$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: A+pnl8Rq3mg8UvIbo3tAyI7FezqjpGgV7HyeRqI7SCk= Subject key identifier: CD:D9:7A:44:19:A4:66:2C:A7:AB:01:FA:72:D1:59:A4:87:66:D8:2C Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 21B20FA2B92A27B70DCF31ED30F464258B108155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: 011E Signing time: Mon 20 Apr 2026 02:50:06 +0000 Manifest this update: Mon 20 Apr 2026 02:45:06 +0000 Manifest next update: Thu 23 Apr 2026 09:20:06 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) 2: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: 6h9OZGPxPrQJD3xGS4JPjfUTTxPPL8OXq5UPe1KIF3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 09:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:b2:0f:a2:b9:2a:27:b7:0d:cf:31:ed:30:f4:64:25:8b:10:81:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Apr 20 02:45:06 2026 GMT Not After : Apr 23 09:20:06 2026 GMT Subject: CN=CDD97A4419A4662CA7AB01FA72D159A48766D82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:bd:d0:29:64:50:c0:d6:11:e5:84:f0:d7: da:7f:1c:e1:fe:a8:1e:36:9b:01:ce:95:73:71:6c: e1:83:e8:79:64:c8:7d:8d:08:6c:01:20:77:e5:0b: 8e:63:40:f7:5f:a2:85:45:8e:30:64:8f:a9:5a:73: 76:9f:f5:4f:1b:47:5c:5a:56:e4:36:62:c3:79:34: f3:37:ad:5d:c7:74:15:99:7f:7c:ad:68:e6:5a:27: f7:62:87:6f:21:ce:89:98:12:d1:3c:f8:79:f2:58: bf:3c:1e:47:44:34:93:66:cf:24:13:ff:39:8a:56: 99:cd:82:ef:a2:ee:61:6a:9c:d3:97:5e:57:0d:59: c1:c2:d6:cb:05:97:2a:56:50:23:fb:f9:05:73:82: 3f:1b:05:78:e2:5d:b8:53:d7:4d:c3:45:d4:d9:3a: b5:e0:51:c5:04:0a:8a:7c:44:d6:1c:aa:68:56:f0: d5:f7:66:ea:f1:82:0f:3e:5e:f3:bd:60:1e:51:0b: 54:10:dc:58:d9:94:90:02:ab:55:56:bf:31:8e:3e: fe:18:78:fb:2b:c1:4e:bb:1b:9d:7f:44:62:5f:68: f2:5d:df:d7:17:d6:18:c1:7c:ef:7b:c7:66:81:16: a7:5d:12:20:1b:d5:ea:5e:d1:55:9d:df:9a:27:f0: 07:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D9:7A:44:19:A4:66:2C:A7:AB:01:FA:72:D1:59:A4:87:66:D8:2C X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:02:da:2c:4c:46:5e:8f:76:f3:3b:ce:aa:09:56:91:f3:bf: cb:4c:fb:be:a0:c9:69:c9:be:28:f5:83:93:ab:c5:1f:9c:5e: 10:dc:d6:8c:95:d6:86:00:49:7d:2d:20:4d:b5:78:21:46:6c: 74:14:57:49:ce:7c:1c:d6:50:0a:50:aa:39:b7:f1:cc:bf:76: 52:8f:39:66:fe:aa:d1:71:d1:61:55:f6:47:e3:61:d3:d6:c5: d5:ee:a8:83:b6:b8:18:ba:33:a7:20:2a:b0:93:da:8d:4c:0d: e8:1a:3d:58:16:86:0f:16:df:cd:70:e1:ef:f3:d2:7c:58:b3: 6d:a6:ce:c1:8a:8a:0f:ba:e0:f9:8e:bb:06:6e:74:4f:75:a5: b1:d7:17:84:84:18:92:e4:ad:62:f7:7a:37:01:ea:77:9a:bb: 5d:c4:6f:77:75:bd:4d:d8:2f:bc:b3:d7:91:e9:34:c1:24:a3: 79:35:0c:89:50:cc:a0:fb:05:15:92:b3:37:22:1a:ba:7a:bd: c8:f6:50:78:92:09:d1:dc:e6:0c:a6:68:0c:db:aa:f4:39:ca: 55:00:fe:56:bc:00:bd:39:44:ce:5e:50:a7:7d:5d:88:59:98: 43:dc:56:76:77:e8:34:bd:fe:6a:6a:37:b2:8a:7c:3f:d9:1c: ab:56:a1:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIbIPorkqJ7cNzzHtMPRkJYsQgVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNjA0MjAwMjQ1MDZaFw0yNjA0MjMwOTIwMDZaMDMxMTAvBgNV BAMTKENERDk3QTQ0MTlBNDY2MkNBN0FCMDFGQTcyRDE1OUE0ODc2NkQ4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvr3QKWRQwNYR5YTw19p/HOH+ qB42mwHOlXNxbOGD6HlkyH2NCGwBIHflC45jQPdfooVFjjBkj6lac3af9U8bR1xa VuQ2YsN5NPM3rV3HdBWZf3ytaOZaJ/dih28hzomYEtE8+HnyWL88HkdENJNmzyQT /zmKVpnNgu+i7mFqnNOXXlcNWcHC1ssFlypWUCP7+QVzgj8bBXjiXbhT103DRdTZ OrXgUcUECop8RNYcqmhW8NX3Zurxgg8+XvO9YB5RC1QQ3FjZlJACq1VWvzGOPv4Y ePsrwU67G51/RGJfaPJd39cX1hjBfO97x2aBFqddEiAb1epe0VWd35on8AdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzdl6RBmkZiynqwH6ctFZpIdm2CwwHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMC2ixMRl6PdvM7zqoJVpHzv8tM+76gyWnJ vij1g5OrxR+cXhDc1oyV1oYASX0tIE21eCFGbHQUV0nOfBzWUApQqjm38cy/dlKP OWb+qtFx0WFV9kfjYdPWxdXuqIO2uBi6M6cgKrCT2o1MDegaPVgWhg8W381w4e/z 0nxYs22mzsGKig+64PmOuwZudE91pbHXF4SEGJLkrWL3ejcB6neau13Eb3d1vU3Y L7yz15HpNMEko3k1DIlQzKD7BRWSszciGrp6vcj2UHiSCdHc5gymaAzbqvQ5ylUA /la8AL05RM5eUKd9XYhZmEPcVnZ36DS9/mpqN7KKfD/ZHKtWoUs= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:22 2026 by rpki-client