$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: OtjQ6EuVI6+NsxBJUGjBA1UN6me29l3dWUKMhrcRUrM= Subject key identifier: 4A:FF:74:CD:18:6A:7B:9E:74:59:AD:7A:06:A8:06:3E:4B:99:8E:A3 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 0396784481644D91D091F14341FD8C748A5F6643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 0240 Signing time: Thu 16 Apr 2026 16:31:03 +0000 Manifest this update: Thu 16 Apr 2026 16:26:03 +0000 Manifest next update: Mon 20 Apr 2026 03:27:03 +0000 Files and hashes: 1: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) 2: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: WafORKwdOBIaL/i60z2dusXD3VIDVAa/0c85aBaNRwI=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:96:78:44:81:64:4d:91:d0:91:f1:43:41:fd:8c:74:8a:5f:66:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Apr 16 16:26:03 2026 GMT Not After : Apr 20 03:27:03 2026 GMT Subject: CN=4AFF74CD186A7B9E7459AD7A06A8063E4B998EA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:18:62:31:fb:00:ec:4d:51:00:90:79:74: 0b:35:28:c7:6c:ab:3e:28:69:6e:d9:07:10:69:42: ea:b7:11:5f:63:79:3e:d5:ec:ce:4b:74:bb:d4:4e: ed:a1:b3:7a:2e:d8:46:1a:e9:51:23:1d:12:de:1a: d9:a8:f4:1a:84:12:01:e8:34:7e:11:0e:21:c7:e9: fd:41:32:ad:80:0d:35:2e:bf:94:d4:ec:96:12:96: b2:0c:0c:c0:9e:58:5d:10:a4:c2:5d:8c:d9:e6:e5: c3:d3:00:b9:ea:22:db:0b:ae:c4:cb:3f:7b:53:60: 5a:c4:eb:1f:fc:7d:5f:b3:87:b1:0f:52:3f:a7:48: de:9b:d8:bc:1b:b4:0a:70:67:df:17:98:5d:ce:ce: 48:c8:c3:89:1c:de:8e:a1:8b:8a:b9:be:82:a8:0d: 5f:fb:50:18:cd:f3:b6:7c:98:fe:c2:14:1c:06:3f: 94:e9:d8:d4:d7:34:1c:13:e7:fc:a4:d9:2f:a1:8e: 75:3d:cb:79:f0:74:8a:23:7e:d8:c0:16:36:ee:64: b2:e8:48:7b:c5:9f:94:1e:f4:0f:04:53:d9:4e:ab: 9e:74:cb:20:ab:74:35:4e:72:fc:f3:dd:45:64:9b: 85:ba:3c:16:a8:2e:ab:06:67:3a:14:23:5c:b7:d2: 11:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FF:74:CD:18:6A:7B:9E:74:59:AD:7A:06:A8:06:3E:4B:99:8E:A3 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8a:ea:65:f0:c8:f4:88:1a:b7:d1:3e:23:35:43:b3:49:75: 43:73:83:fa:70:17:25:e9:68:c0:2c:6a:ac:2f:52:1f:e1:61: 92:e4:45:c7:42:c0:8a:6d:ef:77:25:9f:f6:1d:00:52:8e:3d: d4:38:a4:85:e5:a9:e4:a6:64:64:67:bd:99:35:80:62:b0:ab: 9f:da:fd:10:d9:5d:5d:fe:b2:7c:d8:75:92:ad:b9:3b:bf:8f: 3c:a3:01:3b:d7:b8:ce:39:dc:dd:f5:3f:16:c1:97:0d:51:c2: b2:e4:66:92:60:33:7b:e2:08:c9:9c:85:cc:0a:84:a6:af:7f: 73:6c:86:2d:b9:67:4c:2e:dd:18:79:09:65:a1:1d:28:75:b0: 72:f5:f1:0c:12:c5:6e:c7:63:d6:41:eb:41:bc:67:8a:0a:27: c3:1a:73:88:5f:59:fd:9d:12:84:07:90:b4:c8:6e:ab:94:82: 56:de:76:d6:6f:9d:9f:19:16:90:53:e7:bb:38:8c:06:9a:39: f1:c1:e1:02:fd:93:00:92:1d:c3:82:8e:96:6b:cb:4e:7f:d7: c4:9a:3c:59:79:cb:ff:72:23:60:14:46:65:f0:46:39:81:4c: fc:94:90:6e:9d:91:9c:1f:d2:41:b4:47:bc:7b:11:a7:70:15: e0:37:05:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA5Z4RIFkTZHQkfFDQf2MdIpfZkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNjA0MTYxNjI2MDNaFw0yNjA0MjAwMzI3MDNaMDMxMTAvBgNV BAMTKDRBRkY3NENEMTg2QTdCOUU3NDU5QUQ3QTA2QTgwNjNFNEI5OThFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oxhiMfsA7E1RAJB5dAs1KMds qz4oaW7ZBxBpQuq3EV9jeT7V7M5LdLvUTu2hs3ou2EYa6VEjHRLeGtmo9BqEEgHo NH4RDiHH6f1BMq2ADTUuv5TU7JYSlrIMDMCeWF0QpMJdjNnm5cPTALnqItsLrsTL P3tTYFrE6x/8fV+zh7EPUj+nSN6b2LwbtApwZ98XmF3OzkjIw4kc3o6hi4q5voKo DV/7UBjN87Z8mP7CFBwGP5Tp2NTXNBwT5/yk2S+hjnU9y3nwdIojftjAFjbuZLLo SHvFn5Qe9A8EU9lOq550yyCrdDVOcvzz3UVkm4W6PBaoLqsGZzoUI1y30hGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSv90zRhqe550Wa16BqgGPkuZjqMwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESK6mXwyPSIGrfRPiM1Q7NJdUNzg/pwFyXp aMAsaqwvUh/hYZLkRcdCwIpt73cln/YdAFKOPdQ4pIXlqeSmZGRnvZk1gGKwq5/a /RDZXV3+snzYdZKtuTu/jzyjATvXuM453N31PxbBlw1RwrLkZpJgM3viCMmchcwK hKavf3Nshi25Z0wu3Rh5CWWhHSh1sHL18QwSxW7HY9ZB60G8Z4oKJ8Mac4hfWf2d EoQHkLTIbquUglbedtZvnZ8ZFpBT57s4jAaaOfHB4QL9kwCSHcOCjpZry05/18Sa PFl5y/9yI2AURmXwRjmBTPyUkG6dkZwf0kG0R7x7EadwFeA3BaY= -----END CERTIFICATE-----Generated at Fri Apr 17 20:19:22 2026 by rpki-client