$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: vU9r5q/hqxf9ya0Z8JUzWgkqsCJiOhVnP6Jo5k46Z5I= Subject key identifier: FE:80:8F:B4:43:18:08:4B:81:0C:A6:7A:AA:61:19:74:75:D8:51:72 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 1B2625C7AEEA94F4404CB5B1E98408F063976603 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 0277 Signing time: Sat 18 Apr 2026 01:11:24 +0000 Manifest this update: Sat 18 Apr 2026 01:06:24 +0000 Manifest next update: Tue 21 Apr 2026 09:35:24 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: v00vtP0bWL7Buk01yo84+tSjfHLcJv0ez1bijApcHM8=) 2: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: GWn3nxGmJlr3RlMc0bPqCH8aQeqjcJvRIQK2hH+CBUM=) 3: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ZaP6okTPzJHZKniyIdhQXNdEudbstzWU4bsphJPUV9E=) 4: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: +EIRv+917tyCp6af/W5OPwQRzSNyoSTvU7kccVrs+vw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 09:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:26:25:c7:ae:ea:94:f4:40:4c:b5:b1:e9:84:08:f0:63:97:66:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Apr 18 01:06:24 2026 GMT Not After : Apr 21 09:35:24 2026 GMT Subject: CN=FE808FB44318084B810CA67AAA61197475D85172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:b8:ed:ad:48:f3:a5:bc:e6:e1:87:1b:b4: cc:e7:78:e6:70:d7:88:97:35:37:40:75:80:8c:a1: 1a:42:58:10:bd:69:7e:96:93:db:e0:03:8c:80:c0: 22:94:c3:ed:b7:58:90:78:56:3c:81:6d:00:a0:34: 7b:3b:19:7b:6a:38:f4:f4:73:a8:4a:f0:f0:c7:93: bb:57:86:4b:fc:85:88:76:81:18:aa:5a:d5:be:05: 8f:35:41:8d:02:56:41:8a:77:20:65:4b:a8:37:ec: fb:8f:ee:24:c2:0b:7d:6d:19:97:31:b9:5e:93:0a: 3b:09:75:47:8d:55:48:76:0c:d3:eb:46:3a:51:20: 63:ed:93:1d:0f:2d:42:20:56:33:58:77:d3:7f:df: 18:41:b1:ff:3d:b9:6b:8a:9b:72:e5:cd:f4:5e:a3: 71:81:54:86:c1:d4:59:6e:10:b4:ee:73:26:39:bb: f9:70:3a:7b:b2:c6:1b:ba:e2:3b:25:36:5b:b8:42: 3d:2f:d0:f1:38:4d:89:ed:68:55:84:9f:e4:14:03: ca:90:f4:7c:e8:83:0a:e8:77:d3:2f:e7:83:70:43: f3:45:87:72:fa:db:2b:fe:39:e6:c3:7b:f9:af:4d: d7:aa:43:63:6a:1c:b0:24:4d:be:a1:32:96:17:cb: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:80:8F:B4:43:18:08:4B:81:0C:A6:7A:AA:61:19:74:75:D8:51:72 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:3f:52:bd:c0:48:63:5e:54:36:c0:9d:16:9a:af:9b:77:67: 6f:b8:b3:7d:af:83:f7:dc:e9:cb:23:e4:9a:24:20:b7:29:cf: 00:14:02:7c:74:fe:6b:3e:12:88:a7:de:02:7b:b1:f4:27:7d: 24:6e:57:20:a6:8f:07:79:82:d0:3e:9a:50:0a:ca:4a:02:de: 11:39:59:22:8e:00:f7:4d:c2:03:f1:cd:a2:cf:24:90:4d:d4: ad:1f:6d:97:e6:5f:e5:85:32:38:29:ee:fd:b0:e8:38:05:17: 27:09:63:91:35:0b:4a:79:ad:70:54:77:d7:2c:88:f9:35:d6: 99:ec:4b:aa:14:e6:20:9b:08:79:af:51:29:0e:ec:77:89:30: 04:2b:60:e0:e8:d1:ad:59:1b:39:9a:fe:2a:6a:ec:90:45:3f: 71:b5:2d:c7:d9:f5:f3:b0:1d:f9:a8:32:da:d3:e5:b1:c2:34: 1f:7e:32:b5:f2:d3:11:d0:2c:6b:f7:86:79:2c:16:9b:a3:c6: 8a:f8:de:ce:24:00:07:8b:e4:3f:67:a8:11:00:13:7a:aa:c0: a4:38:75:66:68:d2:74:4d:3d:d9:68:87:8f:82:2a:f3:80:34: 8b:d2:25:00:b8:ea:5c:92:59:30:ed:1c:f8:fb:47:be:6e:ca: be:b1:de:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyYlx67qlPRATLWx6YQI8GOXZgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNjA0MTgwMTA2MjRaFw0yNjA0MjEwOTM1MjRaMDMxMTAvBgNV BAMTKEZFODA4RkI0NDMxODA4NEI4MTBDQTY3QUFBNjExOTc0NzVEODUxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrrjtrUjzpbzm4YcbtMzneOZw 14iXNTdAdYCMoRpCWBC9aX6Wk9vgA4yAwCKUw+23WJB4VjyBbQCgNHs7GXtqOPT0 c6hK8PDHk7tXhkv8hYh2gRiqWtW+BY81QY0CVkGKdyBlS6g37PuP7iTCC31tGZcx uV6TCjsJdUeNVUh2DNPrRjpRIGPtkx0PLUIgVjNYd9N/3xhBsf89uWuKm3LlzfRe o3GBVIbB1FluELTucyY5u/lwOnuyxhu64jslNlu4Qj0v0PE4TYntaFWEn+QUA8qQ 9Hzogwrod9Mv54NwQ/NFh3L62yv+OebDe/mvTdeqQ2NqHLAkTb6hMpYXy6NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/oCPtEMYCEuBDKZ6qmEZdHXYUXIwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN0/Ur3ASGNeVDbAnRaar5t3Z2+4s32vg/fc 6csj5JokILcpzwAUAnx0/ms+Eoin3gJ7sfQnfSRuVyCmjwd5gtA+mlAKykoC3hE5 WSKOAPdNwgPxzaLPJJBN1K0fbZfmX+WFMjgp7v2w6DgFFycJY5E1C0p5rXBUd9cs iPk11pnsS6oU5iCbCHmvUSkO7HeJMAQrYODo0a1ZGzma/ipq7JBFP3G1LcfZ9fOw HfmoMtrT5bHCNB9+MrXy0xHQLGv3hnksFpujxor43s4kAAeL5D9nqBEAE3qqwKQ4 dWZo0nRNPdloh4+CKvOANIvSJQC46lySWTDtHPj7R75uyr6x3lQ= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:17 2026 by rpki-client