$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: wOi6k/8dU2kp/8IOqbmW7Dk0NfcJfZRj58MLrxeQm9k= Subject key identifier: 40:9C:2F:22:BB:03:68:80:E6:3C:7D:68:08:A9:88:2E:8B:81:B6:5C Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 1EF58275CB15401A4D439B5BADCD73764344A189 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 038A Signing time: Thu 16 Apr 2026 13:42:40 +0000 Manifest this update: Thu 16 Apr 2026 13:37:40 +0000 Manifest next update: Mon 20 Apr 2026 00:46:40 +0000 Files and hashes: 1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: 3h4YzqQ4kxkVBiBpf6SCw/ogJDPK/UZGre9yWVema3U=) 2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f5:82:75:cb:15:40:1a:4d:43:9b:5b:ad:cd:73:76:43:44:a1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Apr 16 13:37:40 2026 GMT Not After : Apr 20 00:46:40 2026 GMT Subject: CN=409C2F22BB036880E63C7D6808A9882E8B81B65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:0d:ca:bb:83:43:ff:7f:83:bd:cc:67:c5: 9d:b6:cc:05:36:dd:ea:19:82:73:37:71:1b:c8:4f: 17:46:14:f2:21:c0:81:b6:2f:3a:62:36:7c:a3:99: a3:aa:1e:b9:7a:a4:4b:21:35:d8:31:c2:fd:54:02: ec:0a:1a:67:26:fa:eb:27:37:af:4d:d5:0b:fc:df: 6c:71:e3:8f:55:00:bb:b9:38:a3:ab:1f:d2:7f:96: 44:5d:43:52:8f:cd:54:6f:cf:f9:d7:79:e4:e5:37: 78:48:13:5f:fe:c2:86:2b:c0:77:68:f2:26:f3:9b: 74:46:44:d8:08:c1:87:ce:6a:5d:72:e5:5a:bc:ca: 7e:8d:37:0d:31:a7:22:ad:bb:9c:8f:46:b5:2d:c2: 5c:39:16:f6:ef:30:75:5f:92:9e:b8:90:47:b1:39: 62:e4:93:28:eb:c0:e9:58:80:37:b6:16:f5:19:b5: a2:2b:43:b4:81:fb:ab:0d:d0:7e:26:82:a3:d7:d5: 97:eb:c9:c1:43:e4:18:b0:e7:aa:ef:0b:6b:a6:0a: a4:57:b7:02:5f:2a:c4:fa:e2:fc:3e:c1:40:2b:4d: ab:66:b5:c0:ad:5f:fe:b8:37:75:1d:a1:c9:03:e1: 1b:9d:e7:e8:2b:c7:0f:0b:47:d2:68:4f:a1:de:ba: 02:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:2F:22:BB:03:68:80:E6:3C:7D:68:08:A9:88:2E:8B:81:B6:5C X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:0a:a0:dc:d4:89:77:bb:78:cf:57:bc:f5:05:d5:6e:f6:00: c8:b6:cb:20:6e:bb:2b:4b:c5:45:dc:f3:b5:db:65:74:e6:64: d6:aa:7e:56:f7:99:67:1c:5c:b5:f0:f1:7b:f1:73:7b:5d:4e: fb:88:6b:26:a2:39:d6:36:a5:20:ae:02:3d:44:47:e6:b9:89: 54:83:6e:75:0b:fc:39:8e:e1:72:b6:17:ca:d1:85:7c:d1:3f: d9:ac:8e:86:8e:53:d1:67:87:33:41:2a:31:42:b2:b1:92:cb: 5d:5b:fb:2f:26:ef:b7:49:56:14:eb:a8:f7:36:17:40:48:ab: e9:5b:da:cd:2c:69:f4:32:7a:e5:90:b4:74:71:e9:45:b4:f1: 7a:a7:ee:cd:2e:a2:dc:cc:23:7d:05:23:57:d3:60:ac:a2:7c: 0c:ec:33:55:b5:64:66:95:27:88:c4:95:43:86:0c:61:73:43: 3c:e3:fe:c5:00:37:7c:81:49:2e:4d:a0:29:c9:0e:a2:85:fb: 0c:d3:dd:90:bb:54:f7:c7:a7:7d:b8:22:32:c0:86:5b:97:f1: 04:18:af:62:41:8a:ea:e6:c6:1a:b6:d7:90:a3:f9:8c:69:71: fe:15:a1:59:2b:4a:34:73:b0:9f:ce:9d:9d:fe:bd:0f:07:97: 2f:82:17:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHvWCdcsVQBpNQ5tbrc1zdkNEoYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNjA0MTYxMzM3NDBaFw0yNjA0MjAwMDQ2NDBaMDMxMTAvBgNV BAMTKDQwOUMyRjIyQkIwMzY4ODBFNjNDN0Q2ODA4QTk4ODJFOEI4MUI2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY7w3Ku4ND/3+DvcxnxZ22zAU2 3eoZgnM3cRvITxdGFPIhwIG2LzpiNnyjmaOqHrl6pEshNdgxwv1UAuwKGmcm+usn N69N1Qv832xx449VALu5OKOrH9J/lkRdQ1KPzVRvz/nXeeTlN3hIE1/+woYrwHdo 8ibzm3RGRNgIwYfOal1y5Vq8yn6NNw0xpyKtu5yPRrUtwlw5FvbvMHVfkp64kEex OWLkkyjrwOlYgDe2FvUZtaIrQ7SB+6sN0H4mgqPX1ZfrycFD5Biw56rvC2umCqRX twJfKsT64vw+wUArTatmtcCtX/64N3UdockD4Rud5+grxw8LR9JoT6HeugKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJwvIrsDaIDmPH1oCKmILouBtlwwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALsKoNzUiXe7eM9XvPUF1W72AMi2yyBuuytL xUXc87XbZXTmZNaqflb3mWccXLXw8Xvxc3tdTvuIayaiOdY2pSCuAj1ER+a5iVSD bnUL/DmO4XK2F8rRhXzRP9msjoaOU9FnhzNBKjFCsrGSy11b+y8m77dJVhTrqPc2 F0BIq+lb2s0safQyeuWQtHRx6UW08Xqn7s0uotzMI30FI1fTYKyifAzsM1W1ZGaV J4jElUOGDGFzQzzj/sUAN3yBSS5NoCnJDqKF+wzT3ZC7VPfHp324IjLAhluX8QQY r2JBiurmxhq215Cj+Yxpcf4VoVkrSjRzsJ/OnZ3+vQ8Hly+CF78= -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:19 2026 by rpki-client