$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: WT0qYs4pvBxsgNE8Zg58ddvX1kbNeNEWAlTzrsD/LXg= Subject key identifier: 7B:E2:26:38:74:96:B6:36:D2:27:F2:76:7D:FE:E5:D0:09:C5:20:E7 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 2BB747A79A01507BF7E51A4FE3DA8D0125D9E5A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 0131 Signing time: Tue 21 Apr 2026 16:42:33 +0000 Manifest this update: Tue 21 Apr 2026 16:37:33 +0000 Manifest next update: Sat 25 Apr 2026 01:06:33 +0000 Files and hashes: 1: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: OrdLXHUPyrcfUKdOrPKDp5rXxtTd1Uh8IrI6acp7PX0=) 2: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: DQd7y+AYMtA1t9KlDP+m0PHhl/cB/6uoJe60U2cPijk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b7:47:a7:9a:01:50:7b:f7:e5:1a:4f:e3:da:8d:01:25:d9:e5:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Apr 21 16:37:33 2026 GMT Not After : Apr 25 01:06:33 2026 GMT Subject: CN=7BE226387496B636D227F2767DFEE5D009C520E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7c:08:f9:6a:cb:c8:c5:aa:7d:43:ea:b3:17: 5d:03:b8:d1:ff:75:34:41:59:8b:6d:86:16:cd:9f: 34:85:ff:28:f3:31:81:91:44:79:b4:ca:ce:34:a6: 44:8d:c5:f0:52:eb:0e:67:07:21:ea:5f:dc:f5:80: 34:e6:9f:cc:60:40:da:a2:45:98:e1:48:0b:5b:50: dd:4f:30:07:7f:2f:bb:ce:e2:0b:65:3f:b4:e2:36: 22:c9:7b:e4:ff:1e:8f:55:ed:e2:e5:18:18:9a:8b: d6:f9:e8:36:7f:68:b1:4f:fb:e8:3b:10:ad:dc:47: e5:04:fc:48:52:b7:d0:03:41:ce:78:7c:56:5a:2f: 19:36:7f:13:47:c1:81:d7:e9:60:e1:64:d0:a8:86: 40:a8:a5:b4:94:1b:6b:70:ff:a9:39:db:e7:35:7c: f1:aa:e6:91:29:c1:81:bb:12:ae:6c:d5:a3:c7:49: 24:5e:4d:ee:6d:d4:a9:3b:b6:5b:2a:14:47:fa:53: 02:0d:69:c5:7f:bd:b9:ce:56:84:72:3f:b3:12:b0: 59:69:e2:45:f6:51:36:77:f7:82:e8:cb:5c:6f:1b: 11:30:70:e3:17:2f:05:a0:1e:aa:83:9b:f8:40:61: 70:3f:c8:0c:f7:06:5a:a6:8f:a2:3e:3d:84:6c:32: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:26:38:74:96:B6:36:D2:27:F2:76:7D:FE:E5:D0:09:C5:20:E7 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:57:cc:75:ba:d7:6f:0d:00:93:fb:98:2e:b6:bc:6b:0f:8e: 43:3e:97:47:c2:28:3b:23:be:3e:9b:2e:7a:da:72:f2:46:ab: cb:c8:d8:9d:80:44:2b:6f:e1:40:66:fd:4f:56:ec:a0:7d:de: 37:d2:92:b7:0c:34:99:81:58:86:4e:e3:c7:f1:87:d1:d5:2c: 9e:0e:c3:83:d8:26:94:5c:a7:92:54:5b:f5:6f:8a:4d:8e:57: 6c:6b:7f:68:48:15:a0:7f:56:4b:25:be:a1:ca:80:63:7c:7d: 65:83:a5:98:18:1b:4e:f1:10:47:1a:0c:b3:9f:a0:a2:a5:68: 24:6a:b8:85:4d:e2:27:2c:52:ed:a9:f6:b2:86:d0:d4:ae:e8: 91:c1:97:cd:2f:8f:c6:b3:23:f3:35:0e:3e:95:5a:cd:af:e5: e0:a4:08:cf:81:e9:08:42:86:0a:f6:a6:6b:be:5a:f9:a4:42: 4b:73:94:28:0c:1b:c8:48:bf:b4:5b:7a:b3:f9:f6:03:1e:57: 54:b6:d9:2e:ba:9c:0f:73:ab:8f:ff:f9:da:c7:76:49:ad:35: 19:cb:8e:02:6e:f1:be:79:2b:3c:22:82:41:3f:af:d4:be:f9: 01:e1:f0:36:08:8e:1c:9e:a6:f9:6c:5f:a4:3b:ef:eb:96:76: 6d:f9:1d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7dHp5oBUHv35RpP49qNASXZ5aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNjA0MjExNjM3MzNaFw0yNjA0MjUwMTA2MzNaMDMxMTAvBgNV BAMTKDdCRTIyNjM4NzQ5NkI2MzZEMjI3RjI3NjdERkVFNUQwMDlDNTIwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYfAj5asvIxap9Q+qzF10DuNH/ dTRBWYtthhbNnzSF/yjzMYGRRHm0ys40pkSNxfBS6w5nByHqX9z1gDTmn8xgQNqi RZjhSAtbUN1PMAd/L7vO4gtlP7TiNiLJe+T/Ho9V7eLlGBiai9b56DZ/aLFP++g7 EK3cR+UE/EhSt9ADQc54fFZaLxk2fxNHwYHX6WDhZNCohkCopbSUG2tw/6k52+c1 fPGq5pEpwYG7Eq5s1aPHSSReTe5t1Kk7tlsqFEf6UwINacV/vbnOVoRyP7MSsFlp 4kX2UTZ394Loy1xvGxEwcOMXLwWgHqqDm/hAYXA/yAz3Blqmj6I+PYRsMkn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe+ImOHSWtjbSJ/J2ff7l0AnFIOcwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1XzHW6128NAJP7mC62vGsPjkM+l0fCKDsj vj6bLnracvJGq8vI2J2ARCtv4UBm/U9W7KB93jfSkrcMNJmBWIZO48fxh9HVLJ4O w4PYJpRcp5JUW/Vvik2OV2xrf2hIFaB/VkslvqHKgGN8fWWDpZgYG07xEEcaDLOf oKKlaCRquIVN4icsUu2p9rKG0NSu6JHBl80vj8azI/M1Dj6VWs2v5eCkCM+B6QhC hgr2pmu+WvmkQktzlCgMG8hIv7RberP59gMeV1S22S66nA9zq4//+drHdkmtNRnL jgJu8b55KzwigkE/r9S++QHh8DYIjhyepvlsX6Q77+uWdm35HXc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:46 2026 by rpki-client