$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: wJT3c/WLUDqn895ke2+OlFLL/d1VHfFT+eWgXrQtvjM= Subject key identifier: D3:35:81:39:C3:24:01:46:B3:5B:9F:D3:8F:7C:8E:42:D0:35:5A:78 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 29F9E2CFDE005320A1F982FF5A1149807320C164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 0560 Signing time: Tue 24 Mar 2026 15:20:48 +0000 Manifest this update: Tue 24 Mar 2026 15:15:48 +0000 Manifest next update: Sat 28 Mar 2026 02:28:48 +0000 Files and hashes: 1: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: tUHyZa6wlF6iFsmwgxZqrYDSM5r1ppOouXoufr3orpg=) 2: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) 3: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f9:e2:cf:de:00:53:20:a1:f9:82:ff:5a:11:49:80:73:20:c1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Mar 24 15:15:48 2026 GMT Not After : Mar 28 02:28:48 2026 GMT Subject: CN=D3358139C3240146B35B9FD38F7C8E42D0355A78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:48:9a:31:54:25:c4:d5:7d:97:11:89:4d: 91:3b:2f:d0:6f:a2:bd:e1:f6:46:d1:e2:23:5b:cd: 77:8f:33:4b:4c:2a:bb:75:35:a3:5a:9f:27:71:a2: 96:f1:e3:e7:56:c1:8b:81:1e:18:08:d7:7f:78:bc: f0:3c:48:2a:1e:55:db:26:bc:0c:60:ec:64:b3:32: 97:fa:04:81:3c:62:40:71:34:f1:42:44:2b:13:07: 98:b7:2e:ef:f5:d6:7e:b9:37:ed:6d:de:10:08:d8: 36:fe:9e:0e:fa:38:64:83:f9:8b:53:53:4e:1f:e6: 59:50:7a:ce:1c:b7:68:c5:39:25:d1:a5:8e:35:2f: 61:05:28:81:f9:52:65:c5:ee:75:94:08:ae:c8:af: 35:1e:09:3c:7c:fc:c9:46:7e:7d:79:17:bc:ed:32: de:30:b0:46:b8:92:64:60:2e:c4:51:82:ce:b7:37: 75:62:d0:0a:64:5a:13:66:82:f3:5d:03:70:ef:95: cd:72:57:10:dd:a9:31:a8:0f:49:55:e8:41:ae:eb: 6e:b6:68:4a:e8:ec:f7:f5:c3:6f:f2:4b:17:f9:a2: a2:d1:ee:73:ab:69:0c:4b:60:b6:06:e2:c0:06:71: d9:dd:e5:d4:d2:54:a8:0d:90:7e:64:61:c0:d7:56: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:81:39:C3:24:01:46:B3:5B:9F:D3:8F:7C:8E:42:D0:35:5A:78 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fa:b0:bb:47:16:65:16:4e:9e:eb:54:c4:77:3b:fb:67:cf: 22:02:4f:ab:65:dc:05:18:0f:07:78:45:a1:30:a0:3f:b9:eb: ef:28:45:5c:ac:3e:b1:23:b4:2a:7c:c0:a4:4b:07:37:be:2e: 8c:a4:d5:8f:e5:c8:3c:49:06:26:22:8b:bc:6e:c3:65:37:2b: 6e:f4:65:1d:47:65:5f:ad:f4:44:9d:68:43:4b:bd:dc:37:e9: bc:95:f7:57:e8:f2:ef:db:fa:d4:94:91:bc:94:10:af:91:84: dd:58:14:6a:ef:3f:94:7a:af:54:20:85:55:96:29:d5:ec:cb: 8b:e8:2d:55:2f:98:15:ff:a2:47:8e:64:98:3c:38:20:3e:ac: 46:b7:c3:8d:b7:f1:c6:2c:57:5a:38:ac:7e:cb:28:fd:ea:f0: b2:06:a7:fa:43:1c:13:96:8b:e8:46:74:7b:35:89:a0:1d:ad: 46:8f:13:82:0a:85:78:52:41:38:69:df:a0:a5:42:7b:f0:86: c5:41:62:dd:a5:ab:16:da:a1:97:1b:95:e4:ca:94:3d:84:3a: 65:60:96:b9:c1:c9:88:71:41:44:b2:c6:1d:80:bb:6a:8b:21: 6b:76:7a:52:4f:61:66:c5:81:31:5a:ac:7c:68:5a:b0:67:0d: e6:24:08:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKfniz94AUyCh+YL/WhFJgHMgwWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNjAzMjQxNTE1NDhaFw0yNjAzMjgwMjI4NDhaMDMxMTAvBgNV BAMTKEQzMzU4MTM5QzMyNDAxNDZCMzVCOUZEMzhGN0M4RTQyRDAzNTVBNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC640iaMVQlxNV9lxGJTZE7L9Bv or3h9kbR4iNbzXePM0tMKrt1NaNanydxopbx4+dWwYuBHhgI1394vPA8SCoeVdsm vAxg7GSzMpf6BIE8YkBxNPFCRCsTB5i3Lu/11n65N+1t3hAI2Db+ng76OGSD+YtT U04f5llQes4ct2jFOSXRpY41L2EFKIH5UmXF7nWUCK7IrzUeCTx8/MlGfn15F7zt Mt4wsEa4kmRgLsRRgs63N3Vi0ApkWhNmgvNdA3Dvlc1yVxDdqTGoD0lV6EGu6262 aEro7Pf1w2/ySxf5oqLR7nOraQxLYLYG4sAGcdnd5dTSVKgNkH5kYcDXVolTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zWBOcMkAUazW5/Tj3yOQtA1WngwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT6sLtHFmUWTp7rVMR3O/tnzyICT6tl3AUY Dwd4RaEwoD+56+8oRVysPrEjtCp8wKRLBze+Loyk1Y/lyDxJBiYii7xuw2U3K270 ZR1HZV+t9ESdaENLvdw36byV91fo8u/b+tSUkbyUEK+RhN1YFGrvP5R6r1QghVWW KdXsy4voLVUvmBX/okeOZJg8OCA+rEa3w4238cYsV1o4rH7LKP3q8LIGp/pDHBOW i+hGdHs1iaAdrUaPE4IKhXhSQThp36ClQnvwhsVBYt2lqxbaoZcbleTKlD2EOmVg lrnByYhxQUSyxh2Au2qLIWt2elJPYWbFgTFarHxoWrBnDeYkCFA= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:49 2026 by rpki-client