$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: QDccKD0BKWK/ctnU2bg7QckgcZN2fwJhp6xmspJsy10= Subject key identifier: 40:76:77:2F:29:43:8C:B6:20:F3:00:01:C7:E3:D3:34:07:58:31:C3 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 19EC585E4CCF4AC714E4B23039CB8CC683875FB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: 0133 Signing time: Mon 20 Apr 2026 15:22:20 +0000 Manifest this update: Mon 20 Apr 2026 15:17:20 +0000 Manifest next update: Fri 24 Apr 2026 00:35:20 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: DsvjqmGxwPLkv0tSrE+ZJTDB747qTJVlkCsQD4PRKS0=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: DACNVzXEM6lgnUUx4GK8VFb6Qeh+C+QT+SwlBAFIZHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ec:58:5e:4c:cf:4a:c7:14:e4:b2:30:39:cb:8c:c6:83:87:5f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Apr 20 15:17:20 2026 GMT Not After : Apr 24 00:35:20 2026 GMT Subject: CN=4076772F29438CB620F30001C7E3D334075831C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:3a:1c:b5:47:bd:d4:6c:7a:e5:55:ee:5a: dd:47:c3:67:03:68:e8:1b:88:7e:96:df:b1:6d:bf: df:39:4f:52:d6:6a:00:52:52:f5:02:0d:72:0e:63: 06:e3:49:d3:3c:80:04:83:5a:e2:18:a7:90:a0:27: 6f:9f:e4:d0:66:de:98:66:99:3f:d1:08:cf:d6:6b: cc:08:f9:56:a7:0b:76:39:5b:9d:77:e8:8d:96:e4: ab:b8:63:45:c1:ab:d1:91:79:a5:ce:2a:d0:5e:3e: 18:73:10:98:d4:44:09:61:29:17:51:9b:74:da:82: 8a:4e:00:84:e9:67:15:82:95:30:c8:ad:25:71:f3: 91:5f:5b:31:4c:5f:5c:9f:a7:f3:2c:d6:a6:c7:e2: 39:b8:3a:39:1f:88:6d:c6:d3:04:2b:6c:61:47:1b: 44:98:b0:e1:97:97:c0:ed:5b:7a:54:d5:36:db:a3: 27:73:bd:c7:6d:a2:48:90:2d:bd:56:76:66:a0:15: c5:bd:03:6f:bb:3f:12:d4:8e:36:35:0b:81:82:0d: e6:d9:4e:8c:f6:d2:ce:39:7b:06:2f:b2:e4:8c:20: 68:f0:4f:75:f9:8f:68:23:87:cb:4e:03:ff:a9:ae: 66:3d:f6:6e:46:0a:b2:d4:7a:21:a2:cb:fa:c7:18: 82:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:76:77:2F:29:43:8C:B6:20:F3:00:01:C7:E3:D3:34:07:58:31:C3 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d2:08:76:1b:a0:09:c4:22:5a:2a:74:9d:ae:2c:20:d4:d9: 69:92:c8:e8:8f:07:bf:33:8c:16:80:ba:a7:6f:43:dd:66:7d: 66:a1:49:42:99:6d:d5:86:e4:e0:c3:7f:54:9c:0c:9e:df:6c: 37:53:2f:bf:62:c6:93:e9:3b:5a:6c:8f:e7:8d:df:b7:05:73: 33:5f:e0:31:12:4b:f7:66:aa:27:88:5a:91:9d:41:b4:73:3b: 91:47:d4:82:a4:5a:f0:0a:2a:de:84:86:b4:b0:ca:e3:27:a4: c8:af:32:29:32:c4:f4:7d:fd:05:6b:ba:03:18:32:b1:4c:e3: 23:c1:5a:ef:99:9c:ff:ff:07:2a:af:55:84:b0:cf:ae:62:f1: ca:21:2a:1d:e1:f7:ba:fa:78:90:ce:72:54:28:28:77:3f:43: db:9e:e7:4f:b8:56:a6:04:82:61:59:90:8f:6f:25:d3:f2:17: cf:9b:f0:62:4f:14:f6:3d:b4:25:15:1b:16:a2:7d:ee:70:c1: 42:2a:ac:50:6f:fe:10:b0:9f:c9:43:82:34:6b:13:cb:07:92: 1c:9e:ca:7e:23:b3:dc:a4:04:b1:a3:dc:cc:2c:72:0f:1a:d8: 56:fb:ff:d4:0f:7e:b8:92:8e:b2:34:85:58:9f:6b:61:ed:63: f3:f1:b3:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGexYXkzPSscU5LIwOcuMxoOHX7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNjA0MjAxNTE3MjBaFw0yNjA0MjQwMDM1MjBaMDMxMTAvBgNV BAMTKDQwNzY3NzJGMjk0MzhDQjYyMEYzMDAwMUM3RTNEMzM0MDc1ODMxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7zoctUe91Gx65VXuWt1Hw2cD aOgbiH6W37Ftv985T1LWagBSUvUCDXIOYwbjSdM8gASDWuIYp5CgJ2+f5NBm3phm mT/RCM/Wa8wI+VanC3Y5W5136I2W5Ku4Y0XBq9GReaXOKtBePhhzEJjURAlhKRdR m3TagopOAITpZxWClTDIrSVx85FfWzFMX1yfp/Ms1qbH4jm4OjkfiG3G0wQrbGFH G0SYsOGXl8DtW3pU1TbboydzvcdtokiQLb1WdmagFcW9A2+7PxLUjjY1C4GCDebZ Toz20s45ewYvsuSMIGjwT3X5j2gjh8tOA/+prmY99m5GCrLUeiGiy/rHGILvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQHZ3LylDjLYg8wABx+PTNAdYMcMwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXSCHYboAnEIloqdJ2uLCDU2WmSyOiPB78z jBaAuqdvQ91mfWahSUKZbdWG5ODDf1ScDJ7fbDdTL79ixpPpO1psj+eN37cFczNf 4DESS/dmqieIWpGdQbRzO5FH1IKkWvAKKt6EhrSwyuMnpMivMikyxPR9/QVrugMY MrFM4yPBWu+ZnP//ByqvVYSwz65i8cohKh3h97r6eJDOclQoKHc/Q9ue50+4VqYE gmFZkI9vJdPyF8+b8GJPFPY9tCUVGxaife5wwUIqrFBv/hCwn8lDgjRrE8sHkhye yn4js9ykBLGj3Mwscg8a2Fb7/9QPfriSjrI0hVifa2HtY/Pxs3o= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:16 2026 by rpki-client