$ rpki-client -vvf repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft File: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft (raw, json) Hash identifier: lBmCrl/yDM8F2nOSWzmIvAdiq7PWVi3WNmKm5T+Igas= Subject key identifier: 2D:84:27:A5:27:48:E8:79:33:EC:D2:19:01:B7:9C:9D:E3:E0:1F:6A Authority key identifier: B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C Certificate issuer: /CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Certificate serial: 3673B1DEAE80E8E0D592A70C093DDC45EE11B6F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft Manifest number: 0113 Signing time: Thu 26 Mar 2026 09:20:06 +0000 Manifest this update: Thu 26 Mar 2026 09:15:06 +0000 Manifest next update: Sun 29 Mar 2026 09:28:06 +0000 Files and hashes: 1: 3136302e32352e35382e302f32332d3234203d3e20313532383333.roa (hash: 7IuV0NhxXlp455EXe3FaAoXVfJrAOl6E2yru0xUglkI=) 2: B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl (hash: WRa++hSzKb2hJeDDH5u+qpf9vsp1CvKHrx7R5c/zmjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:73:b1:de:ae:80:e8:e0:d5:92:a7:0c:09:3d:dc:45:ee:11:b6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D726419FBF35E7C6EB437E238F3D2A3F063B4C Validity Not Before: Mar 26 09:15:06 2026 GMT Not After : Mar 29 09:28:06 2026 GMT Subject: CN=2D8427A52748E87933ECD21901B79C9DE3E01F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b6:e4:78:b7:85:3f:49:99:83:54:68:6d:ed: 31:51:14:1b:68:f6:f0:8a:d5:dd:c6:38:3c:2a:14: fa:28:9f:7c:df:5b:7e:6b:45:72:36:19:75:7a:07: 80:e9:85:3f:50:6b:c2:42:ef:b6:cd:2c:ed:33:25: 9a:52:8c:86:43:23:d5:9f:60:b3:55:26:9a:61:d6: 19:12:6e:f8:0d:6d:c8:6c:35:35:39:1b:19:28:ae: a4:a9:14:db:68:4d:31:0a:11:72:7b:d1:83:25:c2: 17:a8:a0:52:ed:74:34:0c:5e:ee:41:72:18:d4:ea: e4:af:7a:b4:b7:01:cd:18:d7:71:06:e5:7f:ae:4d: 68:6a:13:21:70:7a:ec:86:3d:50:a5:fb:86:be:71: 11:5f:ab:de:ab:85:c8:69:c5:16:a6:a8:01:b8:e2: 72:8e:fa:01:b3:89:30:d6:92:e2:c0:d9:30:29:bc: 9e:8d:37:73:e0:3a:e4:1c:f4:19:ca:1f:bf:c7:93: 46:db:0b:b5:26:9c:cf:f5:7b:c8:1e:43:86:2d:39: ae:5a:47:9b:b3:73:f3:98:ce:53:03:1d:42:4d:71: 33:4f:aa:ac:7e:17:a0:da:d3:25:20:1f:8e:60:11: d6:a6:91:a5:81:54:77:1c:96:ca:90:73:05:b0:a9: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:27:A5:27:48:E8:79:33:EC:D2:19:01:B7:9C:9D:E3:E0:1F:6A X509v3 Authority Key Identifier: keyid:B0:D7:26:41:9F:BF:35:E7:C6:EB:43:7E:23:8F:3D:2A:3F:06:3B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42dab46a-085e-4432-9833-71b8db144d94/0/B0D726419FBF35E7C6EB437E238F3D2A3F063B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9f:8a:3b:f0:ce:8e:a3:fe:52:cb:49:01:5c:f6:89:54:0a: 53:c0:c5:fd:f5:0d:12:c9:a5:4f:d3:04:24:c8:01:3a:3a:30: fd:64:fb:20:9a:63:7e:da:80:dd:fe:db:b3:d4:b0:8d:0c:49: 02:fe:24:93:54:8a:9e:7e:3f:d4:3e:af:50:ce:d2:53:0d:10: 3f:65:24:91:02:6b:de:00:91:76:6c:1b:8b:49:1d:46:31:92: 45:98:c2:86:3c:87:de:b4:1f:48:f8:8c:fe:b6:75:e0:50:db: 27:dd:35:32:5d:6a:0f:30:c9:72:ed:80:f0:42:76:4f:72:81: da:2d:fb:fd:9c:37:a9:42:54:74:e9:9a:6f:fd:a2:67:f3:40: 5e:e6:31:c4:a9:4d:b8:26:89:d5:1a:16:10:aa:53:b1:47:14: ca:5b:8c:22:d9:19:74:f5:b2:0a:0e:25:91:a7:34:cf:a9:49: 6b:43:f7:81:91:77:c3:c3:df:d3:2c:47:26:68:5c:48:19:74: be:b5:08:80:ef:bc:40:48:19:d7:ad:e2:63:ca:a9:5d:91:c6: 25:bf:87:0a:5a:29:b6:63:c7:82:5b:61:6f:57:10:a7:0a:e8: c1:74:4d:7d:9e:33:ca:54:da:fa:48:40:26:4b:a0:17:4f:36: 4e:85:fb:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnOx3q6A6ODVkqcMCT3cRe4RtvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEz RjA2M0I0QzAeFw0yNjAzMjYwOTE1MDZaFw0yNjAzMjkwOTI4MDZaMDMxMTAvBgNV BAMTKDJEODQyN0E1Mjc0OEU4NzkzM0VDRDIxOTAxQjc5QzlERTNFMDFGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstuR4t4U/SZmDVGht7TFRFBto 9vCK1d3GODwqFPoon3zfW35rRXI2GXV6B4DphT9Qa8JC77bNLO0zJZpSjIZDI9Wf YLNVJpph1hkSbvgNbchsNTU5GxkorqSpFNtoTTEKEXJ70YMlwheooFLtdDQMXu5B chjU6uSverS3Ac0Y13EG5X+uTWhqEyFweuyGPVCl+4a+cRFfq96rhchpxRamqAG4 4nKO+gGziTDWkuLA2TApvJ6NN3PgOuQc9BnKH7/Hk0bbC7UmnM/1e8geQ4YtOa5a R5uzc/OYzlMDHUJNcTNPqqx+F6Da0yUgH45gEdamkaWBVHcclsqQcwWwqe6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYQnpSdI6Hkz7NIZAbecnePgH2owHwYDVR0j BBgwFoAUsNcmQZ+/NefG60N+I489Kj8GO0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmRhYjQ2YS0wODVlLTQ0MzItOTgzMy03MWI4ZGIxNDRkOTQvMC9CMEQ3MjY0MTlG QkYzNUU3QzZFQjQzN0UyMzhGM0QyQTNGMDYzQjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNEMkEzRjA2 M0I0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJkYWI0NmEtMDg1ZS00NDMyLTk4 MzMtNzFiOGRiMTQ0ZDk0LzAvQjBENzI2NDE5RkJGMzVFN0M2RUI0MzdFMjM4RjNE MkEzRjA2M0I0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+fijvwzo6j/lLLSQFc9olUClPAxf31DRLJ pU/TBCTIATo6MP1k+yCaY37agN3+27PUsI0MSQL+JJNUip5+P9Q+r1DO0lMNED9l JJECa94AkXZsG4tJHUYxkkWYwoY8h960H0j4jP62deBQ2yfdNTJdag8wyXLtgPBC dk9ygdot+/2cN6lCVHTpmm/9omfzQF7mMcSpTbgmidUaFhCqU7FHFMpbjCLZGXT1 sgoOJZGnNM+pSWtD94GRd8PD39MsRyZoXEgZdL61CIDvvEBIGdet4mPKqV2RxiW/ hwpaKbZjx4JbYW9XEKcK6MF0TX2eM8pU2vpIQCZLoBdPNk6F+wE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:32 2026 by rpki-client