$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: 5DHHISR6kNac7/5QEx4sXJAeXp3BKL5TxsQe7wbuTCc= Subject key identifier: B7:41:51:87:4B:96:23:EF:91:0C:0A:11:BB:3C:A6:66:CE:56:A8:8D Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 2BB748B5EEF880E9C4F3A79DA7F62827B3E6AEE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 0267 Signing time: Sat 18 Apr 2026 21:02:08 +0000 Manifest this update: Sat 18 Apr 2026 20:57:08 +0000 Manifest next update: Wed 22 Apr 2026 00:05:08 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: 7DhnGkM5RJPhaSyoWRgS/7frM69I/c83a9SotF9Ob74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b7:48:b5:ee:f8:80:e9:c4:f3:a7:9d:a7:f6:28:27:b3:e6:ae:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Apr 18 20:57:08 2026 GMT Not After : Apr 22 00:05:08 2026 GMT Subject: CN=B74151874B9623EF910C0A11BB3CA666CE56A88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:7e:27:39:ff:48:cb:07:1c:6d:45:a2:3b: c4:61:b5:4f:2f:80:b5:06:b9:22:5b:1d:4e:1e:4b: 0e:2b:ea:2a:90:88:b0:49:fe:f7:0e:bc:1c:40:8a: d7:60:34:64:58:af:bb:bd:3f:7a:cd:76:66:11:68: 8b:aa:66:2c:f5:29:ee:e7:51:2b:96:96:65:49:21: 09:b1:a5:df:a7:83:00:14:44:ed:24:74:6a:54:98: d6:42:ac:60:35:da:a3:ac:0c:59:f2:a6:54:6e:96: 38:8a:fa:f0:7a:8e:b4:20:8a:4e:d2:e2:e1:8b:17: 20:e6:f0:08:ca:72:77:20:d6:c4:a6:f3:0b:05:57: c4:c0:0d:92:1f:52:fd:d5:86:9e:e9:88:dc:63:9f: e3:86:d5:e1:55:40:b1:36:c4:d5:07:ac:12:9b:04: 62:d2:a6:ff:a0:c1:93:cf:86:5e:e4:7d:a4:3c:dc: 43:69:a8:fe:f5:0f:d5:66:fc:61:0b:ee:c6:56:f1: 8a:b7:d8:54:68:a5:8f:c4:ea:8f:c0:f4:b5:d4:f5: cf:0a:98:21:3b:3d:a3:cd:40:34:ae:1b:5f:28:8a: d4:ce:4f:8e:d9:a6:09:7c:3f:58:60:9d:90:3c:ef: a8:df:47:0b:9d:f3:6b:ab:31:e4:0f:64:9a:11:e4: d4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:41:51:87:4B:96:23:EF:91:0C:0A:11:BB:3C:A6:66:CE:56:A8:8D X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0a:6c:fe:3a:4e:f1:23:8b:22:13:49:75:44:16:3e:53:7b: 67:a4:15:e6:e6:94:17:07:c9:38:d7:29:8d:32:dd:2d:a3:a1: e4:62:27:73:c2:8f:bc:05:da:c1:f2:dd:6c:77:56:a6:2c:7e: 82:f0:7b:da:21:33:c3:a2:4f:fe:28:1e:97:f0:65:fe:5f:00: 24:7c:4e:cf:da:95:35:07:cc:c5:b1:8d:da:63:e2:ba:a1:e1: 20:bc:bc:51:9d:c3:1e:d3:c4:cf:4c:a2:84:ab:c2:66:ec:66: dc:3e:1c:5f:01:a7:6a:a4:ea:72:a8:2d:91:b4:a0:91:7f:e8: ae:63:fd:90:bd:56:4d:06:f1:75:57:6b:bf:3b:cc:7b:fb:dc: a8:5a:fe:5e:4b:13:6a:b7:0a:a2:7c:15:34:27:53:7b:75:a1: c6:26:36:f9:d2:55:10:39:52:49:df:55:d5:6b:14:7f:1d:e8: 67:74:9f:0d:da:b0:94:82:f9:ab:b3:8d:d5:85:86:c6:fc:76: 0e:45:98:10:eb:37:13:d4:34:d0:36:62:77:79:64:f2:72:ea: 70:2f:bf:63:73:a1:b5:b9:83:64:a7:ee:a8:d2:8d:0a:f0:c5: 6f:83:fb:05:25:4e:3f:0b:a8:e1:91:20:5d:4f:62:9d:b1:7c: 60:36:4d:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7dIte74gOnE86edp/YoJ7PmruIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNjA0MTgyMDU3MDhaFw0yNjA0MjIwMDA1MDhaMDMxMTAvBgNV BAMTKEI3NDE1MTg3NEI5NjIzRUY5MTBDMEExMUJCM0NBNjY2Q0U1NkE4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqH34nOf9IywccbUWiO8RhtU8v gLUGuSJbHU4eSw4r6iqQiLBJ/vcOvBxAitdgNGRYr7u9P3rNdmYRaIuqZiz1Ke7n USuWlmVJIQmxpd+ngwAURO0kdGpUmNZCrGA12qOsDFnyplRuljiK+vB6jrQgik7S 4uGLFyDm8AjKcncg1sSm8wsFV8TADZIfUv3Vhp7piNxjn+OG1eFVQLE2xNUHrBKb BGLSpv+gwZPPhl7kfaQ83ENpqP71D9Vm/GEL7sZW8Yq32FRopY/E6o/A9LXU9c8K mCE7PaPNQDSuG18oitTOT47Zpgl8P1hgnZA876jfRwud82urMeQPZJoR5NRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt0FRh0uWI++RDAoRuzymZs5WqI0wHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYKbP46TvEjiyITSXVEFj5Te2ekFebmlBcH yTjXKY0y3S2joeRiJ3PCj7wF2sHy3Wx3VqYsfoLwe9ohM8OiT/4oHpfwZf5fACR8 Ts/alTUHzMWxjdpj4rqh4SC8vFGdwx7TxM9MooSrwmbsZtw+HF8Bp2qk6nKoLZG0 oJF/6K5j/ZC9Vk0G8XVXa787zHv73Kha/l5LE2q3CqJ8FTQnU3t1ocYmNvnSVRA5 UknfVdVrFH8d6Gd0nw3asJSC+auzjdWFhsb8dg5FmBDrNxPUNNA2Ynd5ZPJy6nAv v2NzobW5g2Sn7qjSjQrwxW+D+wUlTj8LqOGRIF1PYp2xfGA2TWU= -----END CERTIFICATE-----Generated at Sun Apr 19 10:32:27 2026 by rpki-client