$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: DUBUnAiayZsJWFelKLGg/mdXp8VlCwggR2jpbLXwBeU= Subject key identifier: EB:4B:86:EC:14:26:1C:38:89:A6:54:05:6A:C1:18:90:A7:24:F3:00 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 1E99D3A6405812AE791D5C1F4873E4D2CC3557D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 011D Signing time: Thu 16 Apr 2026 23:01:56 +0000 Manifest this update: Thu 16 Apr 2026 22:56:56 +0000 Manifest next update: Mon 20 Apr 2026 03:52:56 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: 8EDHSFUobA3vqznQkRFKYH4SiuJWtdKr4rxvMJOvkbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:99:d3:a6:40:58:12:ae:79:1d:5c:1f:48:73:e4:d2:cc:35:57:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Apr 16 22:56:56 2026 GMT Not After : Apr 20 03:52:56 2026 GMT Subject: CN=EB4B86EC14261C3889A654056AC11890A724F300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:6e:4a:85:18:d1:47:49:57:b1:bc:23:d7: 63:e0:bd:8e:6a:d0:8d:f7:cf:0c:ea:c6:e1:10:13: f4:96:78:37:03:eb:ab:72:79:be:10:7e:d8:39:d3: 94:09:ad:32:57:dc:8a:ee:e7:b7:bd:35:93:72:b0: d5:e1:14:b3:99:78:c4:02:c0:dc:8e:4e:18:db:d9: de:31:2b:c3:f3:a8:94:ea:83:50:4e:71:53:63:57: c8:6e:ea:72:3b:31:ba:90:25:7a:55:14:5e:03:a4: 26:cc:e7:38:67:82:45:5f:48:89:13:d4:e0:12:a6: ec:ef:b5:be:4f:e7:36:48:03:48:db:a7:c3:32:e0: a9:ef:34:c3:43:8b:3c:87:68:35:8f:c2:65:34:03: 1a:b8:69:72:51:83:5e:b8:8f:1e:bc:26:be:88:47: 29:cf:2a:10:e0:d5:00:f1:d6:82:f0:30:6b:5b:21: 92:ef:60:84:48:f8:fb:c7:a8:ab:5d:e4:de:3b:1e: 4e:bd:00:0c:4f:0f:65:32:41:cd:53:3d:0b:8f:5a: 53:7b:8b:09:2a:83:48:c0:51:a1:00:0c:9d:55:e7: 1b:c7:e2:33:38:d6:44:02:f7:fc:4b:0f:18:71:8f: c8:bd:89:3e:ac:c3:eb:50:23:25:26:e3:c2:b7:59: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4B:86:EC:14:26:1C:38:89:A6:54:05:6A:C1:18:90:A7:24:F3:00 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7c:54:a5:b5:2b:cd:9e:a3:15:00:b8:60:af:48:29:8b:b9: 7b:f3:ca:28:f8:41:2d:b0:8a:1a:ba:24:ab:8d:87:1a:7f:6c: 5a:90:5d:ec:f1:d2:d2:92:67:b4:22:d8:9b:9e:33:6d:23:d4: 15:80:6c:af:68:9b:b6:4b:f6:62:15:74:b0:63:31:93:a7:5a: 9a:ff:fc:cf:6f:d8:d2:8f:11:a9:13:bb:a1:d5:f6:fb:7f:07: 57:4f:c6:cf:1a:7f:76:ae:be:f2:1a:a0:c0:33:01:0b:2d:c6: fe:4f:d2:bd:d0:82:2c:b6:d2:be:17:3b:b3:13:9e:ab:75:da: ee:2a:ef:11:d5:82:1f:76:e2:4a:bf:4d:75:9d:74:50:d5:5b: 38:10:8e:fa:41:c0:41:bf:8e:1e:6a:ac:74:10:e8:fb:44:9b: 83:e5:91:82:0d:34:22:43:91:7e:47:56:c6:02:8f:81:4a:bd: c2:1a:b7:dd:f2:15:89:23:44:67:b3:bd:a1:6c:ca:b5:e6:0c: b8:68:15:a8:b8:d2:bc:35:96:86:72:2d:52:4e:cf:79:0b:30: a3:3d:ad:38:30:51:49:53:90:b1:dd:8f:6d:ab:15:5b:6b:e6: 95:30:ab:3e:d7:08:88:43:c3:a9:f1:c7:c2:36:dc:93:99:04: c5:29:d2:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpnTpkBYEq55HVwfSHPk0sw1V9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNjA0MTYyMjU2NTZaFw0yNjA0MjAwMzUyNTZaMDMxMTAvBgNV BAMTKEVCNEI4NkVDMTQyNjFDMzg4OUE2NTQwNTZBQzExODkwQTcyNEYzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAm5KhRjRR0lXsbwj12PgvY5q 0I33zwzqxuEQE/SWeDcD66tyeb4Qftg505QJrTJX3Iru57e9NZNysNXhFLOZeMQC wNyOThjb2d4xK8PzqJTqg1BOcVNjV8hu6nI7MbqQJXpVFF4DpCbM5zhngkVfSIkT 1OASpuzvtb5P5zZIA0jbp8My4KnvNMNDizyHaDWPwmU0Axq4aXJRg164jx68Jr6I RynPKhDg1QDx1oLwMGtbIZLvYIRI+PvHqKtd5N47Hk69AAxPD2UyQc1TPQuPWlN7 iwkqg0jAUaEADJ1V5xvH4jM41kQC9/xLDxhxj8i9iT6sw+tQIyUm48K3WRX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU60uG7BQmHDiJplQFasEYkKck8wAwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF58VKW1K82eoxUAuGCvSCmLuXvzyij4QS2w ihq6JKuNhxp/bFqQXezx0tKSZ7Qi2JueM20j1BWAbK9om7ZL9mIVdLBjMZOnWpr/ /M9v2NKPEakTu6HV9vt/B1dPxs8af3auvvIaoMAzAQstxv5P0r3Qgiy20r4XO7MT nqt12u4q7xHVgh924kq/TXWddFDVWzgQjvpBwEG/jh5qrHQQ6PtEm4PlkYINNCJD kX5HVsYCj4FKvcIat93yFYkjRGezvaFsyrXmDLhoFai40rw1loZyLVJOz3kLMKM9 rTgwUUlTkLHdj22rFVtr5pUwqz7XCIhDw6nxx8I23JOZBMUp0uM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:30 2026 by rpki-client