$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: WJDCMqsVOWEIvZRgxUqXeG8+Xc/NSv+LkIq7DNe3HF4= Subject key identifier: F6:ED:8F:19:06:8A:99:26:36:F4:CB:7B:97:8A:E0:28:77:03:5F:D3 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 54A06236E06AD08FC91FF12B3F359E4FA31BF8C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 03E1 Signing time: Thu 26 Mar 2026 03:21:48 +0000 Manifest this update: Thu 26 Mar 2026 03:16:48 +0000 Manifest next update: Sun 29 Mar 2026 04:27:48 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: PnchT8R5RpCN4k8Spu5fTv6EA5W8bwY6ae/7RCNAYSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a0:62:36:e0:6a:d0:8f:c9:1f:f1:2b:3f:35:9e:4f:a3:1b:f8:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Mar 26 03:16:48 2026 GMT Not After : Mar 29 04:27:48 2026 GMT Subject: CN=F6ED8F19068A992636F4CB7B978AE02877035FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:40:fa:53:ad:27:28:e7:74:fb:77:aa:1a:fc: d3:c4:ba:d4:61:3b:15:ca:22:17:b8:52:91:50:fb: 9b:a3:4f:c7:a1:cf:32:0b:07:67:ff:18:74:5a:7a: 5c:c8:7d:75:fd:c1:cd:b7:5b:bd:9d:6e:d1:c4:e5: d6:71:8c:b5:3b:04:00:76:e0:0c:91:77:8a:72:12: d7:e9:1f:41:90:89:ab:e1:4b:13:cd:f0:98:fb:07: 49:9a:28:61:fc:cb:06:6a:e0:1f:24:e3:ca:33:2b: 79:69:e0:11:7a:d0:2c:79:98:ac:42:ce:08:0b:37: 3c:f8:bc:d0:ea:bb:ce:0a:71:78:26:f9:bf:8d:dd: c3:1b:84:46:8e:4b:9b:6e:c3:92:d0:c1:23:2e:9c: 27:f9:ef:e4:6b:96:bf:18:ed:d5:fa:4a:74:4c:e5: 89:a3:40:b6:9c:17:56:2d:8c:a0:72:1e:99:b2:70: d5:31:64:c7:b0:2e:fc:2d:80:09:d4:25:07:34:fc: ad:13:bb:d6:0c:f8:75:8f:e5:d3:ed:94:aa:39:ea: 52:4c:8c:5f:04:5d:a7:66:ad:24:83:fd:b5:b1:8f: 56:d6:ff:7e:4a:8e:00:88:6f:0a:1b:80:77:4d:43: 07:19:95:01:ce:4e:9b:2d:da:2c:97:ea:0f:ad:99: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:ED:8F:19:06:8A:99:26:36:F4:CB:7B:97:8A:E0:28:77:03:5F:D3 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:24:4d:9c:a1:9d:23:cd:b9:50:83:1b:6a:4d:1f:ad:08:2d: 97:b7:ee:f1:35:50:d7:e6:69:0b:8c:8d:80:0d:d5:86:2b:51: d0:ea:57:1c:ea:c5:67:4c:3a:4d:8f:7e:f9:bf:67:ab:89:25: 14:7e:c7:87:4f:3f:12:81:bf:5e:2f:9d:38:c9:61:5e:31:21: ed:92:ba:0a:09:fd:22:42:59:0f:81:2d:a0:92:18:2c:01:df: 13:f2:12:ca:31:0e:6f:6e:40:96:df:1e:49:9a:8b:a0:32:da: 12:f0:e9:56:b0:ba:6a:ad:fa:6d:1d:bd:23:cc:7d:67:d1:89: 42:40:4e:ab:4a:5b:99:dc:14:e2:30:46:09:10:af:4d:3d:4d: 11:59:fb:d8:d1:ba:ae:71:9b:13:f6:03:e6:6a:2e:0a:84:d2: 03:be:65:19:da:3c:81:cb:60:5c:2d:85:11:6d:ed:37:af:06: 97:8c:8a:03:33:f1:b4:85:15:d5:23:4e:d6:51:c5:fd:88:6a: 04:97:ef:b8:8f:b7:ac:03:2d:da:c8:82:65:bf:3d:3d:e6:bf: b6:54:fa:8a:e1:a0:54:c8:48:25:c9:8d:a7:f1:3e:14:b1:ab: 04:30:d6:a8:93:1e:a7:d2:01:32:26:22:33:82:63:ff:6d:2e: fa:ab:73:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKBiNuBq0I/JH/ErPzWeT6Mb+MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNjAzMjYwMzE2NDhaFw0yNjAzMjkwNDI3NDhaMDMxMTAvBgNV BAMTKEY2RUQ4RjE5MDY4QTk5MjYzNkY0Q0I3Qjk3OEFFMDI4NzcwMzVGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQPpTrSco53T7d6oa/NPEutRh OxXKIhe4UpFQ+5ujT8ehzzILB2f/GHRaelzIfXX9wc23W72dbtHE5dZxjLU7BAB2 4AyRd4pyEtfpH0GQiavhSxPN8Jj7B0maKGH8ywZq4B8k48ozK3lp4BF60Cx5mKxC zggLNzz4vNDqu84KcXgm+b+N3cMbhEaOS5tuw5LQwSMunCf57+Rrlr8Y7dX6SnRM 5YmjQLacF1YtjKByHpmycNUxZMewLvwtgAnUJQc0/K0Tu9YM+HWP5dPtlKo56lJM jF8EXadmrSSD/bWxj1bW/35KjgCIbwobgHdNQwcZlQHOTpst2iyX6g+tmdcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9u2PGQaKmSY29Mt7l4rgKHcDX9MwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUkTZyhnSPNuVCDG2pNH60ILZe37vE1UNfm aQuMjYAN1YYrUdDqVxzqxWdMOk2Pfvm/Z6uJJRR+x4dPPxKBv14vnTjJYV4xIe2S ugoJ/SJCWQ+BLaCSGCwB3xPyEsoxDm9uQJbfHkmai6Ay2hLw6Vawumqt+m0dvSPM fWfRiUJATqtKW5ncFOIwRgkQr009TRFZ+9jRuq5xmxP2A+ZqLgqE0gO+ZRnaPIHL YFwthRFt7TevBpeMigMz8bSFFdUjTtZRxf2IagSX77iPt6wDLdrIgmW/PT3mv7ZU +orhoFTISCXJjafxPhSxqwQw1qiTHqfSATImIjOCY/9tLvqrcy0= -----END CERTIFICATE-----Generated at Thu Mar 26 23:52:56 2026 by rpki-client