$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: 6tDrf3np9cjY0zd9V4BIYKVB251wHAgTRiWvewBltkY= Subject key identifier: 05:5F:2A:4D:A3:F8:F3:9B:B2:7E:C3:C5:2A:47:A2:D9:2E:69:12:FC Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 243DAAD3F11C52E0B8952272FF08E21A631AD93C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 012F Signing time: Fri 17 Apr 2026 03:52:32 +0000 Manifest this update: Fri 17 Apr 2026 03:47:32 +0000 Manifest next update: Mon 20 Apr 2026 08:08:32 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: DQd7y+AYMtA1t9KlDP+m0PHhl/cB/6uoJe60U2cPijk=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: H0EENnDJtA/aZpZP73Faf+uX9mcB2FGPf4G43CcjH3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3d:aa:d3:f1:1c:52:e0:b8:95:22:72:ff:08:e2:1a:63:1a:d9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Apr 17 03:47:32 2026 GMT Not After : Apr 20 08:08:32 2026 GMT Subject: CN=055F2A4DA3F8F39BB27EC3C52A47A2D92E6912FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:82:56:9b:70:ca:88:f4:92:1a:7f:f7:c4: 9a:9e:bd:fb:1e:93:b9:4e:f6:d2:ab:17:dd:e6:91: e3:42:c9:bb:40:56:ad:0c:71:ea:dd:f8:36:0f:14: cc:93:26:97:c8:4e:4d:6c:ab:1a:63:e1:01:b3:d0: da:91:3e:b3:d7:71:75:f0:e1:8a:3b:3f:90:3b:c1: 1c:5c:29:c2:e3:74:c4:3a:05:42:df:c9:ec:ef:a6: bc:bd:7b:46:87:62:67:ea:23:0b:ff:02:6a:c2:47: aa:95:e8:60:e4:cb:eb:e6:2b:ae:5c:45:b1:bd:70: 93:37:89:36:29:e1:4a:b8:bd:87:e4:a6:60:4b:57: 3d:5d:60:6a:3d:37:f0:4e:46:96:ec:97:a7:f7:4f: 13:a0:82:cc:7c:cc:df:5a:a9:84:c6:57:47:e5:61: 00:7f:e8:44:37:df:0e:2b:f5:8b:d0:61:f9:b3:df: be:df:6c:1c:81:f3:0e:cb:84:3b:59:40:9b:bd:c6: d8:9e:dc:93:75:bc:64:95:07:86:a5:3c:e9:c3:f6: 70:69:bd:35:64:0e:b7:a8:01:23:c6:26:58:04:a2: ee:7d:25:d5:4d:e6:64:37:8d:28:9b:3b:6d:af:e6: b9:b4:f3:e5:47:8b:76:cc:1b:70:e6:62:86:44:77: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5F:2A:4D:A3:F8:F3:9B:B2:7E:C3:C5:2A:47:A2:D9:2E:69:12:FC X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6e:d0:45:20:c1:f1:26:73:14:b3:84:34:79:39:65:fb:fa: 07:12:d7:b0:13:bb:08:81:2e:9e:bc:d7:b8:7d:ab:c3:c6:76: ed:61:3e:d3:bc:11:a6:1f:90:b8:e8:dd:04:7d:6b:9e:cc:6c: 78:11:f1:07:eb:04:99:f1:0d:51:d1:c4:54:23:d2:48:4a:cd: 00:06:8d:d8:c4:f1:43:cd:25:d3:c7:33:95:2a:e3:79:5d:fd: fd:6b:fb:c4:0a:b8:6c:ff:f7:92:9f:20:9d:b6:23:89:57:2f: 5a:7d:6c:cd:11:6c:92:bd:e5:1a:34:a0:15:59:23:09:c7:44: cf:e5:1c:cc:2a:42:c3:28:28:1a:55:d0:62:fe:f0:c5:bd:cd: bd:49:6b:2a:6c:11:fe:ac:08:59:5f:ba:fc:2d:bc:e3:2f:c1: ab:68:ff:f4:b4:f4:af:a3:90:7c:77:87:8d:43:8e:80:60:43: cd:26:d6:3c:91:c9:d5:18:71:1e:22:0d:50:16:82:e0:c6:83: 67:b4:9a:1d:79:3a:61:37:c7:f7:15:a7:6b:20:45:a3:9b:20: cc:7d:5c:20:c5:7a:ce:52:52:83:fa:6e:d0:87:c1:cf:78:58: 64:f8:1e:8b:42:73:37:71:51:8e:db:90:76:99:74:5f:4a:71: 4a:7b:bb:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJD2q0/EcUuC4lSJy/wjiGmMa2TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNjA0MTcwMzQ3MzJaFw0yNjA0MjAwODA4MzJaMDMxMTAvBgNV BAMTKDA1NUYyQTREQTNGOEYzOUJCMjdFQzNDNTJBNDdBMkQ5MkU2OTEyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCYJWm3DKiPSSGn/3xJqevfse k7lO9tKrF93mkeNCybtAVq0Mcerd+DYPFMyTJpfITk1sqxpj4QGz0NqRPrPXcXXw 4Yo7P5A7wRxcKcLjdMQ6BULfyezvpry9e0aHYmfqIwv/AmrCR6qV6GDky+vmK65c RbG9cJM3iTYp4Uq4vYfkpmBLVz1dYGo9N/BORpbsl6f3TxOggsx8zN9aqYTGV0fl YQB/6EQ33w4r9YvQYfmz377fbByB8w7LhDtZQJu9xtie3JN1vGSVB4alPOnD9nBp vTVkDreoASPGJlgEou59JdVN5mQ3jSibO22v5rm08+VHi3bMG3DmYoZEd6qfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBV8qTaP485uyfsPFKkei2S5pEvwwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZu0EUgwfEmcxSzhDR5OWX7+gcS17ATuwiB Lp6817h9q8PGdu1hPtO8EaYfkLjo3QR9a57MbHgR8QfrBJnxDVHRxFQj0khKzQAG jdjE8UPNJdPHM5Uq43ld/f1r+8QKuGz/95KfIJ22I4lXL1p9bM0RbJK95Ro0oBVZ IwnHRM/lHMwqQsMoKBpV0GL+8MW9zb1JaypsEf6sCFlfuvwtvOMvwato//S09K+j kHx3h41DjoBgQ80m1jyRydUYcR4iDVAWguDGg2e0mh15OmE3x/cVp2sgRaObIMx9 XCDFes5SUoP6btCHwc94WGT4HotCczdxUY7bkHaZdF9KcUp7uxg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:25 2026 by rpki-client