$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: aaa28dIM3miCRtjUBYtt74dCIed2vkXT0n8e1ono3E8= Subject key identifier: F3:89:3A:BB:FB:55:98:12:1E:DD:88:8C:2A:23:A0:1A:47:13:82:81 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 0CDCEEB5A6E9BA5845200D982ABD9E8D3239B0F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 0126 Signing time: Mon 20 Apr 2026 12:02:12 +0000 Manifest this update: Mon 20 Apr 2026 11:57:12 +0000 Manifest next update: Thu 23 Apr 2026 17:01:12 +0000 Files and hashes: 1: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: czNB4m0iewqLZ2QGpJQFOLH7xBMB99F4QRrQVssdmdY=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 2KoUt2/IqlrBdeTYa4zU+PXccPJfUuUeEVNRh95cwQ4=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:dc:ee:b5:a6:e9:ba:58:45:20:0d:98:2a:bd:9e:8d:32:39:b0:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Apr 20 11:57:12 2026 GMT Not After : Apr 23 17:01:12 2026 GMT Subject: CN=F3893ABBFB5598121EDD888C2A23A01A47138281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:67:d9:98:57:6f:46:06:ee:1b:c9:40:5e: f2:54:a0:61:d5:22:dc:47:b1:60:d2:09:c5:a7:f9: ce:0e:de:bc:bd:fb:c9:2f:d3:df:c9:2f:3c:d2:8f: 5b:8a:bf:4b:d0:c3:9e:e7:be:c5:f2:13:77:de:b5: 2f:31:0f:d2:32:74:a5:95:42:2d:85:28:21:ee:49: 1c:85:80:00:37:15:a5:76:2d:97:ba:00:88:fb:fa: 0f:5d:32:17:bf:56:59:49:e3:40:e0:17:b3:17:7a: 8b:31:01:a9:e3:42:f1:51:b1:ca:be:82:97:b2:7b: 07:0e:ad:98:a5:a9:9a:25:49:c1:23:d5:96:7c:3b: 86:9b:cc:68:74:cc:84:8b:38:70:fc:e2:53:6d:65: bb:93:dc:2f:03:dc:76:ff:45:02:e9:30:b3:78:9d: 8a:57:66:41:6b:2f:37:bc:d3:6c:49:23:06:12:34: 08:2f:2d:0b:1c:09:1c:43:3b:54:9f:4b:71:62:ab: 95:02:18:34:61:1d:e0:a6:79:51:2d:6e:ad:e3:0e: 44:88:64:00:f1:b0:a5:39:e1:d9:f2:e6:84:b2:9f: 9f:47:2f:7d:2a:04:66:79:1f:77:f9:3a:00:ec:af: 8a:97:7f:79:eb:d3:ee:c3:64:6c:f3:a0:a8:7b:9f: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:3A:BB:FB:55:98:12:1E:DD:88:8C:2A:23:A0:1A:47:13:82:81 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:09:c0:97:40:82:79:63:6c:c2:59:47:be:05:82:b1:e6:49: 92:d4:c5:76:d9:af:1f:b0:d4:21:b3:48:24:79:59:0b:71:0a: cf:86:82:e0:6b:76:6f:5d:7f:fd:26:8c:fd:51:75:5c:4c:06: f2:44:66:81:4a:e1:82:87:5c:b1:c0:10:c6:2e:78:59:c5:86: 25:8a:a4:e4:41:5b:af:05:2b:a7:b0:ce:8e:44:7c:95:e5:c6: 2d:c1:2e:3e:4e:fe:b0:93:c9:b8:95:74:46:c6:ef:41:1e:e8: 9e:d8:ec:0b:a1:22:30:bf:c5:7a:d2:31:6b:87:8b:fd:cb:5a: a4:2e:9d:66:5a:b1:78:f8:74:2b:c7:2c:21:11:58:ac:9b:ad: ae:56:8c:83:11:2f:6e:06:ce:13:3f:f3:5d:3a:6d:b8:df:46: dc:ad:ba:99:6b:10:76:6a:cb:cd:d9:b9:b2:88:8b:42:01:64: ca:c4:d2:54:28:c1:3f:cd:5a:8f:e1:cc:19:5b:ec:cf:9e:7a: 6d:49:63:bb:22:f0:83:ab:0c:79:c3:9b:97:19:01:4b:f3:3f: 30:36:12:03:ef:f6:0f:36:7f:d4:d9:19:ad:67:b0:3c:eb:a3: 38:5c:cd:3c:8b:9a:38:c2:38:41:86:94:df:1c:5c:f4:b5:5b: 1d:a2:ad:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNzutabpulhFIA2YKr2ejTI5sPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNjA0MjAxMTU3MTJaFw0yNjA0MjMxNzAxMTJaMDMxMTAvBgNV BAMTKEYzODkzQUJCRkI1NTk4MTIxRUREODg4QzJBMjNBMDFBNDcxMzgyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01mfZmFdvRgbuG8lAXvJUoGHV ItxHsWDSCcWn+c4O3ry9+8kv09/JLzzSj1uKv0vQw57nvsXyE3fetS8xD9IydKWV Qi2FKCHuSRyFgAA3FaV2LZe6AIj7+g9dMhe/VllJ40DgF7MXeosxAanjQvFRscq+ gpeyewcOrZilqZolScEj1ZZ8O4abzGh0zISLOHD84lNtZbuT3C8D3Hb/RQLpMLN4 nYpXZkFrLze802xJIwYSNAgvLQscCRxDO1SfS3Fiq5UCGDRhHeCmeVEtbq3jDkSI ZADxsKU54dny5oSyn59HL30qBGZ5H3f5OgDsr4qXf3nr0+7DZGzzoKh7nyP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84k6u/tVmBIe3YiMKiOgGkcTgoEwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsJwJdAgnljbMJZR74FgrHmSZLUxXbZrx+w 1CGzSCR5WQtxCs+GguBrdm9df/0mjP1RdVxMBvJEZoFK4YKHXLHAEMYueFnFhiWK pORBW68FK6ewzo5EfJXlxi3BLj5O/rCTybiVdEbG70Ee6J7Y7AuhIjC/xXrSMWuH i/3LWqQunWZasXj4dCvHLCERWKybra5WjIMRL24GzhM/8106bbjfRtytuplrEHZq y83ZubKIi0IBZMrE0lQowT/NWo/hzBlb7M+eem1JY7si8IOrDHnDm5cZAUvzPzA2 EgPv9g82f9TZGa1nsDzrozhczTyLmjjCOEGGlN8cXPS1Wx2irVI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:21 2026 by rpki-client