$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: XioZE/766EfcvH5B8JIxAskbUO0sXBF5R2+Jj3wIYqA= Subject key identifier: 96:B6:8F:FB:C2:54:D0:62:78:D0:99:2F:F6:03:5F:A5:56:1E:44:B0 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 2C9CAD52467061EC7DBE49A8C99FED764A30E18C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 0159 Signing time: Tue 21 Apr 2026 10:20:46 +0000 Manifest this update: Tue 21 Apr 2026 10:15:46 +0000 Manifest next update: Fri 24 Apr 2026 13:53:46 +0000 Files and hashes: 1: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: NMRp+ShlyQTT7gvayJ3TyfL2eZ9Ma7fp22kMticXEzs=) 2: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: 1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=) 3: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: VPkKq5pW4icrUWwOkyNSfwGvVjdptRStLH0drWvxYBA=) 4: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: Us649gKgLXgCXiwIAPzSRfT2vwc2Xrs3/JnrzSYazTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9c:ad:52:46:70:61:ec:7d:be:49:a8:c9:9f:ed:76:4a:30:e1:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Apr 21 10:15:46 2026 GMT Not After : Apr 24 13:53:46 2026 GMT Subject: CN=96B68FFBC254D06278D0992FF6035FA5561E44B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:36:d7:2f:76:59:72:dc:5d:1a:e1:e0:6d: 84:bf:4a:fa:5c:30:62:8a:ee:73:2b:46:72:69:15: 30:62:92:ba:4d:b2:5d:fb:c5:a9:39:de:40:e7:7c: 1e:5b:74:17:a2:d0:a4:ea:f9:73:94:3e:4f:4e:79: 0f:ee:dd:c4:fc:00:fd:d0:1f:0c:e9:63:c0:56:80: e4:9d:a3:3d:ce:72:a3:b3:8a:75:07:df:62:1f:d3: 70:22:63:fc:8f:0e:31:9c:00:b8:db:4f:7a:78:39: 9d:e1:ea:7e:0c:e5:51:25:6e:f0:dd:e9:77:fc:bb: 1d:d3:59:0e:a6:d8:ea:f2:55:cb:d8:c1:e7:a5:7e: 04:d9:58:5b:68:81:90:d8:86:9b:da:27:d0:d8:96: 84:18:28:1b:bf:dc:9e:2b:36:ac:8f:41:97:f9:3b: 40:5f:df:cc:7d:7e:e5:27:1c:82:0f:81:ce:a0:91: f1:ff:32:b3:8c:3b:35:08:3b:0b:d3:25:08:21:ea: 24:e8:1a:b5:e1:ee:29:38:92:eb:da:9f:1e:1a:26: e2:2e:a5:d9:3e:a2:a6:14:b2:9d:d3:cd:8a:72:1b: 54:b4:7a:65:1a:06:1a:a8:13:ca:20:35:e0:b8:74: eb:4e:ae:5c:44:0a:a2:b0:11:ce:86:18:e4:3f:9a: df:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B6:8F:FB:C2:54:D0:62:78:D0:99:2F:F6:03:5F:A5:56:1E:44:B0 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:fc:86:0d:36:48:c0:7a:7d:ee:58:55:44:4b:57:a8:5a:44: 3f:b8:7d:5b:dc:cb:ea:33:d9:a2:fc:aa:f0:a2:e6:1d:f5:70: 95:19:90:eb:28:f7:3b:9d:d3:2f:8f:c7:c7:c2:e8:70:f3:a1: c8:b6:fc:1d:87:82:8f:5e:e7:b9:22:11:97:6a:e2:fa:6b:80: aa:18:0a:9d:c2:99:47:8a:11:5d:02:7d:8e:4b:6c:5b:c7:38: f9:5a:0d:1d:e5:80:e7:3e:63:20:a7:76:6d:f6:a7:fb:21:14: 21:7f:8e:9e:69:af:1a:95:2b:fa:c8:3b:92:4d:db:a2:79:74: bc:d9:0b:72:e1:ec:11:18:b5:58:49:01:a9:96:1d:d2:c1:33: 86:6e:fd:e1:b6:cd:7a:bf:64:07:eb:7e:a4:a6:47:ce:d3:25: dd:d4:63:51:8f:36:2b:e4:25:0a:65:12:7c:4e:80:ee:04:73: d3:ed:2d:7a:ed:9e:b8:72:8b:ad:b7:3e:ab:0d:34:36:db:0b: 88:5e:65:88:16:ee:87:0f:47:5a:bd:53:c1:3e:49:aa:dc:51: e4:89:32:dc:de:79:4a:34:ff:97:ee:a5:3b:ba:12:ad:3c:a6: 48:1a:dd:d4:7a:48:c9:87:0c:6b:01:a7:ef:1b:7b:41:6f:b6: 20:07:01:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJytUkZwYex9vkmoyZ/tdkow4YwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNjA0MjExMDE1NDZaFw0yNjA0MjQxMzUzNDZaMDMxMTAvBgNV BAMTKDk2QjY4RkZCQzI1NEQwNjI3OEQwOTkyRkY2MDM1RkE1NTYxRTQ0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClijbXL3ZZctxdGuHgbYS/Svpc MGKK7nMrRnJpFTBikrpNsl37xak53kDnfB5bdBei0KTq+XOUPk9OeQ/u3cT8AP3Q HwzpY8BWgOSdoz3OcqOzinUH32If03AiY/yPDjGcALjbT3p4OZ3h6n4M5VElbvDd 6Xf8ux3TWQ6m2OryVcvYweelfgTZWFtogZDYhpvaJ9DYloQYKBu/3J4rNqyPQZf5 O0Bf38x9fuUnHIIPgc6gkfH/MrOMOzUIOwvTJQgh6iToGrXh7ik4kuvanx4aJuIu pdk+oqYUsp3TzYpyG1S0emUaBhqoE8ogNeC4dOtOrlxECqKwEc6GGOQ/mt8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlraP+8JU0GJ40Jkv9gNfpVYeRLAwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEP8hg02SMB6fe5YVURLV6haRD+4fVvcy+oz 2aL8qvCi5h31cJUZkOso9zud0y+Px8fC6HDzoci2/B2Hgo9e57kiEZdq4vprgKoY Cp3CmUeKEV0CfY5LbFvHOPlaDR3lgOc+YyCndm32p/shFCF/jp5prxqVK/rIO5JN 26J5dLzZC3Lh7BEYtVhJAamWHdLBM4Zu/eG2zXq/ZAfrfqSmR87TJd3UY1GPNivk JQplEnxOgO4Ec9PtLXrtnrhyi623PqsNNDbbC4heZYgW7ocPR1q9U8E+SarcUeSJ MtzeeUo0/5fupTu6Eq08pkga3dR6SMmHDGsBp+8be0FvtiAHAV0= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:44 2026 by rpki-client