$ rpki-client -vvf repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft File: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft (raw, json) Hash identifier: E+14RNkfFjy+eZd2HEagAKqC9QmrYUfuFFhzGVgTIu4= Subject key identifier: 2A:01:41:AF:7B:D4:AB:EA:64:71:75:C8:2B:DC:A1:EA:1B:A4:59:D9 Authority key identifier: B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 Certificate issuer: /CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Certificate serial: 35B24D97D7F19B0D7A5E51C505A89C30DF9ABA2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft Manifest number: 0135 Signing time: Tue 21 Apr 2026 04:01:30 +0000 Manifest this update: Tue 21 Apr 2026 03:56:30 +0000 Manifest next update: Fri 24 Apr 2026 06:23:30 +0000 Files and hashes: 1: 3135372e36362e35302e302f32332d3234203d3e20313532343338.roa (hash: FnFVRscbNixdyogFa4jXZEgDwaSIltQcnlbwAR1rTuA=) 2: B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl (hash: pp4S5N7bTimk3zMDfmdYwF8Pha9Sw2aOLUMjJfLYX24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b2:4d:97:d7:f1:9b:0d:7a:5e:51:c5:05:a8:9c:30:df:9a:ba:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B72535E4EB8B31C6794C4DF31FF53E4E64914C56 Validity Not Before: Apr 21 03:56:30 2026 GMT Not After : Apr 24 06:23:30 2026 GMT Subject: CN=2A0141AF7BD4ABEA647175C82BDCA1EA1BA459D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:4d:a3:f8:74:a5:fa:35:84:3b:53:9f:9a: 86:73:e8:1b:83:de:e0:0d:33:98:21:46:09:3d:81: 10:9d:ef:4e:92:ff:1c:8c:e4:70:0c:70:ca:f1:3a: 02:b4:a0:1d:c7:4e:70:6f:ec:05:0a:a0:b2:f2:da: 35:92:cf:cd:d4:aa:a3:00:b0:46:bd:04:b7:cc:55: 72:29:13:5a:0d:35:24:49:69:d9:5b:de:f5:10:11: 13:d9:08:33:f3:fa:d2:d5:e8:6b:2b:e5:12:c1:fc: fd:1a:c6:b0:e8:7a:08:e7:7a:f9:af:c0:3d:5c:9e: 2f:fa:c1:1f:e7:42:b3:63:3a:2a:f2:5d:21:7e:1b: 70:8f:93:55:31:8f:1b:0b:c9:a3:c5:75:9c:35:1c: 82:5e:b9:d0:49:76:f7:33:56:7c:34:1e:0c:2f:36: 2d:fa:1c:ce:25:90:e7:ce:6f:d8:48:06:1f:46:e3: c1:f5:0e:d0:a7:9c:ba:d2:bf:b2:78:b9:9b:79:ff: 10:50:7a:6f:a6:b4:90:ed:fb:38:cc:37:0d:92:94: 39:37:1f:35:0b:67:a7:13:24:e0:b1:30:29:93:2b: ea:02:b4:b3:84:9d:b8:44:19:41:a5:d0:b1:c2:4b: b2:7b:c7:e0:9d:04:05:f1:3f:28:15:31:d8:1a:88: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:01:41:AF:7B:D4:AB:EA:64:71:75:C8:2B:DC:A1:EA:1B:A4:59:D9 X509v3 Authority Key Identifier: keyid:B7:25:35:E4:EB:8B:31:C6:79:4C:4D:F3:1F:F5:3E:4E:64:91:4C:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/0/B72535E4EB8B31C6794C4DF31FF53E4E64914C56.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:63:24:55:de:b6:de:49:7b:9c:e0:d6:03:5f:98:bc:4f:5f: 30:17:cd:9f:cc:8e:60:93:00:66:b9:4a:67:79:2c:04:5b:d2: e7:c5:4c:0c:01:07:d0:f4:5c:e4:58:2e:08:8f:c2:28:cb:f1: 31:18:25:7e:9c:63:77:1c:81:d3:f8:a4:68:ec:f8:6a:c9:f6: 84:cb:6a:fd:2e:44:13:2b:78:6f:53:e4:04:5a:6b:48:ad:08: bc:59:fc:87:be:43:8a:72:c4:a1:64:42:45:67:f1:91:ff:5d: 5b:94:ea:38:65:1f:84:2a:2b:11:23:22:9b:f6:5e:7e:1c:d2: 3d:13:a1:e1:e5:47:53:03:c5:82:3d:70:1b:13:0b:08:80:49: 6d:cd:84:21:36:67:82:47:f7:01:a0:4d:dd:b7:d7:6e:17:08: 13:a9:05:8a:8d:49:3a:2c:df:7a:7c:ad:55:25:6a:09:c1:61: 4d:67:5d:c9:bc:d9:af:c9:f0:b9:43:70:88:cd:55:24:79:bd: 5f:33:6b:0a:67:65:d0:fc:0f:b9:45:f1:8f:27:34:44:72:a6: 73:58:90:6c:7c:89:35:20:40:39:fd:cf:17:7f:f7:7d:16:bd: d0:1f:cb:ae:fd:0b:4e:96:ac:92:53:7b:c8:d0:32:60:e7:89: 98:ce:c8:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbJNl9fxmw16XlHFBaicMN+aui8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2 NDkxNEM1NjAeFw0yNjA0MjEwMzU2MzBaFw0yNjA0MjQwNjIzMzBaMDMxMTAvBgNV BAMTKDJBMDE0MUFGN0JENEFCRUE2NDcxNzVDODJCRENBMUVBMUJBNDU5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCw02j+HSl+jWEO1OfmoZz6BuD 3uANM5ghRgk9gRCd706S/xyM5HAMcMrxOgK0oB3HTnBv7AUKoLLy2jWSz83UqqMA sEa9BLfMVXIpE1oNNSRJadlb3vUQERPZCDPz+tLV6Gsr5RLB/P0axrDoegjnevmv wD1cni/6wR/nQrNjOiryXSF+G3CPk1UxjxsLyaPFdZw1HIJeudBJdvczVnw0Hgwv Ni36HM4lkOfOb9hIBh9G48H1DtCnnLrSv7J4uZt5/xBQem+mtJDt+zjMNw2SlDk3 HzULZ6cTJOCxMCmTK+oCtLOEnbhEGUGl0LHCS7J7x+CdBAXxPygVMdgaiDHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgFBr3vUq+pkcXXIK9yh6hukWdkwHwYDVR0j BBgwFoAUtyU15OuLMcZ5TE3zH/U+TmSRTFYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMC9CNzI1MzVFNEVC OEIzMUM2Nzk0QzRERjMxRkY1M0U0RTY0OTE0QzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNFNEU2NDkx NEM1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZmYTk1ODQtNmY5Ny00MDQxLTlj OGQtOGIzOTU5ZTRmOWIzLzAvQjcyNTM1RTRFQjhCMzFDNjc5NEM0REYzMUZGNTNF NEU2NDkxNEM1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1jJFXett5Je5zg1gNfmLxPXzAXzZ/MjmCT AGa5Smd5LARb0ufFTAwBB9D0XORYLgiPwijL8TEYJX6cY3ccgdP4pGjs+GrJ9oTL av0uRBMreG9T5ARaa0itCLxZ/Ie+Q4pyxKFkQkVn8ZH/XVuU6jhlH4QqKxEjIpv2 Xn4c0j0ToeHlR1MDxYI9cBsTCwiASW3NhCE2Z4JH9wGgTd23124XCBOpBYqNSTos 33p8rVUlagnBYU1nXcm82a/J8LlDcIjNVSR5vV8zawpnZdD8D7lF8Y8nNERypnNY kGx8iTUgQDn9zxd/930WvdAfy679C06WrJJTe8jQMmDniZjOyMc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client