$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: JgjnhisKWg1dzyMcQltzjLp6W1xsVcbuilRJERVbCF4= Subject key identifier: CD:F2:FE:A6:0B:B9:F6:24:E9:2D:19:9C:10:3C:8D:BE:A1:98:0E:D4 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 639C41D1950057CD52C8A543BB442CD82F21C99B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: 0123 Signing time: Tue 24 Mar 2026 14:41:02 +0000 Manifest this update: Tue 24 Mar 2026 14:36:02 +0000 Manifest next update: Sat 28 Mar 2026 02:24:02 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) 2: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: +Szr4/hHN6ce4fds2wt9/CR0H/ByKmwsjeAxzNj1vCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:9c:41:d1:95:00:57:cd:52:c8:a5:43:bb:44:2c:d8:2f:21:c9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Mar 24 14:36:02 2026 GMT Not After : Mar 28 02:24:02 2026 GMT Subject: CN=CDF2FEA60BB9F624E92D199C103C8DBEA1980ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d7:82:7d:39:13:f0:02:7b:40:01:58:a2:c7: fe:45:4c:e2:6c:5c:8b:09:d9:a9:79:70:80:15:b8: b7:c5:aa:88:8b:4e:80:e8:56:fb:1c:f8:73:3a:4f: c0:0f:3a:52:f1:71:00:ea:26:05:c4:79:e1:c1:ac: d2:ac:c2:26:b3:3d:eb:93:bb:5c:93:c3:65:84:93: 31:c8:8c:d4:cc:6c:d6:c3:01:c0:9b:f7:44:1a:ea: 00:68:9b:1a:fa:19:6e:77:09:67:7d:36:5a:60:eb: e8:eb:af:d4:79:66:6c:76:b0:ce:44:3f:4c:46:b2: 99:54:10:ed:5a:3c:7b:91:e8:8e:70:89:32:14:17: 34:86:31:02:bb:a1:9e:77:0a:64:e8:b1:2b:f6:46: b1:76:b4:6e:93:f9:c9:f0:ad:35:fa:c3:9f:ae:71: a2:89:09:cd:ff:73:76:48:c5:90:65:c4:dc:64:37: fb:4e:e7:65:28:45:1a:a6:bd:d2:0e:ae:78:f2:3c: fc:79:76:99:62:61:d9:cd:71:7e:4d:1b:e8:8e:6e: 86:9a:3d:f9:e7:03:c5:e5:b2:d9:d8:77:a3:f1:42: 52:cf:30:a9:78:13:90:be:5d:2d:fe:3e:64:bd:5d: e2:17:81:e3:73:ca:53:00:bb:04:29:ac:18:23:9e: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F2:FE:A6:0B:B9:F6:24:E9:2D:19:9C:10:3C:8D:BE:A1:98:0E:D4 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:60:b7:0c:69:06:dd:cd:21:2d:34:36:99:b6:79:d4:18:1a: 40:b7:cf:3e:67:85:d6:a0:cb:17:e4:58:88:4d:08:39:03:1e: 65:81:f3:aa:8b:b1:42:69:15:21:1c:7a:6a:0c:ec:9e:e8:18: 5c:a5:0b:ac:4b:42:99:a0:48:f7:39:64:cd:70:83:65:37:22: 2c:54:45:ac:1f:61:73:a6:37:15:ef:95:cd:a2:f1:6b:e9:f7: 84:7f:d6:84:3a:95:a0:36:5b:24:f1:06:c6:e6:fc:cf:58:6b: 31:ae:35:12:19:56:93:15:1c:da:93:1e:93:c3:39:d7:25:28: c3:0a:fd:c0:7a:94:e5:82:5f:38:91:1c:ce:22:df:a2:1e:75: f6:29:81:8a:a0:af:f8:9d:ab:ff:e8:2d:fb:12:ef:85:b0:4f: 2c:65:37:93:ea:fc:43:f8:05:06:91:3e:cb:44:c5:f6:00:c9: 38:81:c8:b6:ae:42:85:4a:15:46:b7:4c:5a:01:eb:83:a7:94: 44:1b:1e:2e:a0:27:ee:f1:7f:bc:a4:61:4c:8c:cc:ff:60:dc: df:c1:fc:9e:95:af:d8:e5:7b:56:13:79:c2:49:77:28:1b:29: b1:15:fb:8e:8b:95:fe:fc:ce:96:96:d3:20:98:cd:05:d8:6c: 82:cc:55:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY5xB0ZUAV81SyKVDu0Qs2C8hyZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNjAzMjQxNDM2MDJaFw0yNjAzMjgwMjI0MDJaMDMxMTAvBgNV BAMTKENERjJGRUE2MEJCOUY2MjRFOTJEMTk5QzEwM0M4REJFQTE5ODBFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ14J9ORPwAntAAViix/5FTOJs XIsJ2al5cIAVuLfFqoiLToDoVvsc+HM6T8APOlLxcQDqJgXEeeHBrNKswiazPeuT u1yTw2WEkzHIjNTMbNbDAcCb90Qa6gBomxr6GW53CWd9Nlpg6+jrr9R5Zmx2sM5E P0xGsplUEO1aPHuR6I5wiTIUFzSGMQK7oZ53CmTosSv2RrF2tG6T+cnwrTX6w5+u caKJCc3/c3ZIxZBlxNxkN/tO52UoRRqmvdIOrnjyPPx5dpliYdnNcX5NG+iOboaa PfnnA8XlstnYd6PxQlLPMKl4E5C+XS3+PmS9XeIXgeNzylMAuwQprBgjnly9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzfL+pgu59iTpLRmcEDyNvqGYDtQwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFgtwxpBt3NIS00Npm2edQYGkC3zz5nhdag yxfkWIhNCDkDHmWB86qLsUJpFSEcemoM7J7oGFylC6xLQpmgSPc5ZM1wg2U3IixU RawfYXOmNxXvlc2i8Wvp94R/1oQ6laA2WyTxBsbm/M9YazGuNRIZVpMVHNqTHpPD OdclKMMK/cB6lOWCXziRHM4i36IedfYpgYqgr/idq//oLfsS74WwTyxlN5Pq/EP4 BQaRPstExfYAyTiByLauQoVKFUa3TFoB64OnlEQbHi6gJ+7xf7ykYUyMzP9g3N/B /J6Vr9jle1YTecJJdygbKbEV+46Llf78zpaW0yCYzQXYbILMVes= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:13 2026 by rpki-client