$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: 7Trt4JJvHDkOwGOp7/JO+yhHOlixUo8limVGfshuqtg= Subject key identifier: 79:2F:E0:F0:BA:37:1B:86:57:51:E2:CF:9E:FD:54:58:AC:C1:B6:39 Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 028EB96062F5CF18507D7A1E09A614FD11BF1EA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 0208 Signing time: Sat 18 Apr 2026 11:01:43 +0000 Manifest this update: Sat 18 Apr 2026 10:56:43 +0000 Manifest next update: Tue 21 Apr 2026 19:50:43 +0000 Files and hashes: 1: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: qlt9XTkJ4F0GfOW5becHUk3LV0da9rpuvfoDawVXZZE=) 2: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: m7KnWwAi9Wa3iEU4N72OuT0qFvC4fal0YR1U67/6bgk=) 3: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 8XPZdSOWhiN4sDNWCAz5bAh63j/+nMyIzLXNoiqYe4I=) 4: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: P6yYIyMr7yot+l8FxKjlEt6g1qbjMlj9WYGx4kr4C0c=) 5: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: dGH13Oomieqd64n8363u8ec1lNW9Om122vPQ7Gk+LN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 19:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8e:b9:60:62:f5:cf:18:50:7d:7a:1e:09:a6:14:fd:11:bf:1e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Apr 18 10:56:43 2026 GMT Not After : Apr 21 19:50:43 2026 GMT Subject: CN=792FE0F0BA371B865751E2CF9EFD5458ACC1B639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:e3:0a:29:a2:d4:5e:47:f9:bb:9b:bd:1a: 5b:15:74:da:bb:16:18:e8:1e:32:5c:93:02:de:97: fe:2e:2b:4d:6b:d3:c5:78:48:cd:83:f7:9c:ac:d3: af:80:35:c1:63:75:c9:1d:ce:62:2c:65:b2:95:4c: 53:c6:4f:a0:a3:3f:fe:80:fa:6a:ba:ea:96:c8:dd: 06:ed:c3:c8:4b:47:06:b5:63:46:0e:11:26:17:87: 98:34:70:53:04:15:92:56:92:a4:f3:a3:85:87:e6: 55:0b:79:17:63:67:2a:8c:6f:a5:24:32:00:5d:0f: 91:cb:a8:c7:f8:cf:6d:07:60:23:f1:c2:8e:1f:b1: 06:fa:66:fa:d1:01:0e:96:c6:d5:b0:58:0d:01:67: b0:b2:a6:0f:a1:cf:fd:4d:d1:9c:ef:59:6f:e7:76: 84:74:e3:41:b9:92:e2:03:21:aa:d8:de:a8:a0:1c: a3:9c:07:1a:b4:f9:a0:70:08:f7:ec:77:f8:49:c4: 75:35:87:4e:76:b5:ec:09:03:24:97:be:01:14:6d: 0e:a4:8a:3f:19:31:99:fc:3c:bb:83:57:c2:56:ae: 01:1a:ea:3a:08:07:3a:39:a6:be:7c:ed:af:08:bf: 59:fa:e5:0e:cc:77:71:39:e7:7a:4b:58:cd:cd:d8: 9a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:E0:F0:BA:37:1B:86:57:51:E2:CF:9E:FD:54:58:AC:C1:B6:39 X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:93:72:cc:1c:ef:fa:1e:64:5e:a6:2a:8a:29:05:41:a8:ce: 89:cf:42:9c:c6:ca:1a:50:f4:c0:9c:88:0a:15:e2:b6:a2:85: 9a:b8:50:68:03:86:7e:ea:6f:5b:f3:0e:38:54:9a:5d:d1:92: f8:a1:03:50:62:28:3f:3c:d3:f8:8c:3a:28:3e:f1:e7:fa:0a: 26:fb:8c:e6:5d:a4:a1:d5:01:c0:ea:28:c5:d2:f3:97:28:40: 98:02:ba:bc:d7:19:d3:9f:e0:34:6d:2e:4b:cd:8f:b7:94:86: 9f:ed:e4:91:29:6a:31:0c:ec:19:4e:53:9b:43:8a:f9:ae:58: bb:01:41:44:a1:f0:83:2e:a5:45:c0:c0:49:18:01:15:b2:f1: 24:c2:56:f6:91:b2:b2:38:c3:7f:bd:2c:94:a7:32:25:9f:79: 99:a7:19:84:82:a6:00:56:95:2c:e0:ec:b2:b3:6d:4d:fc:f2: ee:cc:d9:87:25:84:5c:27:d5:2c:ff:7c:f3:42:ee:16:b2:62: 55:9c:11:c7:08:b3:01:6d:0c:77:0c:e8:2c:39:a7:c9:e6:67: f5:2b:ff:d6:12:dc:6a:b5:e3:45:b0:8e:bb:6c:d3:9d:dd:83: 25:48:2d:48:c0:f3:ab:b6:a6:98:00:c1:97:93:3d:39:d2:e3: 5d:31:86:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAo65YGL1zxhQfXoeCaYU/RG/HqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNjA0MTgxMDU2NDNaFw0yNjA0MjExOTUwNDNaMDMxMTAvBgNV BAMTKDc5MkZFMEYwQkEzNzFCODY1NzUxRTJDRjlFRkQ1NDU4QUNDMUI2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwjOMKKaLUXkf5u5u9GlsVdNq7 FhjoHjJckwLel/4uK01r08V4SM2D95ys06+ANcFjdckdzmIsZbKVTFPGT6CjP/6A +mq66pbI3Qbtw8hLRwa1Y0YOESYXh5g0cFMEFZJWkqTzo4WH5lULeRdjZyqMb6Uk MgBdD5HLqMf4z20HYCPxwo4fsQb6ZvrRAQ6WxtWwWA0BZ7Cypg+hz/1N0ZzvWW/n doR040G5kuIDIarY3qigHKOcBxq0+aBwCPfsd/hJxHU1h052tewJAySXvgEUbQ6k ij8ZMZn8PLuDV8JWrgEa6joIBzo5pr587a8Iv1n65Q7Md3E553pLWM3N2JpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeS/g8Lo3G4ZXUeLPnv1UWKzBtjkwHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyTcswc7/oeZF6mKoopBUGozonPQpzGyhpQ 9MCciAoV4raihZq4UGgDhn7qb1vzDjhUml3RkvihA1BiKD880/iMOig+8ef6Cib7 jOZdpKHVAcDqKMXS85coQJgCurzXGdOf4DRtLkvNj7eUhp/t5JEpajEM7BlOU5tD ivmuWLsBQUSh8IMupUXAwEkYARWy8STCVvaRsrI4w3+9LJSnMiWfeZmnGYSCpgBW lSzg7LKzbU388u7M2YclhFwn1Sz/fPNC7hayYlWcEccIswFtDHcM6Cw5p8nmZ/Ur /9YS3Gq140Wwjrts053dgyVILUjA86u2ppgAwZeTPTnS410xhos= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:38 2026 by rpki-client