$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: x+bbEFJhoTgpPDiS32zNle+FLX75fEuA7FDxKWhimd0= Subject key identifier: 4D:5A:0C:96:FF:72:CD:68:A3:09:62:8A:9F:61:0C:48:BE:06:DA:BE Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 24B66EC13EE1034FA870ECA9AEB5AF7BF7B39167 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: EB Signing time: Fri 17 Apr 2026 12:32:10 +0000 Manifest this update: Fri 17 Apr 2026 12:27:10 +0000 Manifest next update: Mon 20 Apr 2026 22:19:10 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: TM7oPneoNhvhbvIHuSnuuVvIptIh1uiZVEVIpGYMRw0=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: XfY4we6jzKf244te76Sh5o4SXguYwnH8MGIYft8mlas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b6:6e:c1:3e:e1:03:4f:a8:70:ec:a9:ae:b5:af:7b:f7:b3:91:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Apr 17 12:27:10 2026 GMT Not After : Apr 20 22:19:10 2026 GMT Subject: CN=4D5A0C96FF72CD68A309628A9F610C48BE06DABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:3c:0f:d9:2a:78:95:ba:31:29:a9:de:af: fe:60:98:39:c7:eb:c9:9b:d2:fa:91:5f:b1:da:8a: 3b:f4:64:9f:f5:4d:4c:2b:36:26:84:d7:2c:7b:18: 3b:6f:10:86:af:1f:10:73:a9:43:81:e3:82:df:e1: 9b:17:c9:b3:ec:bc:b2:b8:70:83:89:af:75:5e:27: ca:55:db:85:25:22:88:bc:9e:b7:cb:01:04:cd:32: d2:d1:aa:3f:de:5c:2c:b6:90:a4:63:9d:b6:ee:97: df:21:30:cf:83:b6:5d:1f:36:44:63:5b:28:92:c5: 1c:29:50:43:ee:61:94:21:8f:f0:11:d3:e3:5f:85: 22:95:66:19:8e:35:a7:a7:30:81:21:ed:16:81:3f: 2b:3d:90:20:9d:75:e0:b0:15:9d:d5:4f:ee:b3:4b: d8:92:59:a5:f6:42:05:77:38:53:6c:f4:91:38:81: 63:a7:33:5b:64:9b:a2:84:f9:f5:ec:97:4d:c0:b0: 5c:37:bc:fd:2b:df:28:5c:84:ee:37:ac:cc:4d:2e: 87:8f:7f:a2:66:38:12:97:8e:21:55:d1:93:9c:99: 1e:a9:4c:2b:4e:e3:0c:ee:83:0f:c1:26:77:7f:5a: 1d:a0:84:63:ea:49:34:b7:3f:37:36:87:72:0b:d7: 75:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5A:0C:96:FF:72:CD:68:A3:09:62:8A:9F:61:0C:48:BE:06:DA:BE X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fb:7e:9f:ff:a9:74:4f:42:2c:d6:1c:84:af:ef:03:32:b1: ee:88:47:af:33:32:d7:00:18:61:45:47:05:d5:68:ed:35:9f: 4b:66:8b:16:ae:fe:c7:2d:bf:30:5d:e5:8e:85:34:4f:29:db: 90:10:b9:32:a0:c5:b4:e3:6c:dc:e9:a8:8e:01:5a:e8:91:3a: 67:5a:b9:93:29:8e:02:87:09:9d:40:6a:f4:1f:2f:b1:ab:c2: 03:d1:e4:b7:10:84:65:47:e8:4c:3a:e7:1b:d4:39:6b:a8:9c: b9:14:fd:9b:f2:a9:8c:02:58:92:88:89:83:17:8e:9d:66:5a: 79:66:d1:18:46:7f:8d:8f:28:5d:1a:6f:cc:a1:d5:a5:1f:4f: 12:48:75:c3:47:18:84:83:e5:b0:a0:87:eb:b1:04:58:bb:81: e0:18:b9:15:17:ad:2c:14:7e:d8:c6:ca:ed:d0:17:97:3c:c8: d1:92:e2:8e:6a:cc:a3:69:5a:68:b8:30:79:d1:5f:0c:32:d6: 20:0f:aa:d0:78:35:0a:95:eb:78:82:66:72:ca:4e:a3:6d:35: 0e:9b:b7:93:82:11:ac:e3:f3:1b:8c:ab:eb:4e:e7:3a:e6:74: f4:af:c7:a1:be:cc:98:e1:49:e0:f4:c3:32:96:8d:dc:44:60: 05:cf:5d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLZuwT7hA0+ocOyprrWve/ezkWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNjA0MTcxMjI3MTBaFw0yNjA0MjAyMjE5MTBaMDMxMTAvBgNV BAMTKDRENUEwQzk2RkY3MkNENjhBMzA5NjI4QTlGNjEwQzQ4QkUwNkRBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQTwP2Sp4lboxKaner/5gmDnH 68mb0vqRX7Haijv0ZJ/1TUwrNiaE1yx7GDtvEIavHxBzqUOB44Lf4ZsXybPsvLK4 cIOJr3VeJ8pV24UlIoi8nrfLAQTNMtLRqj/eXCy2kKRjnbbul98hMM+Dtl0fNkRj WyiSxRwpUEPuYZQhj/AR0+NfhSKVZhmONaenMIEh7RaBPys9kCCddeCwFZ3VT+6z S9iSWaX2QgV3OFNs9JE4gWOnM1tkm6KE+fXsl03AsFw3vP0r3yhchO43rMxNLoeP f6JmOBKXjiFV0ZOcmR6pTCtO4wzugw/BJnd/Wh2ghGPqSTS3Pzc2h3IL13XdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTVoMlv9yzWijCWKKn2EMSL4G2r4wHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE77fp//qXRPQizWHISv7wMyse6IR68zMtcA GGFFRwXVaO01n0tmixau/sctvzBd5Y6FNE8p25AQuTKgxbTjbNzpqI4BWuiROmda uZMpjgKHCZ1AavQfL7GrwgPR5LcQhGVH6Ew65xvUOWuonLkU/ZvyqYwCWJKIiYMX jp1mWnlm0RhGf42PKF0ab8yh1aUfTxJIdcNHGISD5bCgh+uxBFi7geAYuRUXrSwU ftjGyu3QF5c8yNGS4o5qzKNpWmi4MHnRXwwy1iAPqtB4NQqV63iCZnLKTqNtNQ6b t5OCEazj8xuMq+tO5zrmdPSvx6G+zJjhSeD0wzKWjdxEYAXPXXc= -----END CERTIFICATE-----Generated at Fri Apr 17 20:41:18 2026 by rpki-client