$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: rd3yRQst2MiNlO0ChmcJKiOCoJutZ+AYWYiJipJ52KQ= Subject key identifier: AC:40:DA:DD:AD:11:B7:66:56:94:C6:76:10:9E:1A:97:B5:48:4E:38 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 4921CABD32337A10F189718E97FBFD3AB5D0A93A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 024D Signing time: Wed 15 Apr 2026 19:11:18 +0000 Manifest this update: Wed 15 Apr 2026 19:06:18 +0000 Manifest next update: Sun 19 Apr 2026 04:27:18 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: +BTp/An1x1rUlqUxUaivl9mL9LBBtGSJNNg59WKnXvk=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:21:ca:bd:32:33:7a:10:f1:89:71:8e:97:fb:fd:3a:b5:d0:a9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Apr 15 19:06:18 2026 GMT Not After : Apr 19 04:27:18 2026 GMT Subject: CN=AC40DADDAD11B7665694C676109E1A97B5484E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:a0:16:0b:ab:00:94:df:25:e1:a4:15:24: 8a:5f:71:83:1c:d4:13:06:40:98:9d:35:ef:65:db: b9:aa:d2:1c:cb:1a:96:6a:32:d3:c9:28:10:8b:f9: 04:7d:92:1b:60:15:88:6b:6c:d6:30:ca:d0:a0:f6: 29:be:5c:d8:dd:bb:98:fe:4b:b5:52:45:39:18:8c: 07:8e:81:be:df:e2:1d:ae:31:c9:66:6d:74:e9:d6: ef:c8:14:37:6d:68:10:31:69:5c:7c:0e:9b:af:1c: b0:11:4c:ea:de:6f:5d:f6:92:3a:81:c5:6d:05:42: f5:9a:b2:71:75:34:43:f2:d7:38:f9:ca:7b:c6:4a: 42:9b:38:f4:32:69:6f:74:5a:9c:be:d4:07:df:72: c0:a1:ea:07:da:55:83:d5:c7:b7:0d:6e:09:d7:d9: 1f:1d:1f:a0:f6:bd:a8:c0:44:57:52:64:fe:b4:53: 01:d9:1f:bd:8f:eb:20:bd:5a:9b:2e:fa:e9:64:97: ed:aa:da:09:fa:24:5d:73:63:d0:eb:8c:1b:f9:43: fb:e8:1e:95:d3:c3:ac:53:1a:24:f0:4a:3b:0d:97: e9:17:64:4b:aa:95:50:3f:1c:4f:29:90:9a:f5:d8: 8f:1e:ea:64:e9:d9:6c:09:58:43:be:e7:2e:f6:61: 99:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:40:DA:DD:AD:11:B7:66:56:94:C6:76:10:9E:1A:97:B5:48:4E:38 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c7:b0:f0:1a:c5:77:b2:de:45:0d:45:85:41:8a:56:25:20: cf:a3:d3:f8:e9:97:d0:be:7c:1e:49:f9:42:17:a3:ad:7e:98: ad:1c:f7:1b:59:82:88:a9:c6:ed:2f:d8:0e:35:bf:2a:e9:70: 6e:88:51:17:a2:60:04:6c:e8:79:6a:48:36:3d:4a:ca:09:b9: e3:f3:4a:12:cf:b6:1b:51:f4:eb:fd:a6:80:b8:f4:ba:49:c4: 2a:ca:fd:25:0a:a9:73:42:3d:18:71:2a:42:de:31:ef:29:26: ea:9e:e2:3f:a3:c6:e9:aa:89:d5:e6:d0:f4:f7:40:4d:eb:e7: d4:82:85:47:43:34:7b:fc:68:1f:c1:7d:b0:5a:3d:dd:8b:48: 38:6b:ea:74:38:75:fd:1d:2b:85:61:1e:2d:e3:e8:0e:5f:ff: 26:01:3f:84:29:4d:d5:5c:b6:c5:22:95:e9:eb:ee:46:6c:93: 41:cc:d8:78:0a:1f:3e:54:f7:d0:ca:fb:79:df:93:94:17:e2: 85:53:0b:48:26:69:24:90:28:a0:2c:22:36:dd:4d:8c:43:07: 7e:30:46:48:98:21:c0:a4:1d:1a:7a:b9:06:f2:6c:9e:ff:59: c5:8c:b6:ac:b3:74:71:4b:63:d4:84:91:96:95:c9:61:e0:a5: 56:c5:b1:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSSHKvTIzehDxiXGOl/v9OrXQqTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNjA0MTUxOTA2MThaFw0yNjA0MTkwNDI3MThaMDMxMTAvBgNV BAMTKEFDNDBEQUREQUQxMUI3NjY1Njk0QzY3NjEwOUUxQTk3QjU0ODRFMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQ6AWC6sAlN8l4aQVJIpfcYMc 1BMGQJidNe9l27mq0hzLGpZqMtPJKBCL+QR9khtgFYhrbNYwytCg9im+XNjdu5j+ S7VSRTkYjAeOgb7f4h2uMclmbXTp1u/IFDdtaBAxaVx8DpuvHLARTOreb132kjqB xW0FQvWasnF1NEPy1zj5ynvGSkKbOPQyaW90Wpy+1AffcsCh6gfaVYPVx7cNbgnX 2R8dH6D2vajARFdSZP60UwHZH72P6yC9Wpsu+ulkl+2q2gn6JF1zY9DrjBv5Q/vo HpXTw6xTGiTwSjsNl+kXZEuqlVA/HE8pkJr12I8e6mTp2WwJWEO+5y72YZnJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrEDa3a0Rt2ZWlMZ2EJ4al7VITjgwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7HsPAaxXey3kUNRYVBilYlIM+j0/jpl9C+ fB5J+UIXo61+mK0c9xtZgoipxu0v2A41vyrpcG6IUReiYARs6HlqSDY9SsoJuePz ShLPthtR9Ov9poC49LpJxCrK/SUKqXNCPRhxKkLeMe8pJuqe4j+jxumqidXm0PT3 QE3r59SChUdDNHv8aB/BfbBaPd2LSDhr6nQ4df0dK4VhHi3j6A5f/yYBP4QpTdVc tsUilenr7kZsk0HM2HgKHz5U99DK+3nfk5QX4oVTC0gmaSSQKKAsIjbdTYxDB34w RkiYIcCkHRp6uQbybJ7/WcWMtqyzdHFLY9SEkZaVyWHgpVbFscE= -----END CERTIFICATE-----Generated at Fri Apr 17 20:50:14 2026 by rpki-client