZFybCErWlMuiAdze9tn/Aia9WEUSX5LgzPZXxvAO9xN99x qsg4EvQCTjTmrYSbhsDS57huVFpsj9vE6LNuvylRadfJQffylMb4K85TvSlxf53z dHT9cb9BjJf1gUbccWvF5jRLoooZGNv3BLXBxGe0PC+/olbs1hjR6cQywTr9omKt LVm0m3FGxpCgDjCTtkMxZI8UXQX/Sgwmz6fQif5sCl7mfC6oDWk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:40:19 2026 by rpki-client