$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: w4cBomJm+fEbM9SQWuvLVYj3r6OtvhcnlwTkZKKP83c= Subject key identifier: 88:8A:81:4F:0B:8B:F7:70:52:2E:DC:C7:E8:DC:25:BF:4E:E8:63:7C Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 19D751A8D65FE319AA0616E8B00E08AF6D997E15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 023A Signing time: Fri 17 Apr 2026 05:12:12 +0000 Manifest this update: Fri 17 Apr 2026 05:07:12 +0000 Manifest next update: Mon 20 Apr 2026 07:25:12 +0000 Files and hashes: 1: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 2: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 3: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: DJxlwd8Yegeg88zaBf21WQsKiuuHGz5dk9vLK5XH4q8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 07:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d7:51:a8:d6:5f:e3:19:aa:06:16:e8:b0:0e:08:af:6d:99:7e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Apr 17 05:07:12 2026 GMT Not After : Apr 20 07:25:12 2026 GMT Subject: CN=888A814F0B8BF770522EDCC7E8DC25BF4EE8637C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:38:7a:23:a5:27:08:3c:0b:23:d5:fc:6e: de:9c:a6:a4:4e:61:bb:89:5b:a8:68:ef:7e:b5:01: 9d:40:c4:43:7e:72:9e:17:54:05:aa:08:6a:40:5b: 98:9b:80:1c:67:32:81:0f:5d:6e:cd:86:99:9f:8e: 24:dc:f1:5d:bf:18:dd:d8:fa:f1:67:16:ce:63:6c: 61:7e:06:e4:6f:5f:98:9e:6f:3a:ae:f5:a5:68:3c: dd:f3:fd:ce:ef:ed:61:db:92:94:9f:99:a0:58:b2: dc:57:30:4e:48:84:bd:ac:fa:d0:72:d1:07:84:d1: 1b:8b:e3:2a:46:bf:f2:e3:d8:78:d4:37:c0:2a:75: 72:5c:35:ec:68:0e:c2:47:3d:8a:8f:ae:74:6d:e3: 23:4f:7c:c3:9f:ca:b5:e4:34:4a:00:91:45:1b:7d: 4a:6d:81:09:bc:52:ac:8c:21:18:5a:53:de:0f:9c: 9b:64:be:ea:ea:9e:c3:5d:c9:2d:76:cf:af:dc:fb: d6:e1:e0:b4:d3:e0:03:9f:b6:ed:02:5f:47:2c:37: b8:33:9a:c3:d5:22:49:4f:3e:1d:cd:4e:45:6d:66: 97:b0:48:87:de:d0:39:a8:ae:d7:bb:36:b4:29:c1: 13:18:2e:0c:6d:ad:54:39:56:93:eb:b0:fe:c7:95: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:81:4F:0B:8B:F7:70:52:2E:DC:C7:E8:DC:25:BF:4E:E8:63:7C X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:84:df:3b:07:00:0d:97:31:04:d6:a6:e6:8e:36:39:b1:19: f0:1d:bd:c4:52:db:5a:b1:e6:3a:72:20:5a:b2:d7:7d:46:a4: f8:41:8e:6c:b5:41:09:77:bf:4d:70:bb:0a:1b:a8:da:de:23: 62:0c:8d:40:d5:21:90:80:e5:92:76:c5:1b:56:19:c0:29:ad: 72:fc:fb:90:d5:0c:9c:3a:b7:7a:c0:2e:18:58:a1:4a:3d:a4: a0:fd:9d:3e:f7:cf:88:e0:2a:77:4b:02:ba:8a:b2:dd:2a:97: 0f:3f:d8:82:38:6b:d9:02:86:90:b0:06:e9:0a:08:43:23:96: 23:39:66:20:70:14:03:df:db:84:14:38:30:ad:b2:46:23:57: e8:35:57:47:e7:86:5c:9e:c5:05:a5:b5:be:fd:32:54:00:da: 2b:b7:26:50:6e:8d:b9:5e:25:ec:4b:5b:1d:61:9c:f4:7d:43: cd:6d:d7:d5:00:59:87:a0:34:71:f1:b7:ab:cc:25:db:fd:5b: 1f:89:2a:d3:73:94:85:aa:99:72:a0:48:be:d8:02:94:f7:da: e1:c5:8c:a6:05:7c:f5:c9:4b:b2:72:29:bc:dd:a3:a2:a8:64: 50:12:04:8c:cd:2b:57:22:2c:51:45:e7:05:95:f9:09:31:36: d4:56:3b:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGddRqNZf4xmqBhbosA4Ir22ZfhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNjA0MTcwNTA3MTJaFw0yNjA0MjAwNzI1MTJaMDMxMTAvBgNV BAMTKDg4OEE4MTRGMEI4QkY3NzA1MjJFRENDN0U4REMyNUJGNEVFODYzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WDh6I6UnCDwLI9X8bt6cpqRO YbuJW6ho7361AZ1AxEN+cp4XVAWqCGpAW5ibgBxnMoEPXW7NhpmfjiTc8V2/GN3Y +vFnFs5jbGF+BuRvX5iebzqu9aVoPN3z/c7v7WHbkpSfmaBYstxXME5IhL2s+tBy 0QeE0RuL4ypGv/Lj2HjUN8AqdXJcNexoDsJHPYqPrnRt4yNPfMOfyrXkNEoAkUUb fUptgQm8UqyMIRhaU94PnJtkvurqnsNdyS12z6/c+9bh4LTT4AOftu0CX0csN7gz msPVIklPPh3NTkVtZpewSIfe0Dmorte7NrQpwRMYLgxtrVQ5VpPrsP7HlV3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiIqBTwuL93BSLtzH6Nwlv07oY3wwHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCE3zsHAA2XMQTWpuaONjmxGfAdvcRS21qx 5jpyIFqy131GpPhBjmy1QQl3v01wuwobqNreI2IMjUDVIZCA5ZJ2xRtWGcAprXL8 +5DVDJw6t3rALhhYoUo9pKD9nT73z4jgKndLArqKst0qlw8/2II4a9kChpCwBukK CEMjliM5ZiBwFAPf24QUODCtskYjV+g1V0fnhlyexQWltb79MlQA2iu3JlBujble JexLWx1hnPR9Q81t19UAWYegNHHxt6vMJdv9Wx+JKtNzlIWqmXKgSL7YApT32uHF jKYFfPXJS7JyKbzdo6KoZFASBIzNK1ciLFFF5wWV+QkxNtRWO0E= -----END CERTIFICATE-----Generated at Fri Apr 17 16:25:28 2026 by rpki-client