$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: ljpN+aMxTLdmkB0UwV3+DdCFZXUnaf/ewlip9g35oKg= Subject key identifier: 59:81:D0:51:0B:EB:FF:30:E0:CD:65:D9:62:EA:A0:79:22:C7:68:00 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 748F45945213945A192477DD95203DDBE794EFD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 0124 Signing time: Thu 16 Apr 2026 00:42:13 +0000 Manifest this update: Thu 16 Apr 2026 00:37:13 +0000 Manifest next update: Sun 19 Apr 2026 08:24:13 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 2: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 2KoUt2/IqlrBdeTYa4zU+PXccPJfUuUeEVNRh95cwQ4=) 4: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: d+Zlx5vvCwA6BImQPXMsM1Y0T5Pzhij2u/YQ/dLbEFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8f:45:94:52:13:94:5a:19:24:77:dd:95:20:3d:db:e7:94:ef:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Apr 16 00:37:13 2026 GMT Not After : Apr 19 08:24:13 2026 GMT Subject: CN=5981D0510BEBFF30E0CD65D962EAA07922C76800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:23:59:12:0e:19:a3:2f:46:d6:4b:fc:7b: 40:b8:b9:c9:b4:a3:b4:4c:6a:f8:8d:2b:e9:90:29: 8b:f9:bf:1a:06:ce:a3:76:6f:21:bc:af:17:8a:2d: 14:45:12:bf:f6:d0:7f:75:7e:57:18:1d:c7:7e:09: de:75:73:40:8b:f3:92:a7:e4:ab:bd:17:c5:7d:1a: b4:86:2b:e2:c6:f2:e7:eb:24:b3:8f:2b:7a:be:d6: 9b:a2:c6:29:e8:e9:80:8b:6a:eb:d7:3a:cc:b0:ea: f4:97:33:a3:31:ee:4c:4a:bd:b7:b2:8a:29:b3:07: 9e:fd:ff:00:1a:01:06:68:8c:71:1f:05:ef:45:70: 38:a7:85:37:31:38:f8:e9:36:12:92:e0:24:57:02: 64:a0:bb:83:53:ea:56:c2:b1:94:eb:6e:ac:48:6d: 84:9f:24:2e:38:dc:e0:c8:00:1c:ba:1c:ce:bd:7b: 30:ad:43:a2:79:a0:ea:47:28:6c:44:b2:07:00:d7: e8:b9:f9:bc:b3:49:5b:10:56:dd:74:be:99:db:a4: 9f:27:84:f1:81:61:11:9a:83:9d:7c:d9:73:4b:18: d3:97:1d:6d:29:e7:1d:c8:be:e6:7e:d6:bb:11:c9: d5:d4:d0:51:b2:0c:a1:97:e9:cf:15:16:76:f0:1e: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:81:D0:51:0B:EB:FF:30:E0:CD:65:D9:62:EA:A0:79:22:C7:68:00 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ad:fb:08:58:f4:a6:dd:d7:45:c8:54:5f:c2:66:5f:45:70: 2a:83:5f:ea:c8:97:85:77:72:17:1c:0f:b4:9c:9d:c3:97:c7: b6:6c:77:90:77:cc:cc:1d:85:7d:9a:0b:ea:ab:cc:32:c1:1f: ef:a3:1c:4d:20:e4:01:f3:63:1c:4a:a0:67:1e:e1:05:41:ac: 5e:4f:6a:b2:8d:3a:6a:a8:b5:49:22:f6:85:6b:a7:01:33:bd: 20:90:86:99:70:63:2e:3b:22:89:8d:70:79:f4:cd:1a:94:91: 5c:b8:d9:2a:4b:8a:94:e7:7d:77:cc:d7:46:7a:1c:f4:70:4a: 51:9d:5e:98:39:4e:f2:f3:15:07:32:5e:42:74:bd:79:0f:e5: 08:fa:15:a0:63:e5:8c:f4:41:67:c3:31:39:fb:8f:14:b7:43: 6f:f0:ea:64:bc:24:70:1b:2d:9d:ba:dd:56:90:54:89:fc:29: a0:fc:bf:57:80:76:16:2c:a1:e8:5e:99:f3:df:e0:02:45:2b: 8d:e2:2f:33:90:3a:e4:0e:c2:5d:cd:b2:d1:c4:d2:3b:c5:71: d6:3f:bc:6b:ea:c5:68:5e:fa:74:e2:3c:b7:a4:af:96:5f:7d: 98:bf:97:36:be:18:da:3a:31:5f:7f:ec:b4:83:fb:36:88:21: 5c:ad:fa:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdI9FlFITlFoZJHfdlSA92+eU79kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNjA0MTYwMDM3MTNaFw0yNjA0MTkwODI0MTNaMDMxMTAvBgNV BAMTKDU5ODFEMDUxMEJFQkZGMzBFMENENjVEOTYyRUFBMDc5MjJDNzY4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELCNZEg4Zoy9G1kv8e0C4ucm0 o7RMaviNK+mQKYv5vxoGzqN2byG8rxeKLRRFEr/20H91flcYHcd+Cd51c0CL85Kn 5Ku9F8V9GrSGK+LG8ufrJLOPK3q+1puixino6YCLauvXOsyw6vSXM6Mx7kxKvbey iimzB579/wAaAQZojHEfBe9FcDinhTcxOPjpNhKS4CRXAmSgu4NT6lbCsZTrbqxI bYSfJC443ODIABy6HM69ezCtQ6J5oOpHKGxEsgcA1+i5+byzSVsQVt10vpnbpJ8n hPGBYRGag5182XNLGNOXHW0p5x3IvuZ+1rsRydXU0FGyDKGX6c8VFnbwHtXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWYHQUQvr/zDgzWXZYuqgeSLHaAAwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSt+whY9Kbd10XIVF/CZl9FcCqDX+rIl4V3 chccD7ScncOXx7Zsd5B3zMwdhX2aC+qrzDLBH++jHE0g5AHzYxxKoGce4QVBrF5P arKNOmqotUki9oVrpwEzvSCQhplwYy47IomNcHn0zRqUkVy42SpLipTnfXfM10Z6 HPRwSlGdXpg5TvLzFQcyXkJ0vXkP5Qj6FaBj5Yz0QWfDMTn7jxS3Q2/w6mS8JHAb LZ263VaQVIn8KaD8v1eAdhYsoehemfPf4AJFK43iLzOQOuQOwl3NstHE0jvFcdY/ vGvqxWhe+nTiPLekr5ZffZi/lza+GNo6MV9/7LSD+zaIIVyt+oE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:30:53 2026 by rpki-client