$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: QYSj4BZ1y6pepTSwumN8HL42Be/sGISoUxzZEmNijBs= Subject key identifier: 35:57:01:B1:F9:71:8C:15:3A:27:C8:CB:99:0B:5B:42:9F:54:21:BC Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 64567C14E249CC6698A095136019C523F83CF130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: ED Signing time: Wed 22 Apr 2026 00:12:11 +0000 Manifest this update: Wed 22 Apr 2026 00:07:11 +0000 Manifest next update: Sat 25 Apr 2026 00:48:11 +0000 Files and hashes: 1: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: lby7QPfrZzteOxvfVWJjIufGfqkwTorMpfeSiCi/5go=) 2: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: XfY4we6jzKf244te76Sh5o4SXguYwnH8MGIYft8mlas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:56:7c:14:e2:49:cc:66:98:a0:95:13:60:19:c5:23:f8:3c:f1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Apr 22 00:07:11 2026 GMT Not After : Apr 25 00:48:11 2026 GMT Subject: CN=355701B1F9718C153A27C8CB990B5B429F5421BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:60:c8:6c:f3:26:5e:a6:f7:75:7b:18:f1:96: 51:7c:aa:69:0e:fc:49:63:73:0b:f9:48:94:75:78: 7a:40:55:be:6c:33:83:47:1f:87:bb:a9:7f:a6:da: c2:19:0c:90:0f:e5:8e:df:13:70:a8:1c:c0:57:ac: 43:53:22:11:3e:4a:a2:2c:a6:9a:a9:92:ad:6d:d6: c1:27:47:62:18:c0:c0:d2:0d:41:46:bc:7a:aa:47: f9:14:ea:e6:be:40:79:ed:46:dc:01:47:de:c2:76: f9:f0:7f:a4:09:93:9b:63:35:da:5d:14:a5:9e:86: 2e:bf:c5:bc:0a:26:96:83:54:49:ff:46:ad:b3:96: 8a:b9:b0:f7:88:56:67:6c:f6:f4:ae:75:20:4e:54: 20:f2:7b:83:65:69:5f:4f:fc:68:2a:3a:71:c7:9e: 4f:fc:02:e0:fc:76:05:1f:ec:d7:bd:12:cc:99:76: 47:48:71:18:ae:a6:a5:fa:06:e3:5d:b4:8b:b4:08: ae:19:52:78:b1:73:a9:b8:13:db:5d:9d:a2:48:a9: 27:63:1b:ec:32:b3:41:bb:05:e0:1f:5f:a3:b5:b3: 20:a6:88:54:ed:e5:7e:91:44:7d:7b:4e:ad:53:6f: d0:cf:e3:aa:53:74:c5:ee:dc:37:85:13:c7:8b:7a: e7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:57:01:B1:F9:71:8C:15:3A:27:C8:CB:99:0B:5B:42:9F:54:21:BC X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:78:1d:0a:4e:c5:05:66:bc:75:96:8f:1d:bd:35:65:ec:c2: c3:75:cc:56:c2:dc:ca:bc:dd:92:cd:ad:23:c1:04:43:65:86: 0a:23:0f:73:83:2d:85:83:27:a4:c4:8b:8e:5a:46:18:ca:74: b9:80:80:78:fe:dd:fb:fe:79:58:00:02:a0:17:05:65:02:73: 5d:47:8c:b2:5b:d0:25:52:bd:0a:ed:b6:f2:52:48:41:0a:85: de:65:d6:7a:78:50:2e:c6:18:89:fd:28:d5:30:e8:0e:5e:0a: 38:7e:22:e2:bd:9d:e7:73:99:1f:62:09:28:79:91:e9:4d:2b: 09:59:27:24:ad:18:80:55:c3:67:e1:2d:4e:2e:93:0f:02:83: 27:9c:ad:08:2a:bf:1c:da:05:fb:01:4f:cf:32:33:1d:b4:54: 76:aa:e0:d0:46:ef:da:09:f0:33:ff:51:7d:b7:56:a8:39:5c: e9:97:7b:c7:28:bb:e5:8e:ea:76:91:7b:fc:62:53:5b:20:2c: 17:0a:d6:79:1c:79:1e:d5:33:58:3b:07:38:53:3a:00:38:67: 65:4c:d5:8a:af:70:1a:6a:d1:28:75:49:3e:81:49:11:91:1c: 66:fa:6c:b9:ea:a5:0b:0c:8a:1f:ea:ce:37:85:10:7e:1f:11: 8e:8f:cb:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFZ8FOJJzGaYoJUTYBnFI/g88TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNjA0MjIwMDA3MTFaFw0yNjA0MjUwMDQ4MTFaMDMxMTAvBgNV BAMTKDM1NTcwMUIxRjk3MThDMTUzQTI3QzhDQjk5MEI1QjQyOUY1NDIxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnYMhs8yZepvd1exjxllF8qmkO /Eljcwv5SJR1eHpAVb5sM4NHH4e7qX+m2sIZDJAP5Y7fE3CoHMBXrENTIhE+SqIs ppqpkq1t1sEnR2IYwMDSDUFGvHqqR/kU6ua+QHntRtwBR97Cdvnwf6QJk5tjNdpd FKWehi6/xbwKJpaDVEn/Rq2zloq5sPeIVmds9vSudSBOVCDye4NlaV9P/GgqOnHH nk/8AuD8dgUf7Ne9EsyZdkdIcRiupqX6BuNdtIu0CK4ZUnixc6m4E9tdnaJIqSdj G+wys0G7BeAfX6O1syCmiFTt5X6RRH17Tq1Tb9DP46pTdMXu3DeFE8eLeufpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNVcBsflxjBU6J8jLmQtbQp9UIbwwHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHh4HQpOxQVmvHWWjx29NWXswsN1zFbC3Mq8 3ZLNrSPBBENlhgojD3ODLYWDJ6TEi45aRhjKdLmAgHj+3fv+eVgAAqAXBWUCc11H jLJb0CVSvQrttvJSSEEKhd5l1np4UC7GGIn9KNUw6A5eCjh+IuK9nedzmR9iCSh5 kelNKwlZJyStGIBVw2fhLU4ukw8CgyecrQgqvxzaBfsBT88yMx20VHaq4NBG79oJ 8DP/UX23Vqg5XOmXe8cou+WO6naRe/xiU1sgLBcK1nkceR7VM1g7BzhTOgA4Z2VM 1YqvcBpq0Sh1ST6BSRGRHGb6bLnqpQsMih/qzjeFEH4fEY6Py0Q= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:45 2026 by rpki-client