$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: ujPZMzthtIquO++DUSKArf7IUPgm4VVom4+tvzS/pIg= Subject key identifier: F5:94:06:06:74:7E:8D:AD:E2:BE:1A:A0:E4:F5:18:99:74:2C:56:79 Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 4D66B89DE97E846F2975849C472AC5970E4A0B41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 0767 Signing time: Sat 18 Apr 2026 00:50:05 +0000 Manifest this update: Sat 18 Apr 2026 00:45:05 +0000 Manifest next update: Tue 21 Apr 2026 08:49:05 +0000 Files and hashes: 1: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: /qH6EonKe2qrTrvERZZ1Jea2odc6eUsETuGOWwAQUnQ=) 2: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) 3: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) 4: AS24203.roa (hash: kTnkpHL0tm/R/+5OZPbHUWyQPxoSiGsWnevwlqQJQyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:66:b8:9d:e9:7e:84:6f:29:75:84:9c:47:2a:c5:97:0e:4a:0b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Apr 18 00:45:05 2026 GMT Not After : Apr 21 08:49:05 2026 GMT Subject: CN=F5940606747E8DADE2BE1AA0E4F51899742C5679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:b5:9b:87:64:f2:fb:a2:f8:0d:ac:2e:ba: 97:d7:f0:d7:a2:9d:56:b0:ec:09:16:58:eb:13:b1: 59:9f:c7:77:1f:d7:55:a2:62:de:3b:ca:11:a7:75: 7c:e8:ed:be:f5:f2:9c:c3:f5:50:08:aa:96:8c:f5: 33:23:c1:43:33:ac:8d:7d:a2:a6:f9:f0:ba:ae:43: d6:dc:a9:99:03:b1:11:0f:49:a9:f8:2e:6e:71:6b: 1a:3d:3b:22:46:59:38:3a:c7:5e:ab:d5:81:1e:88: 73:cc:af:94:8b:8a:57:a8:a8:e8:39:f1:09:24:4b: 43:10:cb:c4:5a:a5:7c:9c:51:57:11:59:3d:bf:d2: 1a:9e:04:19:7e:5b:75:53:de:e7:35:94:44:64:3e: 66:22:68:56:c6:40:2c:a1:29:fb:42:1c:2c:92:78: d3:18:41:bb:73:09:b2:53:4b:a0:e2:10:1a:01:65: 73:3b:75:6e:e5:05:dc:a6:a7:8a:7d:03:30:b1:e6: 67:2b:8e:14:f7:bc:e7:a8:21:9e:b9:99:4b:27:1e: f6:22:f5:11:7a:52:c1:b2:50:85:e1:6a:84:5b:f9: 35:9e:18:19:1f:e5:42:16:00:91:74:de:7e:04:eb: 43:71:b1:11:69:32:2a:2c:e1:05:58:f6:0d:73:fa: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:94:06:06:74:7E:8D:AD:E2:BE:1A:A0:E4:F5:18:99:74:2C:56:79 X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c2:b5:2b:2e:a0:d5:f9:0f:2b:15:67:93:03:46:20:4b:c3: e6:ad:8e:67:53:1d:7e:2b:d2:2a:8f:4a:da:74:a5:9d:43:94: be:a8:7a:ea:08:07:18:7f:97:bb:fc:51:80:ac:96:ba:0a:95: b1:8e:c7:a9:34:6b:b6:90:69:dc:69:9e:3e:b1:d2:2b:23:ef: 95:a7:82:cd:2f:09:37:5a:4f:e8:64:c3:b0:da:d9:d3:c2:72: 89:eb:4f:10:34:66:03:4a:1f:9e:78:e1:e7:b7:52:f9:fa:11: 16:54:40:93:ee:d3:3d:41:b2:85:6a:9e:3f:da:40:9a:85:5e: ea:79:da:12:98:7d:85:6a:b1:db:7b:11:c4:22:9e:c7:49:74: 64:f3:08:66:c6:bc:9b:5b:fa:ef:04:4f:c2:0d:21:40:d5:b3: 3f:be:a4:74:73:68:cd:23:10:3d:27:ae:0a:36:1f:5f:5b:ea: 7b:7d:df:b0:d1:fe:7c:ef:19:7f:ba:60:41:66:f0:d1:08:a4: 54:1a:f3:c9:d2:7f:f2:e1:21:00:d4:ca:19:11:f5:75:79:0d: 3f:de:1f:be:04:7d:62:16:11:00:5c:a7:03:1b:06:76:ba:d4: 33:83:d3:44:9e:90:78:a5:35:8f:d5:98:ad:59:f7:f8:a6:96: 6b:f6:16:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWa4nel+hG8pdYScRyrFlw5KC0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNjA0MTgwMDQ1MDVaFw0yNjA0MjEwODQ5MDVaMDMxMTAvBgNV BAMTKEY1OTQwNjA2NzQ3RThEQURFMkJFMUFBMEU0RjUxODk5NzQyQzU2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz67Wbh2Ty+6L4DawuupfX8Nei nVaw7AkWWOsTsVmfx3cf11WiYt47yhGndXzo7b718pzD9VAIqpaM9TMjwUMzrI19 oqb58LquQ9bcqZkDsREPSan4Lm5xaxo9OyJGWTg6x16r1YEeiHPMr5SLileoqOg5 8QkkS0MQy8RapXycUVcRWT2/0hqeBBl+W3VT3uc1lERkPmYiaFbGQCyhKftCHCyS eNMYQbtzCbJTS6DiEBoBZXM7dW7lBdymp4p9AzCx5mcrjhT3vOeoIZ65mUsnHvYi 9RF6UsGyUIXhaoRb+TWeGBkf5UIWAJF03n4E60NxsRFpMios4QVY9g1z+hOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ZQGBnR+ja3ivhqg5PUYmXQsVnkwHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzCtSsuoNX5DysVZ5MDRiBLw+atjmdTHX4r 0iqPStp0pZ1DlL6oeuoIBxh/l7v8UYCslroKlbGOx6k0a7aQadxpnj6x0isj75Wn gs0vCTdaT+hkw7Da2dPCconrTxA0ZgNKH5544ee3Uvn6ERZUQJPu0z1BsoVqnj/a QJqFXup52hKYfYVqsdt7EcQinsdJdGTzCGbGvJtb+u8ET8INIUDVsz++pHRzaM0j ED0nrgo2H19b6nt937DR/nzvGX+6YEFm8NEIpFQa88nSf/LhIQDUyhkR9XV5DT/e H74EfWIWEQBcpwMbBna61DOD00SekHilNY/VmK1Z9/imlmv2FmA= -----END CERTIFICATE-----Generated at Sat Apr 18 04:17:23 2026 by rpki-client