$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: mdYqNKUSUc9PzoNMCWS9bTaAX0dBttze5QHgJLnyrWc= Subject key identifier: 20:0C:07:C1:93:6B:A4:0D:6F:A0:8F:F3:F2:8C:10:76:F6:BF:05:92 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 1893660163C397027D8386F2B0CA9AFF0882D657 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 0230 Signing time: Sun 19 Apr 2026 08:22:01 +0000 Manifest this update: Sun 19 Apr 2026 08:17:01 +0000 Manifest next update: Wed 22 Apr 2026 19:25:01 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 3/I5WnTW0o3o4BxjPn07fjB6oJ2hzHHWC+KJmHPP+Xo=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: jWQI6LPdnDNubtpwhRmszSA0Y5bZBxr7CwJjx+OnnV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 19:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:93:66:01:63:c3:97:02:7d:83:86:f2:b0:ca:9a:ff:08:82:d6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Apr 19 08:17:01 2026 GMT Not After : Apr 22 19:25:01 2026 GMT Subject: CN=200C07C1936BA40D6FA08FF3F28C1076F6BF0592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:e3:b2:ab:ab:e4:79:c1:b7:b4:4e:b0:65: b4:24:a0:85:de:83:04:af:32:6a:e1:90:0f:79:e7: 6e:d3:b2:7f:8b:bf:f3:ad:03:e3:80:7f:3c:6f:43: 1c:3a:14:d1:cd:90:90:e5:d0:ab:45:f1:ab:3d:84: 4c:98:2f:c8:2d:71:6d:7c:0d:c4:6f:82:89:3e:a6: 5b:7e:7f:c3:92:8a:eb:ca:c8:aa:1e:45:80:60:a6: 0e:3a:74:bd:f9:15:39:45:11:bf:fb:97:1a:f6:7d: 2f:9a:c7:2b:dc:a1:43:d2:d3:10:4c:d3:6b:1e:b6: 45:fd:12:79:9f:6e:76:8a:8e:37:a9:c3:19:39:e7: 48:bf:47:b5:87:7a:5c:1f:42:f1:e3:69:b4:78:d8: 79:b7:94:4b:92:65:7e:98:2e:79:04:a9:82:2f:8d: 4f:73:9c:34:d7:9e:86:23:ce:5b:20:6a:24:66:f6: 86:20:73:78:26:e4:ba:f5:33:f3:e5:83:b7:8b:1f: 54:1e:97:ad:b6:a8:5e:9a:0e:d1:a6:b6:16:65:38: a0:f9:29:52:b9:b0:39:3d:f3:32:2a:15:64:a9:97: e9:db:63:76:38:26:93:20:56:34:02:36:49:11:d6: a2:bd:56:90:fe:36:b1:3e:eb:b1:f6:23:29:53:de: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0C:07:C1:93:6B:A4:0D:6F:A0:8F:F3:F2:8C:10:76:F6:BF:05:92 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f4:0e:33:6a:c5:0f:d6:42:57:20:24:69:52:4b:c3:8f:99: e9:5b:36:1b:d4:34:de:7b:4f:df:d0:f1:a4:e5:dd:b6:d6:6b: 48:95:08:0b:e1:38:d4:ce:be:17:d2:8a:f6:a6:72:d5:bb:7e: db:14:90:6a:65:e4:c0:93:b1:fd:15:c9:09:56:b2:8f:07:fe: e7:28:a8:c3:d2:86:17:b5:25:e0:db:3a:22:2b:50:43:56:92: b7:7e:5c:87:1d:08:91:d6:d1:9d:31:3b:84:a8:ee:aa:5d:e5: 38:a8:da:a0:a9:ab:76:08:95:fa:f6:2b:b6:63:f9:a2:59:c8: f8:22:fd:cc:77:c4:63:82:cc:b5:9e:43:c4:21:fe:5b:82:af: 93:03:10:a0:5a:91:ca:03:af:e6:6b:c6:6c:13:e1:3f:5d:1d: f1:3e:ef:ae:ec:6e:36:2b:bc:be:4e:71:25:71:e2:30:cc:3d: 9a:41:7c:a6:46:f8:08:bd:40:56:8b:ef:fd:09:8a:ae:66:14: b7:7d:d0:95:01:2f:c4:ce:dc:9f:f6:45:34:ff:37:87:f1:2c: 39:ac:b0:35:7b:d8:b9:74:df:ed:2c:cb:91:99:c8:69:4d:71: 5b:d2:99:f0:9a:b2:34:fe:34:e7:75:c3:f7:da:93:4b:0d:aa: 52:f7:f8:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJNmAWPDlwJ9g4bysMqa/wiC1lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNjA0MTkwODE3MDFaFw0yNjA0MjIxOTI1MDFaMDMxMTAvBgNV BAMTKDIwMEMwN0MxOTM2QkE0MEQ2RkEwOEZGM0YyOEMxMDc2RjZCRjA1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjouOyq6vkecG3tE6wZbQkoIXe gwSvMmrhkA95527Tsn+Lv/OtA+OAfzxvQxw6FNHNkJDl0KtF8as9hEyYL8gtcW18 DcRvgok+plt+f8OSiuvKyKoeRYBgpg46dL35FTlFEb/7lxr2fS+axyvcoUPS0xBM 02setkX9EnmfbnaKjjepwxk550i/R7WHelwfQvHjabR42Hm3lEuSZX6YLnkEqYIv jU9znDTXnoYjzlsgaiRm9oYgc3gm5Lr1M/Plg7eLH1Qel622qF6aDtGmthZlOKD5 KVK5sDk98zIqFWSpl+nbY3Y4JpMgVjQCNkkR1qK9VpD+NrE+67H2IylT3vOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIAwHwZNrpA1voI/z8owQdva/BZIwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL0DjNqxQ/WQlcgJGlSS8OPmelbNhvUNN57 T9/Q8aTl3bbWa0iVCAvhONTOvhfSivamctW7ftsUkGpl5MCTsf0VyQlWso8H/uco qMPShhe1JeDbOiIrUENWkrd+XIcdCJHW0Z0xO4So7qpd5Tio2qCpq3YIlfr2K7Zj +aJZyPgi/cx3xGOCzLWeQ8Qh/luCr5MDEKBakcoDr+ZrxmwT4T9dHfE+767sbjYr vL5OcSVx4jDMPZpBfKZG+Ai9QFaL7/0Jiq5mFLd90JUBL8TO3J/2RTT/N4fxLDms sDV72Ll03+0sy5GZyGlNcVvSmfCasjT+NOd1w/fak0sNqlL3+AA= -----END CERTIFICATE-----Generated at Mon Apr 20 09:42:13 2026 by rpki-client