$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: oSuSbwX1NXDwDxT3h6qHwTN4GWF06lbgggRg3P2kfBQ= Subject key identifier: 20:FB:86:D3:70:AD:BA:BE:F4:03:4A:9F:FA:C9:AC:1D:07:99:D0:F4 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 62162BBE3A6598B6404E8462FFFC4B8C240E8DA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: E1 Signing time: Fri 17 Apr 2026 07:21:45 +0000 Manifest this update: Fri 17 Apr 2026 07:16:45 +0000 Manifest next update: Mon 20 Apr 2026 08:41:45 +0000 Files and hashes: 1: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: 2FF1rTCVg4dOTiex4D7K93QytOvh8ORwGL3iCZ+Ig9M=) 2: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: tCFWfM3xPDNAE6hYqcghBjN3a3o8405nfAZiA3LJhEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:16:2b:be:3a:65:98:b6:40:4e:84:62:ff:fc:4b:8c:24:0e:8d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Apr 17 07:16:45 2026 GMT Not After : Apr 20 08:41:45 2026 GMT Subject: CN=20FB86D370ADBABEF4034A9FFAC9AC1D0799D0F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2b:8f:a0:78:f1:b4:90:6a:cc:f0:a9:cd:f1: c8:4a:13:b2:fd:67:27:39:e6:98:26:85:8e:4d:a3: ab:24:8b:b5:20:04:aa:12:84:6a:95:a9:07:56:64: 30:86:d8:32:de:7a:b1:f2:52:c0:06:4a:c0:0f:7a: fe:20:0d:77:d6:74:93:a7:02:f5:6a:97:16:ab:a1: ec:57:4d:a3:59:21:7e:ca:7e:76:5b:d0:bf:f3:59: 8b:26:8c:2f:ad:19:4e:4e:63:9f:06:d6:3d:e2:70: a5:3e:f9:b5:53:36:80:24:18:6b:f9:52:3a:d2:ae: 0a:20:72:80:24:d6:c2:23:05:ed:8a:af:bd:be:a8: 57:72:04:0a:e4:28:48:28:24:f4:66:fe:0a:41:c3: d6:da:4c:7a:17:de:2a:06:bf:e7:11:cd:41:37:69: 0c:cf:d1:bf:3e:09:7f:81:89:95:9b:9b:14:80:e3: 14:60:af:ef:db:e3:d9:ac:04:02:70:5a:db:01:60: ee:2c:f5:7e:69:1a:d8:6f:36:15:ec:42:02:1a:28: 54:28:f1:ce:98:45:71:0b:36:60:8e:e9:01:0d:a5: 4b:d8:06:c0:de:99:f9:d1:9d:c8:a7:2c:4f:f7:80: 93:29:bb:6b:82:b8:04:93:f1:e7:51:76:84:d7:6d: 97:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FB:86:D3:70:AD:BA:BE:F4:03:4A:9F:FA:C9:AC:1D:07:99:D0:F4 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5d:66:73:6c:b3:46:e5:56:88:dc:7f:11:c2:f1:27:f8:fb: 0a:25:a6:51:29:6d:b4:9f:1a:da:84:e7:de:a3:b2:4c:62:9d: 19:2c:52:c7:2a:52:ce:59:93:bc:b3:28:79:2e:68:4d:88:e6: 68:70:d4:8e:d8:b0:23:09:d3:37:ae:59:c7:12:1d:f4:64:7a: 2f:2b:07:91:68:b0:07:ef:4d:b5:25:f0:e4:f3:c7:74:19:82: dd:8a:c8:d4:1b:17:75:a5:d7:bc:34:e5:85:44:a7:a4:79:f0: df:32:42:b6:c9:48:9b:5c:3c:b5:99:fb:31:8a:ce:ca:7f:bd: 9e:79:13:f3:5a:9d:ea:3d:01:85:6b:79:15:47:39:8e:fb:86: ce:47:e0:c2:9d:e7:8e:e6:e2:8a:30:d4:65:3f:8f:b4:46:9f: fe:87:56:d2:b4:11:06:47:24:d2:7a:98:81:df:89:e8:5d:c9: ae:2c:f1:a0:d2:7a:ab:e6:c9:29:ea:b7:62:3d:ae:a8:d9:14: 1a:51:d6:dd:9e:b3:75:12:b4:70:b9:61:01:a9:41:49:eb:24: 87:21:00:88:ce:0c:8d:c2:b2:ca:df:0e:5c:f3:e4:bb:34:84: 77:5a:a7:3a:57:ef:c6:cc:ad:5a:5c:87:70:b5:56:78:19:48: 0e:02:94:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhYrvjplmLZAToRi//xLjCQOjagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNjA0MTcwNzE2NDVaFw0yNjA0MjAwODQxNDVaMDMxMTAvBgNV BAMTKDIwRkI4NkQzNzBBREJBQkVGNDAzNEE5RkZBQzlBQzFEMDc5OUQwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtK4+gePG0kGrM8KnN8chKE7L9 Zyc55pgmhY5No6ski7UgBKoShGqVqQdWZDCG2DLeerHyUsAGSsAPev4gDXfWdJOn AvVqlxaroexXTaNZIX7KfnZb0L/zWYsmjC+tGU5OY58G1j3icKU++bVTNoAkGGv5 UjrSrgogcoAk1sIjBe2Kr72+qFdyBArkKEgoJPRm/gpBw9baTHoX3ioGv+cRzUE3 aQzP0b8+CX+BiZWbmxSA4xRgr+/b49msBAJwWtsBYO4s9X5pGthvNhXsQgIaKFQo 8c6YRXELNmCO6QENpUvYBsDemfnRncinLE/3gJMpu2uCuAST8edRdoTXbZexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIPuG03Ctur70A0qf+smsHQeZ0PQwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtdZnNss0blVojcfxHC8Sf4+wolplEpbbSf GtqE596jskxinRksUscqUs5Zk7yzKHkuaE2I5mhw1I7YsCMJ0zeuWccSHfRkei8r B5FosAfvTbUl8OTzx3QZgt2KyNQbF3Wl17w05YVEp6R58N8yQrbJSJtcPLWZ+zGK zsp/vZ55E/Naneo9AYVreRVHOY77hs5H4MKd547m4oow1GU/j7RGn/6HVtK0EQZH JNJ6mIHfiehdya4s8aDSeqvmySnqt2I9rqjZFBpR1t2es3UStHC5YQGpQUnrJIch AIjODI3CssrfDlzz5Ls0hHdapzpX78bMrVpch3C1VngZSA4ClBA= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:10 2026 by rpki-client