$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: QqCa744TFYsqc6YUz5B5rbNmxJR98d872ONJkXVdhqs= Subject key identifier: 1F:2C:9B:5E:12:4C:6D:04:4F:91:DC:0C:F3:94:98:62:19:85:A1:03 Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 419AFD86A55729AA449A46531BBECAB471A176F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: DD Signing time: Fri 17 Apr 2026 04:42:13 +0000 Manifest this update: Fri 17 Apr 2026 04:37:13 +0000 Manifest next update: Mon 20 Apr 2026 14:40:13 +0000 Files and hashes: 1: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: 7xtdBAgDa27tKRj0jGvScgmWyyhrD1vNGtg+5eSqC+E=) 2: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: B9dkfAuQSGFkOUPXQNcOnfZc9f5rLPsJ947+ZcqQIGc=) 3: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: K9djVkSLZL7Bw4K3e9tKRF4aAw6JK34iXwFmQ3sWP34=) 4: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: 5+7EpoRHiM1GiIon48eKxVuE1jLZPngRC9OVhAPzb0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9a:fd:86:a5:57:29:aa:44:9a:46:53:1b:be:ca:b4:71:a1:76:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Apr 17 04:37:13 2026 GMT Not After : Apr 20 14:40:13 2026 GMT Subject: CN=1F2C9B5E124C6D044F91DC0CF39498621985A103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e8:7c:0f:f6:17:08:36:da:d6:ed:a5:e6:bf: 7f:27:3d:61:6c:fc:5c:03:f3:96:ca:0f:6e:86:80: 59:73:2a:8a:ad:1a:57:fa:c5:59:4c:07:68:6d:1f: 7f:34:06:25:5e:32:05:f8:1f:60:79:78:fc:b6:59: e8:62:ed:0e:02:fb:08:bf:10:f7:8e:3d:40:f3:c2: 32:22:a4:ed:2c:dc:73:dc:6e:56:35:25:7a:5a:b5: 77:85:ba:be:df:e1:1e:b2:c3:97:ce:e6:fa:62:76: 29:a0:b1:fa:d7:22:9a:a9:85:02:38:fa:46:a9:69: 7f:24:3a:bb:d7:32:09:b3:13:76:79:ec:09:7b:46: d1:36:fb:91:04:8c:47:86:0b:47:21:05:90:ae:64: 3d:f3:a0:bb:d5:55:b1:12:d9:0a:71:d9:56:cc:d6: 64:3d:dc:59:f3:a3:89:c2:20:c8:93:cc:d1:ee:2a: 2f:0c:13:10:0a:92:c3:e4:cd:86:6e:f1:5b:42:fa: 6b:47:0e:ed:60:ac:2a:56:a4:29:1d:b1:af:36:bf: 18:1c:5b:1c:0f:48:7b:e1:6c:d0:d3:ad:c3:46:ab: 88:87:05:f6:77:27:a6:9c:52:8f:c4:17:0b:96:42: a1:38:77:00:f4:90:a8:f7:e3:14:0d:53:f4:0a:f6: 6e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2C:9B:5E:12:4C:6D:04:4F:91:DC:0C:F3:94:98:62:19:85:A1:03 X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ae:98:72:cb:7b:85:8e:b6:5e:35:76:3f:25:e0:6d:7b:5b: fb:28:5d:d9:83:b5:14:a5:97:08:e3:03:a6:50:82:0f:56:e3: 58:5a:34:79:e4:93:bb:70:c7:cb:2a:a2:bc:50:5d:40:51:29: 0b:04:d5:e0:df:40:e6:05:6e:15:e0:63:00:31:1e:24:c7:bf: 05:f4:62:10:62:2a:7c:d1:68:90:37:a4:f8:31:b0:fd:57:90: 4b:fe:56:af:65:0c:4a:e8:ab:b1:6f:9a:ac:7d:d0:97:46:4c: 0f:67:ca:18:61:d6:a4:2d:f2:33:b1:47:db:9e:33:39:3f:d1: e3:98:3a:c1:84:1a:18:f2:b5:48:4c:76:e4:36:ab:4a:91:2d: e6:3b:6c:7c:e1:a5:31:cf:80:e3:ed:41:14:ce:2a:cd:cc:3d: be:ed:06:69:f4:b2:06:c8:4f:4e:34:5e:cb:3b:c9:94:59:51: d9:70:0d:39:78:06:21:92:34:03:b5:30:0b:3a:96:17:63:a6: 3a:cb:00:58:7e:38:e4:af:07:f7:1e:9e:f0:c5:09:87:36:cf: 8e:a9:a5:86:2d:a4:67:c6:a0:2b:d9:c9:1d:14:55:dd:d5:b2: 97:45:b0:03:ae:40:61:d4:25:89:80:83:bb:a1:68:89:a7:11: 57:be:2f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZr9hqVXKapEmkZTG77KtHGhdvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNjA0MTcwNDM3MTNaFw0yNjA0MjAxNDQwMTNaMDMxMTAvBgNV BAMTKDFGMkM5QjVFMTI0QzZEMDQ0RjkxREMwQ0YzOTQ5ODYyMTk4NUExMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6HwP9hcINtrW7aXmv38nPWFs /FwD85bKD26GgFlzKoqtGlf6xVlMB2htH380BiVeMgX4H2B5ePy2Wehi7Q4C+wi/ EPeOPUDzwjIipO0s3HPcblY1JXpatXeFur7f4R6yw5fO5vpidimgsfrXIpqphQI4 +kapaX8kOrvXMgmzE3Z57Al7RtE2+5EEjEeGC0chBZCuZD3zoLvVVbES2Qpx2VbM 1mQ93Fnzo4nCIMiTzNHuKi8MExAKksPkzYZu8VtC+mtHDu1grCpWpCkdsa82vxgc WxwPSHvhbNDTrcNGq4iHBfZ3J6acUo/EFwuWQqE4dwD0kKj34xQNU/QK9m7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHyybXhJMbQRPkdwM85SYYhmFoQMwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOumHLLe4WOtl41dj8l4G17W/soXdmDtRSl lwjjA6ZQgg9W41haNHnkk7twx8sqorxQXUBRKQsE1eDfQOYFbhXgYwAxHiTHvwX0 YhBiKnzRaJA3pPgxsP1XkEv+Vq9lDEroq7Fvmqx90JdGTA9nyhhh1qQt8jOxR9ue Mzk/0eOYOsGEGhjytUhMduQ2q0qRLeY7bHzhpTHPgOPtQRTOKs3MPb7tBmn0sgbI T040Xss7yZRZUdlwDTl4BiGSNAO1MAs6lhdjpjrLAFh+OOSvB/cenvDFCYc2z46p pYYtpGfGoCvZyR0UVd3VspdFsAOuQGHUJYmAg7uhaImnEVe+Lxc= -----END CERTIFICATE-----Generated at Fri Apr 17 21:18:30 2026 by rpki-client