$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: Lgx4GNwIJ8V4f8fQcLhEsk+lYfWUkQuDhUZG38w0Lsk= Subject key identifier: 41:94:F4:D0:0B:42:57:35:17:89:23:73:7F:F4:40:FB:E4:61:60:44 Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 3DB457C25798B04CB057EC3B8437E1461D73CA29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 0208 Signing time: Wed 15 Apr 2026 21:41:23 +0000 Manifest this update: Wed 15 Apr 2026 21:36:23 +0000 Manifest next update: Sun 19 Apr 2026 08:19:23 +0000 Files and hashes: 1: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=) 2: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: RH0E6VPAYkuzyT4TkWWl5Z+bYgKP0ezhSCeHjBMeYrI=) 3: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=) 4: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 08:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b4:57:c2:57:98:b0:4c:b0:57:ec:3b:84:37:e1:46:1d:73:ca:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Apr 15 21:36:23 2026 GMT Not After : Apr 19 08:19:23 2026 GMT Subject: CN=4194F4D00B425735178923737FF440FBE4616044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:7e:b2:fc:e8:7c:ff:67:92:e4:81:c9:aa: ea:6c:70:1b:ff:c9:56:e3:6c:f4:37:ab:a0:d6:68: 53:a3:0c:ea:19:db:a5:f6:3f:69:16:a2:b1:7f:9f: db:cf:25:08:b1:fe:b0:e6:d4:5b:ff:7c:6e:08:fa: 85:48:c5:0e:50:38:15:91:f8:b0:6e:2e:8e:1b:62: 5c:1c:e8:e4:bf:df:c0:31:4b:d2:6d:4c:db:91:aa: 9e:31:ee:b4:22:87:92:91:1b:b6:f2:9c:b9:d4:15: ce:b1:86:f4:d0:09:e1:20:47:83:ba:58:46:6e:eb: b4:24:94:7f:db:74:09:e4:11:2e:77:f6:56:ed:98: 98:2d:24:b2:b8:a4:0a:e2:44:a6:7d:59:d5:0f:b0: c7:7d:8c:d6:7f:18:7a:ca:be:f3:4d:8b:86:74:4f: 43:b7:90:12:4b:b9:20:93:53:fd:4c:7a:34:c9:d3: 90:73:ae:64:bb:9d:19:6a:82:c3:45:ae:a3:a8:c1: 40:73:90:df:63:66:7f:40:b3:ce:2a:87:1c:a7:17: 8a:b1:e8:1f:86:3a:03:7b:a0:af:5a:d2:20:10:ca: 8a:97:77:a7:07:f4:e1:57:43:91:73:df:9b:5a:2f: 45:2e:91:9e:4d:e5:16:6a:89:86:8a:1b:11:87:07: 5c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:94:F4:D0:0B:42:57:35:17:89:23:73:7F:F4:40:FB:E4:61:60:44 X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:aa:f4:a7:02:f2:40:61:83:0d:68:5a:2b:0f:26:d6:b9:a5: 63:d4:b8:4d:b6:da:46:a2:e0:f3:c4:75:ee:e9:32:2f:67:bb: b2:1e:d9:28:0c:5f:84:16:f4:88:7e:b5:7c:67:18:77:8c:46: 1c:3c:d3:29:17:84:0f:cd:70:7f:f4:53:ec:dd:79:00:56:89: 5a:5d:94:22:f5:99:09:fc:6a:0e:45:ca:c7:70:d2:8a:5f:e4: 25:13:7d:5b:38:58:8a:49:a1:89:9f:b7:47:82:11:86:5b:46: 26:50:d3:ab:b8:d8:71:e3:40:2f:ad:88:ad:35:58:33:fa:20: 30:e5:40:b3:15:1f:a5:01:3f:63:ea:42:3d:5f:51:a5:e3:b9: 92:b5:98:ab:05:60:fb:62:0f:ac:72:d4:4f:5e:e1:7c:b3:8f: ca:1b:b4:46:2f:b9:18:8e:fd:56:3a:b3:55:05:8b:6e:83:79: 97:af:a2:0c:aa:85:da:a7:3c:2e:da:b0:e2:96:31:53:ca:3c: 4d:5a:93:42:84:26:9a:79:7c:7a:03:a1:9f:57:a2:77:8b:b7: 9c:f6:dd:24:c6:0c:bf:28:24:d6:33:a7:ea:69:5f:a4:53:c4: 84:74:d1:95:ad:bb:57:6c:9c:71:69:b5:fe:36:54:88:ab:8e: 03:cf:57:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbRXwleYsEywV+w7hDfhRh1zyikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNjA0MTUyMTM2MjNaFw0yNjA0MTkwODE5MjNaMDMxMTAvBgNV BAMTKDQxOTRGNEQwMEI0MjU3MzUxNzg5MjM3MzdGRjQ0MEZCRTQ2MTYwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2X6y/Oh8/2eS5IHJqupscBv/ yVbjbPQ3q6DWaFOjDOoZ26X2P2kWorF/n9vPJQix/rDm1Fv/fG4I+oVIxQ5QOBWR +LBuLo4bYlwc6OS/38AxS9JtTNuRqp4x7rQih5KRG7bynLnUFc6xhvTQCeEgR4O6 WEZu67QklH/bdAnkES539lbtmJgtJLK4pAriRKZ9WdUPsMd9jNZ/GHrKvvNNi4Z0 T0O3kBJLuSCTU/1MejTJ05BzrmS7nRlqgsNFrqOowUBzkN9jZn9As84qhxynF4qx 6B+GOgN7oK9a0iAQyoqXd6cH9OFXQ5Fz35taL0UukZ5N5RZqiYaKGxGHB1w5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZT00AtCVzUXiSNzf/RA++RhYEQwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyq9KcC8kBhgw1oWisPJta5pWPUuE222kai 4PPEde7pMi9nu7Ie2SgMX4QW9Ih+tXxnGHeMRhw80ykXhA/NcH/0U+zdeQBWiVpd lCL1mQn8ag5Fysdw0opf5CUTfVs4WIpJoYmft0eCEYZbRiZQ06u42HHjQC+tiK01 WDP6IDDlQLMVH6UBP2PqQj1fUaXjuZK1mKsFYPtiD6xy1E9e4Xyzj8obtEYvuRiO /VY6s1UFi26DeZevogyqhdqnPC7asOKWMVPKPE1ak0KEJpp5fHoDoZ9XoneLt5z2 3STGDL8oJNYzp+ppX6RTxIR00ZWtu1dsnHFptf42VIirjgPPVyQ= -----END CERTIFICATE-----Generated at Sat Apr 18 00:05:01 2026 by rpki-client