$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: 4w1AcPfn7mZlRafF44itdu9jtZgkqGdui/oX4S/OKd8= Subject key identifier: 6D:E0:12:C3:8B:60:0A:0D:06:EA:3D:CF:43:AD:58:66:7B:08:21:34 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 2BC08CD46FB3ED9F54990DDB0C2D07AC68215BAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 024F Signing time: Tue 24 Mar 2026 10:21:09 +0000 Manifest this update: Tue 24 Mar 2026 10:16:09 +0000 Manifest next update: Fri 27 Mar 2026 11:38:09 +0000 Files and hashes: 1: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) 2: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 3: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 4: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: Fu6PcikE7rsvcvi8fBuoFtPa+kAUKBDpVHsx5/enUsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c0:8c:d4:6f:b3:ed:9f:54:99:0d:db:0c:2d:07:ac:68:21:5b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Mar 24 10:16:09 2026 GMT Not After : Mar 27 11:38:09 2026 GMT Subject: CN=6DE012C38B600A0D06EA3DCF43AD58667B082134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:91:da:a9:f0:36:0e:9e:15:67:f1:c8:ea: bf:d9:9a:ea:2a:6b:d9:f2:35:02:5b:a7:15:d8:52: 37:f9:09:18:dc:1a:36:2a:30:b8:7a:5d:c9:b6:de: 5d:0d:02:61:e4:ff:f0:79:b4:e2:55:40:1d:d6:79: 8e:73:c9:00:f0:f5:43:d7:27:ba:a4:29:ab:52:8e: 2f:4f:ee:1e:4e:ee:6d:70:3f:39:7f:f9:b4:80:ba: 74:0f:c7:ca:a5:10:ea:9f:31:b0:b9:f7:80:70:0f: 17:bd:5f:61:dc:79:bb:6e:19:da:db:e9:75:4c:e3: a4:c6:6c:7b:bc:ca:59:29:c5:6e:04:aa:98:47:7d: d5:92:65:52:b0:0c:ee:04:3b:29:a0:33:3a:ba:5b: ae:cc:12:32:8d:83:0e:87:e0:f7:35:2d:75:69:88: 6c:21:e9:b7:31:b2:2c:de:bd:58:70:52:ad:a3:d3: fb:37:0c:76:70:0f:76:6d:3a:e6:ae:29:65:9a:f9: 8c:4e:95:29:10:39:69:2d:48:4a:d9:35:3e:67:b6: ed:8b:79:31:50:db:43:36:ac:08:81:bd:a9:31:66: 43:58:46:e0:3b:05:4f:79:b1:67:67:93:6d:e9:7e: b7:cc:e3:0e:7b:30:d3:6e:90:99:ec:7c:5d:0f:58: 1f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E0:12:C3:8B:60:0A:0D:06:EA:3D:CF:43:AD:58:66:7B:08:21:34 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4e:0f:69:32:8e:ce:cb:29:da:21:fe:9a:f6:12:a1:d8:d2: 4c:d2:87:df:ec:48:fc:2b:ca:95:16:33:8d:ca:5b:c3:f6:99: e9:bb:a3:53:7f:e9:d1:83:eb:33:a0:55:17:e7:ae:ce:35:db: de:11:a8:db:cb:92:81:eb:54:64:e7:8e:f2:90:d6:f3:d9:d7: be:9c:25:c7:8f:05:0a:bf:0f:a5:ca:2f:d7:4e:4b:1c:c0:4a: a1:9f:63:34:de:ad:eb:b9:b9:3e:31:d8:30:ba:8b:a3:6c:cd: 25:88:70:36:7e:6f:8e:57:f7:7b:72:3f:93:0c:e2:2d:cc:23: 9d:8f:04:d6:99:a8:8e:8b:04:08:16:16:73:c2:6d:74:e3:d6: 70:3c:11:60:50:a2:3c:6e:ad:54:b7:78:13:73:cc:90:30:a4: 35:47:1d:f2:47:95:62:9e:fd:5a:44:ad:e8:7d:3a:8d:47:24: 29:65:83:d1:28:bb:85:1c:21:c3:32:27:d9:5c:a3:55:83:64: 14:14:d5:cc:0e:c3:f8:f3:cb:0e:b8:48:f0:53:db:4c:07:8e: fc:b7:81:c7:92:9f:2a:ec:9c:ec:bf:3f:f6:ab:2d:06:60:6c: c4:74:41:a7:d0:47:a6:6d:e0:f9:b1:3e:a1:1c:03:39:23:a0: bf:46:05:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8CM1G+z7Z9UmQ3bDC0HrGghW68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNjAzMjQxMDE2MDlaFw0yNjAzMjcxMTM4MDlaMDMxMTAvBgNV BAMTKDZERTAxMkMzOEI2MDBBMEQwNkVBM0RDRjQzQUQ1ODY2N0IwODIxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKJHaqfA2Dp4VZ/HI6r/Zmuoq a9nyNQJbpxXYUjf5CRjcGjYqMLh6Xcm23l0NAmHk//B5tOJVQB3WeY5zyQDw9UPX J7qkKatSji9P7h5O7m1wPzl/+bSAunQPx8qlEOqfMbC594BwDxe9X2HcebtuGdrb 6XVM46TGbHu8ylkpxW4EqphHfdWSZVKwDO4EOymgMzq6W67MEjKNgw6H4Pc1LXVp iGwh6bcxsizevVhwUq2j0/s3DHZwD3ZtOuauKWWa+YxOlSkQOWktSErZNT5ntu2L eTFQ20M2rAiBvakxZkNYRuA7BU95sWdnk23pfrfM4w57MNNukJnsfF0PWB8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbeASw4tgCg0G6j3PQ61YZnsIITQwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtOD2kyjs7LKdoh/pr2EqHY0kzSh9/sSPwr ypUWM43KW8P2mem7o1N/6dGD6zOgVRfnrs41294RqNvLkoHrVGTnjvKQ1vPZ176c JcePBQq/D6XKL9dOSxzASqGfYzTereu5uT4x2DC6i6NszSWIcDZ+b45X93tyP5MM 4i3MI52PBNaZqI6LBAgWFnPCbXTj1nA8EWBQojxurVS3eBNzzJAwpDVHHfJHlWKe /VpEreh9Oo1HJCllg9Eou4UcIcMyJ9lco1WDZBQU1cwOw/jzyw64SPBT20wHjvy3 gceSnyrsnOy/P/arLQZgbMR0QafQR6Zt4PmxPqEcAzkjoL9GBWU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:02 2026 by rpki-client