$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: YrLtSoEi2R68Ul2wyIQ31CKkfowutTWLe24ZwTjZ5Uk= Subject key identifier: 8F:1B:80:B1:B7:C7:33:CE:BE:17:85:83:C6:14:F0:FC:76:23:5E:51 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 1E1324A0A81FCAA9119DA9DAE2ACF0C0C6799BE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 02:20:57 +0000 Manifest this update: Fri 17 Apr 2026 02:15:57 +0000 Manifest next update: Mon 20 Apr 2026 13:21:57 +0000 Files and hashes: 1: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: kW0dkbVl3axDrA3JYmOP/J+VOWaOXAqel6hQB21C0fo=) 2: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: YzSIY1zA+8vDnTROTWhvMUw0lDxbU9DG47hg5g9YYoc=) 3: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Xfgb/bosimr9cD6CvubfYOrFF8ltCqJCXBNQnnNDr+E=) 4: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: WupURUMba951IZMSXzdIOcabl4dORe5w/XVPKxrKvJE=) 5: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: a9rngyDnHCXUi8yMVgMhHvcKP7ul4CPYYGjkW0jQDZY=) 6: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ef8K/s+loJfcDNcQd9jMxXM6ibzQu1hDbe8Y7AKrwdI=) 7: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: 6TKkLJ/vA8ZX1xyW1i7zZdkDISa15oqAT2rL7tkJxYE=) 8: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: H9jyrX4t2mUOdkzDAjL/yXJRGmywtOSsC6VhjXRa+ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:13:24:a0:a8:1f:ca:a9:11:9d:a9:da:e2:ac:f0:c0:c6:79:9b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Apr 17 02:15:57 2026 GMT Not After : Apr 20 13:21:57 2026 GMT Subject: CN=8F1B80B1B7C733CEBE178583C614F0FC76235E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:6c:b8:d6:f0:bb:27:e1:1e:f0:df:00:17: 83:37:8e:a8:ae:97:98:8b:fc:11:f2:98:66:68:a8: 4b:cc:2f:8e:b5:b5:fd:45:46:39:70:3f:a1:55:bd: 59:3f:ba:74:d5:a6:6e:cc:ec:9f:94:51:62:de:41: 79:85:f6:5b:19:8a:c4:1c:a2:a2:02:02:e5:77:3a: 96:ac:98:1c:6e:a8:eb:61:b5:d7:62:9e:48:a9:81: 7e:e6:f6:02:f3:bd:6c:7c:e1:a2:dd:92:08:b0:46: f2:7b:3e:e8:1a:8a:2a:f4:5a:56:86:af:e2:dc:73: b8:68:59:f1:70:67:11:1a:f6:2e:38:53:1f:a7:d1: ba:97:49:17:da:03:97:7e:d1:36:c9:c3:9e:ee:a1: 26:33:ba:30:55:3e:79:fa:d5:47:f8:69:b4:08:f9: 77:e8:20:32:aa:c6:e3:63:82:35:e0:46:ed:db:b8: 01:2e:29:a4:5b:ed:a7:41:14:16:0d:a9:60:23:34: 56:d7:f3:17:8d:f6:29:e3:5f:0c:90:cc:20:20:20: 1b:81:05:ca:40:cc:c7:d4:22:5b:ed:18:47:3b:25: fb:60:0b:2c:7b:2d:03:9f:f9:e5:53:91:27:56:fb: 05:fe:95:4f:96:bd:b9:c5:27:73:66:fe:3e:a3:f5: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1B:80:B1:B7:C7:33:CE:BE:17:85:83:C6:14:F0:FC:76:23:5E:51 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5d:1a:84:2c:89:db:d1:80:64:05:9c:e6:a1:ef:fc:fe:28: f9:2a:48:5c:de:85:30:67:cd:3f:84:4f:d6:8f:9c:eb:bb:f8: 56:dd:38:9f:2b:26:f2:7d:aa:30:37:74:00:2d:00:d6:53:93: 97:90:9b:c3:04:2e:be:17:8c:eb:71:34:88:04:dd:d7:d9:cc: 60:31:f2:5f:bb:1a:a2:40:da:8b:65:9b:ce:3d:5a:69:bb:24: 3f:84:4d:23:b0:af:94:0b:44:06:f5:8d:3a:80:5a:66:7a:4c: d6:ad:52:48:15:71:9b:27:9d:47:76:d5:56:a9:8a:bb:8c:ed: ce:cb:c3:f6:f9:e3:29:5f:b5:34:2b:1e:d8:d4:9b:84:d6:a4: cf:59:3d:e6:0d:1e:47:e8:0c:67:53:66:a1:c5:c7:b5:60:d3: 8b:bb:7d:1a:89:69:d8:a6:f7:b6:60:c6:d6:b8:5b:57:18:c7: 8d:79:f8:82:d0:04:8a:33:d3:7a:fd:c8:9b:1a:f2:b3:19:c8: 27:f9:19:6a:19:54:e5:8a:68:0b:86:4f:9e:99:02:c3:0d:15: ee:f1:b8:e2:cb:0f:af:d9:1b:ce:58:fb:65:d4:71:d0:3e:52: f5:41:21:26:60:75:02:a0:a9:40:44:83:84:bc:3b:02:bf:f4: 41:41:a4:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhMkoKgfyqkRnana4qzwwMZ5m+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNjA0MTcwMjE1NTdaFw0yNjA0MjAxMzIxNTdaMDMxMTAvBgNV BAMTKDhGMUI4MEIxQjdDNzMzQ0VCRTE3ODU4M0M2MTRGMEZDNzYyMzVFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IGy41vC7J+Ee8N8AF4M3jqiu l5iL/BHymGZoqEvML461tf1FRjlwP6FVvVk/unTVpm7M7J+UUWLeQXmF9lsZisQc oqICAuV3OpasmBxuqOthtddinkipgX7m9gLzvWx84aLdkgiwRvJ7Pugaiir0WlaG r+Lcc7hoWfFwZxEa9i44Ux+n0bqXSRfaA5d+0TbJw57uoSYzujBVPnn61Uf4abQI +XfoIDKqxuNjgjXgRu3buAEuKaRb7adBFBYNqWAjNFbX8xeN9injXwyQzCAgIBuB BcpAzMfUIlvtGEc7JftgCyx7LQOf+eVTkSdW+wX+lU+WvbnFJ3Nm/j6j9cWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjxuAsbfHM86+F4WDxhTw/HYjXlEwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJdGoQsidvRgGQFnOah7/z+KPkqSFzehTBn zT+ET9aPnOu7+FbdOJ8rJvJ9qjA3dAAtANZTk5eQm8MELr4XjOtxNIgE3dfZzGAx 8l+7GqJA2otlm849Wmm7JD+ETSOwr5QLRAb1jTqAWmZ6TNatUkgVcZsnnUd21Vap iruM7c7Lw/b54ylftTQrHtjUm4TWpM9ZPeYNHkfoDGdTZqHFx7Vg04u7fRqJadim 97Zgxta4W1cYx415+ILQBIoz03r9yJsa8rMZyCf5GWoZVOWKaAuGT56ZAsMNFe7x uOLLD6/ZG85Y+2XUcdA+UvVBISZgdQKgqUBEg4S8OwK/9EFBpGI= -----END CERTIFICATE-----Generated at Fri Apr 17 20:30:22 2026 by rpki-client