$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: TIRSZcVPKdgSTmGY3tooz4bhgAxUpAVIGqHjdOLAkVM= Subject key identifier: FE:3A:CD:3E:AF:DC:F5:6B:F2:EB:AD:EB:50:4F:50:B0:19:0A:A5:E7 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 5759D46DADCADA894B28AC8F9DBD1FBAC0C0B455 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01F6 Signing time: Tue 21 Apr 2026 17:52:37 +0000 Manifest this update: Tue 21 Apr 2026 17:47:37 +0000 Manifest next update: Sat 25 Apr 2026 05:41:37 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: hTMhFpyCQFUqahvHac3PbyQvEBFh/2YhQZ3DB9bPPjE=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: 3gDiKhgVnNUeMsCR6qSd2hdpfKIqeiSBznt5eXVqe8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 05:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:59:d4:6d:ad:ca:da:89:4b:28:ac:8f:9d:bd:1f:ba:c0:c0:b4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Apr 21 17:47:37 2026 GMT Not After : Apr 25 05:41:37 2026 GMT Subject: CN=FE3ACD3EAFDCF56BF2EBADEB504F50B0190AA5E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:c7:a2:82:f3:20:d4:6f:73:9e:e9:76:ad: bf:37:52:20:4a:27:6c:b7:b7:39:21:49:87:d4:db: 23:73:88:c3:ff:6d:0f:7c:c7:7c:44:58:39:3f:df: 4e:ee:73:27:24:65:d2:2a:dc:b4:c3:f5:ca:cf:32: 3d:82:77:a0:46:26:71:1a:fc:8c:bf:0a:14:29:c7: 2d:6b:b6:0d:f8:67:94:5a:2a:00:60:f6:d2:39:6b: 30:cb:50:d0:b8:41:c7:28:6c:93:1a:73:24:51:38: 0d:42:33:36:32:34:fe:58:18:ff:a9:13:c4:07:9c: 08:97:15:5e:c7:71:99:f5:8a:d4:94:ef:93:03:df: 9a:40:6d:c5:e8:46:e3:8b:08:74:34:cb:e7:ee:8b: 1f:ee:d0:4f:1e:02:c5:a5:65:7b:33:38:a7:89:17: b8:ed:06:fe:51:0a:b3:c5:c7:25:2a:dc:c8:d7:6f: 07:c6:43:12:8d:03:fe:ad:ff:62:cf:5f:1f:64:64: 5a:43:68:ec:3e:65:34:04:14:6b:93:51:ba:ed:9b: 12:4a:28:d7:d1:ac:de:20:5c:8b:67:b9:07:97:04: a1:7f:10:72:6d:8a:93:29:ef:70:94:30:b1:7e:7a: 73:ba:d9:09:bb:89:9e:0b:b3:f6:68:66:23:f0:db: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3A:CD:3E:AF:DC:F5:6B:F2:EB:AD:EB:50:4F:50:B0:19:0A:A5:E7 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:18:db:d5:fc:22:d3:19:df:7a:6e:88:99:43:67:d6:4c:0c: d6:80:91:bf:62:97:3e:d4:d3:14:3a:eb:a2:69:55:82:8c:7c: 62:fa:22:fc:a7:69:80:e6:ca:73:f9:d5:b6:fc:b8:04:c5:ef: c3:27:02:f0:81:15:8d:da:cc:f2:ed:e9:1c:9e:e3:22:e5:14: 95:f6:83:1d:ce:ef:2d:69:62:bf:1c:78:10:45:a6:b5:6d:bd: c7:ae:cb:a5:07:4d:24:70:df:d3:b0:71:2e:35:05:5b:d7:83: 19:b0:ca:2e:e6:1f:94:0f:32:2e:82:12:f0:ef:ac:93:a3:16: aa:73:3b:bf:9f:f3:61:a4:c3:16:e3:ea:8a:67:a8:a1:86:37: 55:39:b6:a9:06:72:dd:11:41:05:fb:6e:fe:58:c2:d0:bb:68: 96:d6:28:f6:f8:66:1a:96:4f:51:3c:ed:86:78:6d:f3:f0:3f: f7:de:bf:7c:ce:eb:34:15:d6:e8:fe:f9:dd:d3:74:8f:ac:c7: b9:0d:e7:90:41:a4:ec:22:6a:1e:25:2d:18:95:4e:b7:44:ba: 27:ce:a6:53:4b:32:62:30:83:22:c7:e2:0a:95:88:bd:62:7d: 24:cf:b2:b1:87:9b:26:fe:f4:51:a8:ef:e4:c4:6b:eb:14:c4: f9:fb:ad:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV1nUba3K2olLKKyPnb0fusDAtFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNjA0MjExNzQ3MzdaFw0yNjA0MjUwNTQxMzdaMDMxMTAvBgNV BAMTKEZFM0FDRDNFQUZEQ0Y1NkJGMkVCQURFQjUwNEY1MEIwMTkwQUE1RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCcseigvMg1G9znul2rb83UiBK J2y3tzkhSYfU2yNziMP/bQ98x3xEWDk/307ucyckZdIq3LTD9crPMj2Cd6BGJnEa /Iy/ChQpxy1rtg34Z5RaKgBg9tI5azDLUNC4QccobJMacyRROA1CMzYyNP5YGP+p E8QHnAiXFV7HcZn1itSU75MD35pAbcXoRuOLCHQ0y+fuix/u0E8eAsWlZXszOKeJ F7jtBv5RCrPFxyUq3MjXbwfGQxKNA/6t/2LPXx9kZFpDaOw+ZTQEFGuTUbrtmxJK KNfRrN4gXItnuQeXBKF/EHJtipMp73CUMLF+enO62Qm7iZ4Ls/ZoZiPw2wABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jrNPq/c9Wvy663rUE9QsBkKpecwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0Y29X8ItMZ33puiJlDZ9ZMDNaAkb9ilz7U 0xQ666JpVYKMfGL6IvynaYDmynP51bb8uATF78MnAvCBFY3azPLt6Rye4yLlFJX2 gx3O7y1pYr8ceBBFprVtvceuy6UHTSRw39OwcS41BVvXgxmwyi7mH5QPMi6CEvDv rJOjFqpzO7+f82Gkwxbj6opnqKGGN1U5tqkGct0RQQX7bv5YwtC7aJbWKPb4ZhqW T1E87YZ4bfPwP/fev3zO6zQV1uj++d3TdI+sx7kN55BBpOwiah4lLRiVTrdEuifO plNLMmIwgyLH4gqViL1ifSTPsrGHmyb+9FGo7+TEa+sUxPn7rdo= -----END CERTIFICATE-----Generated at Wed Apr 22 07:27:17 2026 by rpki-client