$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: OWRrUddyjljSVmDXRSF3umSyV64tH4qYnibKS9empBg= Subject key identifier: 79:FD:E3:51:B5:A3:8C:E0:8D:5D:D8:38:93:44:03:3B:B7:2E:2E:CA Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 59F8D8C055D18F0E44B2193FB0969616B193BB66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 0568 Signing time: Wed 15 Apr 2026 15:12:25 +0000 Manifest this update: Wed 15 Apr 2026 15:07:25 +0000 Manifest next update: Sun 19 Apr 2026 02:11:25 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: oOz57dK45SvuMc6zCdRAtVDQNkm4va/8cApX5Fei7Pg=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:d8:c0:55:d1:8f:0e:44:b2:19:3f:b0:96:96:16:b1:93:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Apr 15 15:07:25 2026 GMT Not After : Apr 19 02:11:25 2026 GMT Subject: CN=79FDE351B5A38CE08D5DD8389344033BB72E2ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:84:29:88:fd:83:b4:b5:8a:97:c4:d2:dc: 94:f4:84:47:7e:7c:97:ee:eb:db:b6:82:9b:9a:65: 7d:59:ec:df:67:29:07:4e:6a:e5:2c:28:3c:31:b7: 9e:55:c8:60:c9:35:55:c0:37:fd:8a:18:2a:98:b5: 7c:e3:e8:62:6c:e6:d3:71:ce:2a:b0:0c:22:7c:56: da:e1:c7:18:50:62:44:92:43:a5:4f:ea:cf:dc:2a: 03:2b:d3:84:43:7f:fd:1c:0e:df:0e:e1:c1:e8:0e: ac:61:6c:6d:8f:a4:5d:c1:2c:39:87:61:b1:5f:1a: 64:72:18:2c:59:dd:05:04:43:a5:0a:cc:50:25:c9: e7:ab:c5:ad:dc:be:97:05:31:26:01:7b:34:a9:14: ba:01:8b:36:11:99:6f:80:e5:0c:56:1c:c3:ff:9f: 4a:63:cc:cd:c9:65:33:74:a9:f3:14:21:17:67:99: a4:4e:eb:0d:0f:2e:46:16:ec:d6:69:02:04:56:c1: fd:e3:ce:fd:af:06:66:2b:b4:70:50:a0:e8:d1:cf: 4f:1f:71:18:af:ed:57:b5:68:9e:48:ce:01:f9:84: 98:4d:12:02:3c:e4:1b:ec:18:58:68:f6:7a:f7:ad: 36:dd:d6:9b:a9:80:55:aa:15:69:03:d0:1d:f4:8b: ee:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:E3:51:B5:A3:8C:E0:8D:5D:D8:38:93:44:03:3B:B7:2E:2E:CA X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:18:17:e5:cd:ee:65:bc:67:02:6c:a3:45:f1:1b:bc:61:c3: ea:91:cc:fb:b9:d6:ea:3a:48:3d:7b:60:29:ef:fc:50:3a:a3: 96:59:65:a3:da:ee:8a:42:2a:fa:0d:e8:6a:76:80:19:76:a0: a9:f6:93:01:1d:3a:21:54:b3:41:b6:70:20:d6:39:6d:b8:4c: a2:d2:61:34:d1:f9:b1:a6:2b:d4:2c:10:60:81:f5:6e:c4:b4: 2c:8d:64:8c:f4:84:13:5d:ee:60:77:2a:c4:f1:38:b5:55:10: 65:b6:85:8a:a3:e7:8d:d6:e0:e5:f0:d9:b1:b5:84:cf:a7:e0: 42:18:87:27:c9:7d:3c:38:c0:b8:1d:a1:a4:b3:2d:1a:0e:8e: e1:79:1f:a9:a6:6f:ed:ff:eb:4a:09:06:14:4f:ec:c5:4f:71: a4:08:9d:db:2c:8a:9a:08:9e:3c:22:35:52:57:82:c7:38:50: 9e:d5:c2:00:bd:fd:5d:95:1c:cb:0a:ea:79:24:6c:31:00:3d: 28:83:65:d6:75:6c:42:2a:78:cb:9b:44:3d:6e:b3:ad:71:30: f3:41:df:bb:4a:e2:fd:2d:14:34:71:9b:21:0d:32:19:eb:ea: 85:09:3b:42:c7:15:cb:56:6f:c6:4f:b5:5f:c8:55:8a:42:9f: 8d:d0:bd:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfjYwFXRjw5Eshk/sJaWFrGTu2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNjA0MTUxNTA3MjVaFw0yNjA0MTkwMjExMjVaMDMxMTAvBgNV BAMTKDc5RkRFMzUxQjVBMzhDRTA4RDVERDgzODkzNDQwMzNCQjcyRTJFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeYQpiP2DtLWKl8TS3JT0hEd+ fJfu69u2gpuaZX1Z7N9nKQdOauUsKDwxt55VyGDJNVXAN/2KGCqYtXzj6GJs5tNx ziqwDCJ8VtrhxxhQYkSSQ6VP6s/cKgMr04RDf/0cDt8O4cHoDqxhbG2PpF3BLDmH YbFfGmRyGCxZ3QUEQ6UKzFAlyeerxa3cvpcFMSYBezSpFLoBizYRmW+A5QxWHMP/ n0pjzM3JZTN0qfMUIRdnmaRO6w0PLkYW7NZpAgRWwf3jzv2vBmYrtHBQoOjRz08f cRiv7Ve1aJ5IzgH5hJhNEgI85BvsGFho9nr3rTbd1pupgFWqFWkD0B30i+6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUef3jUbWjjOCNXdg4k0QDO7cuLsowHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsYF+XN7mW8ZwJso0XxG7xhw+qRzPu51uo6 SD17YCnv/FA6o5ZZZaPa7opCKvoN6Gp2gBl2oKn2kwEdOiFUs0G2cCDWOW24TKLS YTTR+bGmK9QsEGCB9W7EtCyNZIz0hBNd7mB3KsTxOLVVEGW2hYqj543W4OXw2bG1 hM+n4EIYhyfJfTw4wLgdoaSzLRoOjuF5H6mmb+3/60oJBhRP7MVPcaQIndssipoI njwiNVJXgsc4UJ7VwgC9/V2VHMsK6nkkbDEAPSiDZdZ1bEIqeMubRD1us61xMPNB 37tK4v0tFDRxmyENMhnr6oUJO0LHFctWb8ZPtV/IVYpCn43Qvek= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:15 2026 by rpki-client