$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: 8kLr0ewEc5aBpA1VpkQMpuDnsP9nVgji4cctNd+DkUI= Subject key identifier: 6B:38:AA:66:74:6D:30:A9:99:9F:FB:F1:D3:19:C9:89:D2:76:99:D1 Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 3913479D06685AF3997495FA341B5A2B1D4823D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 02D8 Signing time: Thu 16 Apr 2026 15:21:41 +0000 Manifest this update: Thu 16 Apr 2026 15:16:40 +0000 Manifest next update: Mon 20 Apr 2026 00:07:40 +0000 Files and hashes: 1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: 8VZ3xFVPmb2x2H8FZtQWmaqxN1bubwZSOWohI7Vv9mk=) 2: 3130332e3137302e33322e302f32332d3234203d3e20313432333631.roa (hash: 3ZtCwnCQD5p9GJGLBXeZADVLlPJnY+bs7SHq9opzmnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:13:47:9d:06:68:5a:f3:99:74:95:fa:34:1b:5a:2b:1d:48:23:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Apr 16 15:16:40 2026 GMT Not After : Apr 20 00:07:40 2026 GMT Subject: CN=6B38AA66746D30A9999FFBF1D319C989D27699D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:34:7d:bd:94:99:7b:e9:60:68:54:f3:21:8a: 4e:50:86:d7:57:d5:86:8f:7f:13:c9:cc:3a:cd:25: b5:6e:f3:ca:af:f9:d5:68:63:64:ef:6d:63:e4:d3: 42:b7:6f:80:41:98:46:52:c5:f5:7c:88:00:20:21: 79:c1:58:7d:8e:73:38:6b:dd:94:c9:7f:a7:ba:7f: ab:ec:66:15:e1:ee:74:5a:27:69:61:64:4d:8b:fe: 3a:11:99:33:26:92:35:b0:f0:0f:c0:9a:12:99:8e: 6d:27:d6:a5:9b:97:ef:71:ec:28:be:0b:e0:b8:cb: ad:fe:ec:86:69:d6:e2:74:55:10:91:84:d0:3d:aa: 9e:63:8a:62:b8:3f:89:eb:5e:95:9b:25:70:ed:5e: cb:ec:b3:0c:fe:6c:8c:39:9a:36:cb:1f:d0:74:27: a2:d9:52:f8:5e:31:b8:39:a9:3d:b0:2e:bd:78:fd: 47:92:74:e8:4f:3a:09:ca:5b:0c:7b:2b:b3:e1:da: a3:7a:67:7f:ec:16:dd:b1:5b:9e:e6:52:1b:f0:b6: 43:16:75:21:93:8d:81:7c:55:3b:e4:da:8b:27:ed: dd:b0:29:c5:89:e5:55:2a:27:f0:a9:ba:68:8a:bf: 69:03:81:2c:c0:53:08:3c:47:db:94:3e:a6:a5:76: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:38:AA:66:74:6D:30:A9:99:9F:FB:F1:D3:19:C9:89:D2:76:99:D1 X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d2:19:bc:6c:44:65:15:49:04:95:ef:04:3b:26:f2:a2:24: 08:d2:2d:f6:02:60:82:20:c8:d6:61:71:c3:fb:f5:70:8c:12: 23:61:36:47:d3:71:81:f8:10:fe:6c:1e:35:b9:53:7b:b5:33: 96:30:aa:fe:e4:d4:8c:37:9c:d1:a7:b0:87:0e:f7:af:51:33: 22:b7:af:ad:2b:2a:3e:30:d6:c3:8d:0a:01:c8:64:df:59:3b: 24:d2:9d:40:b6:d5:2b:9f:60:33:73:c9:29:d5:da:8f:51:91: d5:69:34:c5:66:58:a2:43:18:08:b8:58:19:21:f1:ad:dc:27: 48:8e:35:a7:fb:a8:af:a6:17:f0:cb:a7:93:97:cc:fe:1e:96: 8f:82:b3:f1:bc:33:9a:5e:8d:e0:85:e1:5c:2a:e1:c6:07:64: ca:41:ef:16:2b:00:6a:94:01:f0:71:65:0d:a3:47:b1:22:69: ec:8c:6a:ca:25:34:71:62:dd:77:8d:19:db:c4:1c:f2:e9:ad: c6:9e:36:74:87:50:a2:f1:02:cf:59:70:22:a0:ef:c9:5d:df: 6a:05:21:7d:b9:ce:79:00:d1:48:d2:e2:89:f8:0c:4e:74:28: 6d:c9:28:56:c0:ef:e4:31:ae:2b:2d:56:20:78:13:50:94:44: dd:0f:02:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORNHnQZoWvOZdJX6NBtaKx1II9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNjA0MTYxNTE2NDBaFw0yNjA0MjAwMDA3NDBaMDMxMTAvBgNV BAMTKDZCMzhBQTY2NzQ2RDMwQTk5OTlGRkJGMUQzMTlDOTg5RDI3Njk5RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNH29lJl76WBoVPMhik5QhtdX 1YaPfxPJzDrNJbVu88qv+dVoY2TvbWPk00K3b4BBmEZSxfV8iAAgIXnBWH2Oczhr 3ZTJf6e6f6vsZhXh7nRaJ2lhZE2L/joRmTMmkjWw8A/AmhKZjm0n1qWbl+9x7Ci+ C+C4y63+7IZp1uJ0VRCRhNA9qp5jimK4P4nrXpWbJXDtXsvsswz+bIw5mjbLH9B0 J6LZUvheMbg5qT2wLr14/UeSdOhPOgnKWwx7K7Ph2qN6Z3/sFt2xW57mUhvwtkMW dSGTjYF8VTvk2osn7d2wKcWJ5VUqJ/CpumiKv2kDgSzAUwg8R9uUPqaldmUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaziqZnRtMKmZn/vx0xnJidJ2mdEwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfSGbxsRGUVSQSV7wQ7JvKiJAjSLfYCYIIg yNZhccP79XCMEiNhNkfTcYH4EP5sHjW5U3u1M5Ywqv7k1Iw3nNGnsIcO969RMyK3 r60rKj4w1sONCgHIZN9ZOyTSnUC21SufYDNzySnV2o9RkdVpNMVmWKJDGAi4WBkh 8a3cJ0iONaf7qK+mF/DLp5OXzP4elo+Cs/G8M5pejeCF4Vwq4cYHZMpB7xYrAGqU AfBxZQ2jR7EiaeyMasolNHFi3XeNGdvEHPLprcaeNnSHUKLxAs9ZcCKg78ld32oF IX25znkA0UjS4on4DE50KG3JKFbA7+QxristViB4E1CURN0PAjI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:35:46 2026 by rpki-client