$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: V3/we7MQITaqOWzuY55WUHA6JUozb80fjw12l/9NWmI= Subject key identifier: DB:FF:8A:11:B4:D0:E9:FC:DC:52:D5:2F:48:90:6E:29:F4:6B:AB:D0 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 2CFE232E2451D3F081514ECD1C8697CD164E6293 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03F0 Signing time: Fri 17 Apr 2026 10:51:59 +0000 Manifest this update: Fri 17 Apr 2026 10:46:59 +0000 Manifest next update: Mon 20 Apr 2026 18:53:59 +0000 Files and hashes: 1: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: 2gb0HHHYQPQk6ZtwCL7KcoMx04M/P8WeMibelFoAS/g=) 2: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: ITCh+tFYqc0HYkTDA6BvFsZR5bxxFQkwifdLEI/iw0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fe:23:2e:24:51:d3:f0:81:51:4e:cd:1c:86:97:cd:16:4e:62:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Apr 17 10:46:59 2026 GMT Not After : Apr 20 18:53:59 2026 GMT Subject: CN=DBFF8A11B4D0E9FCDC52D52F48906E29F46BABD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f8:ea:e4:13:5c:9d:aa:b3:d4:ca:a9:7c:c8: 51:ee:e1:c5:85:ed:e2:4d:6f:8a:f8:7d:b5:91:58: 95:14:75:fd:77:73:ec:0d:22:cf:cd:15:3d:af:61: 71:53:db:68:2d:b6:8a:ac:05:7e:97:10:97:06:b2: 3d:03:ab:1d:fc:49:05:56:e6:e6:f3:40:c5:6a:bb: 9f:9b:f3:aa:6c:ce:a4:45:ad:0d:14:8f:5b:c5:25: f2:34:08:35:73:6c:5c:28:42:f4:14:8a:5b:0d:39: f0:59:6f:c8:e8:0d:95:0c:f2:32:9b:53:bf:25:e4: 03:31:73:cd:77:a8:64:85:1f:1d:ed:49:c3:d4:e6: 0f:4b:0d:dd:0d:dd:65:9f:03:75:6d:4a:5b:a5:9c: 8c:3a:47:a6:18:10:e8:5f:a9:a2:d1:f5:af:2e:77: 5e:ad:e5:6b:2b:22:6f:5d:70:56:f0:3d:37:37:0f: 84:dc:76:4f:24:8b:75:e8:c7:07:0d:b4:56:7c:5e: 1d:5d:4c:6d:7e:6c:7e:a1:44:3a:60:47:ff:8a:1a: 5b:94:0e:42:34:c9:b2:bb:97:db:b8:b9:9f:2c:b3: 1e:2d:8e:62:e8:c0:1e:cd:07:81:0c:a8:aa:55:b6: cb:41:8d:39:7e:ab:ac:28:86:37:d6:7b:30:bd:53: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FF:8A:11:B4:D0:E9:FC:DC:52:D5:2F:48:90:6E:29:F4:6B:AB:D0 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:3a:e3:23:9a:87:3b:9d:aa:62:aa:8e:df:d3:fd:33:98:3e: 09:79:56:93:a3:6b:3f:3b:4a:bf:f6:3c:d1:26:fa:45:62:33: fb:2f:6e:be:f3:6c:a9:b4:4f:86:7f:24:8e:08:30:22:5c:29: 90:be:c0:32:77:98:e7:e6:81:7e:7e:c9:c0:ab:ab:e3:22:03: fd:c2:de:a9:81:c5:71:84:d5:3c:d0:c4:94:4d:2e:15:32:38: 36:a8:6e:e5:0f:36:13:e6:88:f6:db:28:d4:e4:06:39:bc:df: 92:e7:f8:59:f5:3a:9c:30:6b:88:93:b8:e8:3f:77:1f:33:39: 69:aa:66:2c:8f:1c:a3:43:6c:a0:59:4f:e0:7b:90:f6:e7:69: 8c:f0:37:2f:34:0c:c8:4f:c4:99:18:98:49:21:e1:bb:bd:d0: b8:d9:b8:3a:3e:de:40:c4:dc:7d:74:62:52:ce:66:56:5c:86: af:7d:9d:cc:e3:6b:bd:47:c7:4e:27:1e:9c:14:e8:f7:98:68: 1f:2c:56:ce:f0:91:74:09:d6:36:f9:ee:f0:24:b1:7f:4a:41: 57:9b:35:e1:2f:ca:0f:a3:ca:53:f1:5c:07:0c:ca:9b:5b:b9: 8a:3e:a7:ed:9e:cc:77:6f:ce:6f:ed:8f:93:e8:45:18:f3:39: 1b:4d:fa:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULP4jLiRR0/CBUU7NHIaXzRZOYpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNjA0MTcxMDQ2NTlaFw0yNjA0MjAxODUzNTlaMDMxMTAvBgNV BAMTKERCRkY4QTExQjREMEU5RkNEQzUyRDUyRjQ4OTA2RTI5RjQ2QkFCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+OrkE1ydqrPUyql8yFHu4cWF 7eJNb4r4fbWRWJUUdf13c+wNIs/NFT2vYXFT22gttoqsBX6XEJcGsj0Dqx38SQVW 5ubzQMVqu5+b86pszqRFrQ0Uj1vFJfI0CDVzbFwoQvQUilsNOfBZb8joDZUM8jKb U78l5AMxc813qGSFHx3tScPU5g9LDd0N3WWfA3VtSlulnIw6R6YYEOhfqaLR9a8u d16t5WsrIm9dcFbwPTc3D4Tcdk8ki3XoxwcNtFZ8Xh1dTG1+bH6hRDpgR/+KGluU DkI0ybK7l9u4uZ8ssx4tjmLowB7NB4EMqKpVtstBjTl+q6wohjfWezC9U0OPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/+KEbTQ6fzcUtUvSJBuKfRrq9AwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc64yOahzudqmKqjt/T/TOYPgl5VpOjaz87 Sr/2PNEm+kViM/svbr7zbKm0T4Z/JI4IMCJcKZC+wDJ3mOfmgX5+ycCrq+MiA/3C 3qmBxXGE1TzQxJRNLhUyODaobuUPNhPmiPbbKNTkBjm835Ln+Fn1Opwwa4iTuOg/ dx8zOWmqZiyPHKNDbKBZT+B7kPbnaYzwNy80DMhPxJkYmEkh4bu90LjZuDo+3kDE 3H10YlLOZlZchq99nczja71Hx04nHpwU6PeYaB8sVs7wkXQJ1jb57vAksX9KQVeb NeEvyg+jylPxXAcMyptbuYo+p+2ezHdvzm/tj5PoRRjzORtN+ow= -----END CERTIFICATE-----Generated at Fri Apr 17 21:49:13 2026 by rpki-client