$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: 1AP8rBn2Zr5OEqAqIGKB3KcZttBcusRW2Zjd7EYgo4k= Subject key identifier: 36:91:A1:FF:B0:25:3E:7F:84:E5:CC:70:81:F7:DF:69:04:FA:96:20 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 7F5400075629EB9A53D1E86AE54E705494C2CABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0267 Signing time: Fri 17 Apr 2026 16:42:13 +0000 Manifest this update: Fri 17 Apr 2026 16:37:13 +0000 Manifest next update: Tue 21 Apr 2026 03:02:13 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: 9PIlo1cHgjy+VUkLPJtOja58kQCWl71DIqjeohO+muc=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: 81Yavjh0tBgqOD2LG93B99P1R7pxlNeQ3paJ3IfaK4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:54:00:07:56:29:eb:9a:53:d1:e8:6a:e5:4e:70:54:94:c2:ca:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Apr 17 16:37:13 2026 GMT Not After : Apr 21 03:02:13 2026 GMT Subject: CN=3691A1FFB0253E7F84E5CC7081F7DF6904FA9620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ce:c8:3d:bf:c8:9d:07:20:79:0a:02:ef:5f: 6d:15:28:1b:5b:69:af:44:5d:f0:2a:df:1b:c1:39: 36:8e:d8:00:6b:84:6d:8b:96:71:e2:ad:a4:d6:bd: b3:af:8c:2d:6c:ec:9b:3f:ac:81:9a:37:98:0e:92: ae:46:19:3f:c3:6f:12:91:6d:97:7c:6a:e5:89:67: 6e:f4:36:76:ee:ca:6c:00:10:b5:55:ad:c0:d1:ed: 81:4a:b5:8c:fb:94:14:67:83:a4:a2:e1:6e:99:7d: a2:58:d4:2a:b6:0d:e1:fa:6e:19:12:51:e2:1a:8b: 4b:67:b9:70:37:bc:e5:f4:dc:f5:33:f4:eb:36:5f: 16:6a:2d:52:3c:d6:59:89:38:fd:2f:18:39:90:fe: 36:31:ac:dc:11:50:2d:d9:d8:0c:1e:6c:cc:46:99: 6f:09:8c:b3:ec:8a:9d:1a:cc:2e:bd:e7:1f:a5:71: b2:f7:16:84:93:78:0f:3f:8a:ad:71:98:08:de:3f: 66:78:d1:22:ae:47:05:4c:ce:a8:09:c1:9f:8c:93: 43:99:f2:3b:75:af:79:83:fa:d8:ee:5c:9b:79:9b: 2f:00:e8:0d:df:1c:27:80:73:f9:f0:28:1d:5b:24: 3b:f3:26:72:50:07:93:2b:cc:ce:5a:b7:d9:62:60: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:91:A1:FF:B0:25:3E:7F:84:E5:CC:70:81:F7:DF:69:04:FA:96:20 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f3:15:70:ae:0c:a8:aa:ed:c6:2f:9d:0b:e3:5d:ee:c3:ae: cd:f1:de:e4:51:a6:c1:af:91:27:a5:b6:7f:0d:0e:e0:6f:e3: d1:ad:98:8e:e0:86:cb:ce:03:dc:0d:9f:bf:f2:a4:04:4d:82: 74:90:1f:ba:36:66:c4:08:0a:37:bd:81:cb:c0:38:04:21:65: bb:87:af:8d:dd:d6:a1:d1:36:e5:b0:53:fa:e6:52:e4:57:44: 27:f9:5e:1f:82:38:a6:50:5a:ff:c7:0b:9f:d0:36:3d:d8:76: 49:29:83:f2:20:6e:30:6d:9c:0a:2a:18:0c:e8:ad:b7:8a:c4: f8:03:ae:ca:d4:d6:70:1d:1e:24:47:5e:0e:e0:07:39:fc:d9: 02:b6:58:92:8e:1c:62:95:aa:9a:09:7d:8d:96:d8:3a:3f:97: a3:3c:c5:39:72:65:59:cd:a2:23:11:8d:79:a0:9f:25:cc:89: 69:f5:be:f1:1e:ee:1b:ec:28:8c:67:51:e3:d4:81:47:15:23: d5:6a:b5:79:4e:cf:64:19:c9:61:d9:ba:da:05:c8:00:fe:9d: 73:ee:a0:9b:28:a6:d3:14:47:c9:19:b2:78:6d:0f:a9:49:e6: 68:6a:0b:53:9b:d4:75:92:b7:29:5e:ef:5f:65:70:ed:f4:59: d6:52:78:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1QAB1Yp65pT0ehq5U5wVJTCyrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNjA0MTcxNjM3MTNaFw0yNjA0MjEwMzAyMTNaMDMxMTAvBgNV BAMTKDM2OTFBMUZGQjAyNTNFN0Y4NEU1Q0M3MDgxRjdERjY5MDRGQTk2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDczsg9v8idByB5CgLvX20VKBtb aa9EXfAq3xvBOTaO2ABrhG2LlnHiraTWvbOvjC1s7Js/rIGaN5gOkq5GGT/DbxKR bZd8auWJZ270NnbuymwAELVVrcDR7YFKtYz7lBRng6Si4W6ZfaJY1Cq2DeH6bhkS UeIai0tnuXA3vOX03PUz9Os2XxZqLVI81lmJOP0vGDmQ/jYxrNwRUC3Z2AwebMxG mW8JjLPsip0azC695x+lcbL3FoSTeA8/iq1xmAjeP2Z40SKuRwVMzqgJwZ+Mk0OZ 8jt1r3mD+tjuXJt5my8A6A3fHCeAc/nwKB1bJDvzJnJQB5MrzM5at9liYN0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNpGh/7AlPn+E5cxwgfffaQT6liAwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbzFXCuDKiq7cYvnQvjXe7Drs3x3uRRpsGv kSeltn8NDuBv49GtmI7ghsvOA9wNn7/ypARNgnSQH7o2ZsQICje9gcvAOAQhZbuH r43d1qHRNuWwU/rmUuRXRCf5Xh+COKZQWv/HC5/QNj3Ydkkpg/IgbjBtnAoqGAzo rbeKxPgDrsrU1nAdHiRHXg7gBzn82QK2WJKOHGKVqpoJfY2W2Do/l6M8xTlyZVnN oiMRjXmgnyXMiWn1vvEe7hvsKIxnUePUgUcVI9VqtXlOz2QZyWHZutoFyAD+nXPu oJsoptMUR8kZsnhtD6lJ5mhqC1Ob1HWStyle719lcO30WdZSeDg= -----END CERTIFICATE-----Generated at Sat Apr 18 09:15:24 2026 by rpki-client