$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft File: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft (raw, json) Hash identifier: yQm9Y23bDRtBxKF5XwDBo5KhCwVslDDQ+/C5jPTHI1s= Subject key identifier: 6A:82:5C:1A:E8:49:EE:7B:EF:E9:56:37:0D:9D:AA:D3:E3:0E:6A:85 Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC Certificate issuer: /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Certificate serial: 011B542A3C468933E3F54D5E18D1F2BEC664F81D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft Manifest number: 04C9 Signing time: Tue 24 Mar 2026 22:40:45 +0000 Manifest this update: Tue 24 Mar 2026 22:35:45 +0000 Manifest next update: Sat 28 Mar 2026 04:23:45 +0000 Files and hashes: 1: 3130332e3231302e3132302e302f32322d3234203d3e20313334363538.roa (hash: w/W7ZPLOwJZFB+XGZFv4rUXEnNF/+lRXZH9LftXeoZo=) 2: 3130332e3231302e3132302e302f32342d3234203d3e20313334363538.roa (hash: 9ga4Dz2S1yZEHVR/bNJu6K+f7jqkSZliYiYDlhJqlSc=) 3: 3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (hash: LTZWN20UeEpbk3/6yOOjk81arYUEDuYxFg/WlS2mmEI=) 4: 3130332e3231302e3132322e302f32342d3234203d3e20313334363538.roa (hash: P41PFR8M2pkKOmCdUu6l5sHUIprRbj+Eb/jozno97jU=) 5: 323430343a366338303a3a2f33322d3438203d3e20313334363538.roa (hash: /De9PraBKQ9VNMLW73eKsHyTdK5CxUO/Ms23Vqs0bog=) 6: 3130332e3231302e3132332e302f32342d3234203d3e20313334363538.roa (hash: NkQ9eWcHVREh5sfesIOFWzh9yqFj5sw8tkhu4ZxcoSQ=) 7: B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl (hash: 8isjHU8K0M8zYnLzqfMABFH0lREw0XyCgrQTtjVD9a4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1b:54:2a:3c:46:89:33:e3:f5:4d:5e:18:d1:f2:be:c6:64:f8:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC Validity Not Before: Mar 24 22:35:45 2026 GMT Not After : Mar 28 04:23:45 2026 GMT Subject: CN=6A825C1AE849EE7BEFE956370D9DAAD3E30E6A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:57:c4:6f:94:87:f2:c6:a9:4a:92:1d:c5: 6b:2b:15:55:b0:16:c5:f4:2b:52:24:5d:10:14:29: d5:a6:a6:86:0e:4e:5e:44:e4:40:fd:2b:36:9b:13: bd:c9:c4:53:e9:d6:32:1a:0e:05:f4:d7:b0:ee:a1: 3c:54:95:93:36:59:8f:24:e0:27:52:6b:2c:a3:f5: d0:e5:19:ae:81:03:f0:93:bb:05:0c:38:f4:9c:05: 51:e6:13:aa:d9:fd:da:5d:cf:a3:66:d8:35:4f:6e: 48:43:65:74:d7:52:05:8c:80:c1:33:0c:db:ad:e1: eb:ca:ce:9d:44:9b:04:6a:0b:f3:6c:33:14:ba:2d: 0e:6c:5e:fd:5b:03:05:ac:45:6e:4b:b1:48:2b:98: 8e:01:02:3d:20:d8:c9:df:1e:83:82:bd:12:00:15: a4:29:33:1f:09:5e:14:d5:6c:bc:69:ce:7b:1e:b3: a1:0b:4b:52:01:c5:1c:32:f6:b3:20:66:83:8b:dc: 0d:cf:f9:ce:8c:cd:10:4c:81:3e:29:b3:5a:61:a5: 1d:fe:72:d6:61:e4:b2:4c:70:7e:60:1e:08:c4:88: 50:f7:5a:18:54:b7:0c:34:8c:e9:1c:6f:21:7b:cc: f7:65:cc:ca:46:b3:a3:91:4f:ce:f7:23:19:c8:67: 77:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:82:5C:1A:E8:49:EE:7B:EF:E9:56:37:0D:9D:AA:D3:E3:0E:6A:85 X509v3 Authority Key Identifier: keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:83:47:f2:53:b7:f7:a3:0d:af:55:db:9c:e2:32:95:28:eb: 93:3e:61:44:7d:86:44:36:6a:70:99:35:87:c3:53:22:b7:48: 77:84:3f:13:9e:f0:c1:a3:90:46:7f:6d:16:00:28:d9:93:1f: 0d:29:a4:83:97:85:91:4b:cd:fa:aa:c5:76:f7:2a:91:40:1e: 95:68:9c:9f:d8:67:cf:2a:95:8c:26:74:5d:cf:85:ec:2c:54: 26:64:04:d9:5b:19:df:dd:49:62:b8:fc:64:ed:2e:95:2a:3b: e0:4a:f6:fc:4e:d8:35:12:11:79:e4:c5:84:ad:f5:08:49:2f: 8f:9b:76:84:84:2f:cc:6f:f4:bc:79:19:82:00:40:9b:a1:fc: cc:da:26:82:74:21:01:12:f3:df:98:73:8a:d1:23:b1:9b:0b: 69:ad:e5:fa:42:71:37:28:1f:51:bb:48:84:45:2b:1e:7a:13: 2a:8c:fc:07:75:ab:07:01:59:cf:8e:87:0d:79:e4:3e:ba:77: 11:1d:ef:e9:e9:b1:75:59:74:3f:6a:cc:f2:56:a3:e2:5b:ce: f9:92:d0:ff:31:24:d9:39:0a:99:6b:e4:eb:31:ba:d2:95:62: 95:a2:a4:f1:a1:fc:24:0c:7b:7b:f8:de:3a:e3:9d:4e:6e:40: 45:b5:29:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARtUKjxGiTPj9U1eGNHyvsZk+B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVG RTY3QzNFQzAeFw0yNjAzMjQyMjM1NDVaFw0yNjAzMjgwNDIzNDVaMDMxMTAvBgNV BAMTKDZBODI1QzFBRTg0OUVFN0JFRkU5NTYzNzBEOURBQUQzRTMwRTZBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVNFfEb5SH8sapSpIdxWsrFVWw FsX0K1IkXRAUKdWmpoYOTl5E5ED9KzabE73JxFPp1jIaDgX017DuoTxUlZM2WY8k 4CdSayyj9dDlGa6BA/CTuwUMOPScBVHmE6rZ/dpdz6Nm2DVPbkhDZXTXUgWMgMEz DNut4evKzp1EmwRqC/NsMxS6LQ5sXv1bAwWsRW5LsUgrmI4BAj0g2MnfHoOCvRIA FaQpMx8JXhTVbLxpznses6ELS1IBxRwy9rMgZoOL3A3P+c6MzRBMgT4ps1phpR3+ ctZh5LJMcH5gHgjEiFD3WhhUtww0jOkcbyF7zPdlzMpGs6ORT873IxnIZ3cVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoJcGuhJ7nvv6VY3DZ2q0+MOaoUwHwYDVR0j BBgwFoAUsR5cm04yJGD9cBOH8luerv5nw+wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDQ4NzM2MC04NzM1LTQxZDctOTdhOC1kYmIzNGQ3OWVmZjQvMC9CMTFFNUM5QjRF MzIyNDYwRkQ3MDEzODdGMjVCOUVBRUZFNjdDM0VDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlFQUVGRTY3 QzNFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ0ODczNjAtODczNS00MWQ3LTk3 YTgtZGJiMzRkNzllZmY0LzAvQjExRTVDOUI0RTMyMjQ2MEZENzAxMzg3RjI1QjlF QUVGRTY3QzNFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACWDR/JTt/ejDa9V25ziMpUo65M+YUR9hkQ2 anCZNYfDUyK3SHeEPxOe8MGjkEZ/bRYAKNmTHw0ppIOXhZFLzfqqxXb3KpFAHpVo nJ/YZ88qlYwmdF3PhewsVCZkBNlbGd/dSWK4/GTtLpUqO+BK9vxO2DUSEXnkxYSt 9QhJL4+bdoSEL8xv9Lx5GYIAQJuh/MzaJoJ0IQES89+Yc4rRI7GbC2mt5fpCcTco H1G7SIRFKx56EyqM/Ad1qwcBWc+Ohw155D66dxEd7+npsXVZdD9qzPJWo+JbzvmS 0P8xJNk5Cplr5OsxutKVYpWipPGh/CQMe3v43jrjnU5uQEW1KZ0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:40 2026 by rpki-client