$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: JlEHvZYIF158J2gEl+vNvoNIw9ocYhdzSnIB3KvCkb4= Subject key identifier: A9:0E:43:20:4B:CA:8B:5F:C3:F3:14:55:2B:8F:C2:E7:8E:AA:0C:E7 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 4285ABBBF31BD924E3056C8A81B54BB4E87ECB94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 057C Signing time: Sun 19 Apr 2026 04:22:17 +0000 Manifest this update: Sun 19 Apr 2026 04:17:17 +0000 Manifest next update: Wed 22 Apr 2026 15:06:17 +0000 Files and hashes: 1: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) 2: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: XHdap6W3d5u0ibfgBAdiyStR1QC+6Ivne/gllUu/Rqw=) 3: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: fUADP74rmnY7PIhtDWCvLWY2ZjyhVeZEudXfPj0EFqo=) 4: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 5: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:85:ab:bb:f3:1b:d9:24:e3:05:6c:8a:81:b5:4b:b4:e8:7e:cb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Apr 19 04:17:17 2026 GMT Not After : Apr 22 15:06:17 2026 GMT Subject: CN=A90E43204BCA8B5FC3F314552B8FC2E78EAA0CE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:36:6d:d4:4a:49:33:77:77:6d:85:ac:87: 8e:95:7d:be:3e:d8:4d:f9:33:15:f5:84:4a:ac:49: 05:47:8e:98:be:9c:b3:eb:6f:9b:ac:04:46:be:57: e0:aa:5d:a1:c4:1d:50:04:03:f0:e1:f0:28:30:cd: d5:aa:8c:6f:cc:52:34:52:b4:8a:a1:03:8f:3b:be: 05:6d:b0:ad:10:4e:7b:d2:a3:4e:45:49:ee:88:3a: 10:0c:f6:fe:74:4d:41:91:7b:62:72:9a:5f:00:83: 5c:57:96:6f:22:a9:78:c6:83:19:60:57:bb:f5:32: 22:0c:e1:79:52:97:36:70:0d:8b:5f:0c:5f:14:66: d7:86:17:08:31:3b:c4:93:87:9f:98:fc:3f:3b:d3: 36:8d:7a:af:ce:94:ff:2b:5f:b3:5e:c1:af:9f:4f: 07:1e:f4:26:18:e7:f4:76:2e:41:3c:e4:cd:4a:d9: ab:2f:89:e7:db:8e:45:39:fd:35:42:bc:37:f6:a4: b2:09:57:0d:60:0e:ac:68:29:1b:72:a6:89:a6:f9: 4b:42:55:b4:c7:25:da:3c:d9:29:9d:fe:58:a1:53: 05:26:36:68:dc:a5:20:06:7e:b2:12:ca:8c:5a:29: b2:ec:80:7e:20:f1:62:58:0c:66:1b:0f:b4:29:d4: 28:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:43:20:4B:CA:8B:5F:C3:F3:14:55:2B:8F:C2:E7:8E:AA:0C:E7 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:82:2c:57:cf:8d:b9:e7:c8:b4:73:19:9d:a3:77:d3:27:bc: 47:2d:dc:c5:2b:6f:08:37:07:aa:65:dd:7d:a1:e9:36:68:2f: 20:df:af:be:7f:3e:fa:f2:b3:0f:67:6b:8f:53:92:1b:bc:a8: b4:3b:50:1c:8f:c4:b2:4d:fa:d1:e1:19:fb:2f:e0:81:b3:65: 84:d1:87:bc:a4:57:c2:4a:f5:5d:2d:b5:14:ec:3d:20:35:be: 84:6e:e4:af:33:f3:22:f7:cb:4a:f1:94:26:26:a7:83:fc:7b: 63:f5:24:71:b7:bc:a3:0d:e6:61:9f:71:55:d7:cc:ba:93:87: 07:8d:e7:65:97:72:85:84:f0:ca:2b:3b:c0:90:ab:3b:f8:70: 9f:98:04:96:70:6d:85:85:5d:ce:28:ef:7d:18:9e:f4:c7:a5: 7b:87:0b:d0:47:e2:b0:18:40:91:bd:f8:2f:45:5f:8a:3f:a3: 2a:f9:b7:a0:86:45:e6:d8:4d:3b:10:01:3b:a0:a3:eb:3a:7c: e1:8f:0b:bb:2a:fa:2e:5c:c1:28:38:60:2a:7a:98:d4:cd:3f: 4a:c3:80:f0:51:49:f1:2d:33:c1:45:7d:75:bc:11:ba:94:65: 2e:9a:63:76:0f:4a:e7:4a:7d:3c:b5:43:6f:58:54:8b:81:d5: 37:55:ab:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoWru/Mb2STjBWyKgbVLtOh+y5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNjA0MTkwNDE3MTdaFw0yNjA0MjIxNTA2MTdaMDMxMTAvBgNV BAMTKEE5MEU0MzIwNEJDQThCNUZDM0YzMTQ1NTJCOEZDMkU3OEVBQTBDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLTZt1EpJM3d3bYWsh46Vfb4+ 2E35MxX1hEqsSQVHjpi+nLPrb5usBEa+V+CqXaHEHVAEA/Dh8CgwzdWqjG/MUjRS tIqhA487vgVtsK0QTnvSo05FSe6IOhAM9v50TUGRe2Jyml8Ag1xXlm8iqXjGgxlg V7v1MiIM4XlSlzZwDYtfDF8UZteGFwgxO8STh5+Y/D870zaNeq/OlP8rX7Newa+f Twce9CYY5/R2LkE85M1K2asviefbjkU5/TVCvDf2pLIJVw1gDqxoKRtypomm+UtC VbTHJdo82Smd/lihUwUmNmjcpSAGfrISyoxaKbLsgH4g8WJYDGYbD7Qp1CgBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqQ5DIEvKi1/D8xRVK4/C546qDOcwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6CLFfPjbnnyLRzGZ2jd9MnvEct3MUrbwg3 B6pl3X2h6TZoLyDfr75/Pvrysw9na49Tkhu8qLQ7UByPxLJN+tHhGfsv4IGzZYTR h7ykV8JK9V0ttRTsPSA1voRu5K8z8yL3y0rxlCYmp4P8e2P1JHG3vKMN5mGfcVXX zLqThweN52WXcoWE8MorO8CQqzv4cJ+YBJZwbYWFXc4o730YnvTHpXuHC9BH4rAY QJG9+C9FX4o/oyr5t6CGRebYTTsQATugo+s6fOGPC7sq+i5cwSg4YCp6mNTNP0rD gPBRSfEtM8FFfXW8EbqUZS6aY3YPSudKfTy1Q29YVIuB1TdVqzY= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:20 2026 by rpki-client