$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: MwRt/AMOU0zb03qUkj51hAmCZ4LH+wenHM27EfeQ9kU= Subject key identifier: 18:76:03:98:0E:A1:23:83:E0:AF:9E:85:C2:F4:23:77:F9:4D:0A:A8 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 0BD35207AE5237C1FEBC707D7375B5635C32E4E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 031A Signing time: Fri 17 Apr 2026 19:22:25 +0000 Manifest this update: Fri 17 Apr 2026 19:17:25 +0000 Manifest next update: Tue 21 Apr 2026 05:05:25 +0000 Files and hashes: 1: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: lVhx6guzKwR9HrbZLwvDj0/gNis0pECPV7IVS2RD3xw=) 2: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) 3: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 5: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d3:52:07:ae:52:37:c1:fe:bc:70:7d:73:75:b5:63:5c:32:e4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Apr 17 19:17:25 2026 GMT Not After : Apr 21 05:05:25 2026 GMT Subject: CN=187603980EA12383E0AF9E85C2F42377F94D0AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:0f:99:74:9b:38:d3:7a:7e:95:d5:36:95:ba: d9:1d:a5:11:17:16:fd:b5:c6:40:ce:df:e1:b0:d8: 3c:4d:91:8e:af:f8:f1:db:fc:24:cc:67:d9:2a:94: a4:78:5b:ff:d9:65:cd:0a:aa:97:0b:80:98:6e:e2: 6c:72:fa:9b:1f:a2:82:44:72:df:b1:9a:db:38:89: 73:57:47:ae:38:74:9a:ef:0e:ba:3e:de:d9:e6:51: c4:89:be:be:fe:75:47:8b:e7:8f:f8:11:0e:79:36: 61:50:2c:2f:42:39:27:ba:6b:4c:4b:d9:ed:90:48: cd:51:d4:78:ff:67:49:e6:06:56:a5:8f:35:af:2d: 30:44:6d:7e:e4:17:92:24:ac:85:fc:d2:22:29:33: 09:18:fe:e3:69:b9:ff:b3:c5:9c:a3:f6:f5:3a:a1: a5:5b:b5:c8:e4:e3:0a:64:ee:a7:d3:ef:c3:7d:03: 9d:16:7d:57:a8:2b:cd:9d:61:b5:1c:41:6c:b4:98: 66:86:18:6f:7b:4e:f4:90:73:ed:c8:13:91:64:5f: 1f:8b:69:51:b6:21:1a:b7:76:68:02:19:1d:ca:5c: e2:7a:23:af:21:ff:01:e8:23:19:67:75:ec:5f:a9: 9c:7a:a4:8f:49:f2:b8:09:1d:9b:6a:68:f1:6e:95: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:76:03:98:0E:A1:23:83:E0:AF:9E:85:C2:F4:23:77:F9:4D:0A:A8 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:76:dd:d0:68:e3:5a:2a:2a:e1:97:e8:4f:72:02:a0:7b:9c: 5a:9e:04:d7:55:d9:65:13:ec:f3:5b:73:40:b8:93:5c:22:91: b0:79:02:5d:e1:b3:44:fc:d9:4e:d9:13:25:21:ac:b6:20:1a: 20:8b:f9:f1:f1:5f:6e:97:7c:2c:eb:6d:54:5b:da:42:e5:17: 65:97:ed:b1:1a:8e:40:e7:17:e3:35:2d:cc:d3:6a:6a:df:84: 17:b7:f1:4c:0b:8c:d7:49:62:7d:69:63:c4:09:04:6d:83:74: ed:a9:b8:38:cc:79:2f:7b:0c:c4:37:a7:1d:c8:71:65:57:24: 76:fa:08:55:8c:86:7f:e1:ab:c7:7b:43:e4:e9:6d:06:12:f5: 5c:17:43:58:b8:ab:b8:24:72:f8:ed:5d:78:f3:f3:45:b8:03: 21:6f:72:1e:18:b3:79:f2:bb:13:3c:f5:19:13:60:f2:91:74: 69:b8:90:d5:55:02:09:b1:eb:34:88:0c:97:2e:6d:e6:67:7e: 22:64:7e:f1:19:21:33:2b:94:c1:4b:df:ac:64:64:70:09:b7: f5:1b:be:a9:5d:f9:8c:ff:f4:65:2d:e3:fa:7e:80:ef:31:5c: cd:53:7a:36:f7:19:a7:5a:62:23:47:c2:df:5f:85:a2:d3:39: b8:2e:6b:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9NSB65SN8H+vHB9c3W1Y1wy5OMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNjA0MTcxOTE3MjVaFw0yNjA0MjEwNTA1MjVaMDMxMTAvBgNV BAMTKDE4NzYwMzk4MEVBMTIzODNFMEFGOUU4NUMyRjQyMzc3Rjk0RDBBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4D5l0mzjTen6V1TaVutkdpREX Fv21xkDO3+Gw2DxNkY6v+PHb/CTMZ9kqlKR4W//ZZc0KqpcLgJhu4mxy+psfooJE ct+xmts4iXNXR644dJrvDro+3tnmUcSJvr7+dUeL54/4EQ55NmFQLC9COSe6a0xL 2e2QSM1R1Hj/Z0nmBlaljzWvLTBEbX7kF5IkrIX80iIpMwkY/uNpuf+zxZyj9vU6 oaVbtcjk4wpk7qfT78N9A50WfVeoK82dYbUcQWy0mGaGGG97TvSQc+3IE5FkXx+L aVG2IRq3dmgCGR3KXOJ6I68h/wHoIxlndexfqZx6pI9J8rgJHZtqaPFulaRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHYDmA6hI4Pgr56FwvQjd/lNCqgwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt23dBo41oqKuGX6E9yAqB7nFqeBNdV2WUT 7PNbc0C4k1wikbB5Al3hs0T82U7ZEyUhrLYgGiCL+fHxX26XfCzrbVRb2kLlF2WX 7bEajkDnF+M1LczTamrfhBe38UwLjNdJYn1pY8QJBG2DdO2puDjMeS97DMQ3px3I cWVXJHb6CFWMhn/hq8d7Q+TpbQYS9VwXQ1i4q7gkcvjtXXjz80W4AyFvch4Ys3ny uxM89RkTYPKRdGm4kNVVAgmx6zSIDJcubeZnfiJkfvEZITMrlMFL36xkZHAJt/Ub vqld+Yz/9GUt4/p+gO8xXM1Tejb3GadaYiNHwt9fhaLTObgua+Y= -----END CERTIFICATE-----Generated at Sat Apr 18 00:33:08 2026 by rpki-client