$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: tVqdl7QMZx3OXgRPeOIW/rT8FixxC2wy9dXm+4rS+NI= Subject key identifier: 3D:58:06:F4:F9:0D:DB:10:2D:28:3E:05:77:B4:D6:47:DF:E9:CD:CD Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 2164ED4F3C94A687C63DA5C4A9455F023CE29561 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 02BB Signing time: Mon 20 Apr 2026 09:51:22 +0000 Manifest this update: Mon 20 Apr 2026 09:46:22 +0000 Manifest next update: Thu 23 Apr 2026 20:44:22 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: Vd+/H2fBdcSr6lnlfqWvuVqUzgPc1k+37NGr97b+vTM=) 2: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:64:ed:4f:3c:94:a6:87:c6:3d:a5:c4:a9:45:5f:02:3c:e2:95:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Apr 20 09:46:22 2026 GMT Not After : Apr 23 20:44:22 2026 GMT Subject: CN=3D5806F4F90DDB102D283E0577B4D647DFE9CDCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:b2:24:4f:05:38:52:d6:b7:6c:16:cb:b0: 55:73:fc:17:a4:36:20:10:57:a4:39:60:c2:05:3a: 67:ab:e9:54:13:df:c8:a5:9f:75:f6:42:47:d6:94: 7f:b7:d0:77:dd:8a:f0:78:76:a8:8e:fe:31:59:c4: 90:ff:db:af:c3:46:e4:8f:7b:d1:ec:a8:29:ab:3c: fa:28:9e:27:28:86:0d:21:98:03:ad:7c:78:58:7b: a1:5d:54:64:42:de:dd:17:60:4a:0f:ee:20:70:97: f3:04:fd:ee:8a:59:40:0d:7f:06:cb:7e:54:db:28: b3:bb:d8:ba:3c:0f:2a:b4:1d:37:50:10:2f:14:62: 5d:7a:50:6a:f2:0a:f9:e8:d7:98:a1:78:1b:ac:0a: d7:ea:65:6a:6f:58:a6:41:76:67:cc:52:9b:ee:57: 5e:79:36:2e:01:20:22:c4:d3:6e:2b:db:71:cd:b4: 88:38:74:e5:e5:c8:b4:67:7a:ab:cd:21:27:c4:40: db:60:91:22:36:d0:c6:6b:9d:86:fa:22:0d:d0:54: d3:56:62:ae:7d:72:f9:b5:ab:bf:15:60:14:45:48: 94:04:75:04:95:8c:4f:6e:fc:89:c9:a7:14:8a:a6: 9a:60:e9:54:e3:41:b4:37:cc:fd:f6:3e:85:ab:f9: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:58:06:F4:F9:0D:DB:10:2D:28:3E:05:77:B4:D6:47:DF:E9:CD:CD X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:57:ca:eb:1b:0f:78:4e:92:c3:d6:f1:bf:bd:76:89:61:6d: 64:af:d8:74:e2:f6:63:18:4e:b7:64:8e:30:5f:53:2e:4d:9a: 6c:19:f5:53:d4:27:aa:98:f5:60:92:c6:36:bb:72:fc:94:c5: 64:f5:7a:67:1c:6f:93:92:20:f5:75:9b:6d:ce:98:2b:a6:38: 01:e9:86:06:a6:f7:e8:05:97:85:68:41:ab:7a:fd:09:91:e1: 21:52:a1:c9:b4:cb:db:41:84:08:05:e9:44:e4:e3:92:1b:cb: d3:18:fb:ea:f2:4c:e2:d2:2c:0d:c9:b0:7c:30:8b:7b:39:b5: b8:3c:28:32:52:20:17:b6:c9:51:d2:ab:ca:98:e3:4b:03:12: 5a:85:67:c4:dc:64:b1:a0:3c:b4:8e:d9:99:27:8d:03:8e:23: 78:97:24:81:51:0b:4b:e7:08:1c:94:59:28:9c:f8:b4:c2:5b: 46:5e:8d:e3:8c:05:9f:14:64:33:eb:46:5f:ec:47:63:5f:5a: 2d:60:fe:a8:52:06:61:7f:78:ac:9e:f6:c5:45:c4:3b:d0:c4: ba:34:ed:6d:bb:29:4f:4a:5e:42:59:59:94:bd:8a:55:7b:4a: f6:7e:0a:3f:bf:64:98:a3:36:36:bc:49:86:a8:c1:83:04:e4: 92:68:a6:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWTtTzyUpofGPaXEqUVfAjzilWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNjA0MjAwOTQ2MjJaFw0yNjA0MjMyMDQ0MjJaMDMxMTAvBgNV BAMTKDNENTgwNkY0RjkwRERCMTAyRDI4M0UwNTc3QjRENjQ3REZFOUNEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajLIkTwU4Uta3bBbLsFVz/Bek NiAQV6Q5YMIFOmer6VQT38iln3X2QkfWlH+30HfdivB4dqiO/jFZxJD/26/DRuSP e9HsqCmrPPoonicohg0hmAOtfHhYe6FdVGRC3t0XYEoP7iBwl/ME/e6KWUANfwbL flTbKLO72Lo8Dyq0HTdQEC8UYl16UGryCvno15iheBusCtfqZWpvWKZBdmfMUpvu V155Ni4BICLE024r23HNtIg4dOXlyLRneqvNISfEQNtgkSI20MZrnYb6Ig3QVNNW Yq59cvm1q78VYBRFSJQEdQSVjE9u/InJpxSKpppg6VTjQbQ3zP32PoWr+cULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPVgG9PkN2xAtKD4Fd7TWR9/pzc0wHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5XyusbD3hOksPW8b+9dolhbWSv2HTi9mMY TrdkjjBfUy5NmmwZ9VPUJ6qY9WCSxja7cvyUxWT1emccb5OSIPV1m23OmCumOAHp hgam9+gFl4VoQat6/QmR4SFSocm0y9tBhAgF6UTk45Iby9MY++ryTOLSLA3JsHww i3s5tbg8KDJSIBe2yVHSq8qY40sDElqFZ8TcZLGgPLSO2ZknjQOOI3iXJIFRC0vn CByUWSic+LTCW0ZejeOMBZ8UZDPrRl/sR2NfWi1g/qhSBmF/eKye9sVFxDvQxLo0 7W27KU9KXkJZWZS9ilV7SvZ+Cj+/ZJijNja8SYaowYME5JJopqA= -----END CERTIFICATE-----Generated at Wed Apr 22 07:26:50 2026 by rpki-client