$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: ctcE2klL+LGo+tF28Dh5BIwPTzRo0zJ6LsDQ0JF0pqU= Subject key identifier: 2D:3D:88:EC:35:67:75:0D:1D:70:02:B6:0C:39:3B:24:59:45:6F:46 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 4AF8B8F44BB43D19296DDA74BC333868E101A353 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 025B Signing time: Sat 18 Apr 2026 07:50:43 +0000 Manifest this update: Sat 18 Apr 2026 07:45:43 +0000 Manifest next update: Tue 21 Apr 2026 18:15:43 +0000 Files and hashes: 1: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: 9us7Ygpbkc16dwtkt2DNPfJYXPH5dyTjUdnlVLnTLHw=) 2: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /qS4OWq8Vl/sf0oNwWG67t4bVX5WP+9ilILYkU8W3VI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f8:b8:f4:4b:b4:3d:19:29:6d:da:74:bc:33:38:68:e1:01:a3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Apr 18 07:45:43 2026 GMT Not After : Apr 21 18:15:43 2026 GMT Subject: CN=2D3D88EC3567750D1D7002B60C393B2459456F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:eb:d7:45:72:c3:eb:06:f9:22:d7:28:4c: 84:6b:d8:ec:f3:ea:3e:32:ab:f5:6b:f6:72:dd:12: bd:71:23:09:b4:70:1d:b0:d1:a8:2c:c5:f0:36:fd: 4d:9d:f7:77:2b:53:74:e8:14:c1:1a:d6:1e:2e:80: 7a:18:16:4b:01:f6:42:16:e2:4c:ac:2c:df:70:70: 7d:c7:c9:58:98:e5:4d:77:39:5a:36:5b:0c:cf:88: 7a:c0:6f:83:06:dd:8d:4e:e8:f3:16:3e:b6:f3:c3: 8d:a5:16:fa:87:c3:ce:aa:17:38:a0:4f:92:a6:02: 09:79:1c:59:1d:5f:4f:b0:74:95:c0:18:bf:05:08: 40:de:43:58:17:f7:58:2e:be:e0:f6:0f:52:75:5a: ea:e2:54:bc:dd:b7:c8:cc:e9:4f:0f:81:a0:22:fa: 32:e0:ef:c5:99:4e:36:c4:0f:97:e7:24:e6:49:5e: 55:6d:13:b2:b5:f7:9c:a8:77:63:14:06:8f:00:5e: 17:99:98:f1:2e:df:45:7b:65:18:fe:cb:96:3c:10: 01:a1:9e:86:2f:ec:30:89:1c:28:99:95:a6:8c:51: 90:11:36:4c:91:13:97:7e:24:2f:99:99:89:c4:6a: bb:c1:bb:23:1d:29:1a:74:5e:8a:09:8b:f9:32:3a: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3D:88:EC:35:67:75:0D:1D:70:02:B6:0C:39:3B:24:59:45:6F:46 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2f:95:ee:5e:0c:24:be:b8:40:84:24:b9:41:73:07:c8:65: f1:72:22:72:45:80:ec:7f:ff:a7:72:71:d8:b7:2f:2c:31:bb: 96:4b:c8:21:a1:41:a3:4b:4c:ee:46:bd:ca:fa:d2:90:b8:9c: d4:99:71:12:74:92:ad:fc:b4:39:7f:eb:92:24:1b:45:f2:21: 2e:b0:b8:34:3d:fb:9e:0e:09:c0:11:f0:e8:87:f9:ad:96:74: 9d:5d:71:1a:55:6a:8e:f7:44:6b:8f:ae:df:d4:c7:74:41:5f: 03:20:d5:e9:58:b5:ff:e6:c3:0e:77:c0:ad:25:16:20:03:cc: c9:7d:bb:d6:7d:68:8a:b9:7f:5d:07:2f:59:a8:48:ee:6e:b3: a2:c8:e1:6a:29:36:ed:81:d2:4b:19:c0:e2:33:c9:f1:63:8a: 5b:83:67:7e:2e:b8:a6:e9:80:f4:2c:d7:dc:d1:77:a2:53:d0: 93:fc:a9:b4:a0:97:59:d0:72:fc:ec:95:b8:75:19:28:95:ce: dd:be:12:85:59:5b:8b:df:6c:6e:bf:73:17:15:df:bf:36:42: 00:99:3f:43:bb:43:d4:2f:44:1e:fd:7b:ef:1e:2d:66:df:83: 8b:12:86:d4:c3:51:0c:83:22:65:7e:47:b9:e0:d4:f0:5c:5a: d1:de:69:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvi49Eu0PRkpbdp0vDM4aOEBo1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNjA0MTgwNzQ1NDNaFw0yNjA0MjExODE1NDNaMDMxMTAvBgNV BAMTKDJEM0Q4OEVDMzU2Nzc1MEQxRDcwMDJCNjBDMzkzQjI0NTk0NTZGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwOvXRXLD6wb5ItcoTIRr2Ozz 6j4yq/Vr9nLdEr1xIwm0cB2w0agsxfA2/U2d93crU3ToFMEa1h4ugHoYFksB9kIW 4kysLN9wcH3HyViY5U13OVo2WwzPiHrAb4MG3Y1O6PMWPrbzw42lFvqHw86qFzig T5KmAgl5HFkdX0+wdJXAGL8FCEDeQ1gX91guvuD2D1J1WuriVLzdt8jM6U8PgaAi +jLg78WZTjbED5fnJOZJXlVtE7K195yod2MUBo8AXheZmPEu30V7ZRj+y5Y8EAGh noYv7DCJHCiZlaaMUZARNkyRE5d+JC+ZmYnEarvBuyMdKRp0XooJi/kyOuMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULT2I7DVndQ0dcAK2DDk7JFlFb0YwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgvle5eDCS+uECEJLlBcwfIZfFyInJFgOx/ /6dycdi3Lywxu5ZLyCGhQaNLTO5Gvcr60pC4nNSZcRJ0kq38tDl/65IkG0XyIS6w uDQ9+54OCcAR8OiH+a2WdJ1dcRpVao73RGuPrt/Ux3RBXwMg1elYtf/mww53wK0l FiADzMl9u9Z9aIq5f10HL1moSO5us6LI4WopNu2B0ksZwOIzyfFjiluDZ34uuKbp gPQs19zRd6JT0JP8qbSgl1nQcvzslbh1GSiVzt2+EoVZW4vfbG6/cxcV3782QgCZ P0O7Q9QvRB79e+8eLWbfg4sShtTDUQyDImV+R7ng1PBcWtHeaX0= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:45 2026 by rpki-client