$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: hhFSL59aWvb5r3mJ76shjt2V8wiKR3hSQfLFTXeHCqw= Subject key identifier: C8:F9:C9:AB:09:8D:B8:7C:86:95:56:E5:BC:D7:8E:40:F6:A6:75:2C Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 63E4517D417033868A31DF3291DEA5345457A30F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 0349 Signing time: Fri 17 Apr 2026 19:12:10 +0000 Manifest this update: Fri 17 Apr 2026 19:07:10 +0000 Manifest next update: Mon 20 Apr 2026 19:19:10 +0000 Files and hashes: 1: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) 2: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: RnxgfXx33xO1QgKCAbwZt6aBVWTlRqheccKCz9muGsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 19:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e4:51:7d:41:70:33:86:8a:31:df:32:91:de:a5:34:54:57:a3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Apr 17 19:07:10 2026 GMT Not After : Apr 20 19:19:10 2026 GMT Subject: CN=C8F9C9AB098DB87C869556E5BCD78E40F6A6752C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:70:fc:3f:0d:ac:7d:46:64:1f:fa:bc:38:26: c6:ea:ef:50:40:eb:81:c7:9e:75:da:18:15:84:89: 42:3e:77:ec:23:5e:9b:c0:6b:93:31:1f:1a:51:b8: 4d:2d:2f:ae:46:f7:24:a3:5d:ed:bd:51:4e:b6:e9: 3d:ee:46:dc:9b:40:2b:26:5a:1c:0d:e9:bb:51:5a: 3c:90:8e:f2:fa:bd:40:67:e2:04:dd:91:4e:ea:99: d5:cf:89:95:08:4e:60:8c:d9:98:8b:97:61:a2:53: 16:f4:21:10:2e:b7:53:23:74:67:58:9b:fa:e5:da: 56:be:f9:3c:17:44:0f:f3:06:ab:b9:7d:9a:a1:27: 44:7d:9b:e4:b4:7a:75:90:1a:75:2a:e2:94:91:49: cf:24:83:47:69:b5:4e:5b:85:ac:1e:d5:ae:8d:da: ce:38:fc:27:ca:ab:9d:df:7d:16:bf:eb:a6:4c:54: 90:ec:5d:be:07:d5:79:c9:b7:65:57:1c:21:41:f7: a3:e8:80:48:33:80:67:94:62:a0:a8:ca:37:38:a5: 26:27:05:b6:12:1c:43:0f:f8:f9:bb:f4:16:be:f1: 24:43:af:3b:0f:e8:d7:6e:42:50:fc:34:d5:30:16: d7:4b:10:a4:97:7b:78:3b:a3:b1:03:38:6d:3a:1a: 84:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F9:C9:AB:09:8D:B8:7C:86:95:56:E5:BC:D7:8E:40:F6:A6:75:2C X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f9:15:1c:35:02:2c:99:75:69:d1:b0:50:4b:53:75:02:5c: f8:84:aa:32:c5:24:79:69:1e:b7:1c:b3:ae:7c:30:92:ad:89: fd:50:23:60:0a:41:4f:f0:c9:2a:47:05:1f:a9:1c:34:f9:09: a3:e5:1f:97:ed:98:0b:2b:c4:9e:2d:8b:d4:33:0e:74:11:33: 67:c7:d6:98:fd:94:c3:0c:87:1f:b0:63:77:11:02:e0:04:9f: 2f:54:8a:8a:88:d4:70:a5:cb:5f:d5:7c:c6:33:1d:8c:a7:d6: 4f:c6:0b:b0:5e:aa:d2:de:c9:c6:7b:fb:8e:9f:7c:02:f2:44: 40:c2:e8:47:72:d2:06:c9:90:2c:94:82:46:07:6b:28:df:95: a2:f0:83:5f:9a:c0:2a:f1:d9:ce:31:e6:33:1e:64:59:84:c1: ff:37:b5:84:4a:f6:2b:a6:e1:9c:6b:8a:69:8a:13:a5:e2:90: 21:e8:7c:2a:48:d4:c8:3c:ea:0c:21:28:e8:1d:ba:a3:0e:b5: 7c:7b:0f:04:32:5a:f5:93:87:b6:5b:e5:8d:12:4f:d0:25:4f: 7c:5e:bf:97:fa:e6:54:16:c4:4b:0d:bb:a7:fe:97:63:e8:87: 77:bc:53:2f:5a:4a:e2:eb:16:53:2f:37:39:97:39:13:a6:8b: 34:2f:4d:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+RRfUFwM4aKMd8ykd6lNFRXow8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNjA0MTcxOTA3MTBaFw0yNjA0MjAxOTE5MTBaMDMxMTAvBgNV BAMTKEM4RjlDOUFCMDk4REI4N0M4Njk1NTZFNUJDRDc4RTQwRjZBNjc1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcPw/Dax9RmQf+rw4Jsbq71BA 64HHnnXaGBWEiUI+d+wjXpvAa5MxHxpRuE0tL65G9ySjXe29UU626T3uRtybQCsm WhwN6btRWjyQjvL6vUBn4gTdkU7qmdXPiZUITmCM2ZiLl2GiUxb0IRAut1MjdGdY m/rl2la++TwXRA/zBqu5fZqhJ0R9m+S0enWQGnUq4pSRSc8kg0dptU5bhawe1a6N 2s44/CfKq53ffRa/66ZMVJDsXb4H1XnJt2VXHCFB96PogEgzgGeUYqCoyjc4pSYn BbYSHEMP+Pm79Ba+8SRDrzsP6NduQlD8NNUwFtdLEKSXe3g7o7EDOG06GoRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPnJqwmNuHyGlVblvNeOQPamdSwwHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv5FRw1AiyZdWnRsFBLU3UCXPiEqjLFJHlp Hrccs658MJKtif1QI2AKQU/wySpHBR+pHDT5CaPlH5ftmAsrxJ4ti9QzDnQRM2fH 1pj9lMMMhx+wY3cRAuAEny9UioqI1HCly1/VfMYzHYyn1k/GC7BeqtLeycZ7+46f fALyREDC6Edy0gbJkCyUgkYHayjflaLwg1+awCrx2c4x5jMeZFmEwf83tYRK9ium 4ZxrimmKE6XikCHofCpI1Mg86gwhKOgduqMOtXx7DwQyWvWTh7Zb5Y0ST9AlT3xe v5f65lQWxEsNu6f+l2Poh3e8Uy9aSuLrFlMvNzmXOROmizQvTeQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:35 2026 by rpki-client