$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: 4eE8M4E6AAbzJ+fdbhwdM6Oa2bsXVBUND+oxPLp4PbU= Subject key identifier: 56:F6:49:C7:84:1D:3B:45:87:27:F8:9E:19:95:E1:F4:F5:F8:74:E4 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 5DCE8CA08632AD947ECE28DA0A9910A265B36C36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 021D Signing time: Fri 17 Apr 2026 06:50:05 +0000 Manifest this update: Fri 17 Apr 2026 06:45:05 +0000 Manifest next update: Mon 20 Apr 2026 11:49:05 +0000 Files and hashes: 1: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: N8CUj+VpnaPJQrp7gO0k/E2hCheBurCwO30FfEL9Jww=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 0HtGEFB5lVL9KGTJaAeG0cG7Yc1XqVsEKqDCZP63hmI=) 3: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: NK7iP85WMoAKxYMx5lbhJuhwp1xc1m7+bm7ki4OmrgU=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: CD4KlQzH2eJhKNwTfYMuI96gq5Df2JYdd7khju1XQoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ce:8c:a0:86:32:ad:94:7e:ce:28:da:0a:99:10:a2:65:b3:6c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Apr 17 06:45:05 2026 GMT Not After : Apr 20 11:49:05 2026 GMT Subject: CN=56F649C7841D3B458727F89E1995E1F4F5F874E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:46:f9:70:2e:21:ae:10:03:75:a4:57:b8: 15:b5:fa:75:53:64:4a:f3:ac:50:52:43:e5:78:4f: 54:63:99:e6:de:0e:4a:e6:be:aa:4b:6d:dd:9e:28: c1:c7:b3:28:d5:75:90:48:9f:5c:ed:bf:91:9f:9f: 66:9d:02:ba:06:20:b6:e6:c6:ee:d6:8d:61:46:e6: f5:52:a8:68:da:7c:b4:17:89:a5:15:af:97:6a:cb: b1:32:fd:31:f0:df:ef:ec:5b:ff:ba:3e:2a:69:7e: 8a:e7:b1:ab:6b:fd:71:49:1a:bb:e0:68:e1:c4:1b: cf:71:c7:7f:68:1b:2f:bd:29:61:bc:36:de:52:a4: e3:f6:d0:98:e9:c0:60:f0:d1:a4:2c:79:69:26:d1: 88:58:e8:ce:13:60:42:6a:f7:43:62:d3:ba:21:71: 1f:11:a1:37:4e:cd:10:5a:89:0c:c8:7a:c0:d4:d7: f4:dd:00:6d:31:87:37:fa:1e:68:1e:59:31:99:8b: 6f:9b:23:81:e5:b1:cd:57:61:41:71:23:ea:d9:5c: a7:b4:21:e1:99:97:d2:af:63:70:0c:8f:ad:5e:b2: b0:65:ff:af:7a:41:e4:bb:a0:ad:e8:6e:c2:6c:00: 7a:21:cc:d1:cc:95:a9:20:d4:e3:65:87:e6:75:32: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F6:49:C7:84:1D:3B:45:87:27:F8:9E:19:95:E1:F4:F5:F8:74:E4 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6c:b0:e4:4b:4b:bb:e6:d0:c2:75:62:55:02:40:97:ad:64: 6e:0c:f7:f7:45:11:6b:d6:e2:e9:db:07:09:78:b1:9f:85:2e: b0:3c:86:37:eb:4d:55:d5:26:34:0f:98:b8:c7:61:08:23:93: da:a1:b3:83:7b:e6:72:31:57:fe:2b:6b:6c:4f:de:42:af:9f: f2:41:35:03:56:b4:d1:13:de:57:4e:85:e0:14:9b:6f:77:a8: 20:93:58:eb:d6:0e:3c:88:7c:a9:d5:55:5d:4b:d7:2f:9e:91: cd:b3:44:4a:19:0f:64:6e:7f:eb:ef:06:71:cd:fc:58:af:71: df:21:41:9a:16:e7:31:0f:76:fa:fb:10:be:9a:91:50:5e:0d: 8a:e4:a6:76:34:f2:df:08:c2:af:f4:e3:00:0b:59:72:b8:63: 35:1e:04:36:8f:9f:b8:e6:7f:03:d4:41:e3:a5:b8:62:2d:ac: 00:7b:47:11:ea:a2:c8:65:aa:64:91:3d:80:67:a6:c3:1c:1e: 5e:48:65:98:cd:5f:de:9a:f9:dd:cd:9b:e7:3c:73:8d:fb:65: ec:66:99:75:ed:b6:c1:fc:fc:f6:b8:fd:bf:d3:fa:5b:c4:b7: 4f:6d:c6:50:a6:1e:28:1b:2f:8f:bf:39:2e:df:97:d7:c7:9f: 6c:5f:5d:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc6MoIYyrZR+zijaCpkQomWzbDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNjA0MTcwNjQ1MDVaFw0yNjA0MjAxMTQ5MDVaMDMxMTAvBgNV BAMTKDU2RjY0OUM3ODQxRDNCNDU4NzI3Rjg5RTE5OTVFMUY0RjVGODc0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUCUb5cC4hrhADdaRXuBW1+nVT ZErzrFBSQ+V4T1RjmebeDkrmvqpLbd2eKMHHsyjVdZBIn1ztv5Gfn2adAroGILbm xu7WjWFG5vVSqGjafLQXiaUVr5dqy7Ey/THw3+/sW/+6Pippfornsatr/XFJGrvg aOHEG89xx39oGy+9KWG8Nt5SpOP20JjpwGDw0aQseWkm0YhY6M4TYEJq90Ni07oh cR8RoTdOzRBaiQzIesDU1/TdAG0xhzf6HmgeWTGZi2+bI4Hlsc1XYUFxI+rZXKe0 IeGZl9KvY3AMj61esrBl/696QeS7oK3obsJsAHohzNHMlakg1ONlh+Z1MhppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVvZJx4QdO0WHJ/ieGZXh9PX4dOQwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1ssORLS7vm0MJ1YlUCQJetZG4M9/dFEWvW 4unbBwl4sZ+FLrA8hjfrTVXVJjQPmLjHYQgjk9qhs4N75nIxV/4ra2xP3kKvn/JB NQNWtNET3ldOheAUm293qCCTWOvWDjyIfKnVVV1L1y+ekc2zREoZD2Ruf+vvBnHN /Fivcd8hQZoW5zEPdvr7EL6akVBeDYrkpnY08t8Iwq/04wALWXK4YzUeBDaPn7jm fwPUQeOluGItrAB7RxHqoshlqmSRPYBnpsMcHl5IZZjNX96a+d3Nm+c8c437Zexm mXXttsH8/Pa4/b/T+lvEt09txlCmHigbL4+/OS7fl9fHn2xfXc0= -----END CERTIFICATE-----Generated at Sat Apr 18 00:23:13 2026 by rpki-client