$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: E5UeNFDi4NQn01yF0Bqt7rTOD/7sQoPth3OChtiSKfs= Subject key identifier: 0B:F9:6C:52:A1:5D:79:2E:4D:25:E1:7D:AC:91:26:45:E8:09:D1:8F Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 3CA9AD5221D6EEED465E6A101D5A111C2401A2CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: 0107 Signing time: Tue 21 Apr 2026 13:52:42 +0000 Manifest this update: Tue 21 Apr 2026 13:47:42 +0000 Manifest next update: Fri 24 Apr 2026 20:31:42 +0000 Files and hashes: 1: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) 2: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) 3: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: YVIOcViiOwMG2RWtTqj5cGkGlz2V7NiJTv1jnMW8nHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a9:ad:52:21:d6:ee:ed:46:5e:6a:10:1d:5a:11:1c:24:01:a2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Apr 21 13:47:42 2026 GMT Not After : Apr 24 20:31:42 2026 GMT Subject: CN=0BF96C52A15D792E4D25E17DAC912645E809D18F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:f6:e4:7e:65:cb:30:d7:8b:fd:60:ce:47: 99:f4:a8:20:7e:5d:5c:54:d1:dc:8d:e5:a2:b6:14: c2:93:f7:42:d5:7d:7a:4b:44:49:3d:5c:3d:44:1a: 3d:65:0a:6f:04:69:a4:74:1d:85:ff:10:88:04:ed: 24:ae:c9:af:c3:e6:1d:8b:7a:a4:31:64:b4:55:1a: e4:71:15:76:17:5e:a4:a0:01:62:83:d4:5e:30:b9: 0a:26:4b:af:c7:16:52:d4:c0:96:e9:61:78:2c:7a: d9:b7:3d:46:46:aa:07:8f:4f:6b:48:42:29:c3:58: 3d:3f:d9:03:02:ad:0c:5f:03:db:db:51:d3:4d:67: 5a:29:89:fb:72:66:63:21:90:d1:6f:27:56:35:f6: 66:9e:0f:fc:39:cc:4b:c3:6e:02:b8:61:18:25:83: 22:a8:a2:97:6f:74:db:5b:b2:99:50:db:f2:70:30: fd:d6:a8:cd:b9:ad:73:8f:88:fb:0b:ea:f1:02:03: 8c:2b:48:18:2d:f9:59:73:c2:18:23:5d:21:00:33: d8:11:da:62:39:2d:60:cd:d4:7c:0a:cf:4d:11:70: d2:23:bd:96:fa:4e:f3:b0:69:7a:23:50:4d:f5:f0: 10:84:c2:d7:7d:63:bf:29:26:61:72:53:ee:dd:13: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F9:6C:52:A1:5D:79:2E:4D:25:E1:7D:AC:91:26:45:E8:09:D1:8F X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b3:5f:d6:03:f8:d8:b3:0b:22:1e:77:69:07:3b:a3:b5:fb: fe:e9:ba:56:ea:08:d5:d4:bf:44:9e:09:61:bb:c5:07:8e:28: dc:76:ae:88:12:a3:ee:56:3f:02:df:18:7a:b0:0d:06:70:15: 44:da:32:30:a2:4b:bf:f1:56:65:d2:ee:48:3a:2b:74:68:25: 18:5f:90:fe:6b:77:14:e3:fc:18:d6:4a:26:db:a4:f3:be:db: e1:62:4d:e6:78:51:a5:d9:0b:7e:9d:a2:3a:ee:94:68:fe:7d: 69:99:59:40:42:10:ab:67:41:2c:c7:30:aa:df:30:7a:f5:b4: 4b:b4:bd:ed:d7:68:a0:12:eb:8a:3d:37:8f:79:d1:92:eb:47: fd:14:6a:3b:f0:91:cd:db:63:6e:4b:03:fe:7c:7b:0d:4b:de: 16:c0:d8:e8:76:30:73:c9:86:d5:3f:0f:0f:89:2a:75:e8:97: e8:d4:31:e7:e1:ca:92:c6:56:1a:8d:66:d0:17:c7:8f:f3:df: b9:93:8b:42:f6:df:50:d8:1c:43:ab:69:e1:f6:63:e1:74:87: 32:42:26:6f:72:1b:c7:36:9c:98:a5:fd:bf:f9:ae:a2:6b:2f: be:8e:4d:99:48:d8:52:46:e4:e7:19:87:0f:78:da:38:44:61: 0a:fc:02:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKmtUiHW7u1GXmoQHVoRHCQBoswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNjA0MjExMzQ3NDJaFw0yNjA0MjQyMDMxNDJaMDMxMTAvBgNV BAMTKDBCRjk2QzUyQTE1RDc5MkU0RDI1RTE3REFDOTEyNjQ1RTgwOUQxOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4PbkfmXLMNeL/WDOR5n0qCB+ XVxU0dyN5aK2FMKT90LVfXpLREk9XD1EGj1lCm8EaaR0HYX/EIgE7SSuya/D5h2L eqQxZLRVGuRxFXYXXqSgAWKD1F4wuQomS6/HFlLUwJbpYXgsetm3PUZGqgePT2tI QinDWD0/2QMCrQxfA9vbUdNNZ1opiftyZmMhkNFvJ1Y19maeD/w5zEvDbgK4YRgl gyKoopdvdNtbsplQ2/JwMP3WqM25rXOPiPsL6vECA4wrSBgt+VlzwhgjXSEAM9gR 2mI5LWDN1HwKz00RcNIjvZb6TvOwaXojUE318BCEwtd9Y78pJmFyU+7dE1rpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/lsUqFdeS5NJeF9rJEmRegJ0Y8wHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKzX9YD+NizCyIed2kHO6O1+/7pulbqCNXU v0SeCWG7xQeOKNx2rogSo+5WPwLfGHqwDQZwFUTaMjCiS7/xVmXS7kg6K3RoJRhf kP5rdxTj/BjWSibbpPO+2+FiTeZ4UaXZC36dojrulGj+fWmZWUBCEKtnQSzHMKrf MHr1tEu0ve3XaKAS64o9N4950ZLrR/0Uajvwkc3bY25LA/58ew1L3hbA2Oh2MHPJ htU/Dw+JKnXol+jUMefhypLGVhqNZtAXx4/z37mTi0L231DYHEOraeH2Y+F0hzJC Jm9yG8c2nJil/b/5rqJrL76OTZlI2FJG5OcZhw942jhEYQr8AlU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:34 2026 by rpki-client