$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: TiGnNZJNw47HWfHP0vt2SGJce6au0YgJD/qUo0B6GrU= Subject key identifier: 67:3C:DA:85:7A:3A:F5:2B:90:7D:5A:0E:5F:8F:6A:39:FD:DA:D9:B8 Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 792817586348F3D505BA30835D1D504A5A821986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 036C Signing time: Wed 15 Apr 2026 20:21:27 +0000 Manifest this update: Wed 15 Apr 2026 20:16:27 +0000 Manifest next update: Sat 18 Apr 2026 21:04:27 +0000 Files and hashes: 1: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 2: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: zH8II0djv1yY36R5xHqNkk+BiNvhcAhJUPvDhr8yQkU=) 3: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: NLewDnDNZHCpyuL6iCjzSla1E3+jzLgC/C8GKUm9fZs=) 4: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) 5: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: lRFbceN+2lKtKGqvBCRHDrJbwLB1yjMxndac6OubVf4=) 6: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: XQm4NXi8xpo+k2dA/znOiz/lWZyquX9RqLQQs8T9f2U=) 7: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: DqrSh4xXq+uXrVXofRpxHfxtFLrzYuCKUSJwN6gZ5WU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:17:58:63:48:f3:d5:05:ba:30:83:5d:1d:50:4a:5a:82:19:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Apr 15 20:16:27 2026 GMT Not After : Apr 18 21:04:27 2026 GMT Subject: CN=673CDA857A3AF52B907D5A0E5F8F6A39FDDAD9B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c7:26:5c:0f:fd:4a:3a:0c:28:8a:e1:02:bf: 11:25:9e:22:04:ef:a6:52:8b:92:5c:b0:fc:f4:52: a5:f9:e2:f6:d6:1e:64:0f:c5:70:ad:c6:5a:18:a4: cc:64:1f:2a:65:b1:0a:49:8c:aa:7a:8b:10:d6:5b: 37:6c:ca:93:55:eb:98:fd:9d:9e:5d:80:33:a9:69: 4f:cc:51:b8:0f:5a:79:52:8b:67:d6:1d:ab:29:31: d9:45:87:2c:c0:36:71:05:5e:9a:19:cb:d5:55:36: ce:a4:ee:0a:54:9b:be:58:d0:b9:be:83:55:0f:92: 1f:dd:c8:8b:a5:84:58:d0:dd:2b:24:e2:1f:11:77: 55:b4:1e:75:aa:e8:94:0f:da:57:28:d6:0e:c2:08: 55:22:00:fa:b9:cc:d0:84:42:08:51:94:09:e6:e5: 7e:3a:45:80:6b:99:6b:72:52:2a:cd:42:05:e5:b2: a3:22:9c:40:00:a2:9c:03:f0:7b:b6:18:5e:59:72: e7:7e:37:a5:a5:44:ca:aa:cb:60:3f:a6:d4:8a:b7: 94:7b:0a:3d:20:de:c5:b2:33:18:1e:51:e9:59:d4: cb:bf:3d:bb:bf:33:12:86:5c:9a:d9:c7:c6:72:ac: 83:b0:73:62:64:f2:c9:04:51:16:70:ae:4d:36:52: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:DA:85:7A:3A:F5:2B:90:7D:5A:0E:5F:8F:6A:39:FD:DA:D9:B8 X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:12:87:99:43:8f:62:74:70:2d:9f:16:16:f1:5b:bb:62:aa: c0:4a:e2:87:ee:c3:50:63:56:3a:f1:7d:e9:bc:e9:9a:f3:f1: 6b:35:88:3a:7b:ad:8e:ea:38:71:9b:49:77:9a:b5:12:c5:f7: ab:7c:e6:b9:60:74:dc:79:2e:54:06:1e:1e:96:2f:04:66:4f: 6c:4f:85:b0:c4:2c:46:81:1d:92:85:dd:09:ed:b1:aa:8d:13: 2c:05:e4:95:03:7e:5c:22:ef:b8:95:43:ec:c3:69:ad:a1:bb: 23:03:04:44:97:85:af:bc:c8:a3:b8:34:86:c0:4c:ff:6f:67: 6c:cc:4f:f9:5f:90:88:a0:07:35:a0:2f:a7:50:e5:49:93:8b: f8:47:b9:2d:83:06:0b:76:cf:31:d3:7a:1f:61:b6:10:ee:6d: 74:bc:a5:60:48:01:c8:24:42:c2:c8:99:b5:fb:fd:33:0f:3e: d0:cd:f8:73:bb:e5:4d:65:16:8c:bf:78:02:0f:1b:62:50:9e: 2c:4a:79:5f:d3:ce:3d:ac:a5:91:2e:ec:31:dd:ac:51:de:f5: 16:f9:ba:cb:48:5f:f3:b3:71:f1:43:08:81:31:2c:78:5e:29: 2f:21:fa:e6:51:b8:9e:5a:56:d2:24:92:47:72:bb:aa:24:41: 84:07:5b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSgXWGNI89UFujCDXR1QSlqCGYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNjA0MTUyMDE2MjdaFw0yNjA0MTgyMTA0MjdaMDMxMTAvBgNV BAMTKDY3M0NEQTg1N0EzQUY1MkI5MDdENUEwRTVGOEY2QTM5RkREQUQ5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxyZcD/1KOgwoiuECvxElniIE 76ZSi5JcsPz0UqX54vbWHmQPxXCtxloYpMxkHyplsQpJjKp6ixDWWzdsypNV65j9 nZ5dgDOpaU/MUbgPWnlSi2fWHaspMdlFhyzANnEFXpoZy9VVNs6k7gpUm75Y0Lm+ g1UPkh/dyIulhFjQ3Ssk4h8Rd1W0HnWq6JQP2lco1g7CCFUiAPq5zNCEQghRlAnm 5X46RYBrmWtyUirNQgXlsqMinEAAopwD8Hu2GF5Zcud+N6WlRMqqy2A/ptSKt5R7 Cj0g3sWyMxgeUelZ1Mu/Pbu/MxKGXJrZx8ZyrIOwc2Jk8skEURZwrk02UmRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzzahXo69SuQfVoOX49qOf3a2bgwHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkSh5lDj2J0cC2fFhbxW7tiqsBK4ofuw1Bj Vjrxfem86Zrz8Ws1iDp7rY7qOHGbSXeatRLF96t85rlgdNx5LlQGHh6WLwRmT2xP hbDELEaBHZKF3QntsaqNEywF5JUDflwi77iVQ+zDaa2huyMDBESXha+8yKO4NIbA TP9vZ2zMT/lfkIigBzWgL6dQ5UmTi/hHuS2DBgt2zzHTeh9hthDubXS8pWBIAcgk QsLImbX7/TMPPtDN+HO75U1lFoy/eAIPG2JQnixKeV/Tzj2spZEu7DHdrFHe9Rb5 ustIX/OzcfFDCIExLHheKS8h+uZRuJ5aVtIkkkdyu6okQYQHW5A= -----END CERTIFICATE-----Generated at Fri Apr 17 20:33:22 2026 by rpki-client