$ rpki-client -vvf repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft File: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft (raw, json) Hash identifier: C2tcHmCCuYvZCkS8BXau4WHDe+FMR//MWHrnNlMIRrM= Subject key identifier: F7:BB:8F:7C:86:7E:B0:00:A5:53:7B:52:4D:40:AE:4F:CF:3F:92:CA Authority key identifier: B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E Certificate issuer: /CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Certificate serial: 710032B05E589E4246296A5077578BE1E8E9D370 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft Manifest number: 0121 Signing time: Tue 21 Apr 2026 03:41:56 +0000 Manifest this update: Tue 21 Apr 2026 03:36:56 +0000 Manifest next update: Fri 24 Apr 2026 04:27:56 +0000 Files and hashes: 1: 3136302e32352e34392e302f32342d3234203d3e20313533303634.roa (hash: +r21VHJKiSG4g/R/zHmUKuYDBebHXXDRqabchwnAdGk=) 2: 3136302e32352e34382e302f32342d3234203d3e20313533303634.roa (hash: 5vrTiCPVa+g9uUAZqY7yIFrCeD1zTR9VGB0NveariYc=) 3: B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl (hash: bc1js141O3f+oZ59fWYgpKSQOfBbBfrzHHU0QK1wvpo=) 4: 3136302e32352e34382e302f32332d3233203d3e20313533303634.roa (hash: yPb8vzqBZ4SuTebiaZ2t1hQWOQT5EPzxImNlHmSkYG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:00:32:b0:5e:58:9e:42:46:29:6a:50:77:57:8b:e1:e8:e9:d3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E Validity Not Before: Apr 21 03:36:56 2026 GMT Not After : Apr 24 04:27:56 2026 GMT Subject: CN=F7BB8F7C867EB000A5537B524D40AE4FCF3F92CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:3e:97:96:a2:25:c8:53:41:12:7b:d7:75: dd:8a:f0:d8:61:db:09:fc:5e:d6:fc:06:29:82:de: ce:1c:87:cf:06:66:aa:c0:58:6f:30:28:68:3c:2f: 2d:9f:f8:f1:d6:79:61:c8:0f:e4:93:02:f6:7a:e2: 82:33:25:74:cb:f5:c2:2d:3c:50:89:62:a5:e9:a9: f7:6a:2d:82:34:cd:b7:4c:3c:a4:b6:6c:49:fc:c5: b1:d5:10:d7:05:bf:bf:51:75:b8:82:0f:a6:86:a6: 8b:2f:29:3f:bd:8b:ee:a5:2d:10:b3:e2:8a:8a:e0: 5c:5a:f5:1c:24:fb:6d:59:7e:87:61:a4:e9:c5:78: 93:ce:49:0f:c0:8c:d4:17:01:42:4f:07:3f:73:e2: 80:ee:0a:ee:f1:81:60:58:42:7b:10:84:bf:18:f7: df:c9:f8:13:a0:f3:46:fb:fd:d0:44:18:77:54:0b: ea:61:7a:03:0f:f2:2c:1a:51:c2:58:73:56:39:66: 15:5e:66:50:4c:9c:19:ce:84:ae:bc:8a:88:1d:0e: 5f:d8:a6:8b:6d:f0:d8:be:f7:e1:ff:ee:95:f7:07: ea:55:ff:73:8d:05:8b:02:bf:02:e6:ea:08:84:0f: ed:8c:2e:b5:34:72:c9:52:62:7d:e1:f5:c6:f6:83: 16:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BB:8F:7C:86:7E:B0:00:A5:53:7B:52:4D:40:AE:4F:CF:3F:92:CA X509v3 Authority Key Identifier: keyid:B5:76:6E:F9:69:F5:BB:0A:7C:76:FA:A9:E5:3B:DE:82:74:E5:64:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5682bf2-0634-4782-a5af-eeb919f19143/0/B5766EF969F5BB0A7C76FAA9E53BDE8274E5643E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:dc:45:c2:24:89:d3:5b:db:e5:81:fe:0e:3d:df:9d:65:97: 44:56:f5:79:a7:f8:ff:eb:89:e5:4b:68:50:60:75:c8:11:05: d7:dd:8d:30:b9:b3:bf:aa:5b:5c:21:51:3c:c7:97:b8:ee:58: d8:de:5e:61:a1:46:22:d3:3e:d3:d2:77:ad:98:a2:79:79:fb: 93:71:9d:e7:f5:97:23:e4:8e:82:18:56:86:4a:2d:86:3e:ec: 95:93:0b:58:02:4d:b7:5e:b2:d9:3d:2d:91:84:4d:b6:8e:60: 88:91:2b:98:a8:28:5c:d6:c5:32:37:48:4f:0d:98:8e:47:f7: 27:8b:9f:0b:4d:81:76:2b:cf:65:d6:d7:42:57:c7:65:a4:83: dd:49:5a:65:9a:d2:c7:d7:0a:b9:24:ee:ef:8e:21:eb:5d:f6: 78:ed:51:e3:73:26:65:df:d1:ac:b9:37:4f:d0:02:06:0c:50: fd:aa:83:17:8e:67:de:a7:fc:3d:0c:3e:b2:7f:49:fc:f4:1d: 46:eb:cc:9d:21:be:ff:af:ee:ef:9e:7e:09:84:96:f3:93:d8: f1:fb:8e:0f:fe:27:bb:5a:49:af:c9:10:7b:83:c0:8c:b4:08: 94:62:f7:8f:1b:b5:4a:55:eb:7a:ca:48:25:76:7f:1a:11:d8: 6e:ad:46:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQAysF5YnkJGKWpQd1eL4ejp03AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3 NEU1NjQzRTAeFw0yNjA0MjEwMzM2NTZaFw0yNjA0MjQwNDI3NTZaMDMxMTAvBgNV BAMTKEY3QkI4RjdDODY3RUIwMDBBNTUzN0I1MjRENDBBRTRGQ0YzRjkyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vT6XlqIlyFNBEnvXdd2K8Nhh 2wn8Xtb8BimC3s4ch88GZqrAWG8wKGg8Ly2f+PHWeWHID+STAvZ64oIzJXTL9cIt PFCJYqXpqfdqLYI0zbdMPKS2bEn8xbHVENcFv79RdbiCD6aGposvKT+9i+6lLRCz 4oqK4Fxa9Rwk+21ZfodhpOnFeJPOSQ/AjNQXAUJPBz9z4oDuCu7xgWBYQnsQhL8Y 99/J+BOg80b7/dBEGHdUC+phegMP8iwaUcJYc1Y5ZhVeZlBMnBnOhK68iogdDl/Y pott8Ni+9+H/7pX3B+pV/3ONBYsCvwLm6giED+2MLrU0cslSYn3h9cb2gxZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97uPfIZ+sAClU3tSTUCuT88/ksowHwYDVR0j BBgwFoAUtXZu+Wn1uwp8dvqp5TvegnTlZD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTY4MmJmMi0wNjM0LTQ3ODItYTVhZi1lZWI5MTlmMTkxNDMvMC9CNTc2NkVGOTY5 RjVCQjBBN0M3NkZBQTlFNTNCREU4Mjc0RTU2NDNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRFODI3NEU1 NjQzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU2ODJiZjItMDYzNC00NzgyLWE1 YWYtZWViOTE5ZjE5MTQzLzAvQjU3NjZFRjk2OUY1QkIwQTdDNzZGQUE5RTUzQkRF ODI3NEU1NjQzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLcRcIkidNb2+WB/g49351ll0RW9Xmn+P/r ieVLaFBgdcgRBdfdjTC5s7+qW1whUTzHl7juWNjeXmGhRiLTPtPSd62Yonl5+5Nx nef1lyPkjoIYVoZKLYY+7JWTC1gCTbdestk9LZGETbaOYIiRK5ioKFzWxTI3SE8N mI5H9yeLnwtNgXYrz2XW10JXx2Wkg91JWmWa0sfXCrkk7u+OIetd9njtUeNzJmXf 0ay5N0/QAgYMUP2qgxeOZ96n/D0MPrJ/Sfz0HUbrzJ0hvv+v7u+efgmElvOT2PH7 jg/+J7taSa/JEHuDwIy0CJRi948btUpV63rKSCV2fxoR2G6tRj8= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:19 2026 by rpki-client