$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: Okqta0QiRDlZxdkQwzkD5bMHql9S7MnpWuHO/EDVfkY= Subject key identifier: AE:47:0E:77:6A:40:87:3B:3A:94:BF:53:5E:64:D1:6B:FF:6B:5A:87 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 2090442193678B08433737A8BC9427082074EBBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0185 Signing time: Thu 16 Apr 2026 02:41:44 +0000 Manifest this update: Thu 16 Apr 2026 02:36:44 +0000 Manifest next update: Sun 19 Apr 2026 04:29:44 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) 2: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: VsAD+S18Zs+i7D8cPip5AhI6HSVdCLbC2uWvTC4r0/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:90:44:21:93:67:8b:08:43:37:37:a8:bc:94:27:08:20:74:eb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Apr 16 02:36:44 2026 GMT Not After : Apr 19 04:29:44 2026 GMT Subject: CN=AE470E776A40873B3A94BF535E64D16BFF6B5A87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:cc:e3:eb:c8:28:c7:d3:eb:ad:36:ad:b2: d8:a4:ba:78:f4:74:4d:40:0a:df:8a:3c:75:10:7b: 88:24:fc:40:19:29:8a:34:3f:59:ca:90:69:7d:99: f1:a7:d3:9f:11:5c:a8:0d:63:71:03:b5:9d:22:de: df:be:cc:31:74:20:68:a5:93:f5:8b:cc:6b:6c:e7: f5:9f:da:af:f7:4f:4b:61:95:4c:a0:dd:a0:36:1d: 23:72:65:86:13:a5:90:e9:8c:f5:c1:0c:3c:8e:cf: 84:ab:58:9d:4f:ce:ba:61:81:88:07:4c:8c:fc:7f: c1:5d:b3:ae:bc:fd:1b:64:e4:59:48:2a:7a:f0:e7: 3f:b7:4b:f8:82:81:7e:c3:3d:b1:5d:e3:ae:24:f5: 81:a9:e3:b1:82:29:5e:eb:ee:8c:71:e7:fd:0a:a7: 45:18:fd:be:d8:ee:c7:89:0f:4e:b2:f2:62:f9:6c: dc:ef:ba:c0:66:e2:a9:50:68:90:95:d0:2d:a0:c0: af:3d:ea:ab:25:e1:34:49:fb:ca:8a:bf:f2:1a:ff: 9b:99:33:ab:cc:d9:c5:3f:e5:9e:fd:d1:ed:5c:5c: 5c:fd:77:06:35:67:d3:77:aa:ff:5e:ba:78:e8:d7: 32:0c:c7:5a:a8:37:b5:f6:14:6d:9b:fe:1a:96:e6: ad:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:47:0E:77:6A:40:87:3B:3A:94:BF:53:5E:64:D1:6B:FF:6B:5A:87 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:61:8a:da:1b:ac:eb:dc:3f:99:5a:7e:da:d5:fc:04:68:2c: b0:fc:f4:60:92:f6:5c:5c:b2:d2:cd:b2:ae:18:0c:d1:04:63: bd:77:a0:6d:13:c2:ad:01:4e:ec:ff:5c:c3:8a:8e:b8:d4:0b: 17:35:5e:98:d3:3c:8d:6f:18:aa:a8:18:da:04:6f:ac:90:d4: 14:fd:bb:b8:b5:65:ad:20:e9:4d:d2:92:cc:28:9b:50:2e:cb: fc:f4:d7:78:c4:e8:09:64:6f:26:48:1e:7d:06:bd:05:67:82: 40:7d:fa:bc:9c:f4:bf:aa:55:9e:e5:08:5c:c9:d8:0f:37:4b: e9:e9:f1:1d:f7:00:18:df:c6:52:9c:a3:b8:72:3c:92:7b:14: bf:77:a3:93:1f:0a:c7:dc:80:bd:27:1f:34:5c:3b:c9:92:a3: c2:ba:85:85:8f:32:d4:67:ad:51:33:57:7e:3d:77:a7:ce:88: 41:c8:3c:0c:3b:60:86:80:6c:9a:9e:05:37:e8:6f:31:b2:cd: 61:55:71:e8:ea:f3:b6:f5:2e:83:80:92:a9:72:2c:5b:b7:5d: 3f:0f:ca:0c:16:23:7b:f2:95:38:65:1b:f0:26:e0:e8:31:5d: 1e:d2:73:a6:cf:f9:8d:61:ef:3c:14:f5:a6:26:90:7b:6a:0d: fb:82:bf:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJBEIZNniwhDNzeovJQnCCB067owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNjA0MTYwMjM2NDRaFw0yNjA0MTkwNDI5NDRaMDMxMTAvBgNV BAMTKEFFNDcwRTc3NkE0MDg3M0IzQTk0QkY1MzVFNjREMTZCRkY2QjVBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSszj68gox9PrrTatstikunj0 dE1ACt+KPHUQe4gk/EAZKYo0P1nKkGl9mfGn058RXKgNY3EDtZ0i3t++zDF0IGil k/WLzGts5/Wf2q/3T0thlUyg3aA2HSNyZYYTpZDpjPXBDDyOz4SrWJ1PzrphgYgH TIz8f8Fds668/Rtk5FlIKnrw5z+3S/iCgX7DPbFd464k9YGp47GCKV7r7oxx5/0K p0UY/b7Y7seJD06y8mL5bNzvusBm4qlQaJCV0C2gwK896qsl4TRJ+8qKv/Ia/5uZ M6vM2cU/5Z790e1cXFz9dwY1Z9N3qv9eunjo1zIMx1qoN7X2FG2b/hqW5q0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrkcOd2pAhzs6lL9TXmTRa/9rWocwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBhitobrOvcP5laftrV/ARoLLD89GCS9lxc stLNsq4YDNEEY713oG0Twq0BTuz/XMOKjrjUCxc1XpjTPI1vGKqoGNoEb6yQ1BT9 u7i1Za0g6U3Skswom1Auy/z013jE6AlkbyZIHn0GvQVngkB9+ryc9L+qVZ7lCFzJ 2A83S+np8R33ABjfxlKco7hyPJJ7FL93o5MfCsfcgL0nHzRcO8mSo8K6hYWPMtRn rVEzV349d6fOiEHIPAw7YIaAbJqeBTfobzGyzWFVcejq87b1LoOAkqlyLFu3XT8P ygwWI3vylThlG/Am4OgxXR7Sc6bP+Y1h7zwU9aYmkHtqDfuCv0k= -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:16 2026 by rpki-client