$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: QDqWhbkCOSUxViRQjFnqkkG6RxA7ossEcgOD5ijFJi0= Subject key identifier: A4:77:DF:D5:0E:ED:65:BE:CB:F6:25:18:D7:17:08:F0:93:4F:78:6A Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 1AF444DC9272C961E7EBAD7DAF8193DA426C18FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 052F Signing time: Fri 17 Apr 2026 01:31:23 +0000 Manifest this update: Fri 17 Apr 2026 01:26:23 +0000 Manifest next update: Mon 20 Apr 2026 13:20:23 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: wm6T61qmiF1IbTwvMtv1kqkO1oVI5ZwrsfA5hKnyg4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f4:44:dc:92:72:c9:61:e7:eb:ad:7d:af:81:93:da:42:6c:18:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Apr 17 01:26:23 2026 GMT Not After : Apr 20 13:20:23 2026 GMT Subject: CN=A477DFD50EED65BECBF62518D71708F0934F786A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:b7:0f:12:30:46:60:fb:fb:42:ae:43:58: 66:79:a9:e6:82:18:08:3b:da:df:19:73:dc:52:a5: f8:7b:8e:17:3f:30:a5:93:69:1b:ad:67:28:80:f0: 9a:b2:56:11:a9:73:2f:68:2c:6e:6b:d5:49:9f:84: 72:aa:0a:d9:d7:b0:bc:75:78:3a:e0:33:14:33:88: 74:bc:cf:8c:cd:84:ea:04:29:04:8e:e8:79:b8:32: 2d:34:0c:b5:cb:d2:6d:15:48:7b:da:50:d2:c2:fb: ef:87:d2:da:89:ea:cd:d8:36:53:b8:82:f8:22:1f: 58:50:e0:a4:01:0f:cf:43:9b:c3:f2:d3:e1:23:01: 11:bd:3d:07:36:4e:03:81:14:7c:4c:03:20:cb:bf: cc:0a:fc:6b:3a:a1:e2:0a:1d:90:36:37:2e:33:bd: 8c:50:3f:26:d7:f5:90:33:22:f0:ca:a8:28:a3:5e: d5:10:95:d8:77:05:7c:1b:61:af:ba:67:6e:14:e6: 8f:b6:88:9f:5b:fe:57:7a:bf:a8:f4:3a:49:06:41: 0f:52:17:93:09:a6:2b:99:97:09:b8:e2:37:6e:34: 26:fc:b9:4e:e6:a4:fc:d7:d5:f6:75:1c:5d:e2:52: a8:f1:3b:86:7b:a6:43:55:1d:ec:3c:e7:2d:8a:0b: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:77:DF:D5:0E:ED:65:BE:CB:F6:25:18:D7:17:08:F0:93:4F:78:6A X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4c:a7:1f:12:3a:e6:df:55:97:f3:cb:61:4f:54:94:1c:db: 84:59:c7:aa:94:5e:e1:ef:e1:c9:42:a9:ac:c8:f7:ef:4e:94: 5c:a8:6d:8c:ec:a8:d5:d8:eb:68:8f:65:4c:bc:01:fd:2a:98: ea:59:13:d4:5f:87:9e:94:3a:77:dc:26:d4:e7:b3:68:ab:8a: e8:73:00:8a:30:6a:70:40:33:11:61:f7:8b:72:09:31:fe:97: 09:23:36:25:04:d4:01:02:f2:99:fe:e7:ca:63:18:23:ef:71: a3:39:7a:99:53:64:73:bc:b7:b6:98:6c:ea:6f:ae:11:25:f5: 1f:2a:d6:f4:05:72:61:2c:eb:aa:f2:44:71:93:28:d7:2e:b1: 41:bb:4b:64:27:b6:7d:07:99:f7:b8:7f:7b:85:e7:1e:36:f9: 3d:a4:32:a5:34:9b:ba:34:c5:ca:7f:df:c8:b1:bd:c9:28:d3: 4b:91:23:76:c4:99:06:a4:a8:67:2a:0f:f8:f0:d8:e3:84:d5: c2:42:df:82:03:e1:d7:d7:67:28:37:aa:02:66:2d:c8:05:e1: 9e:fd:f7:78:21:41:b4:92:5c:f4:ab:98:43:50:1f:4f:9f:2d: 51:95:5f:4a:98:98:57:59:80:c2:d1:6f:ca:6b:f5:fc:f4:37: 9f:d0:5f:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvRE3JJyyWHn6619r4GT2kJsGPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNjA0MTcwMTI2MjNaFw0yNjA0MjAxMzIwMjNaMDMxMTAvBgNV BAMTKEE0NzdERkQ1MEVFRDY1QkVDQkY2MjUxOEQ3MTcwOEYwOTM0Rjc4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3LcPEjBGYPv7Qq5DWGZ5qeaC GAg72t8Zc9xSpfh7jhc/MKWTaRutZyiA8JqyVhGpcy9oLG5r1UmfhHKqCtnXsLx1 eDrgMxQziHS8z4zNhOoEKQSO6Hm4Mi00DLXL0m0VSHvaUNLC+++H0tqJ6s3YNlO4 gvgiH1hQ4KQBD89Dm8Py0+EjARG9PQc2TgOBFHxMAyDLv8wK/Gs6oeIKHZA2Ny4z vYxQPybX9ZAzIvDKqCijXtUQldh3BXwbYa+6Z24U5o+2iJ9b/ld6v6j0OkkGQQ9S F5MJpiuZlwm44jduNCb8uU7mpPzX1fZ1HF3iUqjxO4Z7pkNVHew85y2KC7nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHff1Q7tZb7L9iUY1xcI8JNPeGowHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABMpx8SOubfVZfzy2FPVJQc24RZx6qUXuHv 4clCqazI9+9OlFyobYzsqNXY62iPZUy8Af0qmOpZE9Rfh56UOnfcJtTns2iriuhz AIowanBAMxFh94tyCTH+lwkjNiUE1AEC8pn+58pjGCPvcaM5eplTZHO8t7aYbOpv rhEl9R8q1vQFcmEs66ryRHGTKNcusUG7S2Qntn0Hmfe4f3uF5x42+T2kMqU0m7o0 xcp/38ixvcko00uRI3bEmQakqGcqD/jw2OOE1cJC34ID4dfXZyg3qgJmLcgF4Z79 93ghQbSSXPSrmENQH0+fLVGVX0qYmFdZgMLRb8pr9fz0N5/QX0s= -----END CERTIFICATE-----Generated at Fri Apr 17 14:56:29 2026 by rpki-client