$ rpki-client -vvf repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft File: B2650BD2D997B6C198A4B362B7395AC364683312.mft (raw, json) Hash identifier: dMb1fts0i6CN4Qf0KnJeweE+0PAJrUhSYCY8rDJfGvg= Subject key identifier: 74:CB:FA:1D:04:41:F7:87:54:E5:6F:18:19:31:7F:BD:2E:00:D1:25 Authority key identifier: B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 Certificate issuer: /CN=B2650BD2D997B6C198A4B362B7395AC364683312 Certificate serial: 672CAFF3F564D52CE7D6C901853B66192E4D63CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft Manifest number: 0236 Signing time: Wed 25 Mar 2026 06:01:03 +0000 Manifest this update: Wed 25 Mar 2026 05:56:03 +0000 Manifest next update: Sat 28 Mar 2026 13:12:03 +0000 Files and hashes: 1: B2650BD2D997B6C198A4B362B7395AC364683312.crl (hash: 5hauR9n1l/TWaP8zj682tNucVSwiOtZF3bGk2cNqOZc=) 2: 3130332e31372e33322e302f32342d3234203d3e20313530323238.roa (hash: IFrFNgL9nGnkBy6pVhjob4v5DLOWZyxcdQ+rkKOm7OM=) 3: 3130332e31372e33332e302f32342d3234203d3e20313530323238.roa (hash: Din5W7YK7LMJbRJUi9wsZasS4GJU6jj09R0J09VzjXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2c:af:f3:f5:64:d5:2c:e7:d6:c9:01:85:3b:66:19:2e:4d:63:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2650BD2D997B6C198A4B362B7395AC364683312 Validity Not Before: Mar 25 05:56:03 2026 GMT Not After : Mar 28 13:12:03 2026 GMT Subject: CN=74CBFA1D0441F78754E56F1819317FBD2E00D125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:f1:33:b5:07:ee:6b:05:68:e1:18:c1:cc: 65:bb:fb:c5:b1:98:c0:e6:8b:1e:b6:4d:8d:bf:9c: a6:97:16:90:d8:0a:0c:dd:53:e9:4e:d4:e6:73:31: 1e:12:52:86:a8:fc:3c:87:2b:43:d3:31:43:79:5f: 99:a1:84:c6:67:6d:09:26:2c:d9:6d:5e:96:08:6b: 19:3a:0b:b7:b8:d1:49:da:32:77:d3:0b:cb:f3:e5: 4a:28:bc:eb:c2:4d:99:e9:bd:3f:48:0c:a8:14:68: 27:da:24:6e:4e:4e:1a:62:f5:7e:57:ce:8a:56:1e: ae:f1:c9:13:59:ab:b3:73:6d:a0:f3:11:9f:68:b0: a4:32:f5:3a:6b:e7:2a:9b:e4:40:ca:51:89:4e:77: 7e:b2:f8:c5:b0:9a:17:99:07:7c:ff:4b:70:2b:7a: 9b:23:f8:c5:de:d7:28:99:53:95:76:2a:bb:04:d5: e9:f4:d2:86:7a:a3:f8:d3:70:7d:b6:e1:e3:b8:c1: a4:39:d0:7c:9e:46:9e:d1:ad:92:a5:88:6e:4c:1c: b8:45:55:d0:86:f8:ca:b2:6b:48:4a:f0:51:f4:06: d8:f7:3e:42:ca:4f:cd:5c:32:e6:f2:a4:8e:84:75: 08:f1:72:37:6d:9d:24:c3:6b:1a:9a:bf:40:02:9e: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CB:FA:1D:04:41:F7:87:54:E5:6F:18:19:31:7F:BD:2E:00:D1:25 X509v3 Authority Key Identifier: keyid:B2:65:0B:D2:D9:97:B6:C1:98:A4:B3:62:B7:39:5A:C3:64:68:33:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2650BD2D997B6C198A4B362B7395AC364683312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b905766-440e-4bcb-ae72-3e78831ce9dc/0/B2650BD2D997B6C198A4B362B7395AC364683312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:9f:d6:d7:f8:1a:ec:53:b4:26:3b:e0:b9:ef:5a:f9:09:b6: e3:0a:f0:32:22:10:23:63:d6:93:85:0d:34:23:96:33:d1:41: e1:76:de:61:ee:af:19:12:c8:38:18:d4:6b:19:6b:36:b4:16: b8:94:55:c4:3a:66:a6:5e:de:0d:73:02:62:ed:67:7b:15:3d: 8d:34:3f:ec:5f:ab:d8:04:0f:7c:f2:a6:9c:1b:50:74:86:dc: c3:c8:53:bd:5b:29:17:e5:20:76:9d:5d:c4:75:e9:86:4f:ee: 39:de:5e:cc:36:f9:f2:ce:4d:e4:c2:1d:0d:77:44:19:86:a5: 77:e1:af:54:bf:55:59:e6:f8:c1:6b:55:7f:e6:ee:b4:68:ba: d2:a5:4a:3a:c0:57:b5:b3:56:f3:4b:b3:62:2c:df:d3:9c:f1: c1:bb:84:26:98:2d:e2:67:43:4e:01:3c:87:a0:34:c2:da:87: 48:a5:f4:21:dd:9b:4b:1f:ef:d3:ea:00:3c:d8:53:1f:06:31: f8:ea:5f:75:01:c6:f2:a5:47:3a:15:7b:46:55:67:95:87:39: ce:c4:7e:9e:7e:93:ea:63:da:a2:1d:11:f1:c0:ae:dc:3a:bb: 20:76:d1:31:20:dd:fc:52:33:a9:1c:1a:20:c4:fe:f5:8f:c2: b5:2b:52:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyyv8/Vk1Szn1skBhTtmGS5NY8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2 NDY4MzMxMjAeFw0yNjAzMjUwNTU2MDNaFw0yNjAzMjgxMzEyMDNaMDMxMTAvBgNV BAMTKDc0Q0JGQTFEMDQ0MUY3ODc1NEU1NkYxODE5MzE3RkJEMkUwMEQxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmTfEztQfuawVo4RjBzGW7+8Wx mMDmix62TY2/nKaXFpDYCgzdU+lO1OZzMR4SUoao/DyHK0PTMUN5X5mhhMZnbQkm LNltXpYIaxk6C7e40UnaMnfTC8vz5UoovOvCTZnpvT9IDKgUaCfaJG5OThpi9X5X zopWHq7xyRNZq7NzbaDzEZ9osKQy9Tpr5yqb5EDKUYlOd36y+MWwmheZB3z/S3Ar epsj+MXe1yiZU5V2KrsE1en00oZ6o/jTcH224eO4waQ50HyeRp7RrZKliG5MHLhF VdCG+Mqya0hK8FH0Btj3PkLKT81cMubypI6EdQjxcjdtnSTDaxqav0ACnvJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdMv6HQRB94dU5W8YGTF/vS4A0SUwHwYDVR0j BBgwFoAUsmUL0tmXtsGYpLNitzlaw2RoMxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjkwNTc2Ni00NDBlLTRiY2ItYWU3Mi0zZTc4ODMxY2U5ZGMvMC9CMjY1MEJEMkQ5 OTdCNkMxOThBNEIzNjJCNzM5NUFDMzY0NjgzMzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVBQzM2NDY4 MzMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I5MDU3NjYtNDQwZS00YmNiLWFl NzItM2U3ODgzMWNlOWRjLzAvQjI2NTBCRDJEOTk3QjZDMTk4QTRCMzYyQjczOTVB QzM2NDY4MzMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJif1tf4GuxTtCY74LnvWvkJtuMK8DIiECNj 1pOFDTQjljPRQeF23mHurxkSyDgY1GsZaza0FriUVcQ6ZqZe3g1zAmLtZ3sVPY00 P+xfq9gED3zyppwbUHSG3MPIU71bKRflIHadXcR16YZP7jneXsw2+fLOTeTCHQ13 RBmGpXfhr1S/VVnm+MFrVX/m7rRoutKlSjrAV7WzVvNLs2Is39Oc8cG7hCaYLeJn Q04BPIegNMLah0il9CHdm0sf79PqADzYUx8GMfjqX3UBxvKlRzoVe0ZVZ5WHOc7E fp5+k+pj2qIdEfHArtw6uyB20TEg3fxSM6kcGiDE/vWPwrUrUlM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:37:19 2026 by rpki-client