$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: zmVwPRQlwffKxn/vuLNPDL9EBBz1CX4UY2YyJFsaWEM= Subject key identifier: 5F:36:81:34:3D:C3:55:73:98:2B:BE:96:A7:4C:AE:7E:71:FC:EC:0A Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 623FFED660B119A985A06CFBAF395616372B0E98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0397 Signing time: Thu 16 Apr 2026 16:22:16 +0000 Manifest this update: Thu 16 Apr 2026 16:17:16 +0000 Manifest next update: Sun 19 Apr 2026 19:42:16 +0000 Files and hashes: 1: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 2: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: yeOvkKoI3G8YEa96ezmc5FgVy5icYEmR88BJ76f7xX0=) 3: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3f:fe:d6:60:b1:19:a9:85:a0:6c:fb:af:39:56:16:37:2b:0e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Apr 16 16:17:16 2026 GMT Not After : Apr 19 19:42:16 2026 GMT Subject: CN=5F3681343DC35573982BBE96A74CAE7E71FCEC0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:4a:5d:25:75:43:ec:44:68:e2:ee:61:13: 50:2c:c3:b3:86:d7:c7:f7:60:ba:73:c0:a0:4a:83: 5d:07:27:2d:5c:bd:26:8d:65:9c:51:14:10:82:fe: 38:62:17:95:1e:d4:c3:0c:13:4e:3f:af:65:84:c5: e6:0d:53:8e:42:55:17:03:c3:66:f3:ed:c8:1f:ab: 10:ce:9d:bf:4e:8e:6c:dd:e6:87:21:e1:20:71:6e: 65:90:9e:06:fd:26:54:82:b0:b3:9a:ec:63:71:da: a6:8e:8c:b4:1a:70:19:45:d8:51:25:20:ea:2c:08: cb:fe:18:75:2f:50:c6:21:2a:a1:7a:b0:e1:b2:01: 09:fc:61:14:22:12:17:b3:79:78:08:20:02:ab:5a: 2b:ee:0c:6a:d2:65:7e:b1:50:cc:6b:62:60:e0:ee: 0a:cd:17:c2:97:72:4b:0f:19:a4:0b:87:04:5c:30: 8c:4f:db:38:d3:c6:64:c5:9d:1a:10:d7:4c:01:f5: 77:0a:f2:32:ec:64:55:3f:40:9a:fc:74:27:9d:d3: 96:82:e7:c9:be:11:cd:c5:34:5b:b9:ad:b3:77:93: e6:fc:fd:d1:38:3e:26:7d:23:82:55:2a:04:c6:20: 44:21:0d:1c:f4:a7:47:ac:cb:d0:97:08:91:f2:8d: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:36:81:34:3D:C3:55:73:98:2B:BE:96:A7:4C:AE:7E:71:FC:EC:0A X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ba:98:d9:57:21:c6:d6:98:f5:30:15:0a:f7:5b:c9:89:39: 50:11:8d:7d:35:fa:1a:77:4e:04:d0:19:63:32:16:c3:fe:d5: 71:ae:6a:cd:fa:fe:e0:e4:c8:75:5d:ae:3e:d6:c6:6a:82:4c: 42:a4:5d:ea:bf:85:29:aa:dd:ae:ae:70:43:a3:ff:48:51:1c: 17:27:f3:a0:0c:18:09:b7:d2:64:52:cc:cb:5a:12:e7:8b:51: fa:fa:87:34:01:11:7e:ea:3e:27:9a:29:42:f0:49:40:22:1f: de:c7:bc:46:8e:bf:40:42:3b:0a:bd:17:75:63:ec:4b:45:f4: 44:66:8d:22:86:76:6d:4f:04:c3:b4:fe:24:4c:46:ff:3c:c8: cf:b9:07:2e:95:2e:6b:fa:da:08:f6:41:96:4d:49:35:da:01: 9d:77:e5:df:d6:eb:d0:cc:e3:b2:cc:5c:59:04:60:de:ce:6a: 7f:3c:8b:d9:ab:dc:a8:72:8b:6f:a8:af:5f:c4:62:b2:9a:b9: f7:76:2c:0b:73:e8:1a:fe:ca:39:5d:25:5c:83:0f:07:64:d2: 6b:4a:da:1f:ca:f2:c8:54:f2:be:b8:78:4c:89:e8:48:2c:e4: f5:21:a5:9b:ac:f6:a3:1e:e1:dc:a9:f2:53:dd:0c:67:0d:78: 70:f4:bf:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYj/+1mCxGamFoGz7rzlWFjcrDpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNjA0MTYxNjE3MTZaFw0yNjA0MTkxOTQyMTZaMDMxMTAvBgNV BAMTKDVGMzY4MTM0M0RDMzU1NzM5ODJCQkU5NkE3NENBRTdFNzFGQ0VDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwS0pdJXVD7ERo4u5hE1Asw7OG 18f3YLpzwKBKg10HJy1cvSaNZZxRFBCC/jhiF5Ue1MMME04/r2WExeYNU45CVRcD w2bz7cgfqxDOnb9Ojmzd5och4SBxbmWQngb9JlSCsLOa7GNx2qaOjLQacBlF2FEl IOosCMv+GHUvUMYhKqF6sOGyAQn8YRQiEhezeXgIIAKrWivuDGrSZX6xUMxrYmDg 7grNF8KXcksPGaQLhwRcMIxP2zjTxmTFnRoQ10wB9XcK8jLsZFU/QJr8dCed05aC 58m+Ec3FNFu5rbN3k+b8/dE4PiZ9I4JVKgTGIEQhDRz0p0esy9CXCJHyjWPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXzaBND3DVXOYK76Wp0yufnH87AowHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACe6mNlXIcbWmPUwFQr3W8mJOVARjX01+hp3 TgTQGWMyFsP+1XGuas36/uDkyHVdrj7WxmqCTEKkXeq/hSmq3a6ucEOj/0hRHBcn 86AMGAm30mRSzMtaEueLUfr6hzQBEX7qPieaKULwSUAiH97HvEaOv0BCOwq9F3Vj 7EtF9ERmjSKGdm1PBMO0/iRMRv88yM+5By6VLmv62gj2QZZNSTXaAZ135d/W69DM 47LMXFkEYN7Oan88i9mr3Khyi2+or1/EYrKaufd2LAtz6Br+yjldJVyDDwdk0mtK 2h/K8shU8r64eEyJ6Egs5PUhpZus9qMe4dyp8lPdDGcNeHD0vwU= -----END CERTIFICATE-----Generated at Fri Apr 17 23:06:07 2026 by rpki-client