$ rpki-client -vvf repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft File: D5265466AE0186702AF52D11170A29AC32F54EF5.mft (raw, json) Hash identifier: MDrp6qgvbf/vN/VymyJikisAVY89hcmMT4Ho4VtANn4= Subject key identifier: BC:C3:3D:CB:B0:73:99:EB:8B:F2:A1:AB:0B:83:8D:60:12:41:77:C2 Authority key identifier: D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 Certificate issuer: /CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Certificate serial: 3BF5B1C6FC105B1C6F15263F9189B1012FD18382 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft Manifest number: 0134 Signing time: Mon 20 Apr 2026 12:00:48 +0000 Manifest this update: Mon 20 Apr 2026 11:55:48 +0000 Manifest next update: Thu 23 Apr 2026 17:24:48 +0000 Files and hashes: 1: D5265466AE0186702AF52D11170A29AC32F54EF5.crl (hash: CSu0miN3N/DWxWNTJcePxp64o/IfdJdU6LKdScIPZqE=) 2: 3135372e31352e302e302f32332d3234203d3e20313532373639.roa (hash: Ga3Ln5lbJr/jOn/mktQk4Ls62tUtKHvTiYJE3HVfL+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f5:b1:c6:fc:10:5b:1c:6f:15:26:3f:91:89:b1:01:2f:d1:83:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5265466AE0186702AF52D11170A29AC32F54EF5 Validity Not Before: Apr 20 11:55:48 2026 GMT Not After : Apr 23 17:24:48 2026 GMT Subject: CN=BCC33DCBB07399EB8BF2A1AB0B838D60124177C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c1:45:7a:e1:e3:50:47:68:f1:31:cf:ca:29: b4:18:32:f4:24:c4:8f:db:fb:fd:a1:2b:f2:40:1c: 9e:d2:65:e7:27:27:7e:6b:ce:9f:8c:eb:1c:33:28: 16:53:f2:c3:4f:95:c5:79:17:c6:ff:69:7c:94:41: 13:33:f6:3f:9a:4b:1f:bc:f0:a6:8b:04:fd:e7:b1: c2:5b:ab:24:18:de:52:b1:c1:01:a0:90:41:dd:93: 89:45:f0:a3:78:d0:93:bb:a4:fc:21:de:74:b7:18: 0a:b2:80:73:9e:cf:01:3e:24:65:24:4c:68:75:95: dc:3d:8b:47:ac:5e:40:a6:fa:79:e8:5a:2e:4d:cf: 12:9b:35:b3:92:b8:2e:ba:b9:2c:72:52:bf:3b:ad: bb:45:f1:f6:31:bc:48:14:fe:60:55:17:cb:e8:e6: 03:21:3a:ba:bc:19:6b:0b:2d:9e:c7:c6:90:b9:29: ec:07:e8:c5:42:1e:b0:7e:e9:64:2d:81:b6:6c:02: ac:83:db:22:ca:f2:4f:19:d3:3c:65:78:af:d1:e9: 4b:97:9b:48:8f:60:98:d3:12:1b:14:b1:80:4d:2b: 55:93:d7:5a:cd:34:db:e0:01:fc:25:b6:6b:80:83: 06:ac:9e:d0:c9:29:82:1c:0d:cd:98:80:2e:a4:ef: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C3:3D:CB:B0:73:99:EB:8B:F2:A1:AB:0B:83:8D:60:12:41:77:C2 X509v3 Authority Key Identifier: keyid:D5:26:54:66:AE:01:86:70:2A:F5:2D:11:17:0A:29:AC:32:F5:4E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D5265466AE0186702AF52D11170A29AC32F54EF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b46137ae-2efb-43c0-bdb7-43f5d939cf0c/0/D5265466AE0186702AF52D11170A29AC32F54EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:ec:a5:d4:1d:73:ef:9e:7e:93:4b:3f:45:2f:6a:82:5a: aa:b8:d6:35:bd:56:f7:1e:d2:d6:30:b7:25:71:e5:ee:33:f5: ac:b7:c9:4a:cd:be:b8:45:14:03:a3:ab:d0:4f:67:9b:63:07: 37:7d:5a:4d:df:c4:6e:a0:6e:72:77:d0:b1:09:1c:59:8e:e7: c2:80:b1:25:5f:35:31:4c:6d:4f:c7:a7:32:dc:b6:a8:5a:47: c4:95:6a:c3:7c:10:a4:7b:63:47:fc:c3:56:31:fe:66:f9:2c: db:ea:c8:f3:47:35:d5:3c:4e:96:a3:a7:97:c0:c0:b8:8d:dd: 27:d4:20:18:bd:13:b5:2a:a9:34:f8:da:9e:5f:7f:a0:cf:fc: 3e:ca:33:c6:7d:1b:d4:d2:ea:b3:41:6b:f3:f6:da:ff:a5:2c: b3:e4:ba:bf:a0:62:a7:fe:42:9f:cd:9c:cc:4e:25:1b:4f:e4: 96:e0:65:33:b2:d7:85:03:7d:65:d1:ee:ac:ea:dd:94:24:14: 2f:3c:e5:be:5d:e0:d8:e1:55:e0:b0:5b:9b:2b:a3:00:51:f9: e9:5e:ba:22:b7:94:7f:01:12:90:69:bd:83:31:fe:68:57:c7: 76:24:89:a1:85:49:fa:33:91:7f:b3:0b:7d:fc:f9:5f:ea:51: 9b:e0:71:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/WxxvwQWxxvFSY/kYmxAS/Rg4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMz MkY1NEVGNTAeFw0yNjA0MjAxMTU1NDhaFw0yNjA0MjMxNzI0NDhaMDMxMTAvBgNV BAMTKEJDQzMzRENCQjA3Mzk5RUI4QkYyQTFBQjBCODM4RDYwMTI0MTc3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfwUV64eNQR2jxMc/KKbQYMvQk xI/b+/2hK/JAHJ7SZecnJ35rzp+M6xwzKBZT8sNPlcV5F8b/aXyUQRMz9j+aSx+8 8KaLBP3nscJbqyQY3lKxwQGgkEHdk4lF8KN40JO7pPwh3nS3GAqygHOezwE+JGUk TGh1ldw9i0esXkCm+nnoWi5NzxKbNbOSuC66uSxyUr87rbtF8fYxvEgU/mBVF8vo 5gMhOrq8GWsLLZ7HxpC5KewH6MVCHrB+6WQtgbZsAqyD2yLK8k8Z0zxleK/R6UuX m0iPYJjTEhsUsYBNK1WT11rNNNvgAfwltmuAgwasntDJKYIcDc2YgC6k77UjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvMM9y7BzmeuL8qGrC4ONYBJBd8IwHwYDVR0j BBgwFoAU1SZUZq4BhnAq9S0RFwoprDL1TvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDYxMzdhZS0yZWZiLTQzYzAtYmRiNy00M2Y1ZDkzOWNmMGMvMC9ENTI2NTQ2NkFF MDE4NjcwMkFGNTJEMTExNzBBMjlBQzMyRjU0RUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5QUMzMkY1 NEVGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ2MTM3YWUtMmVmYi00M2MwLWJk YjctNDNmNWQ5MzljZjBjLzAvRDUyNjU0NjZBRTAxODY3MDJBRjUyRDExMTcwQTI5 QUMzMkY1NEVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmJ7KXUHXPvnn6TSz9FL2qCWqq41jW9Vvce 0tYwtyVx5e4z9ay3yUrNvrhFFAOjq9BPZ5tjBzd9Wk3fxG6gbnJ30LEJHFmO58KA sSVfNTFMbU/HpzLctqhaR8SVasN8EKR7Y0f8w1Yx/mb5LNvqyPNHNdU8Tpajp5fA wLiN3SfUIBi9E7UqqTT42p5ff6DP/D7KM8Z9G9TS6rNBa/P22v+lLLPkur+gYqf+ Qp/NnMxOJRtP5JbgZTOy14UDfWXR7qzq3ZQkFC885b5d4NjhVeCwW5srowBR+ele uiK3lH8BEpBpvYMx/mhXx3YkiaGFSfozkX+zC338+V/qUZvgcTg= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:48 2026 by rpki-client