$ rpki-client -vvf repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft File: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft (raw, json) Hash identifier: ialNTO1yqvP0QUYds3Jiu0iyUeFrodo8h86E+Ayswn8= Subject key identifier: 65:2B:8D:72:14:4E:07:02:29:89:EC:5B:48:5B:C2:FC:CC:0C:D7:1E Authority key identifier: C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 Certificate issuer: /CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Certificate serial: 0ACBB8C8A25E8020E1DAC5882F189E3E95BB417B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft Manifest number: 0106 Signing time: Mon 20 Apr 2026 15:01:18 +0000 Manifest this update: Mon 20 Apr 2026 14:56:18 +0000 Manifest next update: Thu 23 Apr 2026 18:05:18 +0000 Files and hashes: 1: C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl (hash: NV/zEa9CGMJOjTGRHQdAnPxUBXxTePo4Z+XnVJIaVVM=) 2: 3136302e31392e3137392e302f32342d3234203d3e20313532373837.roa (hash: 4bpu+mggFbzvJDFJ5R6f3m5fTkhrxUM9zXGsoRvy4HQ=) 3: 3136302e31392e3137382e302f32342d3234203d3e20313532373837.roa (hash: 7y8609J4YjMYC9wN+hYXRDhk/NJUcPM91RuRT+GB4pQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:cb:b8:c8:a2:5e:80:20:e1:da:c5:88:2f:18:9e:3e:95:bb:41:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2D593D1C8A7F70D45125D4BDBE5774927C14E55 Validity Not Before: Apr 20 14:56:18 2026 GMT Not After : Apr 23 18:05:18 2026 GMT Subject: CN=652B8D72144E07022989EC5B485BC2FCCC0CD71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:a0:00:be:2f:87:9c:80:9e:4e:f3:73:7a: 7e:c5:cb:b5:ec:1e:d0:d6:1e:53:e3:b3:ee:0e:b1: ba:41:a8:be:1a:b4:50:61:e7:3e:0c:46:e6:74:dd: 92:9a:0d:c9:67:04:8e:2a:9b:a2:a5:61:18:57:60: c2:1e:ed:5f:1e:2f:ce:78:44:5b:b8:3a:88:5e:6d: a9:ac:58:7e:41:49:79:4c:8d:ae:c6:5f:f3:82:42: b9:4a:c6:ae:7b:17:a6:81:14:3e:ec:40:e3:80:65: 47:42:47:ef:e9:e9:ad:6b:f1:bf:56:81:60:6a:8e: 9d:7a:b9:6e:3d:c9:bd:71:f3:01:a9:1f:34:19:7e: d7:a4:df:2b:1e:3b:3d:ca:45:94:23:6b:83:19:1a: 64:c2:aa:5d:9e:28:a3:24:1f:38:9f:39:21:12:a1: 24:8d:fd:75:fd:22:23:03:ea:b3:97:a3:17:f0:ba: ab:8d:81:02:c4:c7:ad:12:9b:b6:c8:db:77:30:7d: 93:87:f7:64:5a:8a:fa:7d:d0:d6:d4:7e:2e:d1:9b: 44:ac:78:ed:f3:be:2b:28:93:9f:e9:bd:04:a5:1c: 9a:3e:b4:4e:5d:6b:59:0c:47:9c:90:4c:d1:08:af: bc:3b:42:6e:e6:41:ef:ac:a7:4c:d0:5b:23:b9:c9: 5e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2B:8D:72:14:4E:07:02:29:89:EC:5B:48:5B:C2:FC:CC:0C:D7:1E X509v3 Authority Key Identifier: keyid:C2:D5:93:D1:C8:A7:F7:0D:45:12:5D:4B:DB:E5:77:49:27:C1:4E:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fdb0130d-caa3-476f-af81-ba722330be2c/0/C2D593D1C8A7F70D45125D4BDBE5774927C14E55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:1f:8d:68:b7:f3:ab:f2:d8:c3:9c:69:cc:e3:1b:70:c9:1e: a9:91:30:fb:d7:d9:b3:85:7b:0d:33:5c:8f:f9:2e:7a:96:c4: b4:73:02:9d:64:33:61:ee:a1:9a:70:ce:e7:74:24:bd:86:b2: 18:8b:19:d4:7b:a4:e1:5e:48:41:05:03:46:1b:d1:e0:ea:84: 44:e6:df:35:85:ff:78:34:8f:57:6b:00:83:a6:b7:bc:b3:3d: b3:6c:08:ba:45:45:d1:cd:43:04:21:58:8d:83:bd:fd:9f:9a: ce:2f:5a:a1:82:3f:22:4c:a1:6c:be:14:ed:27:a3:ac:41:d2: 00:6e:70:04:16:6d:e7:02:99:1f:4f:ec:59:5d:a6:04:8c:06: 9a:4c:3c:e2:24:f5:5a:e5:85:10:08:9d:d7:47:37:2c:05:56: 16:8d:2c:3a:c1:80:42:c5:5f:a6:15:c2:96:2e:1c:45:43:89: eb:3b:6f:8c:24:3b:31:94:5b:71:1d:39:73:fa:9a:bd:13:f0: aa:84:d3:6f:db:26:ea:36:0c:ef:bf:df:f4:e9:90:fa:a3:e2: 5c:11:06:8a:6f:09:43:33:67:73:0a:27:46:29:87:12:cd:a3: 73:52:af:6c:d6:2e:a4:e0:a5:af:c7:28:84:19:f1:32:34:e6: e1:93:45:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsu4yKJegCDh2sWILxiePpW7QXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDky N0MxNEU1NTAeFw0yNjA0MjAxNDU2MThaFw0yNjA0MjMxODA1MThaMDMxMTAvBgNV BAMTKDY1MkI4RDcyMTQ0RTA3MDIyOTg5RUM1QjQ4NUJDMkZDQ0MwQ0Q3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sqAAvi+HnICeTvNzen7Fy7Xs HtDWHlPjs+4OsbpBqL4atFBh5z4MRuZ03ZKaDclnBI4qm6KlYRhXYMIe7V8eL854 RFu4OohebamsWH5BSXlMja7GX/OCQrlKxq57F6aBFD7sQOOAZUdCR+/p6a1r8b9W gWBqjp16uW49yb1x8wGpHzQZftek3yseOz3KRZQja4MZGmTCql2eKKMkHzifOSES oSSN/XX9IiMD6rOXoxfwuquNgQLEx60Sm7bI23cwfZOH92Raivp90NbUfi7Rm0Ss eO3zvisok5/pvQSlHJo+tE5da1kMR5yQTNEIr7w7Qm7mQe+sp0zQWyO5yV63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZSuNchROBwIpiexbSFvC/MwM1x4wHwYDVR0j BBgwFoAUwtWT0cin9w1FEl1L2+V3SSfBTlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZGIwMTMwZC1jYWEzLTQ3NmYtYWY4MS1iYTcyMjMzMGJlMmMvMC9DMkQ1OTNEMUM4 QTdGNzBENDUxMjVENEJEQkU1Nzc0OTI3QzE0RTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3NDkyN0Mx NEU1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmRiMDEzMGQtY2FhMy00NzZmLWFm ODEtYmE3MjIzMzBiZTJjLzAvQzJENTkzRDFDOEE3RjcwRDQ1MTI1RDRCREJFNTc3 NDkyN0MxNEU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANEfjWi386vy2MOcaczjG3DJHqmRMPvX2bOF ew0zXI/5LnqWxLRzAp1kM2HuoZpwzud0JL2GshiLGdR7pOFeSEEFA0Yb0eDqhETm 3zWF/3g0j1drAIOmt7yzPbNsCLpFRdHNQwQhWI2Dvf2fms4vWqGCPyJMoWy+FO0n o6xB0gBucAQWbecCmR9P7FldpgSMBppMPOIk9VrlhRAInddHNywFVhaNLDrBgELF X6YVwpYuHEVDies7b4wkOzGUW3EdOXP6mr0T8KqE02/bJuo2DO+/3/TpkPqj4lwR BopvCUMzZ3MKJ0YphxLNo3NSr2zWLqTgpa/HKIQZ8TI05uGTRRg= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:49 2026 by rpki-client