$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: J4t/gh+S+jqz2m2d84HwAthSUSyUY1yuzzvYQsl48og= Subject key identifier: 0A:F4:C4:54:F6:7F:6C:50:4C:5B:97:F5:41:77:4B:75:04:D9:A9:39 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 34DF33FBB33930548FF59B9CE2AB38F9D27EABDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 015E Signing time: Fri 17 Apr 2026 06:31:26 +0000 Manifest this update: Fri 17 Apr 2026 06:26:26 +0000 Manifest next update: Mon 20 Apr 2026 10:58:26 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: GAQd664FQoQkAZD9mwDbRTS4eRIl/EtAahaQZzUT8rI=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: CcRb5LGBAMt+/VJUtbZ5PslhgE9y9IJGFz9zfz6NHW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 10:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:df:33:fb:b3:39:30:54:8f:f5:9b:9c:e2:ab:38:f9:d2:7e:ab:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Apr 17 06:26:26 2026 GMT Not After : Apr 20 10:58:26 2026 GMT Subject: CN=0AF4C454F67F6C504C5B97F541774B7504D9A939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:52:e4:b0:d0:84:14:2a:35:86:fd:cd:d6: 1c:68:c2:03:f0:f6:50:f8:1b:20:ba:04:5a:46:5c: 94:89:3e:04:04:57:68:de:69:0b:96:e8:18:61:24: 87:0e:42:b6:8d:b7:c8:5b:f3:9c:8d:b6:b5:77:8b: 21:aa:c7:78:88:98:82:68:9b:91:50:b4:8d:3f:01: 83:9d:d7:09:99:80:63:09:1f:4d:07:2d:27:18:e9: 36:d6:f3:63:1d:ba:b0:60:0d:4b:6a:c3:23:bc:c4: 27:87:7e:a9:55:dd:a9:3c:2f:c8:00:fa:bb:84:08: 2b:5a:65:3b:e3:43:33:4b:89:3c:1f:68:08:85:5f: 32:ce:39:e1:01:a5:0f:3c:ce:41:2d:86:39:05:90: 91:5f:8b:3e:15:07:f7:e6:01:ee:92:48:83:09:b1: 0e:ff:28:6e:82:55:a0:78:92:5b:e7:2e:e5:9b:7e: 37:f0:a4:5a:e4:61:79:14:ee:10:f7:5c:39:53:9a: c4:50:cf:bd:45:84:0f:5f:92:53:c8:e4:2e:84:f9: eb:16:13:d8:6f:d7:10:55:89:dc:70:fc:d5:06:e5: 35:c2:a7:45:36:3b:98:a8:47:4a:f4:2c:48:21:4b: 93:8f:9f:b9:4f:42:6a:1f:ae:b4:3a:da:5f:ba:1a: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:C4:54:F6:7F:6C:50:4C:5B:97:F5:41:77:4B:75:04:D9:A9:39 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c3:6c:78:b9:a9:e2:fb:f2:5f:01:6a:29:a9:44:37:6d:b8: 72:04:bb:f1:f4:70:86:09:3d:bc:a4:7f:1b:ca:72:da:67:9c: 4f:4a:37:ac:37:e5:30:20:24:13:ed:be:58:96:a6:69:c5:18: 15:90:9d:ea:b6:ac:7a:6a:15:e1:7e:29:dd:f0:b4:01:c8:e0: 5f:e2:b3:64:1a:0d:90:0c:0a:d8:3a:4a:e4:f4:62:d6:d5:b8: 02:d4:5c:56:e3:ec:1d:73:83:d2:99:39:d9:02:28:4f:9f:6e: 81:5c:cd:89:96:d8:42:f6:bf:d6:d9:46:81:f7:99:70:10:6a: e3:ec:fa:22:e4:e0:bd:a4:ab:5b:51:b8:44:f2:7e:7d:0e:56: be:64:dc:2c:a1:8a:de:dd:68:a6:a2:fe:80:f4:14:fe:04:2a: d5:be:a0:5a:c9:cb:08:62:2f:78:eb:c3:34:70:f3:79:e5:b4: 7c:a2:58:6c:89:a2:bf:5e:78:ec:95:c5:f0:49:44:80:ad:5d: c9:4f:1b:83:d4:30:64:2d:d2:9e:27:d2:0f:6a:92:7e:83:cb: bc:5e:ea:cd:34:8f:d9:13:84:a5:bd:fb:a3:74:ec:d2:1d:e4: b9:73:7b:19:3e:cc:88:09:39:37:35:08:8f:77:28:0c:f7:48: 97:79:fb:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNN8z+7M5MFSP9Zuc4qs4+dJ+q9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNjA0MTcwNjI2MjZaFw0yNjA0MjAxMDU4MjZaMDMxMTAvBgNV BAMTKDBBRjRDNDU0RjY3RjZDNTA0QzVCOTdGNTQxNzc0Qjc1MDREOUE5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFlLksNCEFCo1hv3N1hxowgPw 9lD4GyC6BFpGXJSJPgQEV2jeaQuW6BhhJIcOQraNt8hb85yNtrV3iyGqx3iImIJo m5FQtI0/AYOd1wmZgGMJH00HLScY6TbW82MdurBgDUtqwyO8xCeHfqlV3ak8L8gA +ruECCtaZTvjQzNLiTwfaAiFXzLOOeEBpQ88zkEthjkFkJFfiz4VB/fmAe6SSIMJ sQ7/KG6CVaB4klvnLuWbfjfwpFrkYXkU7hD3XDlTmsRQz71FhA9fklPI5C6E+esW E9hv1xBVidxw/NUG5TXCp0U2O5ioR0r0LEghS5OPn7lPQmofrrQ62l+6Gi01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvTEVPZ/bFBMW5f1QXdLdQTZqTkwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjDbHi5qeL78l8BaimpRDdtuHIEu/H0cIYJ PbykfxvKctpnnE9KN6w35TAgJBPtvliWpmnFGBWQneq2rHpqFeF+Kd3wtAHI4F/i s2QaDZAMCtg6SuT0YtbVuALUXFbj7B1zg9KZOdkCKE+fboFczYmW2EL2v9bZRoH3 mXAQauPs+iLk4L2kq1tRuETyfn0OVr5k3Cyhit7daKai/oD0FP4EKtW+oFrJywhi L3jrwzRw83nltHyiWGyJor9eeOyVxfBJRICtXclPG4PUMGQt0p4n0g9qkn6Dy7xe 6s00j9kThKW9+6N07NId5Llzexk+zIgJOTc1CI93KAz3SJd5+5g= -----END CERTIFICATE-----Generated at Fri Apr 17 13:37:17 2026 by rpki-client