$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: 9E1pigllbR43H3yHKl6QMBjsUeHoYuDBrUPBEJvYwjU= Subject key identifier: 36:6F:8A:A3:0D:F5:66:DC:6A:23:2F:0F:91:AF:55:8B:DC:9D:B3:20 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 6E79CF7F6BA5135F276623D90FCD15885AC0E914 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: 0105 Signing time: Wed 25 Mar 2026 12:21:08 +0000 Manifest this update: Wed 25 Mar 2026 12:16:08 +0000 Manifest next update: Sat 28 Mar 2026 17:02:08 +0000 Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) 2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: +obv7sX0+29ZITlJImgDetS+rx6aC7JxiT9GsbZIsnY=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:79:cf:7f:6b:a5:13:5f:27:66:23:d9:0f:cd:15:88:5a:c0:e9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Mar 25 12:16:08 2026 GMT Not After : Mar 28 17:02:08 2026 GMT Subject: CN=366F8AA30DF566DC6A232F0F91AF558BDC9DB320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:97:6f:20:ea:fb:a0:f5:ef:99:e0:73:93: 06:1d:2e:30:ca:a0:f3:65:99:9a:6e:9d:fe:9e:23: 37:6a:a7:b5:6d:d1:77:96:8f:0c:95:d5:7f:9d:0a: 07:27:0f:39:6c:10:c1:55:6f:6a:56:c5:82:81:e1: 72:3b:52:89:ff:29:36:6f:e4:12:86:05:f8:c6:44: d7:79:3d:17:fc:93:96:0a:bd:e5:fc:41:9a:de:d5: 2f:02:97:a6:56:1d:ff:a5:53:87:8d:d1:01:62:ee: 5b:4e:17:11:a6:50:07:f4:42:3f:a2:48:59:4d:1c: ac:87:30:22:af:e1:c8:11:9b:c2:b1:fd:9d:08:78: 39:d4:bd:4b:f8:8a:a1:cc:43:e0:82:cd:c0:3d:19: 5c:43:41:54:62:1b:1a:58:8e:21:16:64:8d:99:35: c5:ff:8c:cc:1c:62:09:01:5a:a4:bb:62:dd:b5:ac: 95:b8:11:3b:d7:a0:00:87:75:dc:a0:f2:e9:5f:a4: e3:86:2a:68:88:1c:f6:31:3b:87:48:1f:19:e4:09: c7:36:7f:aa:c3:07:04:52:13:d6:c5:18:3f:4a:9b: 6f:74:55:ee:11:ef:52:92:7d:21:1e:b1:c4:66:3d: 4d:4d:31:bc:3f:28:db:3d:24:08:7d:a6:2a:cd:54: cb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6F:8A:A3:0D:F5:66:DC:6A:23:2F:0F:91:AF:55:8B:DC:9D:B3:20 X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:8e:48:7f:4b:0c:22:8b:46:7f:62:ff:81:67:09:24:e2:cd: 41:bb:75:c6:92:fb:80:49:72:dd:f8:93:d5:34:6f:e9:82:cc: cd:cd:b3:9f:da:e3:47:f0:e7:9b:11:7c:36:bf:c2:d5:6b:c4: 09:0b:73:c1:cb:25:a5:c4:65:0e:29:1f:0b:65:5f:e3:04:14: 45:ca:f5:f4:13:01:bc:51:98:f1:b3:20:b3:56:74:db:54:b0: fd:83:c8:49:c6:b8:66:80:56:53:90:11:ac:d1:bf:9f:a6:30: dd:9b:e3:29:dd:ad:b9:e8:3d:cd:e4:18:ff:95:d1:10:38:04: 31:ec:3d:8a:cb:ca:e3:8c:9b:21:9f:13:0a:b9:87:72:6c:48: ef:a6:22:05:9b:fb:df:96:86:04:23:fb:ba:7b:fc:92:87:07: f1:91:f9:fc:8b:70:89:ec:5d:98:f4:e5:da:7e:3b:d7:af:43: ba:03:b5:0a:01:4b:68:fa:a3:f3:2b:7f:4d:fa:73:32:82:bf: 9a:09:45:43:7e:b9:20:45:d0:96:dd:f9:35:6e:9f:67:31:13: b8:95:76:f4:c4:5d:8c:20:9d:40:b9:1e:c7:f4:28:df:c3:d7: 07:de:69:8c:45:8e:e3:83:8f:75:b2:69:14:56:fe:e7:a3:88: 3a:c1:9e:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnnPf2ulE18nZiPZD80ViFrA6RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNjAzMjUxMjE2MDhaFw0yNjAzMjgxNzAyMDhaMDMxMTAvBgNV BAMTKDM2NkY4QUEzMERGNTY2REM2QTIzMkYwRjkxQUY1NThCREM5REIzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcZdvIOr7oPXvmeBzkwYdLjDK oPNlmZpunf6eIzdqp7Vt0XeWjwyV1X+dCgcnDzlsEMFVb2pWxYKB4XI7Uon/KTZv 5BKGBfjGRNd5PRf8k5YKveX8QZre1S8Cl6ZWHf+lU4eN0QFi7ltOFxGmUAf0Qj+i SFlNHKyHMCKv4cgRm8Kx/Z0IeDnUvUv4iqHMQ+CCzcA9GVxDQVRiGxpYjiEWZI2Z NcX/jMwcYgkBWqS7Yt21rJW4ETvXoACHddyg8ulfpOOGKmiIHPYxO4dIHxnkCcc2 f6rDBwRSE9bFGD9Km290Ve4R71KSfSEescRmPU1NMbw/KNs9JAh9pirNVMvXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNm+Kow31ZtxqIy8Pka9Vi9ydsyAwHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuOSH9LDCKLRn9i/4FnCSTizUG7dcaS+4BJ ct34k9U0b+mCzM3Ns5/a40fw55sRfDa/wtVrxAkLc8HLJaXEZQ4pHwtlX+MEFEXK 9fQTAbxRmPGzILNWdNtUsP2DyEnGuGaAVlOQEazRv5+mMN2b4yndrbnoPc3kGP+V 0RA4BDHsPYrLyuOMmyGfEwq5h3JsSO+mIgWb+9+WhgQj+7p7/JKHB/GR+fyLcIns XZj05dp+O9evQ7oDtQoBS2j6o/Mrf036czKCv5oJRUN+uSBF0Jbd+TVun2cxE7iV dvTEXYwgnUC5Hsf0KN/D1wfeaYxFjuODj3WyaRRW/uejiDrBnr0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:59 2026 by rpki-client