$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: rsUvKFuvNfUf2Faj+4Ho7JakxP8b2fB02uOzl/NEZQQ= Subject key identifier: 2E:66:3C:04:CE:63:B5:B3:D7:28:62:C0:B8:25:30:C0:90:18:C2:AF Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: CFE0A8BB5B2A55D96CAF1730C903DCC9C33520 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 022F Signing time: Thu 16 Apr 2026 23:02:02 +0000 Manifest this update: Thu 16 Apr 2026 22:57:02 +0000 Manifest next update: Mon 20 Apr 2026 08:15:02 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: jWQI6LPdnDNubtpwhRmszSA0Y5bZBxr7CwJjx+OnnV0=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 6ZL025AK97GudZGfz0yvDao2Z0GQS/L9s9KfZkYDkes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cf:e0:a8:bb:5b:2a:55:d9:6c:af:17:30:c9:03:dc:c9:c3:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Apr 16 22:57:02 2026 GMT Not After : Apr 20 08:15:02 2026 GMT Subject: CN=2E663C04CE63B5B3D72862C0B82530C09018C2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:d1:28:b7:34:4c:74:38:98:f4:2b:51:8c: f0:f8:9d:5e:07:c7:06:95:a9:61:fc:4d:b4:32:a6: 6c:04:54:2a:ff:5f:1c:51:4b:ab:90:6e:4d:36:78: d9:30:f3:2d:6c:2d:5a:b0:e9:ef:11:01:98:ad:2f: 9f:d3:1a:72:aa:5f:59:28:1f:4e:34:96:fe:d4:da: 12:6c:3c:b4:62:99:4f:cf:c0:1b:9c:d7:b9:8e:30: aa:52:58:9f:eb:ae:51:49:83:78:96:3f:1e:99:31: c0:c6:e5:87:96:e2:93:e8:f2:e2:f3:d9:30:84:f2: 7a:aa:51:c7:a5:34:94:68:13:3d:1e:58:f3:d1:d4: 78:2c:58:61:c8:6f:57:e1:f3:47:2f:c4:dc:76:76: c6:d8:d9:9b:73:56:d1:85:25:f9:ef:1c:b7:b8:52: 61:44:34:3a:d4:80:1b:76:71:22:a4:83:a1:a7:81: 42:fe:17:65:73:e2:f6:86:73:a1:8a:d9:d6:b9:61: ce:61:f1:a8:55:54:af:64:07:dd:53:2d:52:02:67: 2e:90:30:f3:38:f3:46:b1:3c:ed:83:f8:41:ad:66: 27:12:b1:ad:0c:a9:cb:e3:ae:e0:5c:03:e2:92:ce: 79:d3:f8:77:e6:cc:3e:b4:a0:06:3f:e3:8b:94:0e: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:66:3C:04:CE:63:B5:B3:D7:28:62:C0:B8:25:30:C0:90:18:C2:AF X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:28:63:1d:a7:a9:6a:e1:83:48:e8:1e:ac:d4:95:6c:f4:5b: 76:bf:04:a7:03:47:1a:8a:fa:2f:8c:db:be:44:6b:61:7a:f9: 3e:c4:a6:77:e2:d4:f1:64:55:ed:4a:d9:6e:0e:86:49:4a:32: 0b:5c:29:7f:63:0a:73:e1:78:09:b0:ed:cb:a6:f0:6a:d7:c9: c1:d7:fb:66:94:15:40:3d:15:c1:22:9f:c1:16:cf:cc:02:03: 68:00:0d:b6:f4:0a:ee:e1:54:57:48:74:2e:13:df:e1:6e:70: 78:6d:76:83:4f:af:0c:c1:10:e3:b2:28:b5:83:7d:a0:09:cd: 27:f7:eb:a9:aa:a9:a4:d1:22:1c:b1:6e:a3:3d:27:75:2f:ee: 64:04:6c:a4:06:4a:44:d3:ed:bb:da:9a:15:d3:9e:f9:b0:45: c7:cc:ac:3c:17:62:dd:35:a8:fa:4e:c8:32:0a:3a:80:87:56: 1b:81:eb:f7:4e:6f:07:0a:9e:9e:ef:34:85:5b:37:e2:c7:0d: 53:ee:08:6a:78:11:c6:25:4b:1a:14:24:08:a9:e7:53:fe:cf: ab:4c:0d:a1:56:2c:ba:ce:fd:30:cf:51:56:b7:96:9b:37:e5: 34:c0:03:d0:01:c0:bd:0f:5a:84:6e:93:7d:90:41:a2:5b:63: 6b:48:6b:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAM/gqLtbKlXZbK8XMMkD3MnDNSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNjA0MTYyMjU3MDJaFw0yNjA0MjAwODE1MDJaMDMxMTAvBgNV BAMTKDJFNjYzQzA0Q0U2M0I1QjNENzI4NjJDMEI4MjUzMEMwOTAxOEMyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWg9EotzRMdDiY9CtRjPD4nV4H xwaVqWH8TbQypmwEVCr/XxxRS6uQbk02eNkw8y1sLVqw6e8RAZitL5/TGnKqX1ko H040lv7U2hJsPLRimU/PwBuc17mOMKpSWJ/rrlFJg3iWPx6ZMcDG5YeW4pPo8uLz 2TCE8nqqUcelNJRoEz0eWPPR1HgsWGHIb1fh80cvxNx2dsbY2ZtzVtGFJfnvHLe4 UmFENDrUgBt2cSKkg6GngUL+F2Vz4vaGc6GK2da5Yc5h8ahVVK9kB91TLVICZy6Q MPM480axPO2D+EGtZicSsa0MqcvjruBcA+KSznnT+HfmzD60oAY/44uUDvR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULmY8BM5jtbPXKGLAuCUwwJAYwq8wHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUoYx2nqWrhg0joHqzUlWz0W3a/BKcDRxqK +i+M275Ea2F6+T7Epnfi1PFkVe1K2W4OhklKMgtcKX9jCnPheAmw7cum8GrXycHX +2aUFUA9FcEin8EWz8wCA2gADbb0Cu7hVFdIdC4T3+FucHhtdoNPrwzBEOOyKLWD faAJzSf366mqqaTRIhyxbqM9J3Uv7mQEbKQGSkTT7bvamhXTnvmwRcfMrDwXYt01 qPpOyDIKOoCHVhuB6/dObwcKnp7vNIVbN+LHDVPuCGp4EcYlSxoUJAip51P+z6tM DaFWLLrO/TDPUVa3lps35TTAA9ABwL0PWoRuk32QQaJbY2tIayE= -----END CERTIFICATE-----Generated at Fri Apr 17 22:47:17 2026 by rpki-client