$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: 2mJzQKAfu3Q7qZe+FRDLEjWfYNsB6d1QI5oTfPHHnW0= Subject key identifier: C8:89:41:3E:4D:13:34:DE:0B:AD:8B:AC:EC:63:74:E3:F3:82:3B:02 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 3A5851CD0B737FCC4092FE5F5C0BAC4E9A5BB696 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: E3 Signing time: Tue 21 Apr 2026 12:41:47 +0000 Manifest this update: Tue 21 Apr 2026 12:36:47 +0000 Manifest next update: Fri 24 Apr 2026 20:12:47 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: tCFWfM3xPDNAE6hYqcghBjN3a3o8405nfAZiA3LJhEE=) 2: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: LZzx8UrhZjJRyXmKRpcga/tIjUQ5JoJ0JvsfihEGbP4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 20:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:58:51:cd:0b:73:7f:cc:40:92:fe:5f:5c:0b:ac:4e:9a:5b:b6:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Apr 21 12:36:47 2026 GMT Not After : Apr 24 20:12:47 2026 GMT Subject: CN=C889413E4D1334DE0BAD8BACEC6374E3F3823B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:15:3c:17:50:00:72:52:41:ea:2a:f5:21: f4:89:9f:05:80:47:1a:da:1a:91:d6:8d:27:0b:f3: 22:a7:e5:68:94:ec:9b:3e:ee:76:83:f1:9e:8c:15: b1:11:02:af:4b:34:20:d0:ef:ad:f5:78:7b:4f:05: 12:e9:e0:19:dc:87:dd:83:19:33:87:0b:9d:dc:86: 19:f3:ca:76:8c:47:4f:4c:9a:57:c2:ab:68:83:d5: 77:33:a2:cd:88:35:0e:f2:06:fd:27:a6:52:ca:59: 2e:86:23:aa:28:42:a6:22:bc:9e:59:38:1a:70:46: 51:37:77:ea:51:37:d9:c0:70:51:ed:f4:35:a0:9c: 21:9e:a5:24:c1:90:92:37:3b:a3:ae:d1:36:49:f3: e8:f4:4d:e3:da:8a:ce:02:a4:74:30:b4:1c:74:ee: 0b:54:aa:d9:78:2b:4a:09:04:5a:78:71:4e:3e:94: 28:2b:7c:68:21:67:09:52:c3:73:b0:0e:96:fa:43: bd:ce:d6:51:13:c5:b6:a8:0c:b0:8e:ed:5c:d6:11: 2c:46:b8:a7:36:9f:9b:14:ef:31:31:f5:06:16:a8: 32:ef:03:82:8f:86:5a:26:d4:8d:63:40:c2:4a:1e: 57:06:c2:ac:51:46:7b:93:7d:61:1c:5b:cb:e4:52: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:89:41:3E:4D:13:34:DE:0B:AD:8B:AC:EC:63:74:E3:F3:82:3B:02 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:7b:8e:65:b5:f2:2e:85:5f:7c:d1:6e:cf:ea:4b:d4:29:b3: bd:a6:a4:f3:59:16:b0:95:d8:9f:1d:f9:f8:04:7a:bc:9c:38: 26:89:f1:02:03:36:84:bb:e0:db:c5:1f:4c:64:46:3d:51:38: 35:7a:b7:65:7c:fd:66:b8:8f:6d:49:dc:9a:0a:28:53:f0:f8: fb:ee:58:78:79:9b:f2:e3:1c:de:80:4f:c6:40:ff:78:3b:08: 7a:92:1e:1c:7f:12:87:69:b8:71:e1:f9:42:45:50:20:54:b2: 26:a2:be:3d:8c:af:6f:c9:b7:c7:8f:74:a9:b4:0f:b5:19:a0: 22:4d:23:1c:61:91:09:33:da:e0:d7:f0:6b:20:4e:a3:16:7e: 9c:f1:01:a0:24:8f:81:82:a4:b1:d2:eb:20:b1:e2:c2:37:95: 39:9c:13:ba:99:24:2b:82:e0:2a:bc:33:a9:2f:21:42:e5:14: 5e:e8:28:cc:e7:a0:a3:55:9e:20:d5:e5:a3:00:b8:c2:80:41: 5f:38:58:3d:75:f0:94:44:d0:a4:17:f7:2c:af:e6:1d:b5:1c: db:32:e2:21:dc:c3:af:69:7e:dd:e3:41:e5:35:d3:85:fc:5d: 79:f2:82:c5:b7:e0:4b:66:98:2e:17:42:d3:4d:49:c6:14:c8: 6d:cc:71:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlhRzQtzf8xAkv5fXAusTppbtpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNjA0MjExMjM2NDdaFw0yNjA0MjQyMDEyNDdaMDMxMTAvBgNV BAMTKEM4ODk0MTNFNEQxMzM0REUwQkFEOEJBQ0VDNjM3NEUzRjM4MjNCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYYhU8F1AAclJB6ir1IfSJnwWA RxraGpHWjScL8yKn5WiU7Js+7naD8Z6MFbERAq9LNCDQ7631eHtPBRLp4Bnch92D GTOHC53chhnzynaMR09MmlfCq2iD1Xczos2INQ7yBv0nplLKWS6GI6ooQqYivJ5Z OBpwRlE3d+pRN9nAcFHt9DWgnCGepSTBkJI3O6Ou0TZJ8+j0TePais4CpHQwtBx0 7gtUqtl4K0oJBFp4cU4+lCgrfGghZwlSw3OwDpb6Q73O1lETxbaoDLCO7VzWESxG uKc2n5sU7zEx9QYWqDLvA4KPhlom1I1jQMJKHlcGwqxRRnuTfWEcW8vkUhqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyIlBPk0TNN4LrYus7GN04/OCOwIwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM17jmW18i6FX3zRbs/qS9Qps72mpPNZFrCV 2J8d+fgEerycOCaJ8QIDNoS74NvFH0xkRj1RODV6t2V8/Wa4j21J3JoKKFPw+Pvu WHh5m/LjHN6AT8ZA/3g7CHqSHhx/EodpuHHh+UJFUCBUsiaivj2Mr2/Jt8ePdKm0 D7UZoCJNIxxhkQkz2uDX8GsgTqMWfpzxAaAkj4GCpLHS6yCx4sI3lTmcE7qZJCuC 4Cq8M6kvIULlFF7oKMznoKNVniDV5aMAuMKAQV84WD118JRE0KQX9yyv5h21HNsy 4iHcw69pft3jQeU104X8XXnygsW34EtmmC4XQtNNScYUyG3McVA= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:39 2026 by rpki-client