$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: 1/8pq7H3YuzFccu295WeZS7hXHQwsYuBGyxEVuAgpQw= Subject key identifier: 66:2B:C1:38:C4:2B:AA:9D:AF:58:CF:BC:EA:E6:73:44:62:C0:BA:0E Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 55288A32C7E91BA9464BC12DC4298976ADAF5F2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0170 Signing time: Thu 26 Mar 2026 00:31:26 +0000 Manifest this update: Thu 26 Mar 2026 00:26:26 +0000 Manifest next update: Sun 29 Mar 2026 09:59:26 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: c5Ptunx0DxSg1RC8HNdaw2kkwRNC2sVu1ggTOO3Xchs=) 2: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: 4645lfhmls+8gADHX8iXv+nux0Q0PkkWXsELZz1Vq70=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: D+929vyik9rLnra49U9ffY9oB4C7JSkmWEo+cZ0qzyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:28:8a:32:c7:e9:1b:a9:46:4b:c1:2d:c4:29:89:76:ad:af:5f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Mar 26 00:26:26 2026 GMT Not After : Mar 29 09:59:26 2026 GMT Subject: CN=662BC138C42BAA9DAF58CFBCEAE6734462C0BA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:cf:15:f4:c9:69:01:21:8d:dd:79:c8:b9: 42:90:ce:6d:59:bd:79:99:e0:5e:ee:9a:37:a6:d7: cb:ab:c7:e7:59:2f:d7:37:cf:18:eb:78:5f:1e:be: f5:d9:92:d4:a1:bb:72:87:e1:99:e0:7a:71:62:9c: fe:fa:8f:ad:7d:39:35:0a:97:0e:c3:e0:2d:3f:70: ee:c3:44:40:01:0d:1a:b0:be:55:44:28:5d:ea:7d: be:8f:e8:ce:a3:10:f5:0b:35:0b:f5:c3:ab:a7:79: ae:d3:f1:e4:c7:93:10:e8:f0:ea:1f:03:16:08:4f: fa:e9:51:7a:02:f1:19:ba:9e:b4:5b:01:ac:2b:91: 06:89:61:96:b6:75:57:72:9f:bf:76:0e:11:b6:9d: d6:5b:ce:99:53:d3:0a:36:35:a5:31:db:a5:0f:30: 66:07:51:10:74:ad:a3:97:e1:74:ba:74:16:74:5f: 06:94:24:83:f9:26:31:f8:77:a4:0b:b4:c5:b6:6c: 74:fb:5d:88:ec:05:61:83:7d:09:78:64:23:c4:61: c1:b7:66:8b:5a:5d:16:1a:b7:fb:8f:30:b7:48:12: 3e:5b:3b:b6:f9:b9:b7:f6:1c:98:03:8c:19:77:e0: 6a:4f:99:f4:1e:6d:97:d4:1a:16:6d:71:d0:d4:bd: f3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:2B:C1:38:C4:2B:AA:9D:AF:58:CF:BC:EA:E6:73:44:62:C0:BA:0E X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:83:e2:4d:83:84:55:7f:83:a5:42:15:bd:5c:b0:ab:f8:83: d8:24:22:9f:cb:58:ce:7e:a3:fd:df:46:54:fa:56:3b:2f:09: d0:07:6b:e3:63:06:f9:5b:1f:ca:33:b8:f1:68:3a:e3:0f:f2: ba:cc:93:04:12:3e:21:3d:e4:74:b5:51:71:5d:66:87:b4:7c: 4b:ab:5f:83:f4:f2:91:60:13:a2:fd:5e:24:02:bd:d3:a4:ea: b9:25:35:1c:50:dc:22:ee:e1:c2:ea:81:2a:28:fc:fa:89:91: 6b:7d:e2:3b:8d:1b:e8:32:98:29:84:89:6b:a2:39:7f:2d:5b: 91:2f:b0:5e:51:95:d8:cf:ae:12:3a:14:bb:07:bb:19:2d:ca: 09:a1:2e:ef:b5:d6:2e:3c:61:38:c2:6e:73:d9:82:ce:69:c2: b6:21:c1:79:8e:9f:64:a5:99:d5:86:45:c9:dd:b5:c5:77:bb: d4:cb:0e:38:f9:57:3b:45:21:b0:1d:15:e5:a8:67:2a:58:7a: 91:7e:05:94:88:f9:4e:1c:c0:ba:23:b7:85:99:48:3e:a0:69: f0:5b:74:1d:80:d4:d4:f5:c5:72:b2:86:cd:4b:e6:51:bf:e4: 06:44:ae:e9:0b:79:36:bd:61:ef:16:45:00:23:ad:dc:e2:07: 5f:74:19:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSiKMsfpG6lGS8EtxCmJdq2vXyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNjAzMjYwMDI2MjZaFw0yNjAzMjkwOTU5MjZaMDMxMTAvBgNV BAMTKDY2MkJDMTM4QzQyQkFBOURBRjU4Q0ZCQ0VBRTY3MzQ0NjJDMEJBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Cs8V9MlpASGN3XnIuUKQzm1Z vXmZ4F7umjem18urx+dZL9c3zxjreF8evvXZktShu3KH4ZngenFinP76j619OTUK lw7D4C0/cO7DREABDRqwvlVEKF3qfb6P6M6jEPULNQv1w6unea7T8eTHkxDo8Oof AxYIT/rpUXoC8Rm6nrRbAawrkQaJYZa2dVdyn792DhG2ndZbzplT0wo2NaUx26UP MGYHURB0raOX4XS6dBZ0XwaUJIP5JjH4d6QLtMW2bHT7XYjsBWGDfQl4ZCPEYcG3 ZotaXRYat/uPMLdIEj5bO7b5ubf2HJgDjBl34GpPmfQebZfUGhZtcdDUvfP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZivBOMQrqp2vWM+86uZzRGLAug4wHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCD4k2DhFV/g6VCFb1csKv4g9gkIp/LWM5+ o/3fRlT6VjsvCdAHa+NjBvlbH8ozuPFoOuMP8rrMkwQSPiE95HS1UXFdZoe0fEur X4P08pFgE6L9XiQCvdOk6rklNRxQ3CLu4cLqgSoo/PqJkWt94juNG+gymCmEiWui OX8tW5EvsF5RldjPrhI6FLsHuxktygmhLu+11i48YTjCbnPZgs5pwrYhwXmOn2Sl mdWGRcndtcV3u9TLDjj5VztFIbAdFeWoZypYepF+BZSI+U4cwLojt4WZSD6gafBb dB2A1NT1xXKyhs1L5lG/5AZErukLeTa9Ye8WRQAjrdziB190GZ8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:52 2026 by rpki-client