$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: qj8b2OLedNx44xpTkWX2+W1E3lMLi6idmhqX58Huje0= Subject key identifier: FA:22:DE:BB:CD:7E:F9:FE:46:58:F9:27:0D:FB:8B:31:60:08:EB:0F Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 744FAA536A25E973D80007F2964EC2725249FB6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 051C Signing time: Tue 31 Mar 2026 10:01:57 +0000 Manifest this update: Tue 31 Mar 2026 09:56:57 +0000 Manifest next update: Fri 03 Apr 2026 20:48:57 +0000 Files and hashes: 1: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: VQOt2vnpKQzkU83zmB0ibM5573r1Ekum451oQGQcCow=) 2: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: 1I55HZV9ASBX91G1gmKkN8XsoZ52BjLH6TscAGFfb1w=) 3: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: voGeHKK4ikA3uaKs2J+WeJLtpIfTnr3JdLSLAJpRJmc=) 4: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: VKvXvb3BP6384nLUH1LdjT/mbF098hu6bIg7H4DeDLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 20:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:4f:aa:53:6a:25:e9:73:d8:00:07:f2:96:4e:c2:72:52:49:fb:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Mar 31 09:56:57 2026 GMT Not After : Apr 3 20:48:57 2026 GMT Subject: CN=FA22DEBBCD7EF9FE4658F9270DFB8B316008EB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:45:95:a4:2d:28:d0:93:e0:75:fc:b2:13: 10:11:70:83:99:3d:f8:2f:28:55:f3:c3:94:82:0b: 7e:87:e3:a5:c2:37:00:7b:1d:d6:4c:85:4e:b7:c4: cb:58:c7:d3:ba:24:2c:c6:22:77:ee:f3:c5:c0:02: 25:e0:af:99:46:d9:6e:45:1b:3a:5d:7f:c2:ec:84: 0c:2f:af:ac:30:cc:17:8c:f6:2e:aa:be:49:21:1b: dc:43:65:50:5d:ce:14:52:e4:c7:e7:61:3f:72:3a: 7d:bb:0d:56:68:18:af:9a:45:6f:d7:15:41:54:77: f0:6f:e3:a4:c7:86:12:60:45:43:a2:52:5b:8e:c8: ba:e6:ff:45:72:b5:d3:25:2a:a0:03:e3:dd:c2:23: f2:f9:6b:b3:40:1c:ca:15:fa:ef:3f:0b:35:9c:3e: e9:df:73:96:b8:9e:f8:2d:8e:fe:ed:66:32:58:bd: e9:6e:33:30:75:45:e9:3c:df:62:fb:57:4a:23:26: d4:dc:b2:1c:92:6f:d9:a6:f4:b2:ee:47:0b:27:66: a7:10:fc:82:64:25:b3:ea:8d:4d:98:65:ef:a1:64: e0:0a:de:23:93:0f:da:bb:46:11:e3:ba:1b:1c:1a: c4:9a:bc:b4:1a:a9:3b:e3:d6:c3:44:fb:30:be:f7: ce:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:22:DE:BB:CD:7E:F9:FE:46:58:F9:27:0D:FB:8B:31:60:08:EB:0F X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:77:7d:b0:0a:e7:68:fa:6f:d7:71:2a:c3:98:b5:4c:7b:19: 39:ff:24:54:8b:21:06:66:39:2f:82:1d:a4:65:c4:a3:76:4a: 61:90:80:be:3e:ba:50:cf:d2:8c:6d:55:4f:f9:9d:e3:b2:5e: c1:46:34:4c:5e:b2:e4:85:93:47:35:ef:00:ce:69:04:49:f3: 87:95:d0:3a:62:6f:be:ca:d7:83:15:4f:30:c9:12:4c:6c:2e: 51:b0:3b:be:f6:5a:24:e3:d8:8a:72:d0:d5:9b:88:d6:9f:13: 51:86:41:37:88:bc:11:bd:84:34:1e:f7:bc:3a:8f:d5:f5:85: 90:7b:41:33:de:8a:e1:32:07:9f:77:12:af:62:7e:02:30:c2: b7:bd:e3:d8:68:bf:b2:12:40:6e:98:39:40:a5:96:a7:3d:d5: fc:04:f1:a2:6c:92:8c:1e:c9:b3:17:70:bc:f3:3e:02:b0:4d: 40:c8:14:d5:1a:a1:6c:01:61:5d:00:3d:fc:66:d1:85:e5:55: f5:18:1d:da:09:11:7d:e8:98:f2:31:9d:4e:9d:a6:ac:e8:f4: 5a:1a:ee:88:2d:c0:3a:c9:8c:8e:f4:1b:12:b5:57:25:6e:f3: d1:d7:18:ea:0e:55:12:5f:3c:ba:02:f0:5c:7c:2e:01:38:6b: 24:fb:da:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdE+qU2ol6XPYAAfylk7CclJJ+24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNjAzMzEwOTU2NTdaFw0yNjA0MDMyMDQ4NTdaMDMxMTAvBgNV BAMTKEZBMjJERUJCQ0Q3RUY5RkU0NjU4RjkyNzBERkI4QjMxNjAwOEVCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj90WVpC0o0JPgdfyyExARcIOZ PfgvKFXzw5SCC36H46XCNwB7HdZMhU63xMtYx9O6JCzGInfu88XAAiXgr5lG2W5F Gzpdf8LshAwvr6wwzBeM9i6qvkkhG9xDZVBdzhRS5MfnYT9yOn27DVZoGK+aRW/X FUFUd/Bv46THhhJgRUOiUluOyLrm/0VytdMlKqAD493CI/L5a7NAHMoV+u8/CzWc Punfc5a4nvgtjv7tZjJYveluMzB1Rek832L7V0ojJtTcshySb9mm9LLuRwsnZqcQ /IJkJbPqjU2YZe+hZOAK3iOTD9q7RhHjuhscGsSavLQaqTvj1sNE+zC+984rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iLeu81++f5GWPknDfuLMWAI6w8wHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIV3fbAK52j6b9dxKsOYtUx7GTn/JFSLIQZm OS+CHaRlxKN2SmGQgL4+ulDP0oxtVU/5neOyXsFGNExesuSFk0c17wDOaQRJ84eV 0Dpib77K14MVTzDJEkxsLlGwO772WiTj2Ipy0NWbiNafE1GGQTeIvBG9hDQe97w6 j9X1hZB7QTPeiuEyB593Eq9ifgIwwre949hov7ISQG6YOUCllqc91fwE8aJskowe ybMXcLzzPgKwTUDIFNUaoWwBYV0APfxm0YXlVfUYHdoJEX3omPIxnU6dpqzo9Foa 7ogtwDrJjI70GxK1VyVu89HXGOoOVRJfPLoC8Fx8LgE4ayT72iw= -----END CERTIFICATE-----Generated at Thu Apr 2 05:43:10 2026 by rpki-client