$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: pok6n2KIicNcGp9HEb5Pm0vvM/CWt70/aWJqUmdEYTc= Subject key identifier: 76:31:2E:85:6F:BE:F2:60:85:54:AB:E8:55:42:A6:06:5D:EC:C0:7B Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 2919E0629F6130461953F25CFC5EF17E9E5963D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: 0114 Signing time: Wed 15 Apr 2026 12:41:56 +0000 Manifest this update: Wed 15 Apr 2026 12:36:56 +0000 Manifest next update: Sat 18 Apr 2026 22:52:56 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) 2: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: YbjVPvhEiveFExCwSetPs6Fjt3LEkt+QbD/aChdafIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:19:e0:62:9f:61:30:46:19:53:f2:5c:fc:5e:f1:7e:9e:59:63:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Apr 15 12:36:56 2026 GMT Not After : Apr 18 22:52:56 2026 GMT Subject: CN=76312E856FBEF2608554ABE85542A6065DECC07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:5a:57:30:ab:cc:87:af:42:f2:e2:73:04: ce:d4:54:8e:93:ee:01:bc:2a:90:69:cb:bd:e4:5e: 71:e8:9a:fc:a0:28:0e:e3:57:3d:89:a5:94:d4:3f: a9:25:77:60:c1:40:9d:2f:62:27:2b:a0:72:2f:1f: 08:86:bd:f1:7e:72:f0:a2:0e:bd:21:24:0c:8e:47: 7b:df:fa:d8:c1:e6:60:62:a7:bc:22:0d:b3:39:6f: e5:33:ab:75:b2:30:fe:b0:cd:60:e4:95:ee:34:7e: b0:7d:0b:93:86:4c:3c:82:37:bf:82:fd:92:75:c1: 72:3a:1f:e5:44:89:21:5a:ff:dc:12:39:d5:d0:ae: a3:b4:dc:41:97:de:cf:03:9f:c7:c9:d8:93:71:95: 06:cb:8c:9d:95:89:2a:64:07:5a:50:9d:44:a0:8b: 8e:55:0c:88:ff:ee:9f:e1:52:9e:1e:fa:87:46:9e: d0:7f:16:0e:8b:f4:75:4e:99:65:70:5a:22:33:3d: 3d:25:a3:7b:c4:26:82:e9:bd:73:c6:af:35:ee:2f: 88:98:df:b2:eb:7b:4a:89:49:d0:30:5f:f5:4e:e2: 2d:b5:b4:02:42:18:8d:d1:33:1b:18:86:f8:dc:2f: 7f:1f:3f:f5:25:14:4b:e0:aa:d4:a7:1a:4d:fd:c3: 59:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:31:2E:85:6F:BE:F2:60:85:54:AB:E8:55:42:A6:06:5D:EC:C0:7B X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:86:91:45:ff:de:78:c3:9f:fd:ca:13:01:11:3f:99:1e:2a: 9e:67:4f:d4:06:90:68:53:24:7f:7a:36:87:4b:ec:3a:27:5c: 75:7b:f9:a1:90:55:c1:8a:a9:3b:18:9d:9a:70:31:eb:d4:74: 23:2c:ea:de:9a:1e:18:b4:30:53:55:f8:17:a3:6c:a5:c9:28: 38:6c:c9:76:9b:c4:87:44:22:6b:31:a3:70:0e:3b:98:0a:91: 34:8e:e1:70:5c:f0:6a:a1:2b:4d:f8:87:9c:bb:ff:f2:82:69: 54:3f:e6:a7:ff:5b:61:f8:aa:79:5c:0e:36:ce:8a:f5:d1:1c: 99:f8:7a:60:43:e9:ac:88:f3:2f:eb:10:01:85:66:02:72:fa: 7c:c1:4f:57:03:ac:69:1a:2d:8c:9c:42:5e:96:c8:7b:6c:b5: 54:d9:1c:9b:75:05:69:8e:0f:07:26:67:4d:1f:58:64:54:8d: f5:91:0a:e5:bf:44:79:ee:4d:a2:f2:6e:65:b7:e0:8d:01:91: 01:28:52:5b:9c:b6:2c:46:c8:d6:c4:b4:1e:b8:3c:a6:35:f7: e8:1b:f6:a4:07:04:11:f6:b0:b7:9a:21:f3:67:8b:bb:59:95: bb:99:f8:e9:7d:7c:f8:52:5d:6e:88:08:e5:cf:2a:c9:00:d0: 07:bd:ba:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKRngYp9hMEYZU/Jc/F7xfp5ZY9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNjA0MTUxMjM2NTZaFw0yNjA0MTgyMjUyNTZaMDMxMTAvBgNV BAMTKDc2MzEyRTg1NkZCRUYyNjA4NTU0QUJFODU1NDJBNjA2NURFQ0MwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVclpXMKvMh69C8uJzBM7UVI6T 7gG8KpBpy73kXnHomvygKA7jVz2JpZTUP6kld2DBQJ0vYicroHIvHwiGvfF+cvCi Dr0hJAyOR3vf+tjB5mBip7wiDbM5b+Uzq3WyMP6wzWDkle40frB9C5OGTDyCN7+C /ZJ1wXI6H+VEiSFa/9wSOdXQrqO03EGX3s8Dn8fJ2JNxlQbLjJ2ViSpkB1pQnUSg i45VDIj/7p/hUp4e+odGntB/Fg6L9HVOmWVwWiIzPT0lo3vEJoLpvXPGrzXuL4iY 37Lre0qJSdAwX/VO4i21tAJCGI3RMxsYhvjcL38fP/UlFEvgqtSnGk39w1l5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjEuhW++8mCFVKvoVUKmBl3swHswHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyGkUX/3njDn/3KEwERP5keKp5nT9QGkGhT JH96NodL7DonXHV7+aGQVcGKqTsYnZpwMevUdCMs6t6aHhi0MFNV+BejbKXJKDhs yXabxIdEImsxo3AOO5gKkTSO4XBc8GqhK034h5y7//KCaVQ/5qf/W2H4qnlcDjbO ivXRHJn4emBD6ayI8y/rEAGFZgJy+nzBT1cDrGkaLYycQl6WyHtstVTZHJt1BWmO DwcmZ00fWGRUjfWRCuW/RHnuTaLybmW34I0BkQEoUluctixGyNbEtB64PKY19+gb 9qQHBBH2sLeaIfNni7tZlbuZ+Ol9fPhSXW6ICOXPKskA0Ae9uqw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:48 2026 by rpki-client