$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: BOnDG5HFtbB/+t9Sc1sNQDzEzh6Y57eEP/z1CcE0D2c= Subject key identifier: E5:42:1D:62:D8:64:D8:8A:5F:6D:F1:BD:77:FD:83:2B:4F:3B:BC:5B Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 68C2542B7859108A5B8994B41E48430503279EB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 04F8 Signing time: Thu 16 Apr 2026 19:41:19 +0000 Manifest this update: Thu 16 Apr 2026 19:36:19 +0000 Manifest next update: Sun 19 Apr 2026 20:11:19 +0000 Files and hashes: 1: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) 2: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: vTCi5F2nslPAhnK1GBdNF/pN5yIGx7ckaMOH3wL6QpM=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: itrcHe3qx7ogs61DE3/P3ZuuNKltdZ7fAYSLqG5ktLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c2:54:2b:78:59:10:8a:5b:89:94:b4:1e:48:43:05:03:27:9e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Apr 16 19:36:19 2026 GMT Not After : Apr 19 20:11:19 2026 GMT Subject: CN=E5421D62D864D88A5F6DF1BD77FD832B4F3BBC5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7e:f9:f0:63:b2:66:26:9c:c1:9a:8b:6a:c9: a0:eb:0d:29:65:58:a8:72:4b:be:a7:37:97:66:75: f7:5b:9b:8d:07:aa:1d:f5:bd:9d:bc:41:f9:d8:78: 75:cf:30:03:bd:41:2c:75:cb:e3:39:69:13:a8:12: 7f:a8:39:4e:d0:7b:84:80:07:9d:d1:ac:7d:25:15: b0:86:5b:62:26:97:ef:fa:ef:da:9b:58:32:73:40: f9:e7:02:7d:17:b5:0d:cb:45:da:92:21:1f:5a:20: af:42:ec:88:41:13:0e:47:cd:5b:42:aa:38:13:7c: 84:96:f5:ff:9a:36:04:47:44:36:d1:23:a9:bb:a6: d7:62:b8:f8:25:00:b2:c4:fe:0b:e1:e0:30:69:40: 23:ea:75:23:63:34:ac:93:79:31:e3:29:3a:01:cb: 41:ad:c3:a9:45:3c:1f:e5:8e:9f:9a:f2:8b:45:dd: f5:d2:f3:ef:b6:0d:57:1e:18:2f:2f:02:fe:0e:6d: d3:15:ba:dd:c2:3e:33:c8:9a:c4:b4:f0:f2:25:98: 71:97:9e:ae:e5:7c:4a:37:b5:62:45:2b:36:45:ef: 6c:c8:a0:bd:6c:3c:63:ff:ed:23:ee:41:52:33:28: 57:e3:2f:37:0c:0d:8a:06:af:e5:db:87:3d:9f:69: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:42:1D:62:D8:64:D8:8A:5F:6D:F1:BD:77:FD:83:2B:4F:3B:BC:5B X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:74:87:ab:33:6a:7e:55:bb:4b:db:27:a4:26:33:5e:7b: 07:b9:3e:a8:03:6f:bf:13:ff:dd:fe:28:16:ba:4b:77:52:55: 6f:fb:c9:3b:02:36:aa:9a:ae:f8:3b:6f:31:56:56:bb:59:37: 6f:ff:76:e5:79:10:f6:fd:04:e9:75:6d:2b:58:77:6d:58:ea: 88:bc:cd:f2:fa:1e:aa:f0:45:06:6b:0b:6e:2f:99:ee:5c:0f: de:19:af:10:a5:f0:00:7b:1a:33:73:7c:53:2b:0e:e2:11:48: b1:9b:1c:01:df:0f:5e:05:3e:fc:31:92:f0:3d:86:65:f1:54: 5b:21:c1:49:f8:3d:b4:ac:27:33:38:1f:44:a2:63:a6:a0:03: 67:88:3a:9e:bf:7a:6c:a9:db:45:29:b2:99:07:6c:26:f1:1d: 3c:4d:14:d0:02:d7:3b:b6:4e:06:c5:92:87:45:6f:cb:c0:2f: 3b:dd:ee:10:3d:53:2b:05:05:67:c3:17:0c:84:c6:70:fa:55: 43:e6:1e:50:e8:96:b6:4a:55:c2:c0:d6:42:1e:05:39:6b:70: 34:0d:07:1e:ed:c6:0d:8a:82:67:97:b6:83:c0:7d:ad:49:6a: 73:07:5a:c7:f6:6d:7e:66:cb:bf:39:0c:32:8c:f6:62:b8:ca: f5:6e:73:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMJUK3hZEIpbiZS0HkhDBQMnnrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNjA0MTYxOTM2MTlaFw0yNjA0MTkyMDExMTlaMDMxMTAvBgNV BAMTKEU1NDIxRDYyRDg2NEQ4OEE1RjZERjFCRDc3RkQ4MzJCNEYzQkJDNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrfvnwY7JmJpzBmotqyaDrDSll WKhyS76nN5dmdfdbm40Hqh31vZ28QfnYeHXPMAO9QSx1y+M5aROoEn+oOU7Qe4SA B53RrH0lFbCGW2Iml+/679qbWDJzQPnnAn0XtQ3LRdqSIR9aIK9C7IhBEw5HzVtC qjgTfISW9f+aNgRHRDbRI6m7ptdiuPglALLE/gvh4DBpQCPqdSNjNKyTeTHjKToB y0Gtw6lFPB/ljp+a8otF3fXS8++2DVceGC8vAv4ObdMVut3CPjPImsS08PIlmHGX nq7lfEo3tWJFKzZF72zIoL1sPGP/7SPuQVIzKFfjLzcMDYoGr+Xbhz2faf0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5UIdYthk2IpfbfG9d/2DK087vFswHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrndIerM2p+VbtL2yekJjNeewe5PqgDb78T /93+KBa6S3dSVW/7yTsCNqqarvg7bzFWVrtZN2//duV5EPb9BOl1bStYd21Y6oi8 zfL6HqrwRQZrC24vme5cD94ZrxCl8AB7GjNzfFMrDuIRSLGbHAHfD14FPvwxkvA9 hmXxVFshwUn4PbSsJzM4H0SiY6agA2eIOp6/emyp20UpspkHbCbxHTxNFNAC1zu2 TgbFkodFb8vALzvd7hA9UysFBWfDFwyExnD6VUPmHlDolrZKVcLA1kIeBTlrcDQN Bx7txg2KgmeXtoPAfa1JanMHWsf2bX5my785DDKM9mK4yvVuc3w= -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:08 2026 by rpki-client