$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: Tq8ZiRUWD0TNMp7UEoYcN2hl71RrDgWbqFCzfIJfszI= Subject key identifier: 8D:D3:2B:8C:2D:6F:60:B4:B7:BB:5C:91:92:00:B9:B4:E8:66:D0:FD Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 38C23F77EE8EE9454338DE1FBBA6268D3DD531F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 026C Signing time: Fri 17 Apr 2026 00:01:02 +0000 Manifest this update: Thu 16 Apr 2026 23:56:02 +0000 Manifest next update: Mon 20 Apr 2026 11:12:02 +0000 Files and hashes: 1: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: DoIAakGDPVMW1/sLVy14+Xd/2q60pT+vklU8ieYEHDE=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: X3HIEEwQlR4yfqmx+zkvxJkm3aSOmIor+tLiUzbXopk=) 3: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) 4: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: 0aiQ+HFFp3E4Ul7yjl9vQqZoXMc39/Rc/wytdZ1Fqvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c2:3f:77:ee:8e:e9:45:43:38:de:1f:bb:a6:26:8d:3d:d5:31:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Apr 16 23:56:02 2026 GMT Not After : Apr 20 11:12:02 2026 GMT Subject: CN=8DD32B8C2D6F60B4B7BB5C919200B9B4E866D0FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a2:5f:0b:64:7b:fb:40:50:98:ba:05:5a:9a: e4:f9:cf:16:90:b8:29:9e:45:61:e4:98:0d:a8:bb: d9:db:d8:ec:e0:2f:67:0a:64:6c:b6:5e:ae:8b:1e: ef:5d:55:7d:b4:f7:aa:e9:7e:a6:59:8f:6e:75:5f: c8:5a:27:8a:bc:c5:f7:bd:8d:c6:19:46:8f:e3:4b: b6:17:e4:29:03:e4:a8:61:ff:45:29:9f:68:7f:d5: 6c:69:8a:bb:e8:0b:37:a3:46:a4:61:e1:07:7f:b8: de:47:86:5d:45:eb:7a:d0:72:81:bd:74:6f:59:ac: ad:2f:96:6a:af:17:5e:1e:39:dc:91:c7:e5:49:62: 7a:7a:e2:27:4f:4f:6c:ee:c7:1a:20:81:1e:a3:ae: 4f:28:f9:77:49:75:34:bb:7e:1a:bf:2f:66:d3:00: 16:a0:9f:b3:16:51:ec:fd:2c:dd:cd:f7:6a:90:f0: b6:9d:4c:76:06:0e:a0:28:50:43:16:c2:2d:0d:4b: 26:9b:50:c8:2f:f8:92:95:26:cf:0b:dc:33:99:c4: 24:f8:04:1a:10:ce:a4:19:69:46:17:7d:58:33:ed: 60:b1:d0:22:d3:7a:44:a8:f2:aa:ef:91:0b:e1:7f: b5:14:c6:54:4e:f2:b7:4f:8e:1b:7a:26:66:9e:e7: 88:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D3:2B:8C:2D:6F:60:B4:B7:BB:5C:91:92:00:B9:B4:E8:66:D0:FD X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:69:c1:10:50:94:0f:69:1c:e8:40:a4:52:60:22:60:a5:65: b8:2e:7b:46:a9:05:35:eb:b2:e4:a5:64:10:7c:3b:98:a7:ae: 9b:cc:3a:ea:e5:88:0f:09:b3:28:e0:fa:fb:b0:f6:86:a1:3c: 53:43:af:28:2a:a8:57:15:05:32:27:30:c0:64:3c:f6:a0:d2: 31:d8:3f:2d:d0:66:7a:fe:3d:37:5e:aa:0c:e1:8d:01:9a:28: 15:2d:8f:2d:5a:11:88:98:5a:63:44:04:99:d8:7e:05:0f:17: 31:3a:21:33:d8:c5:2e:0f:84:e3:e7:0a:88:a5:bb:b8:ee:6d: 98:7d:df:cf:5f:08:a4:16:36:90:78:86:3c:2b:76:d1:40:45: 73:63:b6:74:1c:e7:3d:b0:94:72:82:84:8b:3c:c9:2f:bd:d9: 47:f0:25:be:06:d4:0b:20:8d:f3:f3:fd:66:4b:f1:f7:2b:b5: df:42:92:5b:74:08:67:38:5c:46:f0:2f:ff:3c:a1:f4:fe:fb: 86:31:6d:21:a1:d0:d6:ba:08:9d:bf:d2:cd:ee:31:d1:7e:2e: 45:8b:30:24:b8:69:57:35:d3:1b:20:c6:68:a6:b9:bf:8d:18: 24:df:95:19:20:87:eb:f4:a3:b7:75:86:06:c8:84:3c:ae:f1: 81:b3:73:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMI/d+6O6UVDON4fu6YmjT3VMfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNjA0MTYyMzU2MDJaFw0yNjA0MjAxMTEyMDJaMDMxMTAvBgNV BAMTKDhERDMyQjhDMkQ2RjYwQjRCN0JCNUM5MTkyMDBCOUI0RTg2NkQwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrol8LZHv7QFCYugVamuT5zxaQ uCmeRWHkmA2ou9nb2OzgL2cKZGy2Xq6LHu9dVX2096rpfqZZj251X8haJ4q8xfe9 jcYZRo/jS7YX5CkD5Khh/0Upn2h/1WxpirvoCzejRqRh4Qd/uN5Hhl1F63rQcoG9 dG9ZrK0vlmqvF14eOdyRx+VJYnp64idPT2zuxxoggR6jrk8o+XdJdTS7fhq/L2bT ABagn7MWUez9LN3N92qQ8LadTHYGDqAoUEMWwi0NSyabUMgv+JKVJs8L3DOZxCT4 BBoQzqQZaUYXfVgz7WCx0CLTekSo8qrvkQvhf7UUxlRO8rdPjht6Jmae54jVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdMrjC1vYLS3u1yRkgC5tOhm0P0wHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdpwRBQlA9pHOhApFJgImClZbgue0apBTXr suSlZBB8O5inrpvMOurliA8Jsyjg+vuw9oahPFNDrygqqFcVBTInMMBkPPag0jHY Py3QZnr+PTdeqgzhjQGaKBUtjy1aEYiYWmNEBJnYfgUPFzE6ITPYxS4PhOPnCoil u7jubZh9389fCKQWNpB4hjwrdtFARXNjtnQc5z2wlHKChIs8yS+92UfwJb4G1Asg jfPz/WZL8fcrtd9Cklt0CGc4XEbwL/88ofT++4YxbSGh0Na6CJ2/0s3uMdF+LkWL MCS4aVc10xsgxmimub+NGCTflRkgh+v0o7d1hgbIhDyu8YGzc1I= -----END CERTIFICATE-----Generated at Fri Apr 17 21:15:33 2026 by rpki-client