$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: lBxUXRi+qNUco2it8gPwE2mToQ5uFW08fVP7SBSNKGA= Subject key identifier: F5:3D:E7:D3:21:64:7C:00:89:86:46:99:F4:3F:C6:F6:1F:0B:DF:96 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 36BC6899D3AC0373C4428F57A5D8D1669CA2FC02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 025C Signing time: Fri 17 Apr 2026 22:10:42 +0000 Manifest this update: Fri 17 Apr 2026 22:05:42 +0000 Manifest next update: Tue 21 Apr 2026 09:53:42 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: S+FUnSTLpAzf0sQY9/1pfDrnx0eDuyk5g6lfSEGXmEs=) 2: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: kKRyDzH7eJXLje4D3odjAP7MGhtItm1xkWxK/zohCxA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bc:68:99:d3:ac:03:73:c4:42:8f:57:a5:d8:d1:66:9c:a2:fc:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Apr 17 22:05:42 2026 GMT Not After : Apr 21 09:53:42 2026 GMT Subject: CN=F53DE7D321647C0089864699F43FC6F61F0BDF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:01:bc:43:77:fd:da:b6:5a:27:13:c3:ff: 28:b9:9b:6a:80:b4:b8:f1:88:ab:6f:bd:16:fa:b7: 7a:f6:d2:55:d2:f5:2f:3d:40:d9:67:3a:d6:0d:a9: 97:61:e5:c3:67:ce:8f:29:7f:32:3e:5c:54:88:54: 1b:21:6e:38:28:06:da:90:e8:5f:69:02:6c:a5:95: 52:55:48:5b:95:19:15:34:46:56:c0:1c:8a:92:9b: 43:9e:cc:4b:c2:ce:44:85:7a:eb:ef:86:b8:93:52: 41:5a:b9:c2:57:a8:f9:35:98:6e:c1:d3:2d:f1:71: e0:aa:bd:02:99:cc:37:02:c7:9b:d9:0f:0e:06:3b: 68:46:c8:c7:ba:a1:ae:9a:52:d8:b1:41:66:2a:05: 04:e4:27:e8:c2:be:22:98:d1:b0:c7:60:86:e4:0c: ef:c2:d4:90:59:0f:95:b3:f1:7f:41:91:95:fa:3d: ed:e2:16:16:eb:f7:53:cd:36:a3:da:9c:c1:04:00: c4:12:2e:f0:8e:62:c8:10:07:d2:49:0d:7e:e8:ec: a0:13:51:39:6c:7c:a7:60:3e:82:d6:5a:42:bb:62: 07:49:dc:54:9e:76:59:ec:d4:81:4e:1d:63:88:aa: e8:0d:4f:0d:da:46:6d:c8:ef:e8:c2:c4:2a:06:87: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3D:E7:D3:21:64:7C:00:89:86:46:99:F4:3F:C6:F6:1F:0B:DF:96 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3f:05:7f:5a:2b:0d:f9:c0:d9:08:af:3e:bd:c4:c3:a6:7b: bd:6a:10:d0:d4:91:24:04:a9:0d:82:26:d5:57:cd:90:9f:6b: 9d:77:63:6b:ca:63:b8:31:1d:df:6c:58:7b:a6:c5:82:b5:1d: 06:29:d3:8d:71:df:c4:db:90:f1:65:d2:83:23:10:21:84:f2: 9b:dc:a8:06:8b:dc:33:53:47:bd:38:13:76:01:6b:bb:63:b8: 39:0d:85:37:51:34:ca:42:9f:ba:43:e4:dd:4d:21:a3:f6:85: 6e:02:ee:32:cd:3d:83:95:e6:04:08:61:e8:f4:f0:69:f4:9d: 95:1a:69:fd:cd:13:2b:29:ee:67:20:2e:78:74:99:eb:a7:21: ac:8b:db:b3:61:d4:0f:8b:b6:79:3e:38:45:74:f8:73:b9:6c: 05:0e:bd:25:1f:6d:fe:24:7d:a3:2e:b9:51:6e:78:d3:2f:1c: c5:f7:39:67:c0:70:b8:38:6f:b0:b4:61:92:69:99:ed:35:09: 6b:d0:f4:ce:8b:3c:b6:bf:bd:19:c2:d4:2f:01:38:ad:2f:8e: b6:df:4c:14:aa:8b:4d:68:87:36:2d:2e:57:d2:52:e7:d0:cc: 11:27:d1:0f:0a:6d:d1:c2:4f:d4:78:15:85:11:9f:94:27:5e: 99:94:da:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNrxomdOsA3PEQo9XpdjRZpyi/AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNjA0MTcyMjA1NDJaFw0yNjA0MjEwOTUzNDJaMDMxMTAvBgNV BAMTKEY1M0RFN0QzMjE2NDdDMDA4OTg2NDY5OUY0M0ZDNkY2MUYwQkRGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPAG8Q3f92rZaJxPD/yi5m2qA tLjxiKtvvRb6t3r20lXS9S89QNlnOtYNqZdh5cNnzo8pfzI+XFSIVBshbjgoBtqQ 6F9pAmyllVJVSFuVGRU0RlbAHIqSm0OezEvCzkSFeuvvhriTUkFaucJXqPk1mG7B 0y3xceCqvQKZzDcCx5vZDw4GO2hGyMe6oa6aUtixQWYqBQTkJ+jCviKY0bDHYIbk DO/C1JBZD5Wz8X9BkZX6Pe3iFhbr91PNNqPanMEEAMQSLvCOYsgQB9JJDX7o7KAT UTlsfKdgPoLWWkK7YgdJ3FSedlns1IFOHWOIqugNTw3aRm3I7+jCxCoGhzHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9T3n0yFkfACJhkaZ9D/G9h8L35YwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc/BX9aKw35wNkIrz69xMOme71qENDUkSQE qQ2CJtVXzZCfa513Y2vKY7gxHd9sWHumxYK1HQYp041x38TbkPFl0oMjECGE8pvc qAaL3DNTR704E3YBa7tjuDkNhTdRNMpCn7pD5N1NIaP2hW4C7jLNPYOV5gQIYej0 8Gn0nZUaaf3NEysp7mcgLnh0meunIayL27Nh1A+Ltnk+OEV0+HO5bAUOvSUfbf4k faMuuVFueNMvHMX3OWfAcLg4b7C0YZJpme01CWvQ9M6LPLa/vRnC1C8BOK0vjrbf TBSqi01ohzYtLlfSUufQzBEn0Q8KbdHCT9R4FYURn5QnXpmU2uA= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:47 2026 by rpki-client