$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: dfrkvocCmbC/ClrhE3oGe5kIFNsCYXm40mRBHGOdDFo= Subject key identifier: 30:5E:E3:EB:0E:2F:8E:A8:EE:F3:AA:E9:85:8A:81:78:FA:CE:0A:C6 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 72C46114701BC3D42E45DD41E7D346A469C8B1A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 025B Signing time: Sun 19 Apr 2026 11:51:09 +0000 Manifest this update: Sun 19 Apr 2026 11:46:09 +0000 Manifest next update: Wed 22 Apr 2026 22:38:09 +0000 Files and hashes: 1: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: 7/B3rvlGKUy60lzXeqcUYyF0ilZ5EV1EElvmhn99Zy4=) 2: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: xjVKQyiKRL8omA2w04jtrwyS2CBtDtklYDfHd9DTDQk=) 3: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: tCgoCFfwm3gMyc1YIpgy5ipxLMqn6hK8mmQlZrxd9Cw=) 4: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: QebFHOgQ6Y6iqs+N9tLedNksBf2KalmN3Y5g3VmK7ug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c4:61:14:70:1b:c3:d4:2e:45:dd:41:e7:d3:46:a4:69:c8:b1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Apr 19 11:46:09 2026 GMT Not After : Apr 22 22:38:09 2026 GMT Subject: CN=305EE3EB0E2F8EA8EEF3AAE9858A8178FACE0AC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:3a:50:5d:0c:f9:c5:75:d3:73:f6:2c:04: b2:ba:9e:7a:18:9c:96:47:99:34:3a:45:32:9a:d8: b3:0d:34:e3:0a:3a:d2:cf:1b:05:c9:5a:81:80:fc: d7:f6:63:e6:e8:ef:96:db:4c:58:be:99:97:9f:00: 08:32:a5:ba:0a:53:62:b2:9e:f0:04:73:13:31:ec: af:34:88:43:20:19:91:44:48:5e:6c:61:f0:1a:04: 2a:67:92:53:f7:16:bc:0b:97:e1:db:7f:a9:c4:cf: 7e:0f:6f:56:95:d2:60:f0:9c:ae:a9:96:89:cf:22: 58:77:c9:fd:0e:cf:77:b1:bb:04:66:a0:cb:02:78: 8a:f1:19:7e:33:d1:03:3f:f3:13:bd:59:c8:fa:14: 6c:73:ea:3a:5d:4e:3c:89:84:98:09:0c:94:64:70: 9c:de:c9:95:62:4e:f3:84:ff:cd:65:3c:f1:22:dd: 18:48:ea:09:dc:7d:6a:18:93:23:fb:1c:16:77:ae: 62:14:1e:25:75:58:68:53:25:52:27:fc:25:3b:7f: d7:f1:cb:e7:c0:d0:40:28:f9:07:f0:91:7b:42:ee: a0:75:1c:5a:69:13:b6:a7:56:3a:0c:6e:14:3a:09: a8:4e:45:d5:1d:58:f7:a0:8b:94:aa:d3:46:a9:09: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:5E:E3:EB:0E:2F:8E:A8:EE:F3:AA:E9:85:8A:81:78:FA:CE:0A:C6 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7d:90:f5:26:01:5c:1a:cc:1f:ac:b3:fa:de:c4:6a:25:dc: b4:0c:07:ca:5a:da:44:fa:bd:36:97:45:c8:a8:37:bd:3b:61: c9:79:fd:fa:4e:3a:04:0c:4a:14:15:af:1d:3f:86:6a:a3:6f: fb:c3:c6:5d:4a:53:4c:d7:19:cd:89:86:05:f9:27:fe:64:a1: 1a:27:b4:fc:a2:59:a0:86:fb:52:e3:e8:f2:6b:e8:e6:fa:d8: 8b:9a:3b:7d:52:f0:8e:2c:51:1a:fa:75:51:56:c0:9e:06:73: 9b:1d:6f:c1:d1:78:61:b8:89:f4:6d:3f:11:c2:8f:a8:6f:6f: 68:bc:27:67:83:88:fa:ea:21:cb:d5:b1:27:a4:25:3b:c0:ba: ac:23:e4:00:a8:ae:a4:8e:f0:1e:27:25:33:3b:c5:b6:9d:5c: c1:9e:96:f1:32:ca:89:e4:1f:d3:32:06:6c:fc:4e:0d:cc:ff: 87:1d:36:c2:45:9a:aa:de:19:2b:42:01:24:84:f2:4c:da:90: 1a:3e:64:e4:48:5b:0e:b7:bc:91:af:86:1f:d1:98:23:02:be: 78:8a:5d:6b:97:d3:3d:f1:85:33:39:8d:7a:f8:90:41:73:ea: 4c:9a:69:84:bb:22:80:8a:14:4a:87:69:4a:9e:73:9d:e1:b3: 15:a1:77:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsRhFHAbw9QuRd1B59NGpGnIsaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNjA0MTkxMTQ2MDlaFw0yNjA0MjIyMjM4MDlaMDMxMTAvBgNV BAMTKDMwNUVFM0VCMEUyRjhFQThFRUYzQUFFOTg1OEE4MTc4RkFDRTBBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZsjpQXQz5xXXTc/YsBLK6nnoY nJZHmTQ6RTKa2LMNNOMKOtLPGwXJWoGA/Nf2Y+bo75bbTFi+mZefAAgypboKU2Ky nvAEcxMx7K80iEMgGZFESF5sYfAaBCpnklP3FrwLl+Hbf6nEz34Pb1aV0mDwnK6p lonPIlh3yf0Oz3exuwRmoMsCeIrxGX4z0QM/8xO9Wcj6FGxz6jpdTjyJhJgJDJRk cJzeyZViTvOE/81lPPEi3RhI6gncfWoYkyP7HBZ3rmIUHiV1WGhTJVIn/CU7f9fx y+fA0EAo+QfwkXtC7qB1HFppE7anVjoMbhQ6CahORdUdWPegi5Sq00apCey/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMF7j6w4vjqju86rphYqBePrOCsYwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ9kPUmAVwazB+ss/rexGol3LQMB8pa2kT6 vTaXRcioN707Ycl5/fpOOgQMShQVrx0/hmqjb/vDxl1KU0zXGc2JhgX5J/5koRon tPyiWaCG+1Lj6PJr6Ob62IuaO31S8I4sURr6dVFWwJ4Gc5sdb8HReGG4ifRtPxHC j6hvb2i8J2eDiPrqIcvVsSekJTvAuqwj5ACorqSO8B4nJTM7xbadXMGelvEyyonk H9MyBmz8Tg3M/4cdNsJFmqreGStCASSE8kzakBo+ZORIWw63vJGvhh/RmCMCvniK XWuX0z3xhTM5jXr4kEFz6kyaaYS7IoCKFEqHaUqec53hsxWhd00= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:39 2026 by rpki-client