$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft File: B0928A45D014D8D5FAD50314E828086F12B15610.mft (raw, json) Hash identifier: 0m35DD/ha/Tb+4niWJBJcBl/oxCNXZsZls/i0rjvrdo= Subject key identifier: 3B:98:7B:AC:77:20:08:9B:87:AC:6A:06:F4:59:30:D9:6A:92:53:CF Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 Certificate issuer: /CN=B0928A45D014D8D5FAD50314E828086F12B15610 Certificate serial: 1E0214F8D77647FF50EBCC29F1A9A0D31E2E8CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft Manifest number: 036D Signing time: Fri 17 Apr 2026 21:11:26 +0000 Manifest this update: Fri 17 Apr 2026 21:06:26 +0000 Manifest next update: Tue 21 Apr 2026 00:06:26 +0000 Files and hashes: 1: 3230322e37302e3133332e302f32342d3234203d3e20313430343433.roa (hash: lRFbceN+2lKtKGqvBCRHDrJbwLB1yjMxndac6OubVf4=) 2: B0928A45D014D8D5FAD50314E828086F12B15610.crl (hash: qZt3fa9qIydcUzKQfkh/KAgo87I0Sp3kMR/APEnK/0I=) 3: 3230322e3132352e38332e302f32342d3234203d3e20313430343433.roa (hash: NLewDnDNZHCpyuL6iCjzSla1E3+jzLgC/C8GKUm9fZs=) 4: 3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (hash: zH8II0djv1yY36R5xHqNkk+BiNvhcAhJUPvDhr8yQkU=) 5: 3230322e3132352e38322e302f32342d3234203d3e20313430343433.roa (hash: DqrSh4xXq+uXrVXofRpxHfxtFLrzYuCKUSJwN6gZ5WU=) 6: 3230322e37302e3133322e302f32342d3234203d3e20313430343433.roa (hash: hnSe2L9heULKYvVeefFY6CeCDXE6iTWu+s4r/qCo/4o=) 7: 3230322e37302e3133322e302f32332d3233203d3e20313430343433.roa (hash: unxNSSNtfbW/QtJSHv1+Jppsd16Z88+qlZSg2ZXLUc0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:02:14:f8:d7:76:47:ff:50:eb:cc:29:f1:a9:a0:d3:1e:2e:8c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610 Validity Not Before: Apr 17 21:06:26 2026 GMT Not After : Apr 21 00:06:26 2026 GMT Subject: CN=3B987BAC7720089B87AC6A06F45930D96A9253CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:9c:f5:ac:1c:48:6c:59:cc:de:ad:78:5a: cf:99:a6:4f:03:30:46:c6:d8:a2:72:09:de:e2:cb: cc:d5:d7:79:fb:84:9d:01:50:34:a4:45:9b:9d:66: 47:42:83:5a:78:72:c8:d0:f4:99:54:aa:cc:4c:1c: 2d:20:5b:cd:53:bd:e3:a1:60:78:46:56:11:12:f2: e7:72:ac:6e:50:54:ec:ee:0d:f3:85:47:c6:41:b6: 0d:0d:f7:f9:8b:b2:62:ce:4a:77:5e:67:e5:8c:80: a5:6a:c4:2e:fb:51:63:7a:04:48:a0:9e:33:db:f0: f6:07:0f:e8:58:b2:74:11:92:38:4c:ee:10:80:19: 6f:87:d8:37:8b:03:2f:43:31:e1:03:18:28:e6:41: c4:03:80:0a:df:c2:20:f9:b3:03:59:72:d2:6b:31: 4b:6a:62:26:7a:5c:6e:4a:69:85:bb:6c:fd:13:f4: 1c:77:2d:dc:17:24:b8:37:9e:50:ac:69:4f:aa:cd: ec:bb:32:03:bd:6c:84:18:b9:7c:57:70:dd:49:a2: 6b:a1:53:3d:7a:c1:ca:c8:5f:f3:44:c2:8c:49:47: 07:dd:88:68:9b:32:8e:52:d9:c2:b9:fb:4a:47:29: 5f:18:cf:9b:33:9c:04:11:7b:59:07:61:0e:b3:8c: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:7B:AC:77:20:08:9B:87:AC:6A:06:F4:59:30:D9:6A:92:53:CF X509v3 Authority Key Identifier: keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:35:f4:ad:dc:32:23:7a:af:6a:41:59:65:bd:bd:64:6a:d6: 63:14:45:28:7c:bb:dc:52:13:60:0e:05:3b:d5:41:17:ca:ff: b5:a9:54:41:5a:9f:8f:6c:42:39:90:33:86:b6:bc:ca:1a:5c: 5d:32:96:cc:fa:a1:66:e7:b5:57:b4:13:87:28:d0:93:1c:b3: 89:5c:44:1c:0b:51:53:3b:50:d4:dc:2a:16:2a:0f:df:46:75: 6b:da:2c:ee:d9:45:df:0d:f4:cb:c6:97:c0:ab:9d:ca:2d:5e: 6a:9b:de:48:f5:09:6f:e1:37:d5:7b:fe:37:db:f3:05:3d:4f: 9b:b0:37:a5:a0:81:30:0b:a3:b5:ff:e2:f3:ac:0f:be:12:16: 2f:2e:07:c3:84:f4:14:72:ee:ac:94:07:55:10:97:08:e1:6f: e2:46:90:91:fb:2c:e0:c2:4c:50:45:a4:af:a4:aa:b1:8c:1f: 39:2b:79:77:e9:e9:9c:8d:7d:4b:ea:0e:bb:fa:f1:db:b1:39: 31:c6:a2:91:36:12:a8:34:2a:63:1a:7b:0a:df:18:ae:70:45: 7c:d0:8c:ef:60:32:d6:4d:7f:9a:18:77:2a:d7:38:dd:25:4a: 3a:e5:ba:cb:99:18:0d:b1:f3:9a:1b:60:27:06:57:9d:36:77: ed:5d:64:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHgIU+Nd2R/9Q68wp8amg0x4ujOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYx MkIxNTYxMDAeFw0yNjA0MTcyMTA2MjZaFw0yNjA0MjEwMDA2MjZaMDMxMTAvBgNV BAMTKDNCOTg3QkFDNzcyMDA4OUI4N0FDNkEwNkY0NTkzMEQ5NkE5MjUzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Opz1rBxIbFnM3q14Ws+Zpk8D MEbG2KJyCd7iy8zV13n7hJ0BUDSkRZudZkdCg1p4csjQ9JlUqsxMHC0gW81TveOh YHhGVhES8udyrG5QVOzuDfOFR8ZBtg0N9/mLsmLOSndeZ+WMgKVqxC77UWN6BEig njPb8PYHD+hYsnQRkjhM7hCAGW+H2DeLAy9DMeEDGCjmQcQDgArfwiD5swNZctJr MUtqYiZ6XG5KaYW7bP0T9Bx3LdwXJLg3nlCsaU+qzey7MgO9bIQYuXxXcN1Jomuh Uz16wcrIX/NEwoxJRwfdiGibMo5S2cK5+0pHKV8Yz5sznAQRe1kHYQ6zjLIZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5h7rHcgCJuHrGoG9Fkw2WqSU88wHwYDVR0j BBgwFoAUsJKKRdAU2NX61QMU6CgIbxKxVhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2QzMjNiZS04MzdkLTQyNDQtODQ2Yy03ZDIzOTNhOWEwMDkvMC9CMDkyOEE0NUQw MTREOEQ1RkFENTAzMTRFODI4MDg2RjEyQjE1NjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4NkYxMkIx NTYxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NkMzIzYmUtODM3ZC00MjQ0LTg0 NmMtN2QyMzkzYTlhMDA5LzAvQjA5MjhBNDVEMDE0RDhENUZBRDUwMzE0RTgyODA4 NkYxMkIxNTYxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs19K3cMiN6r2pBWWW9vWRq1mMURSh8u9xS E2AOBTvVQRfK/7WpVEFan49sQjmQM4a2vMoaXF0ylsz6oWbntVe0E4co0JMcs4lc RBwLUVM7UNTcKhYqD99GdWvaLO7ZRd8N9MvGl8CrncotXmqb3kj1CW/hN9V7/jfb 8wU9T5uwN6WggTALo7X/4vOsD74SFi8uB8OE9BRy7qyUB1UQlwjhb+JGkJH7LODC TFBFpK+kqrGMHzkreXfp6ZyNfUvqDrv68duxOTHGopE2Eqg0KmMaewrfGK5wRXzQ jO9gMtZNf5oYdyrXON0lSjrlusuZGA2x85obYCcGV502d+1dZOI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:00 2026 by rpki-client