$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft File: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft (raw, json) Hash identifier: 3p2LPOKBXbpU0gyily6qQdR/f/VQ8CxC854M+Yoj2Go= Subject key identifier: D5:90:A2:DB:28:20:52:2E:F0:0A:80:DB:8B:75:C9:9A:02:3E:30:FB Authority key identifier: 2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 Certificate issuer: /CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Certificate serial: 41939A5498510D456A333B59BAAF45F0CFA2FED1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft Manifest number: 01F2 Signing time: Mon 20 Apr 2026 21:50:47 +0000 Manifest this update: Mon 20 Apr 2026 21:45:47 +0000 Manifest next update: Fri 24 Apr 2026 00:07:47 +0000 Files and hashes: 1: 3130332e3137372e3231392e302f32342d3234203d3e20313331373639.roa (hash: Er3SZg2wUj/P2Phj94Rs/pKQreK157hBoR/0FApk3DI=) 2: 3130332e3137372e3231382e302f32342d3234203d3e20313331373639.roa (hash: NgiCiwYgDeYQaPatps9fGhPQzocYHvig3vWSvQTITq4=) 3: 2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl (hash: blxZ6hALSX705F80EM6TG3/oeBOaKRAICHlSBbH8e5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:93:9a:54:98:51:0d:45:6a:33:3b:59:ba:af:45:f0:cf:a2:fe:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AAFA81414EDCB1032235F2240FE06773F3E6F16 Validity Not Before: Apr 20 21:45:47 2026 GMT Not After : Apr 24 00:07:47 2026 GMT Subject: CN=D590A2DB2820522EF00A80DB8B75C99A023E30FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:1f:d4:3b:6f:53:a6:dd:2d:a5:c3:b0:d9: b7:c5:17:ce:06:fa:24:39:db:53:1e:8e:5c:d7:4d: ec:68:a5:b9:0a:b0:07:ce:11:68:65:48:d3:cc:7c: 48:dd:9a:54:d6:f5:b7:f0:9d:ef:f0:5b:e1:a1:ec: 11:db:2a:78:a4:93:39:18:e9:1b:65:46:02:a4:29: ef:eb:27:9c:63:12:7f:28:b7:df:03:17:1b:25:f4: 55:3f:73:19:15:4c:ad:79:ae:17:e1:b5:cd:6a:01: 0b:95:e9:e7:31:8e:f7:dc:c9:ee:f7:bf:13:05:6f: 5c:35:d8:53:e3:c0:2e:65:5b:64:74:fd:c3:0b:3d: a9:4e:b6:90:aa:8e:f8:da:97:a6:9a:12:b9:dc:f5: f4:67:82:38:4b:19:3c:00:da:33:52:79:47:e0:a4: e9:f3:31:9a:40:5a:d1:64:7f:96:27:2a:f0:b6:81: a0:3d:24:b5:ef:be:b2:5c:50:3e:0d:c5:67:30:50: 56:53:8d:55:b1:1a:de:c2:1e:2b:33:ef:b1:d6:be: cf:f1:8e:d0:9d:15:74:66:66:3c:41:5b:74:02:d5: e1:1c:c8:b5:d5:e7:58:bf:93:bb:95:e2:81:82:1d: 69:37:e7:76:11:5e:7b:3c:cb:6c:b6:35:69:c1:25: e3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:A2:DB:28:20:52:2E:F0:0A:80:DB:8B:75:C9:9A:02:3E:30:FB X509v3 Authority Key Identifier: keyid:2A:AF:A8:14:14:ED:CB:10:32:23:5F:22:40:FE:06:77:3F:3E:6F:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AAFA81414EDCB1032235F2240FE06773F3E6F16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab8e60f-f993-4534-9da0-f285a8603f69/0/2AAFA81414EDCB1032235F2240FE06773F3E6F16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f0:6c:cb:87:8b:c3:d5:34:aa:ba:73:7e:e5:8b:2e:c1:9b: c8:b2:ef:3a:9b:9e:ae:35:8d:7b:66:ac:0b:2a:97:ee:aa:94: 3d:7b:28:0d:c0:82:2d:00:9a:87:b3:44:90:b8:2c:52:5b:8f: fd:de:4c:fb:14:ce:be:29:15:c8:51:86:a2:56:e6:9c:5e:67: 57:94:de:8a:72:12:8e:6a:8e:2c:b1:40:bd:42:63:13:c0:d7: 62:05:89:37:61:66:bc:0a:3f:cd:ee:f6:bd:95:a5:63:56:11: c5:b6:05:8f:ec:4f:b4:dd:5f:34:98:66:59:26:f6:cf:2e:6c: fc:17:57:61:3f:48:f3:6c:7a:23:fa:00:4c:c1:98:d4:28:14: c0:c7:d1:ad:e9:7a:d3:9f:68:6c:f7:f9:ff:ec:78:8e:ef:90: e4:1a:f1:04:0e:70:48:29:d5:90:53:d4:76:1d:04:6b:a8:7d: 66:7f:b2:02:b9:7d:7a:76:a5:58:7b:0f:b6:7a:c5:27:78:42: 10:45:80:11:95:eb:17:fc:c8:45:b8:3a:be:d2:2f:16:23:7d: 1a:88:f2:57:58:65:cd:1c:f4:d1:a6:2a:55:c9:65:31:5b:01: cc:21:66:90:88:1a:aa:9d:61:9e:fa:0a:45:ab:87:21:4b:2e: 95:ef:f7:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZOaVJhRDUVqMztZuq9F8M+i/tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2Nzcz RjNFNkYxNjAeFw0yNjA0MjAyMTQ1NDdaFw0yNjA0MjQwMDA3NDdaMDMxMTAvBgNV BAMTKEQ1OTBBMkRCMjgyMDUyMkVGMDBBODBEQjhCNzVDOTlBMDIzRTMwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEx/UO29Tpt0tpcOw2bfFF84G +iQ521MejlzXTexopbkKsAfOEWhlSNPMfEjdmlTW9bfwne/wW+Gh7BHbKnikkzkY 6RtlRgKkKe/rJ5xjEn8ot98DFxsl9FU/cxkVTK15rhfhtc1qAQuV6ecxjvfcye73 vxMFb1w12FPjwC5lW2R0/cMLPalOtpCqjvjal6aaErnc9fRngjhLGTwA2jNSeUfg pOnzMZpAWtFkf5YnKvC2gaA9JLXvvrJcUD4NxWcwUFZTjVWxGt7CHisz77HWvs/x jtCdFXRmZjxBW3QC1eEcyLXV51i/k7uV4oGCHWk353YRXns8y2y2NWnBJeN7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZCi2yggUi7wCoDbi3XJmgI+MPswHwYDVR0j BBgwFoAUKq+oFBTtyxAyI18iQP4Gdz8+bxYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWI4ZTYwZi1mOTkzLTQ1MzQtOWRhMC1mMjg1YTg2MDNmNjkvMC8yQUFGQTgxNDE0 RURDQjEwMzIyMzVGMjI0MEZFMDY3NzNGM0U2RjE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2NzczRjNF NkYxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiOGU2MGYtZjk5My00NTM0LTlk YTAtZjI4NWE4NjAzZjY5LzAvMkFBRkE4MTQxNEVEQ0IxMDMyMjM1RjIyNDBGRTA2 NzczRjNFNkYxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3wbMuHi8PVNKq6c37liy7Bm8iy7zqbnq41 jXtmrAsql+6qlD17KA3Agi0AmoezRJC4LFJbj/3eTPsUzr4pFchRhqJW5pxeZ1eU 3opyEo5qjiyxQL1CYxPA12IFiTdhZrwKP83u9r2VpWNWEcW2BY/sT7TdXzSYZlkm 9s8ubPwXV2E/SPNseiP6AEzBmNQoFMDH0a3petOfaGz3+f/seI7vkOQa8QQOcEgp 1ZBT1HYdBGuofWZ/sgK5fXp2pVh7D7Z6xSd4QhBFgBGV6xf8yEW4Or7SLxYjfRqI 8ldYZc0c9NGmKlXJZTFbAcwhZpCIGqqdYZ76CkWrhyFLLpXv92Q= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:30 2026 by rpki-client