$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: Fzs8UWfrkUsYxCyL/XyHFqBLadIyFINknPWwSH0+5ec= Subject key identifier: 86:D4:FD:0E:A7:7D:50:AB:65:F3:D0:F9:44:01:E4:46:B1:FB:EE:80 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 19F6554E6B1E4E052AFEC706C169A39F15DB37A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 011F Signing time: Tue 21 Apr 2026 06:51:55 +0000 Manifest this update: Tue 21 Apr 2026 06:46:55 +0000 Manifest next update: Fri 24 Apr 2026 08:06:55 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: 0uvlmfI5G7LyQYoeN0iuz+vuArgvJGb6oqoPf6nIqyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f6:55:4e:6b:1e:4e:05:2a:fe:c7:06:c1:69:a3:9f:15:db:37:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Apr 21 06:46:55 2026 GMT Not After : Apr 24 08:06:55 2026 GMT Subject: CN=86D4FD0EA77D50AB65F3D0F94401E446B1FBEE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:12:9a:ad:46:34:d3:ef:6a:18:1f:fe:c2: b0:38:fe:be:2c:65:39:85:c2:68:dc:ea:e1:b9:59: 42:36:75:25:13:ad:18:77:fe:29:ab:09:b8:ed:0c: 25:68:ab:8e:a2:7f:07:8c:c5:ea:a1:e8:cf:32:9e: cf:30:b8:2a:03:ac:9c:7a:fb:41:21:28:0e:1c:6e: b6:90:01:dc:9f:ab:89:1a:69:38:6a:b0:7a:66:56: 2a:0b:61:6c:70:e3:d7:bd:84:7e:e0:4c:48:e7:08: 73:5b:44:70:82:8a:6b:85:a1:b5:03:b8:5f:cb:d2: 59:77:f6:58:a9:72:83:e2:f5:fb:d6:75:a8:07:7f: 2a:80:2b:6c:be:b7:a9:1a:cc:d1:23:af:6b:ce:4c: 85:c8:5b:fe:f2:a3:c0:f8:05:f3:f1:e7:b8:90:7f: 5a:91:4d:5c:f0:45:c7:d2:8d:72:e0:89:1b:bc:46: e4:9a:b5:79:1a:95:dd:0f:63:bd:e0:27:ab:98:35: 2f:b7:9f:7a:69:b2:ef:d1:e8:b0:c1:88:b3:35:81: 25:44:18:85:8e:9c:98:3d:52:23:10:cb:0c:53:19: 9b:46:3f:7b:2c:b7:02:96:92:48:96:41:96:3a:2f: 06:d0:ab:21:89:76:f7:98:04:e9:81:5b:c5:c1:d0: b4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:FD:0E:A7:7D:50:AB:65:F3:D0:F9:44:01:E4:46:B1:FB:EE:80 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:77:14:3a:1a:55:ac:ce:2b:ab:a7:41:91:74:e5:68:06:33: cc:2d:39:8b:3e:12:b1:4e:63:51:eb:96:f9:6d:3c:f0:f4:28: 12:e5:6e:2a:b6:89:a1:2f:eb:ac:b6:e8:c3:0a:e0:35:c2:1c: eb:a4:2c:b1:c0:52:39:2a:71:a9:2a:69:a7:e4:0b:69:ad:2d: 2c:66:f9:b6:3a:85:18:6a:83:7a:70:68:5b:20:ee:ec:86:f5: 50:90:44:36:21:4a:c6:4a:4b:6d:bc:52:b0:a1:fa:4c:6a:53: d0:e2:c7:ce:8a:fd:b9:0e:0a:d9:7b:90:e0:ef:d1:a5:4f:7d: f4:5c:ef:73:fd:f1:58:42:66:bc:20:07:77:a0:4f:af:5e:59: d5:73:a8:23:68:95:69:ea:bc:8b:3b:29:4f:4b:50:8c:f0:17: cf:2f:f8:10:0b:db:13:de:dd:cc:b9:a0:95:4d:0e:2d:06:49: 95:83:02:d9:c9:50:e8:71:21:03:43:e3:37:f8:ed:ca:42:d1: 91:48:d9:30:3c:19:13:94:9e:5b:0c:54:0c:a1:28:d3:0e:79: bb:b6:90:08:bd:b6:71:14:21:a3:f4:cc:4a:94:bf:23:1a:ed: 57:15:c7:71:76:f3:f8:b1:07:41:f4:f1:69:20:aa:89:68:66: ea:64:50:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGfZVTmseTgUq/scGwWmjnxXbN6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNjA0MjEwNjQ2NTVaFw0yNjA0MjQwODA2NTVaMDMxMTAvBgNV BAMTKDg2RDRGRDBFQTc3RDUwQUI2NUYzRDBGOTQ0MDFFNDQ2QjFGQkVFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFRKarUY00+9qGB/+wrA4/r4s ZTmFwmjc6uG5WUI2dSUTrRh3/imrCbjtDCVoq46ifweMxeqh6M8yns8wuCoDrJx6 +0EhKA4cbraQAdyfq4kaaThqsHpmVioLYWxw49e9hH7gTEjnCHNbRHCCimuFobUD uF/L0ll39lipcoPi9fvWdagHfyqAK2y+t6kazNEjr2vOTIXIW/7yo8D4BfPx57iQ f1qRTVzwRcfSjXLgiRu8RuSatXkald0PY73gJ6uYNS+3n3ppsu/R6LDBiLM1gSVE GIWOnJg9UiMQywxTGZtGP3sstwKWkkiWQZY6LwbQqyGJdveYBOmBW8XB0LTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtT9Dqd9UKtl89D5RAHkRrH77oAwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANh3FDoaVazOK6unQZF05WgGM8wtOYs+ErFO Y1HrlvltPPD0KBLlbiq2iaEv66y26MMK4DXCHOukLLHAUjkqcakqaafkC2mtLSxm +bY6hRhqg3pwaFsg7uyG9VCQRDYhSsZKS228UrCh+kxqU9Dix86K/bkOCtl7kODv 0aVPffRc73P98VhCZrwgB3egT69eWdVzqCNolWnqvIs7KU9LUIzwF88v+BAL2xPe 3cy5oJVNDi0GSZWDAtnJUOhxIQND4zf47cpC0ZFI2TA8GROUnlsMVAyhKNMOebu2 kAi9tnEUIaP0zEqUvyMa7VcVx3F28/ixB0H08WkgqoloZupkUMM= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:47 2026 by rpki-client