$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: xjrhzs6V3/25iAvjzLUVpkdNurc5dPgNuFCWSgAGTXA= Subject key identifier: 75:D9:66:5F:69:65:C6:18:A0:D2:4A:B0:64:11:30:AC:DF:C6:8D:C3 Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 416F038D9500865B457F63BDCE9DDCFE4B718A56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 018E Signing time: Fri 17 Apr 2026 14:40:57 +0000 Manifest this update: Fri 17 Apr 2026 14:35:57 +0000 Manifest next update: Tue 21 Apr 2026 00:04:57 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: k4/ldM/Je5kGOW4Zgyrtyb/tLTRBhfC6kG9cmkM9Z38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6f:03:8d:95:00:86:5b:45:7f:63:bd:ce:9d:dc:fe:4b:71:8a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Apr 17 14:35:57 2026 GMT Not After : Apr 21 00:04:57 2026 GMT Subject: CN=75D9665F6965C618A0D24AB0641130ACDFC68DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:06:cc:d8:21:5b:23:99:21:e1:54:9e:ff: 0b:6a:01:78:bd:fb:c0:6a:53:d2:84:71:8e:72:ba: 59:16:30:04:18:f6:46:01:4d:d8:e0:3c:91:5b:c3: 73:6e:c0:dd:07:d5:82:ac:7d:ba:0c:4a:93:fa:cf: 5c:ea:79:77:15:a1:c2:74:7c:8f:8b:77:c7:ad:28: 71:5f:1c:f1:47:bf:1b:03:9e:c4:9a:3b:75:b7:14: 93:cc:1b:4d:36:62:16:81:76:af:ae:ba:7e:ff:17: 85:e7:4d:90:64:7a:2e:a0:8f:30:b0:fa:6a:87:58: 33:94:65:7c:71:26:24:d1:5b:6f:66:47:84:2e:da: cf:c4:72:fc:8e:0c:9a:ba:21:cd:e2:83:18:06:fe: 36:10:55:d2:ce:5a:3f:49:34:ee:cf:c2:e1:4b:b3: 53:17:1a:bd:f7:59:15:7e:a7:85:35:c2:21:6f:e2: 62:69:e4:71:bf:3c:5f:e1:33:ab:f6:d3:da:ad:20: 03:8e:5e:87:2d:e9:f3:40:e3:02:27:8a:aa:22:08: e5:37:f0:5a:5c:37:27:a0:6b:7d:e3:cb:48:57:c9: 17:37:0a:0f:2a:7c:ce:c4:03:c8:4b:41:bb:ab:0c: 64:19:9f:07:33:86:84:63:40:48:c7:2b:cf:3c:ad: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D9:66:5F:69:65:C6:18:A0:D2:4A:B0:64:11:30:AC:DF:C6:8D:C3 X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1d:04:29:2b:dc:eb:fb:6e:8f:77:2f:45:64:e0:cc:e4:dc: 71:d3:92:50:b7:32:6d:e9:d4:ed:db:d0:53:54:ac:d9:eb:6d: 57:f5:d8:98:e7:95:9e:08:a5:3f:98:d9:c4:90:be:75:03:7d: 81:11:fe:9b:ed:94:26:7d:09:be:12:43:15:64:2d:5d:13:39: af:ff:85:a9:36:f9:15:8f:49:cc:64:d7:38:3d:8b:f2:82:92: 1e:2f:99:e7:71:3b:2a:71:88:9c:5c:76:e4:b7:4e:d9:12:05: 2f:fb:01:ec:04:af:ba:b1:4f:9d:22:0f:ab:15:40:ae:75:39: 0b:c1:3d:17:87:55:7a:da:b1:99:5b:39:0a:b5:75:c1:1b:a0: d1:ac:09:8c:0c:e8:03:8f:31:d8:2d:cb:6b:5c:f9:68:10:6a: 15:20:f2:90:3e:fd:65:b5:49:42:64:b8:e1:75:48:09:f6:1c: 8e:9c:a9:ea:07:c1:e9:2f:b9:d2:19:80:75:6e:0f:46:23:59: 48:43:b7:e1:f6:f4:60:6d:5b:bc:8e:cd:8d:e8:3a:72:7f:a6: e9:40:94:d2:86:ec:3d:25:c2:7e:2f:ee:6d:62:d1:2e:bd:65: 78:da:e9:93:76:aa:1c:cd:d7:83:02:c1:69:6f:a4:f6:71:df: 1f:f0:73:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQW8DjZUAhltFf2O9zp3c/ktxilYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNjA0MTcxNDM1NTdaFw0yNjA0MjEwMDA0NTdaMDMxMTAvBgNV BAMTKDc1RDk2NjVGNjk2NUM2MThBMEQyNEFCMDY0MTEzMEFDREZDNjhEQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12wbM2CFbI5kh4VSe/wtqAXi9 +8BqU9KEcY5yulkWMAQY9kYBTdjgPJFbw3NuwN0H1YKsfboMSpP6z1zqeXcVocJ0 fI+Ld8etKHFfHPFHvxsDnsSaO3W3FJPMG002YhaBdq+uun7/F4XnTZBkei6gjzCw +mqHWDOUZXxxJiTRW29mR4Qu2s/EcvyODJq6Ic3igxgG/jYQVdLOWj9JNO7PwuFL s1MXGr33WRV+p4U1wiFv4mJp5HG/PF/hM6v209qtIAOOXoct6fNA4wIniqoiCOU3 8FpcNyega33jy0hXyRc3Cg8qfM7EA8hLQburDGQZnwczhoRjQEjHK888rZgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUddlmX2llxhig0kqwZBEwrN/GjcMwHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4dBCkr3Ov7bo93L0Vk4Mzk3HHTklC3Mm3p 1O3b0FNUrNnrbVf12JjnlZ4IpT+Y2cSQvnUDfYER/pvtlCZ9Cb4SQxVkLV0TOa// hak2+RWPScxk1zg9i/KCkh4vmedxOypxiJxcduS3TtkSBS/7AewEr7qxT50iD6sV QK51OQvBPReHVXrasZlbOQq1dcEboNGsCYwM6AOPMdgty2tc+WgQahUg8pA+/WW1 SUJkuOF1SAn2HI6cqeoHwekvudIZgHVuD0YjWUhDt+H29GBtW7yOzY3oOnJ/pulA lNKG7D0lwn4v7m1i0S69ZXja6ZN2qhzN14MCwWlvpPZx3x/wcww= -----END CERTIFICATE-----Generated at Sun Apr 19 11:52:51 2026 by rpki-client