$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: rnoKaJyrc5iUHu9+imUCrO9qc/e1hDbT30SYAfklTS4= Subject key identifier: 88:D0:2E:F5:AF:F6:73:2B:89:02:98:24:0F:2D:AF:84:96:4A:FC:5D Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 577B8C80BEFB95A8D2607A0386EB2DA55459D866 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 012D Signing time: Wed 15 Apr 2026 14:00:42 +0000 Manifest this update: Wed 15 Apr 2026 13:55:42 +0000 Manifest next update: Sun 19 Apr 2026 01:06:42 +0000 Files and hashes: 1: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: WK8HujcB9nJM78f9bOCVna68/PlYdLNoBAQfK+mz3dE=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:8c:80:be:fb:95:a8:d2:60:7a:03:86:eb:2d:a5:54:59:d8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Apr 15 13:55:42 2026 GMT Not After : Apr 19 01:06:42 2026 GMT Subject: CN=88D02EF5AFF6732B890298240F2DAF84964AFC5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:c5:b1:d9:fe:df:dd:ca:78:71:bf:fd:2f: 82:e6:d5:5b:d4:3e:a8:20:f9:cc:6a:8c:80:a3:56: 74:d0:86:2a:58:69:24:2a:2b:02:4a:04:fb:cf:e6: 78:8e:8c:16:44:f9:e5:aa:0d:7b:23:fb:47:42:f3: ee:ff:f5:4e:d2:95:0f:42:57:dd:59:cd:d2:96:bf: 19:63:53:75:56:ac:65:c2:96:83:1e:b4:de:f2:1d: 4a:bc:ac:ba:3e:0e:38:fa:bd:37:b6:82:43:21:45: 39:4a:d5:72:11:f7:f3:c8:aa:a8:3d:0f:f4:a0:00: 7c:c7:83:9d:52:62:29:d4:cc:7d:63:eb:b0:a7:7c: 8f:57:e2:5e:ec:91:29:e9:d3:f3:8f:5a:16:29:37: 00:a3:5f:62:e3:3b:d8:e2:9a:b0:d6:5d:cc:74:0f: 70:1a:8e:4b:23:4a:04:c9:ef:a5:b7:6f:85:06:08: 92:8b:20:87:b6:64:da:ce:60:18:22:bc:00:6b:2d: 99:be:f9:31:a8:ab:91:4a:a2:a6:2b:4a:95:21:d9: 41:d8:f0:b1:3d:68:32:4d:64:ba:da:02:1e:8f:fb: 6d:7c:66:23:81:5b:90:82:12:33:10:b4:ff:54:d7: ff:33:c9:ef:ba:82:dd:42:a1:0b:6b:7d:0b:5d:e0: 0c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D0:2E:F5:AF:F6:73:2B:89:02:98:24:0F:2D:AF:84:96:4A:FC:5D X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:d6:10:b5:d5:c9:99:b0:4b:b8:d2:e5:48:7b:b2:7c:e2:6d: 7e:46:c4:57:e4:2b:bd:1d:7c:00:58:f5:5d:7c:89:ad:9d:b8: 52:b6:67:f0:ad:71:7b:2f:34:4e:3e:18:23:83:f2:d7:50:9a: de:d2:d3:df:9f:10:9f:ea:ec:07:b8:6e:c9:e0:40:8d:5b:0e: c0:1b:e5:68:55:11:a6:3a:21:45:fd:86:00:92:93:2b:a4:99: cb:4e:75:5d:3e:07:b7:7c:76:40:8e:51:45:45:eb:35:ab:7a: 3d:ca:27:28:e4:34:26:0a:be:91:6e:66:f5:0a:02:ed:f4:db: f4:b2:3b:a7:8c:c2:6f:6e:0a:97:a3:52:be:1e:03:9b:ff:fa: 3e:42:28:b2:5e:90:c6:3d:ce:66:26:ec:71:c5:1e:51:62:00: 6e:20:c4:53:e3:2c:c3:11:15:33:84:b5:63:36:88:9c:9e:b0: 28:ba:fa:ce:6b:c1:f3:74:c8:eb:67:8f:b5:07:74:91:ee:cd: f0:ec:8f:05:8a:f5:14:30:0c:6c:77:a4:23:92:a6:a7:45:f8: e4:a5:d6:ef:25:43:1e:99:40:46:20:1c:65:bd:23:8a:fe:b7: c8:e8:cb:10:da:ce:ea:89:6d:f5:b2:a7:3e:53:b9:47:7b:bd: 85:e1:58:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3uMgL77lajSYHoDhustpVRZ2GYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNjA0MTUxMzU1NDJaFw0yNjA0MTkwMTA2NDJaMDMxMTAvBgNV BAMTKDg4RDAyRUY1QUZGNjczMkI4OTAyOTgyNDBGMkRBRjg0OTY0QUZDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsS8Wx2f7f3cp4cb/9L4Lm1VvU Pqgg+cxqjICjVnTQhipYaSQqKwJKBPvP5niOjBZE+eWqDXsj+0dC8+7/9U7SlQ9C V91ZzdKWvxljU3VWrGXCloMetN7yHUq8rLo+Djj6vTe2gkMhRTlK1XIR9/PIqqg9 D/SgAHzHg51SYinUzH1j67CnfI9X4l7skSnp0/OPWhYpNwCjX2LjO9jimrDWXcx0 D3AajksjSgTJ76W3b4UGCJKLIIe2ZNrOYBgivABrLZm++TGoq5FKoqYrSpUh2UHY 8LE9aDJNZLraAh6P+218ZiOBW5CCEjMQtP9U1/8zye+6gt1CoQtrfQtd4Ax7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiNAu9a/2cyuJApgkDy2vhJZK/F0wHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/WELXVyZmwS7jS5Uh7snzibX5GxFfkK70d fABY9V18ia2duFK2Z/CtcXsvNE4+GCOD8tdQmt7S09+fEJ/q7Ae4bsngQI1bDsAb 5WhVEaY6IUX9hgCSkyukmctOdV0+B7d8dkCOUUVF6zWrej3KJyjkNCYKvpFuZvUK Au302/SyO6eMwm9uCpejUr4eA5v/+j5CKLJekMY9zmYm7HHFHlFiAG4gxFPjLMMR FTOEtWM2iJyesCi6+s5rwfN0yOtnj7UHdJHuzfDsjwWK9RQwDGx3pCOSpqdF+OSl 1u8lQx6ZQEYgHGW9I4r+t8joyxDazuqJbfWypz5TuUd7vYXhWFo= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:50 2026 by rpki-client