$ rpki-client -vvf repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft File: B891A45840F824B9F116CBEAA3574A68343F5538.mft (raw, json) Hash identifier: lYQTrXCm/Z4gfCv4H6nbrkOdYkN9OsabHJ7Y+V2TBYc= Subject key identifier: A9:0B:68:D1:5A:22:A4:82:B9:A0:EE:48:ED:D1:CD:22:CC:B8:68:51 Authority key identifier: B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 Certificate issuer: /CN=B891A45840F824B9F116CBEAA3574A68343F5538 Certificate serial: 23F82F5B64EA956DD34AC3C663DF55C7F83EBE1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft Manifest number: DC Signing time: Wed 15 Apr 2026 17:12:27 +0000 Manifest this update: Wed 15 Apr 2026 17:07:27 +0000 Manifest next update: Sun 19 Apr 2026 01:37:27 +0000 Files and hashes: 1: 3130332e3234362e3136392e302f32342d3234203d3e203538333835.roa (hash: M7vZQHPEWxI5UNs6yi6gKlm3olQkDzTXBE8xEqwNtQY=) 2: 3130332e32332e3131362e302f32332d3234203d3e203538333835.roa (hash: GOKg9RSCe07Sx9GP7mLWYk+y2Rm870vCrIk4OhiKGTc=) 3: 3130332e32382e3231382e302f32342d3234203d3e203538333835.roa (hash: LRVa/+g9Phm4DS1KM+ftjtti7KXy6ccI0ROhTKpj7KU=) 4: 3131302e39322e37342e302f32332d3234203d3e203538333835.roa (hash: XhWdokRSZKsmkPslfMXYqoYsZmB36DXqHyY6n5ueEW4=) 5: B891A45840F824B9F116CBEAA3574A68343F5538.crl (hash: lTZI0Aj/kKtsBtRHA2lY8YaJI5+NzkiVPVC/ChpUrl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f8:2f:5b:64:ea:95:6d:d3:4a:c3:c6:63:df:55:c7:f8:3e:be:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B891A45840F824B9F116CBEAA3574A68343F5538 Validity Not Before: Apr 15 17:07:27 2026 GMT Not After : Apr 19 01:37:27 2026 GMT Subject: CN=A90B68D15A22A482B9A0EE48EDD1CD22CCB86851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:1e:68:ef:d0:ff:08:db:0b:fb:e4:b9:b9: 1e:eb:11:5c:ef:70:29:87:a1:97:09:86:63:f1:25: 38:d8:5a:43:05:4c:64:71:57:8b:be:67:2f:97:f0: 01:7a:6d:d9:ed:fe:37:be:6d:2f:7a:41:cb:2a:c7: c4:3f:09:b8:2e:a9:7b:e5:a8:c2:27:8e:8a:c2:cd: c0:fa:19:73:3f:20:f8:dd:63:cc:71:d4:02:72:80: 04:ce:3a:1b:c4:01:5a:6b:91:c9:84:56:4a:5e:03: 95:ec:f7:b8:5a:ab:31:98:e7:f7:0a:46:6f:82:68: b4:3a:67:70:f6:4d:16:21:4f:30:55:d3:da:28:f5: 6f:dc:b5:3a:a6:56:00:7c:00:bb:56:5d:c7:9e:09: cb:2d:c8:f0:79:32:a0:f1:37:d7:3b:45:41:6c:70: 67:96:60:b2:9c:b5:18:71:9f:d1:cc:40:57:f3:ae: b5:76:51:17:30:7c:39:39:6e:df:28:05:1f:84:43: 76:c2:27:89:8c:e3:6d:8c:cf:8c:f2:81:85:e8:ec: 8c:8f:51:60:c9:88:e9:45:bc:24:5e:11:97:a1:9f: 7a:13:60:88:53:a1:c1:7b:5e:ab:c1:e3:b8:c4:24: 81:4c:fb:3b:45:71:14:fc:7c:26:8f:ab:9b:38:0f: 7c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0B:68:D1:5A:22:A4:82:B9:A0:EE:48:ED:D1:CD:22:CC:B8:68:51 X509v3 Authority Key Identifier: keyid:B8:91:A4:58:40:F8:24:B9:F1:16:CB:EA:A3:57:4A:68:34:3F:55:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B891A45840F824B9F116CBEAA3574A68343F5538.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3925388-35c6-41d7-9dc4-db4d118d135a/0/B891A45840F824B9F116CBEAA3574A68343F5538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:87:64:36:3b:84:56:bb:67:70:b9:c9:6a:ea:ab:d8:51:c7: c1:05:69:ae:13:71:b0:bd:83:db:d7:5b:aa:e7:35:06:ca:54: c0:6f:2e:0e:f7:3d:f1:3f:ff:6e:43:b3:76:ab:43:90:76:41: aa:ae:fa:ae:22:40:24:f1:9e:c7:60:17:42:86:38:d6:1b:46: 76:99:3c:af:ef:f9:e7:f7:f4:8f:92:72:f1:c1:52:9f:20:f5: 7d:5e:a7:00:c8:ca:eb:ae:14:ec:c9:41:4e:f8:72:a0:3e:1e: a2:37:94:e1:40:34:f2:19:e8:cc:43:06:ae:47:a2:97:5e:d2: b6:f5:d2:ec:86:2c:2e:0d:d3:d7:5a:1c:75:32:61:22:d1:a9: d3:81:a1:23:43:08:0e:14:9d:46:a6:08:cd:b1:2d:2d:2b:21: 34:d8:9c:77:0f:44:d0:0f:89:63:aa:d7:cf:45:e7:44:e1:42: d7:63:e0:99:54:c1:07:a7:8f:a3:c7:1f:4d:f9:8e:5e:7c:a6: 03:98:1d:1c:df:75:4b:63:06:0c:d6:8f:98:4c:21:92:bb:32: 62:23:b2:50:0f:9b:85:27:9e:f7:a7:74:89:30:83:e3:87:6f: 5e:14:b0:f5:19:cb:62:87:88:5f:70:05:bd:91:71:39:ff:c2: 9f:60:a3:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/gvW2TqlW3TSsPGY99Vx/g+vh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgz NDNGNTUzODAeFw0yNjA0MTUxNzA3MjdaFw0yNjA0MTkwMTM3MjdaMDMxMTAvBgNV BAMTKEE5MEI2OEQxNUEyMkE0ODJCOUEwRUU0OEVERDFDRDIyQ0NCODY4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs2R5o79D/CNsL++S5uR7rEVzv cCmHoZcJhmPxJTjYWkMFTGRxV4u+Zy+X8AF6bdnt/je+bS96Qcsqx8Q/CbguqXvl qMInjorCzcD6GXM/IPjdY8xx1AJygATOOhvEAVprkcmEVkpeA5Xs97haqzGY5/cK Rm+CaLQ6Z3D2TRYhTzBV09oo9W/ctTqmVgB8ALtWXceeCcstyPB5MqDxN9c7RUFs cGeWYLKctRhxn9HMQFfzrrV2URcwfDk5bt8oBR+EQ3bCJ4mM422Mz4zygYXo7IyP UWDJiOlFvCReEZehn3oTYIhTocF7XqvB47jEJIFM+ztFcRT8fCaPq5s4D3w1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQto0VoipIK5oO5I7dHNIsy4aFEwHwYDVR0j BBgwFoAUuJGkWED4JLnxFsvqo1dKaDQ/VTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzkyNTM4OC0zNWM2LTQxZDctOWRjNC1kYjRkMTE4ZDEzNWEvMC9CODkxQTQ1ODQw RjgyNEI5RjExNkNCRUFBMzU3NEE2ODM0M0Y1NTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRBNjgzNDNG NTUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM5MjUzODgtMzVjNi00MWQ3LTlk YzQtZGI0ZDExOGQxMzVhLzAvQjg5MUE0NTg0MEY4MjRCOUYxMTZDQkVBQTM1NzRB NjgzNDNGNTUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeHZDY7hFa7Z3C5yWrqq9hRx8EFaa4TcbC9 g9vXW6rnNQbKVMBvLg73PfE//25Ds3arQ5B2Qaqu+q4iQCTxnsdgF0KGONYbRnaZ PK/v+ef39I+ScvHBUp8g9X1epwDIyuuuFOzJQU74cqA+HqI3lOFANPIZ6MxDBq5H opde0rb10uyGLC4N09daHHUyYSLRqdOBoSNDCA4UnUamCM2xLS0rITTYnHcPRNAP iWOq189F50ThQtdj4JlUwQenj6PHH035jl58pgOYHRzfdUtjBgzWj5hMIZK7MmIj slAPm4UnnvendIkwg+OHb14UsPUZy2KHiF9wBb2RcTn/wp9go10= -----END CERTIFICATE-----Generated at Fri Apr 17 19:51:19 2026 by rpki-client