$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: U2TZjz1+SdcBLJ47g4XWAPpxT0AdfTPK2vwYc/WLO/I= Subject key identifier: 40:9A:49:3A:52:36:22:4C:58:A4:8F:91:8F:8C:B6:EB:4D:48:F5:F3 Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 01C5B329256DBB1B6421778670280D0A28EB093F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0284 Signing time: Sat 18 Apr 2026 13:02:51 +0000 Manifest this update: Sat 18 Apr 2026 12:57:51 +0000 Manifest next update: Tue 21 Apr 2026 18:33:51 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: Y5gfhFHbwlaFyEb3NvEd46VtQsfBhiSHkeM2EhE0s3M=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: FleRIxgTnmaBhQCP2BRCmIdABXertk8iuJxvtLXMhGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c5:b3:29:25:6d:bb:1b:64:21:77:86:70:28:0d:0a:28:eb:09:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Apr 18 12:57:51 2026 GMT Not After : Apr 21 18:33:51 2026 GMT Subject: CN=409A493A5236224C58A48F918F8CB6EB4D48F5F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:fb:48:aa:33:ea:48:75:f2:c4:f8:24:3b: f7:b3:bd:2c:b5:ae:67:76:2e:f7:9e:8e:75:19:8e: 08:cb:26:02:e5:08:b8:55:3c:bc:bb:53:a8:b8:89: 5d:83:b4:5c:d4:38:2a:53:e4:f2:cc:40:14:eb:ab: aa:c6:c7:68:0e:8a:8d:6c:b8:3d:b3:ae:82:89:ce: ef:84:77:94:0c:52:1c:37:9c:4f:fb:1c:66:67:5c: 94:bf:4b:be:7c:0d:64:82:3d:35:f9:2d:a5:e6:22: bf:1d:b9:67:ed:ef:fb:ba:13:8f:18:9f:8f:df:5e: f0:d1:73:ab:39:d2:08:ac:9d:db:4d:6e:4e:d2:5f: 8b:5e:00:fc:a1:c7:65:bd:cb:9f:8b:0a:b2:b3:3e: 2a:31:eb:d6:df:26:90:0a:f1:20:a3:d1:ce:71:a9: 82:91:8b:c2:9e:ff:55:42:5f:c1:8f:27:37:73:9d: e8:f7:d6:41:58:13:c6:21:ee:4f:50:e6:48:93:29: 2f:a8:c9:90:15:28:0d:f8:cc:02:b8:2f:e3:bc:21: 45:35:d1:1e:f2:fe:55:fd:18:2a:c2:70:fb:f5:34: 80:f7:5b:b8:d1:ad:3a:ee:5f:a4:89:37:fa:12:48: 43:dc:86:b8:20:7a:f8:88:fb:fb:54:eb:d5:7f:45: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9A:49:3A:52:36:22:4C:58:A4:8F:91:8F:8C:B6:EB:4D:48:F5:F3 X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b1:5c:df:6e:4f:10:1b:06:28:25:89:3d:b9:ec:9a:fb:77: 1c:8c:2b:99:fc:a3:11:b7:a1:53:83:77:9f:d0:c7:87:43:9f: d1:cf:04:86:7c:5f:db:82:d7:cf:33:df:28:89:34:82:a5:d0: de:66:36:f6:96:41:29:1b:8e:6a:37:82:c4:52:3c:72:3f:88: b0:2f:ab:fa:ea:91:e9:bb:77:c8:e0:43:71:0a:4c:d5:b2:6e: 30:b0:7e:ec:cb:f7:94:66:cd:1d:c7:ab:71:8c:d0:a8:9d:e3: bb:1f:39:39:9b:e9:25:d6:e4:ad:b7:9a:9e:a7:35:c3:49:5b: 91:52:c2:41:00:e2:a6:9c:2e:ac:de:f8:18:81:b3:63:c2:6a: 15:12:1f:2a:2b:ee:40:e6:7c:83:3b:9e:54:50:b6:7c:f3:52: c4:55:a0:09:cb:71:40:ed:66:2f:30:c6:9e:8f:a2:3a:6f:4b: 8d:30:70:7d:10:3f:63:3b:74:75:ac:51:47:82:1c:8d:78:88: 5d:93:dd:9f:e6:8d:68:9a:40:cd:2a:29:ca:e6:d2:2e:04:49: 67:9c:64:22:34:92:e1:17:04:6b:30:39:db:de:51:dd:7c:65: a6:d8:1f:d9:18:2e:3f:09:60:8f:86:a7:73:f6:cd:97:25:d5: 67:b2:a5:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcWzKSVtuxtkIXeGcCgNCijrCT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNjA0MTgxMjU3NTFaFw0yNjA0MjExODMzNTFaMDMxMTAvBgNV BAMTKDQwOUE0OTNBNTIzNjIyNEM1OEE0OEY5MThGOENCNkVCNEQ0OEY1RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClt/tIqjPqSHXyxPgkO/ezvSy1 rmd2LveejnUZjgjLJgLlCLhVPLy7U6i4iV2DtFzUOCpT5PLMQBTrq6rGx2gOio1s uD2zroKJzu+Ed5QMUhw3nE/7HGZnXJS/S758DWSCPTX5LaXmIr8duWft7/u6E48Y n4/fXvDRc6s50gisndtNbk7SX4teAPyhx2W9y5+LCrKzPiox69bfJpAK8SCj0c5x qYKRi8Ke/1VCX8GPJzdznej31kFYE8Yh7k9Q5kiTKS+oyZAVKA34zAK4L+O8IUU1 0R7y/lX9GCrCcPv1NID3W7jRrTruX6SJN/oSSEPchrggeviI+/tU69V/RRjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJpJOlI2IkxYpI+Rj4y2601I9fMwHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyxXN9uTxAbBigliT257Jr7dxyMK5n8oxG3 oVODd5/Qx4dDn9HPBIZ8X9uC188z3yiJNIKl0N5mNvaWQSkbjmo3gsRSPHI/iLAv q/rqkem7d8jgQ3EKTNWybjCwfuzL95RmzR3Hq3GM0Kid47sfOTmb6SXW5K23mp6n NcNJW5FSwkEA4qacLqze+BiBs2PCahUSHyor7kDmfIM7nlRQtnzzUsRVoAnLcUDt Zi8wxp6PojpvS40wcH0QP2M7dHWsUUeCHI14iF2T3Z/mjWiaQM0qKcrm0i4ESWec ZCI0kuEXBGswOdveUd18ZabYH9kYLj8JYI+Gp3P2zZcl1WeypT8= -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:55 2026 by rpki-client