$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: dwvBj4koqwruG4ORSVmFN0kG080GxqAO7g7k4YyjgOA= Subject key identifier: F3:E5:31:8B:B1:87:8A:0C:4B:2E:94:F1:DF:5D:6A:11:81:D9:F5:D5 Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 3A50D655ECCCD5B6878AE131E7897EC7AB3F8CEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 01E7 Signing time: Fri 17 Apr 2026 00:42:39 +0000 Manifest this update: Fri 17 Apr 2026 00:37:39 +0000 Manifest next update: Mon 20 Apr 2026 06:12:39 +0000 Files and hashes: 1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA=) 2: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: xvMjoXZyVHrINTpqqKkPBF4DfgkCD8yqz8hku7RioN8=) 3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) 4: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: XZBWXgwi6/bY0uActUG5TDU+WKOBs9TQUHXitVU+Zwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:50:d6:55:ec:cc:d5:b6:87:8a:e1:31:e7:89:7e:c7:ab:3f:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Apr 17 00:37:39 2026 GMT Not After : Apr 20 06:12:39 2026 GMT Subject: CN=F3E5318BB1878A0C4B2E94F1DF5D6A1181D9F5D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:3a:6a:33:a0:4c:35:4a:f6:ff:45:60:9e: 39:45:c3:b6:8b:ce:37:66:ea:e4:f1:13:07:19:5a: f0:17:79:09:b7:38:14:36:8c:bf:b2:2c:fe:9b:21: 3f:89:e2:85:e9:24:e3:b7:14:61:d2:b3:1a:92:73: 1d:24:aa:57:a3:6d:49:20:89:09:6d:11:9c:6d:f2: 3f:eb:fb:13:5f:34:e6:08:86:38:52:52:8c:59:5f: 30:db:98:dc:7a:a2:ad:7d:9c:bc:8b:a5:37:44:58: 3a:a5:ac:69:a1:93:9c:25:e7:3a:23:68:7f:83:2a: eb:7f:df:1d:54:d0:ce:99:5b:7b:cc:22:19:6a:32: 77:4f:61:10:fd:52:58:15:12:b9:07:1d:95:1e:ee: 76:fa:b0:de:f8:3d:e3:7b:3b:06:11:04:b4:e8:e7: 76:63:37:f0:7c:99:c4:00:70:de:bc:2c:4e:cb:99: 78:8b:8a:a9:d4:39:41:8a:ed:51:bd:95:44:88:b4: 1b:90:ea:43:87:f6:ca:35:39:c1:a8:6d:62:d3:58: af:4a:61:b3:6c:d9:fa:d5:9d:f0:d9:43:0b:93:23: 6f:f8:24:aa:31:3c:f0:e2:c7:5c:64:f2:93:31:90: 18:c2:ec:9c:e3:26:35:dd:ba:15:52:c8:a9:05:aa: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:31:8B:B1:87:8A:0C:4B:2E:94:F1:DF:5D:6A:11:81:D9:F5:D5 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c8:05:a1:19:3c:10:ba:44:fa:2d:92:b0:ca:d8:95:f0:78: 81:fa:36:01:2b:a0:37:bd:cc:73:82:c0:b2:2f:d1:50:dd:da: ea:8b:27:35:79:2d:b9:59:c6:08:95:d1:37:34:17:b9:92:2b: 45:51:a3:ec:cf:44:0b:c1:f4:ec:4c:8c:f8:be:91:d4:21:72: 89:47:2b:3a:ea:34:27:88:7f:e5:dc:da:17:6d:76:eb:02:4e: f6:75:74:91:3a:99:5f:db:b4:32:2d:e7:12:5f:b5:3e:6f:30: bb:f7:69:3a:08:dc:85:97:a5:90:a2:24:34:a4:00:a2:f6:3d: 3d:c7:7d:88:10:45:e0:06:91:06:98:d4:a1:8d:8c:0e:eb:b4: dc:ce:99:59:85:a3:25:5f:7e:14:8b:8f:91:fd:be:cb:1e:55: 67:d5:4f:29:f8:4b:07:e3:ca:1b:05:21:a4:24:8d:0b:d9:18: 06:f5:15:23:4e:cd:dc:8e:46:ac:cf:9c:86:e2:1d:7d:b6:b0: f0:7d:c8:a2:39:69:2b:0c:0c:41:86:28:d9:a2:4d:ba:a2:88: 99:d0:65:1c:cf:fb:0a:94:4f:c8:99:a1:05:71:c8:dc:ac:46: 04:80:b2:6d:2e:12:ad:48:c0:5f:5c:c7:1a:cf:80:e0:ae:cc: b0:d0:74:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlDWVezM1baHiuEx54l+x6s/jOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNjA0MTcwMDM3MzlaFw0yNjA0MjAwNjEyMzlaMDMxMTAvBgNV BAMTKEYzRTUzMThCQjE4NzhBMEM0QjJFOTRGMURGNUQ2QTExODFEOUY1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGTpqM6BMNUr2/0VgnjlFw7aL zjdm6uTxEwcZWvAXeQm3OBQ2jL+yLP6bIT+J4oXpJOO3FGHSsxqScx0kqlejbUkg iQltEZxt8j/r+xNfNOYIhjhSUoxZXzDbmNx6oq19nLyLpTdEWDqlrGmhk5wl5zoj aH+DKut/3x1U0M6ZW3vMIhlqMndPYRD9UlgVErkHHZUe7nb6sN74PeN7OwYRBLTo 53ZjN/B8mcQAcN68LE7LmXiLiqnUOUGK7VG9lUSItBuQ6kOH9so1OcGobWLTWK9K YbNs2frVnfDZQwuTI2/4JKoxPPDix1xk8pMxkBjC7JzjJjXduhVSyKkFqivdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+Uxi7GHigxLLpTx311qEYHZ9dUwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzIBaEZPBC6RPotkrDK2JXweIH6NgEroDe9 zHOCwLIv0VDd2uqLJzV5LblZxgiV0Tc0F7mSK0VRo+zPRAvB9OxMjPi+kdQhcolH KzrqNCeIf+Xc2hdtdusCTvZ1dJE6mV/btDIt5xJftT5vMLv3aToI3IWXpZCiJDSk AKL2PT3HfYgQReAGkQaY1KGNjA7rtNzOmVmFoyVffhSLj5H9vsseVWfVTyn4Swfj yhsFIaQkjQvZGAb1FSNOzdyORqzPnIbiHX22sPB9yKI5aSsMDEGGKNmiTbqiiJnQ ZRzP+wqUT8iZoQVxyNysRgSAsm0uEq1IwF9cxxrPgOCuzLDQdKQ= -----END CERTIFICATE-----Generated at Fri Apr 17 18:34:09 2026 by rpki-client