$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: vx1RhFh0m8KJub5PHla0rg6ZCCvHgdeB+QG/ceLS6cI= Subject key identifier: 2F:81:D0:BF:B9:1C:CF:E2:C0:A0:59:65:43:E5:5A:E8:44:1B:7E:D5 Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 637AB022F256403054A185D3C4FF292C55ADE7E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: 0116 Signing time: Mon 20 Apr 2026 02:01:57 +0000 Manifest this update: Mon 20 Apr 2026 01:56:57 +0000 Manifest next update: Thu 23 Apr 2026 03:29:57 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) 2: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: EO5EuXfgbqhuJug0pAHWFbHujiOq54NqW0T6b3oWRBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 03:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:7a:b0:22:f2:56:40:30:54:a1:85:d3:c4:ff:29:2c:55:ad:e7:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Apr 20 01:56:57 2026 GMT Not After : Apr 23 03:29:57 2026 GMT Subject: CN=2F81D0BFB91CCFE2C0A0596543E55AE8441B7ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:79:87:a2:68:5b:83:22:8a:ee:78:5b:20: 88:f9:3f:35:5a:16:9e:85:bf:5d:6e:80:4c:07:81: c3:29:72:17:4d:62:65:6d:4e:61:ea:2b:72:1d:67: 2e:6d:3b:21:02:ce:9b:f0:42:44:5e:53:15:12:7d: 9b:91:38:32:29:e0:7b:97:f3:0c:97:c2:7e:d1:99: 63:cc:87:3b:3d:e8:a5:12:ee:bf:02:ad:28:8f:07: de:84:87:7c:b8:a0:09:8f:95:fb:42:9c:4e:93:a5: be:13:33:fe:6d:d3:89:74:98:c9:e9:47:a1:fa:76: 6f:7b:36:1d:d1:f0:34:a4:a6:ad:af:9b:c8:f0:e3: 61:2f:d3:de:dc:70:80:5d:7f:47:48:8a:f7:66:37: 99:7f:12:de:44:9d:a4:7e:72:90:6d:0e:13:4c:d4: 3f:02:1d:ab:c0:5b:93:08:a1:08:52:f7:35:5d:1c: 1f:30:89:63:3a:28:90:58:86:6a:cf:bf:3a:cf:79: b3:19:fd:7e:c5:88:a3:7a:fb:26:08:c0:f8:cb:f3: cc:07:b7:af:4e:5d:74:aa:e9:80:59:cf:a2:6c:ba: 03:d4:06:59:6f:39:c2:8d:b5:85:68:1d:95:4c:09: 7f:6a:cd:ea:23:94:bd:82:8a:f7:d3:87:45:eb:ee: 36:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:D0:BF:B9:1C:CF:E2:C0:A0:59:65:43:E5:5A:E8:44:1B:7E:D5 X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:72:81:08:4e:fb:fa:81:c6:74:34:7d:ce:14:92:5e:50:e0: f6:93:97:25:d2:15:53:69:5c:2f:f9:74:ec:dc:ad:3a:7f:ee: ef:ce:52:8b:51:33:0a:ab:46:66:56:d6:a8:39:29:05:33:fb: 34:1f:85:c1:af:54:69:80:a7:f9:c8:ab:79:9c:10:91:f5:79: 72:8e:a8:3e:a4:76:19:74:ef:d0:f2:11:39:b3:36:bb:ae:25: 9b:b6:49:d6:1a:7b:f7:b8:75:74:9d:c3:c3:a5:21:06:51:a2: 9b:33:42:89:08:e7:66:83:1c:0d:35:d8:13:4d:e3:46:57:3b: cb:e6:95:2d:d9:26:99:87:0e:28:9d:b2:f2:6b:33:cd:73:d2: cb:e2:80:e5:87:c9:27:49:fe:ff:31:fa:a0:c0:0b:d0:78:d7: cd:3a:05:13:62:b1:8b:ae:c6:40:6f:2b:86:2b:d6:43:44:ec: 81:a9:73:b3:e8:32:d0:48:f1:de:b0:bc:0f:8b:cb:89:08:e4: 09:42:c2:c9:81:98:52:76:84:6d:64:4f:b8:d6:59:5c:8e:99: 93:b1:ad:26:8c:5a:94:a4:81:d4:ee:e0:68:a9:0c:25:cc:b4: 63:37:3e:b4:5f:bf:27:15:1d:b6:21:8a:6e:ca:80:4b:d6:a7: 46:ad:8e:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3qwIvJWQDBUoYXTxP8pLFWt5+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNjA0MjAwMTU2NTdaFw0yNjA0MjMwMzI5NTdaMDMxMTAvBgNV BAMTKDJGODFEMEJGQjkxQ0NGRTJDMEEwNTk2NTQzRTU1QUU4NDQxQjdFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAo3mHomhbgyKK7nhbIIj5PzVa Fp6Fv11ugEwHgcMpchdNYmVtTmHqK3IdZy5tOyECzpvwQkReUxUSfZuRODIp4HuX 8wyXwn7RmWPMhzs96KUS7r8CrSiPB96Eh3y4oAmPlftCnE6Tpb4TM/5t04l0mMnp R6H6dm97Nh3R8DSkpq2vm8jw42Ev097ccIBdf0dIivdmN5l/Et5EnaR+cpBtDhNM 1D8CHavAW5MIoQhS9zVdHB8wiWM6KJBYhmrPvzrPebMZ/X7FiKN6+yYIwPjL88wH t69OXXSq6YBZz6JsugPUBllvOcKNtYVoHZVMCX9qzeojlL2CivfTh0Xr7jbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL4HQv7kcz+LAoFllQ+Va6EQbftUwHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlygQhO+/qBxnQ0fc4Ukl5Q4PaTlyXSFVNp XC/5dOzcrTp/7u/OUotRMwqrRmZW1qg5KQUz+zQfhcGvVGmAp/nIq3mcEJH1eXKO qD6kdhl079DyETmzNruuJZu2SdYae/e4dXSdw8OlIQZRopszQokI52aDHA012BNN 40ZXO8vmlS3ZJpmHDiidsvJrM81z0svigOWHySdJ/v8x+qDAC9B41806BRNisYuu xkBvK4Yr1kNE7IGpc7PoMtBI8d6wvA+Ly4kI5AlCwsmBmFJ2hG1kT7jWWVyOmZOx rSaMWpSkgdTu4GipDCXMtGM3PrRfvycVHbYhim7KgEvWp0atjnk= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:47 2026 by rpki-client