$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: dYefeo+lKFGsfXGJBu4GtFVEVnep0jmoRAouw25rIFo= Subject key identifier: B8:51:01:AC:2D:4B:60:05:DC:47:45:26:C3:71:A2:DD:43:42:43:30 Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 4EBDAD2393E94BCC38073E7E34B20966E357F27C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 02B6 Signing time: Sat 18 Apr 2026 02:11:36 +0000 Manifest this update: Sat 18 Apr 2026 02:06:36 +0000 Manifest next update: Tue 21 Apr 2026 10:17:36 +0000 Files and hashes: 1: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=) 2: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=) 3: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: dCArsiPYlXLbUKgblmn4L9Dp7CTVDbIf/dGOXAVsC1c=) 4: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=) 5: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bd:ad:23:93:e9:4b:cc:38:07:3e:7e:34:b2:09:66:e3:57:f2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Apr 18 02:06:36 2026 GMT Not After : Apr 21 10:17:36 2026 GMT Subject: CN=B85101AC2D4B6005DC474526C371A2DD43424330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:66:f7:63:0f:63:80:c6:c4:62:74:45:fd: d6:60:1e:61:11:5c:81:26:bc:68:88:4e:54:aa:b5: a3:84:df:7f:8d:e4:b9:f5:d1:a0:17:01:f9:19:90: c1:8e:d1:ad:b8:67:33:b9:c4:53:2b:36:a5:bd:c7: 51:58:91:45:7e:77:b3:34:7d:6e:90:57:4d:31:68: 62:50:ab:a2:f4:30:ca:ac:73:d9:42:96:b8:6b:5d: bb:eb:02:34:5e:fa:33:d2:a7:84:fe:43:d9:87:8e: fb:75:65:27:c1:95:1e:a8:55:8d:c3:90:08:e9:7a: 15:5c:12:d9:6f:78:a5:df:de:0d:e9:c6:5b:65:69: f9:d9:cc:5b:c9:73:67:44:9d:98:93:21:dc:31:26: 5d:0b:19:6c:9a:f7:d5:82:86:a0:99:be:dc:9c:26: 6d:f9:b9:60:42:8b:60:a2:46:43:88:6b:1d:1e:db: 02:dd:72:4b:06:e2:53:a9:fa:e0:c2:d0:cb:34:7f: fb:20:ad:8a:ba:b4:9c:94:78:96:ee:fd:22:93:4f: c5:ed:b6:5c:3d:77:ae:fb:76:c4:80:e8:14:f4:59: 9d:b3:a5:3c:dc:75:ba:56:61:5d:59:a3:4b:2b:5d: 52:26:dd:45:c4:e7:b8:9b:94:f4:0b:a2:33:33:e8: f4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:51:01:AC:2D:4B:60:05:DC:47:45:26:C3:71:A2:DD:43:42:43:30 X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:74:36:95:22:3b:d0:dc:c4:7a:76:4a:e2:ea:42:ef:1a:7a: d7:4f:0d:3a:e9:d6:3e:c5:c5:64:ca:e4:f6:b6:6c:4b:73:27: f0:10:b5:a1:e9:5a:31:57:1f:ab:c3:43:fc:41:79:96:3e:e9: b8:25:5d:6b:38:81:54:1d:fd:11:ec:fd:44:8f:09:4e:4a:75: 07:32:bd:d2:a4:88:66:35:85:3c:0f:42:17:bd:b8:7f:38:aa: 43:08:4a:35:10:c3:9e:89:fd:f2:56:9d:a1:f4:01:09:ca:58: 09:a8:ef:eb:8b:d8:67:73:d2:27:00:9e:2e:16:05:40:42:18: bd:d2:0d:74:5c:19:82:69:4f:13:83:a9:05:f0:8b:6d:14:cf: b3:3e:4e:83:1e:88:55:92:eb:18:46:c4:e9:44:8f:d5:47:91: 5e:38:4e:29:88:31:a0:d8:bd:ef:5f:75:40:11:69:02:8e:55: b1:05:0f:22:c9:40:a1:d4:00:6f:d0:7e:d3:c3:aa:7c:f2:a0: 74:63:50:6f:70:c1:95:8f:10:83:ee:f8:66:dd:6e:64:7f:3d: 3a:92:94:01:6a:d9:9e:1b:21:48:df:c3:4d:f8:fd:7a:fc:1a: 20:9a:44:8e:66:aa:b8:22:62:b2:a6:c0:ab:52:24:56:a1:a0: 73:aa:8a:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTr2tI5PpS8w4Bz5+NLIJZuNX8nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNjA0MTgwMjA2MzZaFw0yNjA0MjExMDE3MzZaMDMxMTAvBgNV BAMTKEI4NTEwMUFDMkQ0QjYwMDVEQzQ3NDUyNkMzNzFBMkRENDM0MjQzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCejmb3Yw9jgMbEYnRF/dZgHmER XIEmvGiITlSqtaOE33+N5Ln10aAXAfkZkMGO0a24ZzO5xFMrNqW9x1FYkUV+d7M0 fW6QV00xaGJQq6L0MMqsc9lClrhrXbvrAjRe+jPSp4T+Q9mHjvt1ZSfBlR6oVY3D kAjpehVcEtlveKXf3g3pxltlafnZzFvJc2dEnZiTIdwxJl0LGWya99WChqCZvtyc Jm35uWBCi2CiRkOIax0e2wLdcksG4lOp+uDC0Ms0f/sgrYq6tJyUeJbu/SKTT8Xt tlw9d677dsSA6BT0WZ2zpTzcdbpWYV1Zo0srXVIm3UXE57iblPQLojMz6PQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFEBrC1LYAXcR0Umw3Gi3UNCQzAwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE50NpUiO9DcxHp2SuLqQu8aetdPDTrp1j7F xWTK5Pa2bEtzJ/AQtaHpWjFXH6vDQ/xBeZY+6bglXWs4gVQd/RHs/USPCU5KdQcy vdKkiGY1hTwPQhe9uH84qkMISjUQw56J/fJWnaH0AQnKWAmo7+uL2Gdz0icAni4W BUBCGL3SDXRcGYJpTxODqQXwi20Uz7M+ToMeiFWS6xhGxOlEj9VHkV44TimIMaDY ve9fdUARaQKOVbEFDyLJQKHUAG/QftPDqnzyoHRjUG9wwZWPEIPu+GbdbmR/PTqS lAFq2Z4bIUjfw034/Xr8GiCaRI5mqrgiYrKmwKtSJFahoHOqilQ= -----END CERTIFICATE-----Generated at Sat Apr 18 06:07:46 2026 by rpki-client