$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft File: B59504F478A4226C16D97004A6F98153CD19D2E0.mft (raw, json) Hash identifier: LGz9EwvAw9dqRjH7ttqXIvDD0haO6x57pZV43yQxRII= Subject key identifier: C0:6A:46:06:D2:28:46:B7:35:8B:1E:6F:D1:E8:C0:3F:0A:86:3C:FF Authority key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Certificate issuer: /CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Certificate serial: 1E214AA7B81B853F12CB73A5CB6FDA623C6F3EAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft Manifest number: BC Signing time: Thu 16 Apr 2026 05:12:39 +0000 Manifest this update: Thu 16 Apr 2026 05:07:39 +0000 Manifest next update: Sun 19 Apr 2026 07:53:39 +0000 Files and hashes: 1: 3130332e3132322e352e302f32342d3234203d3e20313338303530.roa (hash: FoxdZHJrEp7+nFUQtWkPulj2p2oThQSviqn5PbYR67E=) 2: B59504F478A4226C16D97004A6F98153CD19D2E0.crl (hash: 1bIFan14b7ArtxBIK089kc+VoKU0TpXzFZ3ntUn/oHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 07:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:21:4a:a7:b8:1b:85:3f:12:cb:73:a5:cb:6f:da:62:3c:6f:3e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Validity Not Before: Apr 16 05:07:39 2026 GMT Not After : Apr 19 07:53:39 2026 GMT Subject: CN=C06A4606D22846B7358B1E6FD1E8C03F0A863CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f8:1c:73:51:10:af:55:b8:ed:ee:b4:8a:29: 48:7d:c7:dd:70:de:1e:70:af:cd:d0:44:4f:20:47: 36:86:8c:6e:4b:49:f8:e1:97:e3:cf:81:c6:21:48: f4:cf:34:0e:69:69:b1:4b:ce:83:32:7d:1d:5c:fd: fe:d1:29:10:49:0b:7b:e2:b8:a9:f2:fc:55:99:aa: 79:5a:57:0c:1a:d3:22:1e:e2:15:d9:66:73:12:e6: 59:7f:a6:30:a3:01:ca:4c:6e:45:b0:df:bb:63:0b: 95:35:06:a6:7c:a4:10:78:31:03:49:4e:e2:2e:f5: 7d:4b:af:04:55:a9:c7:f3:cb:eb:6d:6d:f2:e4:97: f8:cb:f0:c6:b6:32:03:c2:6f:95:0a:1c:ab:10:90: 2d:a8:3b:98:72:92:f9:66:22:07:28:da:61:0c:17: fd:da:de:bf:74:aa:3a:05:fa:6d:ab:67:18:91:68: 6b:fb:dc:5e:17:ee:c5:20:b0:92:d6:31:52:f6:ca: a5:d1:05:5c:33:88:96:6a:6a:3f:f9:f3:c6:bc:60: 23:af:a1:0d:b1:78:18:90:2f:e8:45:ce:80:61:fa: 84:7b:14:92:2e:74:e9:9f:de:43:88:77:ab:2c:77: 3a:58:6e:59:6f:7b:ab:68:04:4f:4e:38:48:79:9d: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6A:46:06:D2:28:46:B7:35:8B:1E:6F:D1:E8:C0:3F:0A:86:3C:FF X509v3 Authority Key Identifier: keyid:B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:df:0a:c4:b1:36:dc:a5:a0:c6:5f:98:2a:14:df:35:7c:e4: 88:bd:af:11:84:35:98:76:a7:f2:2c:e5:2a:7b:53:a6:1a:7d: 65:80:93:d1:7e:f5:5e:c2:8f:ea:6f:e2:6a:b4:7a:95:41:bd: c4:da:fb:85:78:cc:51:05:75:73:2b:a7:53:75:7e:92:d1:23: dc:9b:9f:64:ab:99:b8:c3:ab:00:55:e9:8b:61:2f:47:73:0e: 60:c7:24:95:90:c2:dd:47:9c:b6:ac:09:c9:10:63:35:84:21: fe:62:ae:e9:a6:c0:f0:29:24:04:21:85:7a:45:f6:e7:75:6c: 09:d2:33:ef:52:eb:96:63:84:ae:24:6f:dc:0f:4e:31:56:c2: 13:e9:ac:cd:2c:b0:f8:43:40:bc:0d:7d:c6:26:de:ba:4f:c7: 04:3f:7e:37:1f:39:e5:4a:cc:8c:c0:ad:56:a6:c9:8c:2e:e7: f2:eb:53:0f:f1:23:50:9a:d2:d0:ae:6d:f6:26:54:c8:d9:55: 49:21:59:87:32:a8:93:4f:53:f4:d0:d1:a6:20:eb:c1:1c:49: 86:42:49:bd:f7:7e:c1:7f:b7:a0:0c:99:22:dc:cc:72:60:10: 78:f2:0a:1d:25:b8:ad:f9:7e:0c:ff:71:fd:0f:1f:46:7f:7a: 63:3b:e1:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiFKp7gbhT8Sy3Oly2/aYjxvPqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTND RDE5RDJFMDAeFw0yNjA0MTYwNTA3MzlaFw0yNjA0MTkwNzUzMzlaMDMxMTAvBgNV BAMTKEMwNkE0NjA2RDIyODQ2QjczNThCMUU2RkQxRThDMDNGMEE4NjNDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+BxzURCvVbjt7rSKKUh9x91w 3h5wr83QRE8gRzaGjG5LSfjhl+PPgcYhSPTPNA5pabFLzoMyfR1c/f7RKRBJC3vi uKny/FWZqnlaVwwa0yIe4hXZZnMS5ll/pjCjAcpMbkWw37tjC5U1BqZ8pBB4MQNJ TuIu9X1LrwRVqcfzy+ttbfLkl/jL8Ma2MgPCb5UKHKsQkC2oO5hykvlmIgco2mEM F/3a3r90qjoF+m2rZxiRaGv73F4X7sUgsJLWMVL2yqXRBVwziJZqaj/588a8YCOv oQ2xeBiQL+hFzoBh+oR7FJIudOmf3kOId6ssdzpYbllve6toBE9OOEh5nWC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGpGBtIoRrc1ix5v0ejAPwqGPP8wHwYDVR0j BBgwFoAUtZUE9HikImwW2XAEpvmBU80Z0uAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMC9CNTk1MDRGNDc4 QTQyMjZDMTZEOTcwMDRBNkY5ODE1M0NEMTlEMkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgxNTNDRDE5 RDJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0ZmJmYjAtOTNlZS00ZWE2LWI0 Y2YtMDdkNzY5Yjg4YTIyLzAvQjU5NTA0RjQ3OEE0MjI2QzE2RDk3MDA0QTZGOTgx NTNDRDE5RDJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzfCsSxNtyloMZfmCoU3zV85Ii9rxGENZh2 p/Is5Sp7U6YafWWAk9F+9V7Cj+pv4mq0epVBvcTa+4V4zFEFdXMrp1N1fpLRI9yb n2SrmbjDqwBV6YthL0dzDmDHJJWQwt1HnLasCckQYzWEIf5irummwPApJAQhhXpF 9ud1bAnSM+9S65ZjhK4kb9wPTjFWwhPprM0ssPhDQLwNfcYm3rpPxwQ/fjcfOeVK zIzArVamyYwu5/LrUw/xI1Ca0tCubfYmVMjZVUkhWYcyqJNPU/TQ0aYg68EcSYZC Sb33fsF/t6AMmSLczHJgEHjyCh0luK35fgz/cf0PH0Z/emM74V8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:43 2026 by rpki-client