$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: TY1ZIEyxrhMwkdiinqD3wpbX1To5It5yBGKWhgaC+Xs= Subject key identifier: 5D:36:AD:35:6B:9A:41:27:07:C4:D9:5B:A3:D8:5B:11:0F:5A:BF:0B Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 452D52482813D7693FAC95C5819B2EEA8EA1500B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: B1 Signing time: Sat 18 Apr 2026 02:11:46 +0000 Manifest this update: Sat 18 Apr 2026 02:06:46 +0000 Manifest next update: Tue 21 Apr 2026 06:35:46 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: qSHfou3/u8Fj1cSnmKUCzCMLzt17hYBFmUVWmApn3/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2d:52:48:28:13:d7:69:3f:ac:95:c5:81:9b:2e:ea:8e:a1:50:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Apr 18 02:06:46 2026 GMT Not After : Apr 21 06:35:46 2026 GMT Subject: CN=5D36AD356B9A412707C4D95BA3D85B110F5ABF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:eb:76:32:cd:cd:02:5e:58:a0:37:da:d3:88: 24:a4:fa:3e:61:00:bd:64:b8:f3:88:b0:54:bc:0f: 92:18:09:91:e8:f7:bd:a5:a1:e4:98:15:7d:c6:5e: 76:ac:fa:2b:ea:72:85:20:bc:dd:1a:2d:e5:18:11: e2:cc:29:b4:42:dd:f5:1e:d2:48:31:3f:48:b3:a6: b5:60:ea:ee:3a:0d:02:2e:dd:74:4a:8f:7d:0b:92: b8:1f:75:e7:5b:dd:a8:2f:6a:f9:ed:4f:8b:65:77: bd:b9:a2:68:58:3c:30:80:50:56:12:50:d2:ac:58: 91:3f:2d:6b:ed:4a:9d:17:72:e2:68:62:7a:b0:cb: 90:b8:96:6e:56:7e:0f:7d:c8:e9:94:7f:dc:f3:cb: af:f7:55:b3:23:6e:47:b8:1f:32:d6:b2:4c:95:9b: 31:e7:26:3a:7e:b3:2f:29:d6:37:a9:bc:03:8f:2d: b8:3e:e0:de:1a:dd:43:4a:a6:a1:8b:6c:05:e9:34: 03:b1:ce:dd:2b:cd:54:66:ac:76:e4:1d:b2:14:a6: 52:48:b2:53:90:99:4c:0b:1c:c8:a4:b1:dd:57:32: 01:a0:d4:9e:41:6d:74:d1:d8:59:2a:2f:6b:70:3e: 0e:d7:7b:53:a4:80:f6:f1:06:3f:e9:22:0b:05:aa: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:36:AD:35:6B:9A:41:27:07:C4:D9:5B:A3:D8:5B:11:0F:5A:BF:0B X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:5e:55:ca:35:26:0e:e8:63:21:73:d1:db:91:81:9a:57:31: 86:71:ae:15:35:72:07:ab:d1:a9:e3:24:4c:b1:99:3c:6b:5c: 76:25:f1:6a:cf:42:29:fe:e2:72:88:52:05:98:57:52:e8:5f: 7b:cc:9b:f0:5f:60:06:3e:2b:39:5f:64:8d:d0:32:e6:58:37: 5e:45:1f:c4:31:85:0b:e6:d8:e0:26:41:af:9e:77:6f:66:39: 77:fe:33:2a:1e:c8:fb:5f:58:94:2b:c3:87:0c:37:2c:2f:31: dc:53:24:e6:b6:4e:1d:d4:e9:9b:d0:56:0e:6c:4e:51:96:6a: 6b:c7:be:30:87:36:7e:91:d6:cb:23:c9:9b:21:a2:1a:e5:27: 15:c6:95:78:cc:e0:44:e5:27:fc:cb:fa:ea:db:76:15:50:7a: 4f:c2:c9:16:48:7c:0b:d6:0f:9e:9a:88:4b:70:5d:23:48:19: 8f:d9:07:d4:e2:35:d2:d7:b6:74:51:11:24:df:f6:60:1a:30: 1e:1a:9f:ab:f2:4a:f2:9b:df:c3:e2:46:71:f7:bd:bb:c2:a2: 1e:05:76:c6:95:d5:dd:ac:b7:5e:f6:6b:2d:e3:f0:54:71:ef: 87:34:f8:88:90:ea:54:76:57:93:3d:69:72:07:58:4f:fa:cf: 00:0a:f3:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURS1SSCgT12k/rJXFgZsu6o6hUAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNjA0MTgwMjA2NDZaFw0yNjA0MjEwNjM1NDZaMDMxMTAvBgNV BAMTKDVEMzZBRDM1NkI5QTQxMjcwN0M0RDk1QkEzRDg1QjExMEY1QUJGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ63Yyzc0CXligN9rTiCSk+j5h AL1kuPOIsFS8D5IYCZHo972loeSYFX3GXnas+ivqcoUgvN0aLeUYEeLMKbRC3fUe 0kgxP0izprVg6u46DQIu3XRKj30Lkrgfdedb3agvavntT4tld725omhYPDCAUFYS UNKsWJE/LWvtSp0XcuJoYnqwy5C4lm5Wfg99yOmUf9zzy6/3VbMjbke4HzLWskyV mzHnJjp+sy8p1jepvAOPLbg+4N4a3UNKpqGLbAXpNAOxzt0rzVRmrHbkHbIUplJI slOQmUwLHMiksd1XMgGg1J5BbXTR2FkqL2twPg7Xe1OkgPbxBj/pIgsFqrdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXTatNWuaQScHxNlbo9hbEQ9avwswHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpeVco1Jg7oYyFz0duRgZpXMYZxrhU1cger 0anjJEyxmTxrXHYl8WrPQin+4nKIUgWYV1LoX3vMm/BfYAY+KzlfZI3QMuZYN15F H8QxhQvm2OAmQa+ed29mOXf+MyoeyPtfWJQrw4cMNywvMdxTJOa2Th3U6ZvQVg5s TlGWamvHvjCHNn6R1ssjyZshohrlJxXGlXjM4ETlJ/zL+urbdhVQek/CyRZIfAvW D56aiEtwXSNIGY/ZB9TiNdLXtnRRESTf9mAaMB4an6vySvKb38PiRnH3vbvCoh4F dsaV1d2st172ay3j8FRx74c0+IiQ6lR2V5M9aXIHWE/6zwAK82E= -----END CERTIFICATE-----Generated at Sat Apr 18 08:07:27 2026 by rpki-client