$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: omNw+79N/VqSvc83jM1KIOBojL0IdIQs/xGoMz+e0OM= Subject key identifier: 82:37:98:42:80:31:B6:15:56:16:80:AE:25:CD:80:F8:E9:B6:16:C7 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 2FCB74624F279E367CD546EF6B7F37BD989EE051 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 0568 Signing time: Thu 16 Apr 2026 21:40:58 +0000 Manifest this update: Thu 16 Apr 2026 21:35:58 +0000 Manifest next update: Mon 20 Apr 2026 04:12:58 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: aBhsrbKMfAxYsRBChemxf/Y2NCN9m8KVraRvwCGBL5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:12:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:cb:74:62:4f:27:9e:36:7c:d5:46:ef:6b:7f:37:bd:98:9e:e0:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Apr 16 21:35:58 2026 GMT Not After : Apr 20 04:12:58 2026 GMT Subject: CN=823798428031B615561680AE25CD80F8E9B616C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:99:72:3c:e4:2b:bd:24:81:66:0b:da:a2:0b: ba:4e:7c:6c:db:f1:4d:36:4c:67:79:7e:fe:d2:f9: d9:67:4e:38:ea:41:41:99:c0:29:86:96:8f:57:9a: ce:70:6f:be:8e:0c:48:39:7f:31:8b:8b:db:13:45: d8:f3:00:9a:be:4b:b0:15:50:12:80:01:7c:e9:dc: 3b:d3:88:3d:99:0f:b6:84:5a:43:d6:ea:07:de:22: eb:22:39:bb:88:47:47:60:02:c4:2c:24:38:15:1a: 41:6d:47:98:b9:13:92:13:05:73:2e:67:c8:f9:ce: 92:c2:ed:cf:4d:f4:42:62:1c:6a:2f:65:4a:b4:1a: 88:95:a3:0c:c4:73:39:bb:6f:78:42:81:b7:09:09: 15:dd:73:3b:0d:22:c9:0d:4b:90:ef:e2:ba:95:8a: 80:e0:56:4e:96:98:c8:07:b5:04:77:ea:9b:92:33: 40:81:63:ec:79:c8:6a:2f:4d:98:ba:49:7d:26:e8: d8:a6:a3:80:b3:7a:ef:23:43:d3:5c:3e:4c:da:70: ef:97:b0:17:44:66:70:06:b8:9c:fc:bd:75:2a:7b: 70:af:dd:67:cc:76:68:8d:9f:9a:35:a1:db:e0:4a: 69:60:b6:7c:61:6a:5a:e3:af:7d:62:4c:70:8c:95: ea:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:37:98:42:80:31:B6:15:56:16:80:AE:25:CD:80:F8:E9:B6:16:C7 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dc:12:42:6f:6d:18:62:46:bd:19:11:12:68:d1:c5:49:ea: 95:01:0b:ee:47:71:c3:e9:71:7d:e3:2f:83:f6:8c:2c:6e:83: 94:53:5c:ec:f0:15:a6:73:b0:59:fe:14:42:d0:60:12:2d:51: 4f:68:3a:de:cf:1a:87:65:34:51:6e:bc:13:72:68:8d:55:22: ff:94:f3:cf:4d:32:71:7f:0d:98:86:62:d6:17:62:21:59:87: 64:5a:6d:79:2d:12:f2:37:ca:8e:d4:ca:30:41:b2:b2:c1:dc: 5f:fc:0f:65:19:50:b8:91:9d:1d:81:c2:58:e7:3e:08:57:a0: d5:4d:ce:0f:6d:b9:cc:9a:64:39:f6:cd:5b:09:ce:e5:91:62: 40:08:b3:34:9d:82:42:96:0c:ef:c9:8e:8f:27:ec:a2:2a:fe: fa:21:e1:7d:78:87:27:9f:61:c2:17:9a:65:23:7d:ed:62:83: b2:2f:9a:87:18:b9:e3:af:a5:0b:ea:25:5d:a0:c3:31:df:85: 44:43:59:d4:18:5e:67:3b:86:8d:68:46:2e:f8:d1:5c:61:9e: 8d:79:de:1c:42:3b:d9:c2:45:8c:ab:21:69:16:8d:c4:88:e0: 79:ce:79:43:b6:88:c9:9a:35:d0:d0:d0:3a:d7:91:9c:f7:f4: 43:b2:e4:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL8t0Yk8nnjZ81Ubva383vZie4FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNjA0MTYyMTM1NThaFw0yNjA0MjAwNDEyNThaMDMxMTAvBgNV BAMTKDgyMzc5ODQyODAzMUI2MTU1NjE2ODBBRTI1Q0Q4MEY4RTlCNjE2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkmXI85Cu9JIFmC9qiC7pOfGzb 8U02TGd5fv7S+dlnTjjqQUGZwCmGlo9Xms5wb76ODEg5fzGLi9sTRdjzAJq+S7AV UBKAAXzp3DvTiD2ZD7aEWkPW6gfeIusiObuIR0dgAsQsJDgVGkFtR5i5E5ITBXMu Z8j5zpLC7c9N9EJiHGovZUq0GoiVowzEczm7b3hCgbcJCRXdczsNIskNS5Dv4rqV ioDgVk6WmMgHtQR36puSM0CBY+x5yGovTZi6SX0m6Nimo4Czeu8jQ9NcPkzacO+X sBdEZnAGuJz8vXUqe3Cv3WfMdmiNn5o1odvgSmlgtnxhalrjr31iTHCMlerfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgjeYQoAxthVWFoCuJc2A+Om2FscwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3cEkJvbRhiRr0ZERJo0cVJ6pUBC+5HccPp cX3jL4P2jCxug5RTXOzwFaZzsFn+FELQYBItUU9oOt7PGodlNFFuvBNyaI1VIv+U 889NMnF/DZiGYtYXYiFZh2RabXktEvI3yo7UyjBBsrLB3F/8D2UZULiRnR2Bwljn PghXoNVNzg9tucyaZDn2zVsJzuWRYkAIszSdgkKWDO/Jjo8n7KIq/voh4X14hyef YcIXmmUjfe1ig7IvmocYueOvpQvqJV2gwzHfhURDWdQYXmc7ho1oRi740Vxhno15 3hxCO9nCRYyrIWkWjcSI4HnOeUO2iMmaNdDQ0DrXkZz39EOy5OA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:12 2026 by rpki-client