$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: zNQkoN/gBz6mdu6Jkr6XoABCPMdAixyoBSQEGDgGa9k= Subject key identifier: D2:41:82:C0:52:C0:2D:7F:B5:3B:89:BA:DF:03:F3:CD:E6:0C:87:57 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 3B6B84802158F9057A9368D07527C6A2B0775437 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: 0113 Signing time: Thu 26 Mar 2026 06:11:21 +0000 Manifest this update: Thu 26 Mar 2026 06:06:20 +0000 Manifest next update: Sun 29 Mar 2026 16:52:20 +0000 Files and hashes: 1: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: kAj/YRV14zMExzRhkAD0QyGbbR6qoV6ILQu01qL/PR0=) 2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6b:84:80:21:58:f9:05:7a:93:68:d0:75:27:c6:a2:b0:77:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Mar 26 06:06:20 2026 GMT Not After : Mar 29 16:52:20 2026 GMT Subject: CN=D24182C052C02D7FB53B89BADF03F3CDE60C8757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:54:d7:8e:6a:5e:2f:2a:60:be:98:93:89: e9:3b:89:df:20:8e:7a:b6:84:7d:b5:b5:fd:29:f7: c1:ef:1e:51:71:f8:ed:30:f1:bd:37:ba:67:48:43: 1e:2b:2f:26:f9:5a:88:c0:ce:f8:f7:4a:e7:d4:d3: aa:27:02:a3:bd:30:0f:ae:36:7d:66:de:2f:7d:a4: b7:52:8d:f8:aa:18:f1:0a:10:fb:ac:2c:a5:9c:03: ee:6b:3e:c3:42:ee:32:59:bc:1d:2b:3d:8a:73:0c: 50:29:29:06:2f:14:9a:4b:15:88:84:83:72:39:fa: 6c:ec:73:81:9b:9a:ec:14:91:7c:52:1c:25:f3:fb: 31:67:e2:40:4d:47:38:dc:70:46:c1:f0:51:b8:a2: 3d:b5:4a:28:1e:61:01:0f:e5:47:97:3c:8a:20:34: 4e:49:5a:6c:ad:91:97:02:83:56:0d:6a:52:a9:a2: 9a:bc:b5:48:67:80:5f:7b:0e:c1:7a:32:6a:a8:b2: 69:10:89:16:fa:11:4b:f4:fb:e5:f8:2a:c7:de:47: e1:59:da:e2:ee:32:0b:b9:ad:c8:c7:ae:3b:b0:b6: a1:67:81:f0:7e:8c:45:ce:d7:7b:05:fe:73:da:f5: 95:2c:06:38:d5:37:c7:3e:96:6b:f5:38:78:eb:b7: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:41:82:C0:52:C0:2D:7F:B5:3B:89:BA:DF:03:F3:CD:E6:0C:87:57 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1b:4e:5d:ce:27:c0:0f:ce:65:be:fb:96:fb:6e:ea:c0:e6: 9b:e6:12:d8:f8:ed:30:1a:ad:13:19:16:7c:7c:dd:1a:c1:a0: b3:9b:d7:f5:aa:07:72:18:5c:bb:0c:4a:69:ee:5a:21:12:72: 38:1c:b1:61:eb:30:ad:e6:5f:0f:49:fd:5e:d0:91:a1:97:38: 3e:37:ce:b6:6d:a6:2b:9f:56:c5:bd:03:4f:78:87:95:1b:a9: ab:79:06:a4:98:3c:0a:b2:d3:4f:35:6f:9e:5a:e4:25:11:53: 8e:83:e8:a9:ca:ba:ec:aa:14:5d:8b:4b:c3:50:cc:42:55:14: fc:4f:d3:35:fc:42:70:b0:4f:bf:17:a9:a1:a0:f1:f2:64:90: 06:7f:01:07:61:d1:79:2a:d3:2f:de:70:bd:5f:75:28:57:b5: cc:0e:88:12:39:5f:df:8f:63:55:dd:0e:fb:aa:b9:b0:f3:27: 4d:de:60:90:9b:8d:e0:91:8c:93:ed:ab:28:0c:cd:50:84:3b: 78:74:88:a3:ad:4d:4f:c4:6a:aa:4c:5f:eb:28:55:e9:cd:d9: a4:92:3a:9d:c4:61:fc:e8:a5:47:2a:e1:4c:40:6f:b6:91:4e: eb:e1:61:ed:ec:72:eb:15:c1:a0:54:24:06:43:4e:a1:1d:0e: ba:48:0e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2uEgCFY+QV6k2jQdSfGorB3VDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNjAzMjYwNjA2MjBaFw0yNjAzMjkxNjUyMjBaMDMxMTAvBgNV BAMTKEQyNDE4MkMwNTJDMDJEN0ZCNTNCODlCQURGMDNGM0NERTYwQzg3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDj1TXjmpeLypgvpiTiek7id8g jnq2hH21tf0p98HvHlFx+O0w8b03umdIQx4rLyb5WojAzvj3SufU06onAqO9MA+u Nn1m3i99pLdSjfiqGPEKEPusLKWcA+5rPsNC7jJZvB0rPYpzDFApKQYvFJpLFYiE g3I5+mzsc4GbmuwUkXxSHCXz+zFn4kBNRzjccEbB8FG4oj21SigeYQEP5UeXPIog NE5JWmytkZcCg1YNalKpopq8tUhngF97DsF6MmqosmkQiRb6EUv0++X4KsfeR+FZ 2uLuMgu5rcjHrjuwtqFngfB+jEXO13sF/nPa9ZUsBjjVN8c+lmv1OHjrt+6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0kGCwFLALX+1O4m63wPzzeYMh1cwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsbTl3OJ8APzmW++5b7burA5pvmEtj47TAa rRMZFnx83RrBoLOb1/WqB3IYXLsMSmnuWiEScjgcsWHrMK3mXw9J/V7QkaGXOD43 zrZtpiufVsW9A094h5Ubqat5BqSYPAqy0081b55a5CURU46D6KnKuuyqFF2LS8NQ zEJVFPxP0zX8QnCwT78XqaGg8fJkkAZ/AQdh0Xkq0y/ecL1fdShXtcwOiBI5X9+P Y1XdDvuqubDzJ03eYJCbjeCRjJPtqygMzVCEO3h0iKOtTU/EaqpMX+soVenN2aSS Op3EYfzopUcq4UxAb7aRTuvhYe3scusVwaBUJAZDTqEdDrpIDj4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:56 2026 by rpki-client