$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: auooG/6/ndxPffEMzn5zpel3l7kunjMEu/OcDzL19DA= Subject key identifier: 1E:C9:56:8F:EB:B5:09:A6:25:89:55:C8:D3:BD:19:3E:E4:DC:CA:6C Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 75E3C9E65B1FE0DE7A4DF105F6C4D79D24309183 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 012F Signing time: Mon 20 Apr 2026 09:50:42 +0000 Manifest this update: Mon 20 Apr 2026 09:45:42 +0000 Manifest next update: Thu 23 Apr 2026 15:48:42 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: 4lhh1rz7cY/Ky5NE0KcPVgY5ML6urijKa/3a1baskiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:e3:c9:e6:5b:1f:e0:de:7a:4d:f1:05:f6:c4:d7:9d:24:30:91:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Apr 20 09:45:42 2026 GMT Not After : Apr 23 15:48:42 2026 GMT Subject: CN=1EC9568FEBB509A6258955C8D3BD193EE4DCCA6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c9:03:a7:d8:de:a6:87:ee:16:ef:ba:6b:dd: f5:35:bb:12:a4:73:f3:00:88:1c:7e:3d:20:ce:36: a9:cc:1f:ce:42:d6:4b:1d:81:31:8b:49:9e:6d:86: 0a:04:20:07:df:2a:e8:d1:e0:85:82:aa:42:f9:2d: f1:0e:01:19:50:09:bb:34:6f:ea:f3:fe:dc:82:8a: b5:92:ba:96:a9:00:f7:c3:2c:33:c1:40:a9:62:24: f8:f9:49:0e:50:74:2d:87:77:ab:c1:8d:a5:91:f4: 21:de:90:dd:19:ee:7e:23:92:d9:70:82:d0:29:b5: 6e:c4:d2:a9:60:78:72:86:82:7c:46:83:c7:d6:70: cb:f6:d4:25:69:72:c5:d9:e4:54:f0:4b:02:65:cd: 6e:ee:cb:76:47:6a:52:b1:61:3f:2c:6e:f8:4e:c0: 53:7b:a6:5e:51:61:4b:eb:0f:de:01:f8:b9:b6:b4: 93:45:31:5d:0e:74:87:ab:99:57:fc:1c:db:48:1f: 90:f1:0f:05:5b:6a:13:3a:cc:f0:08:07:52:df:dc: 6c:62:fa:f0:d4:f9:2a:35:17:e3:2c:80:4d:fb:83: 32:62:81:31:97:ae:55:7f:53:ff:ec:52:e6:53:35: f9:22:29:76:4d:98:e2:4d:9a:09:9e:20:83:92:71: dc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C9:56:8F:EB:B5:09:A6:25:89:55:C8:D3:BD:19:3E:E4:DC:CA:6C X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:76:bb:07:11:d2:57:9d:67:04:d8:e7:65:60:07:33:bd:97: 3c:86:fa:6f:5e:1c:df:b9:5d:c9:89:95:a0:3c:31:e1:f7:cb: 4d:20:2b:ee:c3:59:77:eb:6d:0f:c2:63:ba:2f:c7:30:ef:b0: 1a:2a:c6:f4:f0:3c:a7:d1:f2:00:88:9b:d9:d8:45:1c:99:b9: 78:0b:b1:90:a7:54:a0:da:54:fc:2a:81:41:2e:69:86:02:e9: 04:c3:98:16:72:ee:6a:b1:f6:ae:9d:9a:f4:cf:1a:f5:b4:9b: cf:35:89:37:ed:b4:24:cd:ca:d7:d5:ce:e1:da:9e:a7:6f:ec: 14:d8:ed:d0:4b:af:8d:11:33:1a:cc:ea:85:39:ed:07:f2:66: 23:9a:70:a9:ac:3e:f7:4d:c6:44:d8:40:a3:58:9d:9f:0d:2a: 6a:34:42:93:02:f2:77:3d:1c:c2:72:19:92:b2:62:c0:d7:e0: f9:dc:cd:2e:97:23:40:65:d4:a4:f4:bb:07:db:55:1b:e9:a7: fe:40:2a:71:7e:f6:87:a8:01:07:7b:bd:16:67:4c:f1:46:6b: 32:8e:b1:3e:d9:03:6a:1a:59:46:cf:6a:9f:c2:95:72:0b:24: cd:3a:74:d7:a8:d4:7f:ac:68:07:c8:75:6f:75:48:14:f5:bd: 5c:94:2e:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdePJ5lsf4N56TfEF9sTXnSQwkYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNjA0MjAwOTQ1NDJaFw0yNjA0MjMxNTQ4NDJaMDMxMTAvBgNV BAMTKDFFQzk1NjhGRUJCNTA5QTYyNTg5NTVDOEQzQkQxOTNFRTREQ0NBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryQOn2N6mh+4W77pr3fU1uxKk c/MAiBx+PSDONqnMH85C1ksdgTGLSZ5thgoEIAffKujR4IWCqkL5LfEOARlQCbs0 b+rz/tyCirWSupapAPfDLDPBQKliJPj5SQ5QdC2Hd6vBjaWR9CHekN0Z7n4jktlw gtAptW7E0qlgeHKGgnxGg8fWcMv21CVpcsXZ5FTwSwJlzW7uy3ZHalKxYT8sbvhO wFN7pl5RYUvrD94B+Lm2tJNFMV0OdIermVf8HNtIH5DxDwVbahM6zPAIB1Lf3Gxi +vDU+So1F+MsgE37gzJigTGXrlV/U//sUuZTNfkiKXZNmOJNmgmeIIOScdz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHslWj+u1CaYliVXI070ZPuTcymwwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ52uwcR0ledZwTY52VgBzO9lzyG+m9eHN+5 XcmJlaA8MeH3y00gK+7DWXfrbQ/CY7ovxzDvsBoqxvTwPKfR8gCIm9nYRRyZuXgL sZCnVKDaVPwqgUEuaYYC6QTDmBZy7mqx9q6dmvTPGvW0m881iTfttCTNytfVzuHa nqdv7BTY7dBLr40RMxrM6oU57QfyZiOacKmsPvdNxkTYQKNYnZ8NKmo0QpMC8nc9 HMJyGZKyYsDX4PnczS6XI0Bl1KT0uwfbVRvpp/5AKnF+9oeoAQd7vRZnTPFGazKO sT7ZA2oaWUbPap/ClXILJM06dNeo1H+saAfIdW91SBT1vVyULjw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client