$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: F56oU7Jko9s47TObWlgDnx8Yxfr1h+iQBw2xhO+rhIY= Subject key identifier: 8B:55:5C:F8:93:34:E8:89:2B:41:3A:03:C7:76:87:80:EA:2B:25:6F Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 23E8D98D32A46817A77A95CDEDFB9D9DE8E49A45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 035E Signing time: Sat 18 Apr 2026 01:41:08 +0000 Manifest this update: Sat 18 Apr 2026 01:36:08 +0000 Manifest next update: Tue 21 Apr 2026 07:50:08 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: mqtXVVLizi+Cb4Kp5bLXwqtwNNIAS59Nn94fojnuPhA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e8:d9:8d:32:a4:68:17:a7:7a:95:cd:ed:fb:9d:9d:e8:e4:9a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Apr 18 01:36:08 2026 GMT Not After : Apr 21 07:50:08 2026 GMT Subject: CN=8B555CF89334E8892B413A03C7768780EA2B256F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:95:15:d1:29:11:9f:0b:05:e7:2f:7d:81: 0e:5c:9d:e9:56:79:ef:fe:47:bb:22:40:6b:08:e2: ed:54:a8:7f:6d:37:32:3d:71:31:b1:45:59:e3:02: 6a:66:71:22:32:ff:8b:31:db:50:06:17:68:57:b0: 3e:0a:92:4f:f0:0f:32:13:8f:94:66:54:4e:07:9f: 02:7e:18:e2:63:9a:42:bd:98:0b:3e:6e:5d:c2:95: b2:bc:48:1b:e8:f7:75:e5:a6:08:60:6a:73:b4:1f: a6:7c:ae:0d:9d:d8:94:f3:7a:5c:a1:8e:01:ab:3b: 80:8a:9c:a1:a2:b4:a8:5b:1e:b9:59:8a:df:4b:2f: df:52:cb:51:c5:87:e6:e3:97:7c:b8:54:3b:25:c2: bc:7f:fd:64:68:ca:56:9f:f4:c7:12:ff:b3:9f:bd: 98:ff:38:c3:f2:cf:ee:32:5d:8d:2e:65:10:fd:2a: 60:e7:06:1d:91:9b:b0:3d:6d:8b:71:f0:d3:f7:29: 2b:3a:6f:e0:35:6f:cf:30:3e:ea:ba:8c:d4:1a:ed: 88:0f:a8:45:4f:d2:9e:8a:09:d6:5b:1f:f9:db:bb: 63:d7:09:b0:47:49:80:f8:ab:6e:90:83:0d:93:fe: 4d:5f:e5:c4:56:a2:c4:c3:61:8e:7c:e7:0b:62:05: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:55:5C:F8:93:34:E8:89:2B:41:3A:03:C7:76:87:80:EA:2B:25:6F X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:9a:cb:a4:9a:f1:c7:89:b4:f3:98:5c:6e:1f:61:64:12:c0: 4f:62:05:b0:a1:cd:d1:a3:d9:e3:ff:ef:4f:17:16:e3:66:ec: 96:90:98:a6:22:0d:75:f4:75:83:97:7e:8f:f5:7b:32:90:f3: 32:1b:ae:e5:db:e9:e4:d8:a3:52:69:c1:5d:6f:2d:9d:ba:1b: 56:53:18:3d:23:07:c9:63:ba:64:1e:62:3a:70:9e:c3:ed:9f: 68:07:b4:23:2e:16:b0:9b:40:89:eb:43:c0:40:03:da:67:75: be:5c:ad:17:4e:77:36:38:6f:30:98:50:67:e7:b7:2a:4d:12: 9e:5b:5f:f7:45:fd:88:ca:24:1b:14:4f:78:23:45:a9:ba:85: 50:c6:35:8f:ce:b1:a2:79:5a:79:6e:4d:1c:18:30:3d:83:e4: 38:c5:67:37:72:ee:a2:39:54:ae:ee:75:ce:d2:dc:84:10:0d: 58:7f:e7:3f:61:82:37:6a:06:0d:23:18:fc:08:3e:f4:84:4d: 02:a9:00:f5:3f:23:4f:89:d8:07:2f:72:49:69:8b:ab:e3:72: 64:c9:cd:8a:26:77:b8:32:02:04:c2:2b:9b:6e:5c:c8:05:9b: e2:bc:2a:22:40:b3:6e:5c:4d:ce:86:97:ff:40:63:ec:25:a9: d6:c1:a8:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+jZjTKkaBenepXN7fudnejkmkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNjA0MTgwMTM2MDhaFw0yNjA0MjEwNzUwMDhaMDMxMTAvBgNV BAMTKDhCNTU1Q0Y4OTMzNEU4ODkyQjQxM0EwM0M3NzY4NzgwRUEyQjI1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvhJUV0SkRnwsF5y99gQ5cnelW ee/+R7siQGsI4u1UqH9tNzI9cTGxRVnjAmpmcSIy/4sx21AGF2hXsD4Kkk/wDzIT j5RmVE4HnwJ+GOJjmkK9mAs+bl3ClbK8SBvo93XlpghganO0H6Z8rg2d2JTzelyh jgGrO4CKnKGitKhbHrlZit9LL99Sy1HFh+bjl3y4VDslwrx//WRoylaf9McS/7Of vZj/OMPyz+4yXY0uZRD9KmDnBh2Rm7A9bYtx8NP3KSs6b+A1b88wPuq6jNQa7YgP qEVP0p6KCdZbH/nbu2PXCbBHSYD4q26Qgw2T/k1f5cRWosTDYY585wtiBWcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1Vc+JM06IkrQToDx3aHgOorJW8wHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCay6Sa8ceJtPOYXG4fYWQSwE9iBbChzdGj 2eP/708XFuNm7JaQmKYiDXX0dYOXfo/1ezKQ8zIbruXb6eTYo1JpwV1vLZ26G1ZT GD0jB8ljumQeYjpwnsPtn2gHtCMuFrCbQInrQ8BAA9pndb5crRdOdzY4bzCYUGfn typNEp5bX/dF/YjKJBsUT3gjRam6hVDGNY/OsaJ5WnluTRwYMD2D5DjFZzdy7qI5 VK7udc7S3IQQDVh/5z9hgjdqBg0jGPwIPvSETQKpAPU/I0+J2Acvcklpi6vjcmTJ zYomd7gyAgTCK5tuXMgFm+K8KiJAs25cTc6Gl/9AY+wlqdbBqF8= -----END CERTIFICATE-----Generated at Sun Apr 19 12:27:54 2026 by rpki-client