$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: D7dTOUcwnqzzURWJnbTvvIh/FCpqNYLfWjGyv80OCFQ= Subject key identifier: E4:14:C5:E6:D6:8F:04:19:60:D5:B2:F8:1D:FE:4E:26:52:34:31:1F Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 0E74F0A846265DE65F116F42EF5130455C25F961 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 015A Signing time: Tue 21 Apr 2026 17:00:02 +0000 Manifest this update: Tue 21 Apr 2026 16:55:02 +0000 Manifest next update: Fri 24 Apr 2026 19:26:02 +0000 Files and hashes: 1: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: 7ObodM3UsIDooKTUu7jEp2cruu90Xr4dBSTVI1hTl/8=) 2: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: WZyPn+mq0I+eE3vcXNaLpwRID4wqkE6/jQ3zY3AffcI=) 3: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: cFu5nteBBzan5faf9I4u2CSs1idRr42+5NP3IOF4DXY=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: P+lInV3ols6ftIxSpMHmtBDcdqTmvL+gkgGsnZZSjLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:74:f0:a8:46:26:5d:e6:5f:11:6f:42:ef:51:30:45:5c:25:f9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Apr 21 16:55:02 2026 GMT Not After : Apr 24 19:26:02 2026 GMT Subject: CN=E414C5E6D68F041960D5B2F81DFE4E265234311F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:18:c3:eb:f8:71:4f:b5:df:39:cc:1e:88: 1a:88:a9:67:a1:6e:29:a5:e9:9d:4c:a2:16:ce:65: 96:5c:de:7a:cd:4f:4e:74:18:cd:e0:48:29:b7:1b: ee:a1:3d:74:39:0f:8d:39:ab:f8:bb:8c:be:fb:3e: 93:a8:f3:d4:73:0c:5f:d8:de:dc:fb:48:9c:1e:da: a5:56:e9:5c:43:96:65:99:6a:46:f5:8a:ae:cf:4a: ee:79:8a:95:c1:98:1b:c3:bb:99:58:96:a1:a5:72: 8b:9f:07:b6:f8:79:e7:df:7a:14:16:24:ec:f6:77: cc:55:f5:e7:f1:fc:79:ee:b1:76:22:69:e0:78:24: 58:74:9d:7b:fb:e1:62:87:7b:14:22:8a:e9:88:4a: 3e:64:cb:81:c0:9c:9d:26:78:47:95:e4:52:06:ad: 7d:3f:58:a7:f5:b2:12:12:1f:00:fd:7c:5f:e2:56: b1:86:c4:da:9d:4a:73:d4:1f:be:22:fc:05:67:84: d8:0d:e5:78:48:be:90:67:2b:06:f4:cb:e6:18:39: d6:74:7c:7d:25:b9:8c:64:32:2c:d4:d5:57:6b:d7: 89:16:ce:72:24:79:03:da:6e:d2:68:35:a6:d8:3b: be:a9:09:6d:82:ed:b7:48:3d:71:e8:4c:3e:fc:18: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:14:C5:E6:D6:8F:04:19:60:D5:B2:F8:1D:FE:4E:26:52:34:31:1F X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:85:32:0f:53:f6:5e:c5:b2:dd:39:89:70:00:9a:e0:33:31: 30:63:73:3f:81:20:f8:9a:b4:a7:53:c2:b3:e4:3a:fc:c3:02: 18:65:cb:ef:86:f0:8d:4c:0f:c0:8a:da:6f:4a:f4:8e:a0:db: 6e:31:ef:4b:5b:c1:75:b9:7a:eb:e7:ae:36:76:87:6d:98:53: ac:c8:a4:4e:a8:fc:ef:b4:6b:da:a8:19:91:6e:5c:44:28:ff: 04:2b:b0:50:da:7f:dc:c4:43:6d:8a:15:1f:db:a8:76:73:c9: fb:df:83:0d:0d:17:27:df:86:7d:c2:48:18:c5:a5:92:22:bf: 66:f1:34:44:53:92:3a:2d:44:87:f8:05:2b:a1:ab:58:88:8b: 63:d2:ab:57:06:bb:3d:7b:3e:ca:ce:32:50:be:e1:2c:8d:46: 22:6f:dc:97:fd:6e:7e:c7:e8:08:34:8c:92:76:49:2f:5f:a7: a0:1a:fe:03:df:d6:52:27:39:34:c1:49:34:19:f2:fb:6a:70: 4e:80:57:95:92:67:80:38:d2:cc:59:88:37:6b:8e:c9:2c:fb: f4:d4:5e:5d:e9:03:31:db:de:64:12:a7:82:1b:78:0a:dc:81: 06:68:9c:e2:9e:8e:8d:e6:3c:c3:ad:df:e7:c6:01:6d:c0:08: 5d:09:28:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnTwqEYmXeZfEW9C71EwRVwl+WEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNjA0MjExNjU1MDJaFw0yNjA0MjQxOTI2MDJaMDMxMTAvBgNV BAMTKEU0MTRDNUU2RDY4RjA0MTk2MEQ1QjJGODFERkU0RTI2NTIzNDMxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz4xjD6/hxT7XfOcweiBqIqWeh biml6Z1MohbOZZZc3nrNT050GM3gSCm3G+6hPXQ5D405q/i7jL77PpOo89RzDF/Y 3tz7SJwe2qVW6VxDlmWZakb1iq7PSu55ipXBmBvDu5lYlqGlcoufB7b4eeffehQW JOz2d8xV9efx/HnusXYiaeB4JFh0nXv74WKHexQiiumISj5ky4HAnJ0meEeV5FIG rX0/WKf1shISHwD9fF/iVrGGxNqdSnPUH74i/AVnhNgN5XhIvpBnKwb0y+YYOdZ0 fH0luYxkMizU1Vdr14kWznIkeQPabtJoNabYO76pCW2C7bdIPXHoTD78GHjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5BTF5taPBBlg1bL4Hf5OJlI0MR8wHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWFMg9T9l7Fst05iXAAmuAzMTBjcz+BIPia tKdTwrPkOvzDAhhly++G8I1MD8CK2m9K9I6g224x70tbwXW5euvnrjZ2h22YU6zI pE6o/O+0a9qoGZFuXEQo/wQrsFDaf9zEQ22KFR/bqHZzyfvfgw0NFyffhn3CSBjF pZIiv2bxNERTkjotRIf4BSuhq1iIi2PSq1cGuz17PsrOMlC+4SyNRiJv3Jf9bn7H 6Ag0jJJ2SS9fp6Aa/gPf1lInOTTBSTQZ8vtqcE6AV5WSZ4A40sxZiDdrjsks+/TU Xl3pAzHb3mQSp4IbeArcgQZonOKejo3mPMOt3+fGAW3ACF0JKB4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:54 2026 by rpki-client