$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: 08mmLYK8KX/0J/qJBWGqblZscjdBDkvRhXjrcTL3I+k= Subject key identifier: E5:4F:1C:35:D3:13:5C:75:59:AC:83:EB:40:D8:31:BE:80:51:79:07 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 728A2277FD6AB67EBDA7A9640116AAAAFEA309B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 053D Signing time: Fri 17 Apr 2026 00:21:40 +0000 Manifest this update: Fri 17 Apr 2026 00:16:40 +0000 Manifest next update: Mon 20 Apr 2026 01:17:40 +0000 Files and hashes: 1: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: UvASTZKyP+lPiza2+zYNFb+djLhbQRam++EmghJYKgc=) 2: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: 7gPPExrx2if3oA54UUFe1GU8a9ikz2kCEQu0Ss/6cns=) 3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: Elof/C3fNtJbCl8TUF91oukaJ7adl9S3GZZ+iL/gCtw=) 4: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: Ymw3mKUJLuc3UElUh0Nq2GfPGIEzD27CcOXD4JJbHT8=) 5: 3130332e3133372e33382e302f32332d3233203d3e20313534343130.roa (hash: 45haaaNEP07bGmnIxtH7kMZ3V9GMhbsVinNZe5dSzfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8a:22:77:fd:6a:b6:7e:bd:a7:a9:64:01:16:aa:aa:fe:a3:09:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Apr 17 00:16:40 2026 GMT Not After : Apr 20 01:17:40 2026 GMT Subject: CN=E54F1C35D3135C7559AC83EB40D831BE80517907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:aa:ba:48:f2:53:42:46:eb:3e:fd:c1:0a: e7:04:ef:3d:e2:18:16:a1:9f:71:40:9c:0a:a4:da: 9a:7e:31:98:1b:a2:13:1b:75:1b:e7:4c:c7:ee:21: 40:99:1f:83:a1:88:6d:3f:89:e1:20:28:37:fc:df: 34:41:c7:2b:88:ca:ab:9d:30:b5:78:c9:0b:33:5c: 98:7d:aa:f3:c2:33:d9:1f:4c:e6:5a:03:94:2f:e3: 24:df:2e:74:ef:be:8a:c0:cb:ad:40:70:b0:16:53: 0b:7a:da:6e:89:e1:d9:c1:94:2b:6a:46:74:8c:81: a4:c2:03:dc:9c:d7:58:f4:d3:5f:9e:6b:f6:60:2a: 18:fd:1a:3b:27:4e:68:f7:9c:3f:ed:14:e2:be:d6: fa:f0:3b:57:89:47:e2:59:fe:6f:70:77:88:21:ec: 90:53:ef:fe:c0:d1:51:17:63:47:af:c7:21:87:16: 18:9b:e9:ee:a0:cb:63:85:13:07:04:8f:4c:31:e1: 8c:51:f7:c4:00:2d:98:b1:d0:74:88:db:b0:9f:3c: 21:3b:49:3f:75:15:b2:2b:f3:e9:53:d2:7b:00:a8: 23:1f:8b:c9:29:d1:5c:09:ed:ee:8b:bc:43:bd:85: dd:55:6d:cb:de:93:21:ca:c2:b2:87:c2:1a:94:6b: 2b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4F:1C:35:D3:13:5C:75:59:AC:83:EB:40:D8:31:BE:80:51:79:07 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7b:d1:b2:c7:b3:49:1e:d4:33:20:89:16:9e:f5:f7:87:e9: d2:46:9c:fb:cf:e5:c4:c0:95:41:16:8a:99:6f:ed:9e:fb:a6: bc:76:c2:49:28:3e:8a:ea:81:5a:46:c9:e0:48:9d:00:55:6e: 53:54:71:5c:89:2b:8f:f7:03:d3:43:53:77:b1:00:09:b6:21: be:ab:6d:be:2e:f2:09:04:fc:50:9f:ac:7c:d9:1c:7f:49:ef: a1:ee:ac:b2:b3:48:7b:6c:73:05:5c:7c:55:cc:2c:ce:12:10: 4a:1e:2b:96:17:e6:aa:f6:b0:d4:6e:98:64:7f:6c:ac:b7:8d: 62:3d:e4:d5:6f:ee:f7:a1:42:9d:60:e7:08:fc:58:a2:3f:14: 74:96:4d:e5:12:9f:5b:4f:e0:76:37:c8:8e:b9:c0:92:96:83: 43:08:03:03:57:49:92:a5:af:58:b2:f0:36:d6:e7:e9:96:56: 9e:f2:2f:c9:96:60:a2:b8:04:5b:e1:03:b2:b3:dc:fa:23:47: d5:47:3d:58:67:be:6a:a9:8f:2e:90:7a:ad:c7:d0:35:4f:d7: 87:47:b0:04:36:a3:58:83:0e:30:02:e2:4f:88:8b:aa:41:dd: 09:c9:13:92:6c:6c:62:a2:5b:e3:69:57:c2:fb:90:97:db:4c: 1f:f4:e2:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcooid/1qtn69p6lkARaqqv6jCbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNjA0MTcwMDE2NDBaFw0yNjA0MjAwMTE3NDBaMDMxMTAvBgNV BAMTKEU1NEYxQzM1RDMxMzVDNzU1OUFDODNFQjQwRDgzMUJFODA1MTc5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Oqq6SPJTQkbrPv3BCucE7z3i GBahn3FAnAqk2pp+MZgbohMbdRvnTMfuIUCZH4OhiG0/ieEgKDf83zRBxyuIyqud MLV4yQszXJh9qvPCM9kfTOZaA5Qv4yTfLnTvvorAy61AcLAWUwt62m6J4dnBlCtq RnSMgaTCA9yc11j001+ea/ZgKhj9GjsnTmj3nD/tFOK+1vrwO1eJR+JZ/m9wd4gh 7JBT7/7A0VEXY0evxyGHFhib6e6gy2OFEwcEj0wx4YxR98QALZix0HSI27CfPCE7 ST91FbIr8+lT0nsAqCMfi8kp0VwJ7e6LvEO9hd1VbcvekyHKwrKHwhqUayuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5U8cNdMTXHVZrIPrQNgxvoBReQcwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK970bLHs0ke1DMgiRae9feH6dJGnPvP5cTA lUEWiplv7Z77prx2wkkoPorqgVpGyeBInQBVblNUcVyJK4/3A9NDU3exAAm2Ib6r bb4u8gkE/FCfrHzZHH9J76HurLKzSHtscwVcfFXMLM4SEEoeK5YX5qr2sNRumGR/ bKy3jWI95NVv7vehQp1g5wj8WKI/FHSWTeUSn1tP4HY3yI65wJKWg0MIAwNXSZKl r1iy8DbW5+mWVp7yL8mWYKK4BFvhA7Kz3PojR9VHPVhnvmqpjy6Qeq3H0DVP14dH sAQ2o1iDDjAC4k+Ii6pB3QnJE5JsbGKiW+NpV8L7kJfbTB/04oA= -----END CERTIFICATE-----Generated at Sat Apr 18 05:48:38 2026 by rpki-client