$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: lBf7a+CwKmVqX8IZhvy08hebbMgKlYOigAH+61MZ4Ic= Subject key identifier: 9B:EA:52:8A:3E:0B:29:91:14:B9:D6:39:14:A0:AE:46:72:06:1F:09 Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 4EFB960C1A8BFED598BDA61C0298C5EE4F6612C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 02B5 Signing time: Thu 16 Apr 2026 02:01:36 +0000 Manifest this update: Thu 16 Apr 2026 01:56:36 +0000 Manifest next update: Sun 19 Apr 2026 02:07:36 +0000 Files and hashes: 1: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) 2: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=) 3: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=) 4: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: zPuz/GIg9YNf5FlLVXtgIZvGzNEXcWTIHbnlUCu4TgI=) 5: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 02:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fb:96:0c:1a:8b:fe:d5:98:bd:a6:1c:02:98:c5:ee:4f:66:12:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Apr 16 01:56:36 2026 GMT Not After : Apr 19 02:07:36 2026 GMT Subject: CN=9BEA528A3E0B299114B9D63914A0AE4672061F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:0a:cc:76:36:8c:94:bf:28:9f:19:69:58: 54:4f:db:37:74:24:08:2c:9f:b2:2c:a5:1d:fb:cf: bb:f6:9e:6d:7a:89:5c:a4:cf:bd:14:52:8d:05:26: d9:79:41:8f:ad:b5:6b:25:56:f5:0c:27:d0:9c:19: 5b:5b:9c:af:57:c2:3f:8a:42:fd:7a:6e:88:45:ce: 9a:73:41:7a:e8:88:2d:11:71:00:d0:b2:72:f5:4d: 07:1e:35:66:b2:01:1d:d9:ac:8f:b3:d3:67:04:a4: d8:64:e1:87:e2:5f:86:42:b8:b4:fc:d4:a1:8e:92: 26:11:49:5c:7b:7d:28:f7:da:00:a2:17:58:ae:e3: fb:28:cb:69:06:5e:85:cc:eb:8d:d6:25:28:6f:9b: 03:24:ee:a0:c8:86:d2:a0:8e:67:7e:f4:7e:36:55: 44:3b:64:db:45:db:23:3b:6b:07:eb:0c:65:a2:0d: 51:82:4e:bf:94:9a:45:94:f1:37:20:22:f0:b5:e7: 66:65:e6:b4:ec:0d:47:4f:54:d7:9f:f9:90:db:7d: 53:de:8f:02:4c:63:fc:72:88:5e:e1:06:d5:f9:62: 7a:9d:6a:51:68:f8:e2:53:4f:98:6d:35:c7:77:c0: f9:21:72:c6:d2:4d:a1:c0:41:22:d2:20:cb:c9:61: 8b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EA:52:8A:3E:0B:29:91:14:B9:D6:39:14:A0:AE:46:72:06:1F:09 X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:86:11:5d:7f:8c:35:40:a5:f5:bf:7e:8a:a3:15:d3:8b:85: 13:0d:fe:10:87:29:59:44:f6:e9:88:76:32:ff:aa:bd:95:ad: 98:16:7e:d1:2c:07:c4:1a:12:a0:28:db:cc:c1:88:4f:b5:18: 49:79:23:16:06:50:c8:8f:26:07:e6:4e:c9:c2:82:92:9c:b5: 07:b5:de:20:3d:76:3b:d9:25:ff:d5:82:96:a0:16:08:81:d0: 2a:c0:4d:e1:3c:9a:ee:2a:27:d0:b4:50:1f:b8:b5:21:13:61: 91:cd:ac:2b:a2:c4:e6:ab:d1:85:5d:4a:ea:54:71:92:d8:4c: 7d:3f:f2:0e:e5:ac:e7:93:8f:cc:6e:dc:1c:19:36:97:7e:5d: 6a:f8:90:37:10:01:fe:da:83:4e:5b:d2:31:08:49:3c:b2:32: b3:80:ac:ea:8c:c1:9a:2e:3e:a6:70:ec:ac:11:2c:a6:79:34: 31:92:56:19:f4:de:fa:d4:aa:a2:20:a2:1d:62:63:2a:bd:54: 78:88:1e:74:03:5f:f7:d6:eb:af:03:f4:dc:f6:dd:9a:6a:f8: c0:7c:b7:34:65:a5:02:91:c0:62:f4:e0:92:62:e7:ba:53:c1: 76:92:ef:a7:85:c2:a5:7c:9d:69:78:1b:3f:85:9a:66:7b:67: 57:3e:da:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvuWDBqL/tWYvaYcApjF7k9mEsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNjA0MTYwMTU2MzZaFw0yNjA0MTkwMjA3MzZaMDMxMTAvBgNV BAMTKDlCRUE1MjhBM0UwQjI5OTExNEI5RDYzOTE0QTBBRTQ2NzIwNjFGMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1ArMdjaMlL8onxlpWFRP2zd0 JAgsn7IspR37z7v2nm16iVykz70UUo0FJtl5QY+ttWslVvUMJ9CcGVtbnK9Xwj+K Qv16bohFzppzQXroiC0RcQDQsnL1TQceNWayAR3ZrI+z02cEpNhk4YfiX4ZCuLT8 1KGOkiYRSVx7fSj32gCiF1iu4/soy2kGXoXM643WJShvmwMk7qDIhtKgjmd+9H42 VUQ7ZNtF2yM7awfrDGWiDVGCTr+UmkWU8TcgIvC152Zl5rTsDUdPVNef+ZDbfVPe jwJMY/xyiF7hBtX5YnqdalFo+OJTT5htNcd3wPkhcsbSTaHAQSLSIMvJYYsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+pSij4LKZEUudY5FKCuRnIGHwkwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6GEV1/jDVApfW/foqjFdOLhRMN/hCHKVlE 9umIdjL/qr2VrZgWftEsB8QaEqAo28zBiE+1GEl5IxYGUMiPJgfmTsnCgpKctQe1 3iA9djvZJf/VgpagFgiB0CrATeE8mu4qJ9C0UB+4tSETYZHNrCuixOar0YVdSupU cZLYTH0/8g7lrOeTj8xu3BwZNpd+XWr4kDcQAf7ag05b0jEISTyyMrOArOqMwZou PqZw7KwRLKZ5NDGSVhn03vrUqqIgoh1iYyq9VHiIHnQDX/fW668D9Nz23Zpq+MB8 tzRlpQKRwGL04JJi57pTwXaS76eFwqV8nWl4Gz+FmmZ7Z1c+2tY= -----END CERTIFICATE-----Generated at Fri Apr 17 23:39:57 2026 by rpki-client