$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: 9CQn2A000hFn+swEhF2cbny0lJohGiK4kcIp+GUafB0= Subject key identifier: 44:C9:35:2E:81:19:AA:BA:32:55:76:50:F8:8A:94:AE:8C:AD:80:FB Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 037530CD6237409776A67A113EEE0768916C4767 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: 0130 Signing time: Tue 21 Apr 2026 08:11:01 +0000 Manifest this update: Tue 21 Apr 2026 08:06:01 +0000 Manifest next update: Fri 24 Apr 2026 19:26:01 +0000 Files and hashes: 1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: Sxl4Zf3Kaiet6ztMAPDuGbF+WnQK4y53el0ZvfIrGHc=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: FDN+vWqI8jY1TcVA5tnPjA+uJVk6yz1tbuS0ryftIrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:75:30:cd:62:37:40:97:76:a6:7a:11:3e:ee:07:68:91:6c:47:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Apr 21 08:06:01 2026 GMT Not After : Apr 24 19:26:01 2026 GMT Subject: CN=44C9352E8119AABA32557650F88A94AE8CAD80FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:5b:ab:55:91:39:9b:5b:2b:b3:35:5e:a6: b9:d4:06:a8:e1:64:49:29:57:bd:28:53:fd:eb:93: 62:63:84:ae:a2:a2:89:70:19:93:c7:41:e4:2a:9b: af:98:4e:69:1c:96:3e:a4:70:fb:2c:57:e3:29:70: 71:02:0d:20:13:a2:4a:da:66:2b:cb:89:5b:94:af: ab:aa:42:96:cc:05:a4:32:35:c0:27:d9:82:e0:54: 9a:26:08:72:08:c5:25:50:8d:74:da:dd:f7:9f:a7: 16:3a:88:82:5e:43:bc:a5:60:d5:41:98:a5:4c:69: 16:8b:c1:53:72:51:1c:84:49:a5:ad:06:9b:e9:d8: 28:df:0e:1e:89:dc:04:ec:a2:1f:54:3b:63:0c:c6: 85:f4:5f:94:b6:22:21:f4:d8:d6:50:db:41:ea:1f: 77:df:34:b7:6a:ab:fd:36:25:f9:58:d5:9c:13:a9: 31:a0:69:29:aa:23:55:ef:e2:0a:e3:03:42:15:85: c5:78:f4:2e:8c:37:6a:fb:5d:48:37:38:4f:5a:91: 33:40:c7:e4:8e:f9:5b:b9:9d:a8:0f:ce:c9:39:4d: 16:52:96:86:d8:8b:11:f9:35:a5:b1:c8:06:fc:7b: b0:24:1c:ba:8e:f1:2b:f4:2e:5d:4b:3b:a9:76:6b: da:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:35:2E:81:19:AA:BA:32:55:76:50:F8:8A:94:AE:8C:AD:80:FB X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8a:31:39:75:39:fd:a9:ac:2c:94:f7:58:a5:1e:f4:1b:60: 62:75:ad:83:d5:9b:fb:30:22:f3:c0:05:8b:dc:ee:8b:3d:22: 2a:0c:e0:2b:91:2d:05:f0:80:ce:23:7d:73:f0:11:c4:dd:65: f5:89:1a:0a:41:b2:35:2c:37:f2:70:0f:99:95:22:a6:42:b3: 3f:e9:67:7e:ab:4b:8b:af:35:b0:21:dd:7c:3a:7b:7f:ad:4e: b3:49:19:34:6d:04:a7:fa:6f:e7:4c:70:20:fd:96:72:c0:e2: 80:49:c1:cb:6a:ff:a4:8d:30:ca:37:9f:a1:2f:a4:0c:ab:2b: 8b:a7:4c:66:27:5f:ff:10:b7:18:51:8a:5c:63:9e:d3:91:5b: f6:57:0f:94:af:73:96:53:67:25:a7:38:82:26:ce:64:8e:ca: da:8c:7c:50:c5:cf:d1:bc:f9:52:b8:3b:6d:e7:2e:4e:2f:0e: 83:00:95:8b:e9:19:14:f0:34:f5:bd:6c:55:3f:b1:49:32:0d: ee:e2:36:a5:58:3e:56:86:4f:fd:fd:af:32:16:4c:75:e8:ed: 04:c2:0e:23:7f:d2:df:8b:46:50:b7:6e:c6:e9:f4:6a:eb:6a: 11:8d:ac:49:c0:4c:1e:83:3e:a2:29:29:a3:7e:b3:a5:f6:07: d4:00:d8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3UwzWI3QJd2pnoRPu4HaJFsR2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNjA0MjEwODA2MDFaFw0yNjA0MjQxOTI2MDFaMDMxMTAvBgNV BAMTKDQ0QzkzNTJFODExOUFBQkEzMjU1NzY1MEY4OEE5NEFFOENBRDgwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDFurVZE5m1srszVeprnUBqjh ZEkpV70oU/3rk2JjhK6ioolwGZPHQeQqm6+YTmkclj6kcPssV+MpcHECDSATokra ZivLiVuUr6uqQpbMBaQyNcAn2YLgVJomCHIIxSVQjXTa3fefpxY6iIJeQ7ylYNVB mKVMaRaLwVNyURyESaWtBpvp2CjfDh6J3ATsoh9UO2MMxoX0X5S2IiH02NZQ20Hq H3ffNLdqq/02JflY1ZwTqTGgaSmqI1Xv4grjA0IVhcV49C6MN2r7XUg3OE9akTNA x+SO+Vu5nagPzsk5TRZSlobYixH5NaWxyAb8e7AkHLqO8Sv0Ll1LO6l2a9rLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMk1LoEZqroyVXZQ+IqUroytgPswHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCKMTl1Of2prCyU91ilHvQbYGJ1rYPVm/sw IvPABYvc7os9IioM4CuRLQXwgM4jfXPwEcTdZfWJGgpBsjUsN/JwD5mVIqZCsz/p Z36rS4uvNbAh3Xw6e3+tTrNJGTRtBKf6b+dMcCD9lnLA4oBJwctq/6SNMMo3n6Ev pAyrK4unTGYnX/8QtxhRilxjntORW/ZXD5Svc5ZTZyWnOIImzmSOytqMfFDFz9G8 +VK4O23nLk4vDoMAlYvpGRTwNPW9bFU/sUkyDe7iNqVYPlaGT/39rzIWTHXo7QTC DiN/0t+LRlC3bsbp9GrrahGNrEnATB6DPqIpKaN+s6X2B9QA2O0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:33 2026 by rpki-client