$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: idYLQXLVVkvEsfOVrmo/cbZ9AEZbvKo4BUYq052fSkY= Subject key identifier: 38:22:43:2C:6F:8B:D3:0C:FF:86:9E:F1:4E:6C:AF:24:1E:85:BB:B8 Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 0ECD8CFCA53FD3C8349B528963DB0A25C26D3186 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 04DF Signing time: Sat 18 Apr 2026 23:02:21 +0000 Manifest this update: Sat 18 Apr 2026 22:57:21 +0000 Manifest next update: Wed 22 Apr 2026 09:24:21 +0000 Files and hashes: 1: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: fE9e5yrPOevmgBB0VfKizyOWIyLtoswM3RkQUG6aRUs=) 2: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cd:8c:fc:a5:3f:d3:c8:34:9b:52:89:63:db:0a:25:c2:6d:31:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Apr 18 22:57:21 2026 GMT Not After : Apr 22 09:24:21 2026 GMT Subject: CN=3822432C6F8BD30CFF869EF14E6CAF241E85BBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:56:d4:84:35:c6:7f:6d:5e:2f:1e:99:a4: 75:0e:0c:26:a3:db:e0:e1:80:7b:aa:ce:af:f3:3b: e5:e4:44:12:58:f9:1e:2d:c9:fc:5a:bb:ab:db:22: 0c:65:3a:81:d3:4d:cf:a2:9e:99:be:c3:05:32:b8: 17:43:ce:34:dc:66:36:88:38:d5:4d:64:1f:7e:28: 99:17:90:39:f9:5f:59:79:54:f2:02:0a:b2:ee:82: 90:27:ec:cf:35:ae:12:c4:20:12:46:d2:ef:0e:98: e3:e1:49:3c:9b:d3:56:ac:a6:2a:1a:06:fc:20:84: f4:eb:24:92:d4:2f:62:9f:36:15:5c:57:0c:5e:fd: 7e:75:0c:d2:23:47:02:fc:55:22:29:ac:bc:ab:d9: 90:fe:82:0e:93:02:ee:d2:fc:ba:b7:a8:0e:6c:cd: 8b:7c:94:e4:92:cb:96:09:fb:31:08:2b:b9:7c:6a: cb:5c:76:a7:51:e7:af:31:54:ec:7c:2b:d3:4a:ca: 99:11:bb:42:61:5a:88:67:c9:dd:ac:09:b1:fd:a2: 96:5b:2a:52:ab:bc:4f:ca:6f:da:d7:7f:af:f4:8d: ce:e7:ef:3c:3f:5c:7d:37:87:f3:6a:77:39:e1:ad: ac:54:9a:d0:5e:e0:5b:9d:73:87:cf:71:31:f5:12: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:43:2C:6F:8B:D3:0C:FF:86:9E:F1:4E:6C:AF:24:1E:85:BB:B8 X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:44:ea:db:2e:9e:09:c5:1c:1f:8b:3a:0e:cc:81:34:3d:15: 06:2c:dc:f4:4a:00:2f:2d:2e:3b:05:5a:49:0d:6f:d9:95:d0: fa:09:17:dc:8b:97:fc:df:35:46:a4:32:f5:58:ab:66:13:4c: 04:7f:a4:2e:c4:d3:53:3d:f3:28:94:74:3f:a7:cf:d8:04:42: 82:a4:92:dc:74:bd:fb:c5:86:db:f0:bb:45:6c:e3:8b:e0:cf: 3e:18:72:8d:9f:0a:ce:e0:2e:ac:13:cd:96:e7:01:7a:ad:e5: a6:b0:5c:89:83:35:e1:eb:a1:82:ae:fc:fc:9d:8e:b9:d1:e1: 2c:56:18:1a:6b:d0:6f:f9:50:69:01:78:0c:01:ac:51:83:a4: 13:6e:22:87:86:77:da:ae:74:c1:1f:0d:65:ee:46:9e:8f:92: 71:4f:fe:9e:0f:d0:7f:58:22:c7:fc:66:62:3f:db:ae:d6:b6: 83:12:38:b1:cb:e3:59:8d:eb:22:b9:a7:cf:20:67:c2:89:68: 39:24:48:47:76:90:c4:ff:e3:57:80:a4:66:6e:46:1a:29:c1: cd:ba:58:fc:10:b0:53:41:0b:af:b0:d1:5d:27:4a:f8:19:76: ac:0d:49:b2:d4:f6:15:d7:4c:d8:1a:da:cf:1b:4b:58:a5:34: 48:8a:ad:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDs2M/KU/08g0m1KJY9sKJcJtMYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNjA0MTgyMjU3MjFaFw0yNjA0MjIwOTI0MjFaMDMxMTAvBgNV BAMTKDM4MjI0MzJDNkY4QkQzMENGRjg2OUVGMTRFNkNBRjI0MUU4NUJCQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp1bUhDXGf21eLx6ZpHUODCaj 2+DhgHuqzq/zO+XkRBJY+R4tyfxau6vbIgxlOoHTTc+inpm+wwUyuBdDzjTcZjaI ONVNZB9+KJkXkDn5X1l5VPICCrLugpAn7M81rhLEIBJG0u8OmOPhSTyb01aspioa BvwghPTrJJLUL2KfNhVcVwxe/X51DNIjRwL8VSIprLyr2ZD+gg6TAu7S/Lq3qA5s zYt8lOSSy5YJ+zEIK7l8astcdqdR568xVOx8K9NKypkRu0JhWohnyd2sCbH9opZb KlKrvE/Kb9rXf6/0jc7n7zw/XH03h/NqdznhraxUmtBe4Fudc4fPcTH1Eh5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOCJDLG+L0wz/hp7xTmyvJB6Fu7gwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9E6tsungnFHB+LOg7MgTQ9FQYs3PRKAC8t LjsFWkkNb9mV0PoJF9yLl/zfNUakMvVYq2YTTAR/pC7E01M98yiUdD+nz9gEQoKk ktx0vfvFhtvwu0Vs44vgzz4Yco2fCs7gLqwTzZbnAXqt5aawXImDNeHroYKu/Pyd jrnR4SxWGBpr0G/5UGkBeAwBrFGDpBNuIoeGd9qudMEfDWXuRp6PknFP/p4P0H9Y Isf8ZmI/267WtoMSOLHL41mN6yK5p88gZ8KJaDkkSEd2kMT/41eApGZuRhopwc26 WPwQsFNBC6+w0V0nSvgZdqwNSbLU9hXXTNga2s8bS1ilNEiKrdI= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:48 2026 by rpki-client