$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: tnSo8gJSQv8XMyBv9zoj53kU/wl5NDf8uRZAEC+rk4g= Subject key identifier: 28:26:1A:AE:44:7C:C7:C7:71:83:C3:62:9D:F8:53:06:64:94:1A:CA Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 03249BE9E6AA2497F61CAF56B02BED63DEC40E12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 0208 Signing time: Sun 19 Apr 2026 03:01:05 +0000 Manifest this update: Sun 19 Apr 2026 02:56:05 +0000 Manifest next update: Wed 22 Apr 2026 13:28:05 +0000 Files and hashes: 1: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: IQtHv5dJn+zbb+MIajlDdDAnYnBEq1Yu3MvRxA0jXsM=) 2: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: 5yN7mnhM82NWBj+IdugSD9eg026SGWj4WFUyV1oNO2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 13:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:24:9b:e9:e6:aa:24:97:f6:1c:af:56:b0:2b:ed:63:de:c4:0e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Apr 19 02:56:05 2026 GMT Not After : Apr 22 13:28:05 2026 GMT Subject: CN=28261AAE447CC7C77183C3629DF8530664941ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:27:ba:18:39:27:bb:17:ea:51:05:c2:6b: ae:cb:eb:03:7a:72:8c:e7:99:80:38:d3:a4:41:74: fb:06:37:c1:ea:8c:dd:68:60:31:50:21:1a:f4:f1: ea:6b:b7:8e:6a:69:4f:82:cc:ca:7f:57:03:b7:1c: 55:63:23:4d:45:f0:1e:fd:54:d3:f2:cf:20:7c:26: 09:ef:83:05:18:a8:f1:dc:d9:58:19:fc:a4:c3:6c: 9c:54:89:da:71:be:4b:c0:6f:2c:67:ec:66:9f:c8: f5:55:11:c1:94:d7:9c:df:9a:a9:d2:d2:50:b0:5c: 43:5c:c8:97:13:fd:dd:b0:f1:8c:ee:2b:c3:1e:78: 32:82:c8:05:84:b8:d8:32:0e:36:72:96:fa:d6:de: 40:5d:73:8a:f9:7a:b0:78:ab:83:bf:49:7b:16:ab: 5e:cb:17:de:76:9f:39:31:63:ca:a7:75:63:72:18: 9b:e9:30:6b:09:2b:37:de:66:81:b2:4b:66:a6:65: 0e:b1:b7:69:8b:e0:2f:e9:18:e8:39:b9:de:44:b6: db:45:48:43:5f:75:87:c2:2c:15:aa:bc:88:38:89: 28:01:7a:05:1f:54:78:2f:41:89:30:eb:9d:00:56: 67:22:66:24:dc:ea:09:f0:70:4f:bc:97:a3:56:cf: d9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:1A:AE:44:7C:C7:C7:71:83:C3:62:9D:F8:53:06:64:94:1A:CA X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ab:e3:bf:4a:1c:17:2c:02:70:b1:11:d0:a2:f7:52:6d:f8: dd:dc:ad:1b:d1:90:a1:f3:50:87:bb:ba:99:53:7c:54:ca:fd: 0f:9c:5b:bc:6a:84:96:2a:e3:d4:e5:92:30:ba:99:82:13:6c: e0:91:8f:ef:1a:fb:4b:9e:51:2d:b1:c6:54:78:15:5c:2a:22: 07:20:49:e0:30:fd:0a:33:48:ef:3d:32:4e:ae:78:14:10:21: 93:6c:ac:1c:87:cf:11:e8:c8:0f:ba:93:a1:d8:e0:87:57:09: 6f:33:6a:2f:e4:6c:b7:9f:34:3b:48:92:c7:c9:2f:ec:49:79: 63:3f:46:1c:15:58:c6:91:fd:c8:97:d9:54:a4:5f:07:49:07: 92:39:38:32:14:58:66:17:14:ff:8d:8f:2d:f4:16:6f:49:1e: f3:8a:f9:43:f5:52:66:e9:08:f0:ef:f2:34:68:56:6b:c9:78: 3e:92:5b:ce:aa:f3:6d:64:0b:88:69:cc:55:a8:79:38:4d:c7: 3d:1d:a8:e8:bd:e6:22:b9:a1:ee:60:37:ee:29:95:14:d8:91: 9c:4b:17:29:ee:30:bc:f3:45:36:29:a8:b8:71:c6:67:47:44: f7:cd:8d:df:b7:82:31:9a:b6:ee:d1:04:ab:cb:cb:71:f0:a7: 9f:c7:34:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAySb6eaqJJf2HK9WsCvtY97EDhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNjA0MTkwMjU2MDVaFw0yNjA0MjIxMzI4MDVaMDMxMTAvBgNV BAMTKDI4MjYxQUFFNDQ3Q0M3Qzc3MTgzQzM2MjlERjg1MzA2NjQ5NDFBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClISe6GDknuxfqUQXCa67L6wN6 coznmYA406RBdPsGN8HqjN1oYDFQIRr08eprt45qaU+CzMp/VwO3HFVjI01F8B79 VNPyzyB8JgnvgwUYqPHc2VgZ/KTDbJxUidpxvkvAbyxn7GafyPVVEcGU15zfmqnS 0lCwXENcyJcT/d2w8YzuK8MeeDKCyAWEuNgyDjZylvrW3kBdc4r5erB4q4O/SXsW q17LF952nzkxY8qndWNyGJvpMGsJKzfeZoGyS2amZQ6xt2mL4C/pGOg5ud5EtttF SENfdYfCLBWqvIg4iSgBegUfVHgvQYkw650AVmciZiTc6gnwcE+8l6NWz9ntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKCYarkR8x8dxg8NinfhTBmSUGsowHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACur479KHBcsAnCxEdCi91Jt+N3crRvRkKHz UIe7uplTfFTK/Q+cW7xqhJYq49TlkjC6mYITbOCRj+8a+0ueUS2xxlR4FVwqIgcg SeAw/QozSO89Mk6ueBQQIZNsrByHzxHoyA+6k6HY4IdXCW8zai/kbLefNDtIksfJ L+xJeWM/RhwVWMaR/ciX2VSkXwdJB5I5ODIUWGYXFP+Njy30Fm9JHvOK+UP1Umbp CPDv8jRoVmvJeD6SW86q821kC4hpzFWoeThNxz0dqOi95iK5oe5gN+4plRTYkZxL FynuMLzzRTYpqLhxxmdHRPfNjd+3gjGatu7RBKvLy3Hwp5/HNIg= -----END CERTIFICATE-----Generated at Sun Apr 19 13:01:27 2026 by rpki-client