$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: +bbNjDt16SbGMd+7Ho4Q4pc+hNnkpsKfIS6JK9tivDw= Subject key identifier: A6:15:D8:BB:73:AE:8A:E6:AA:76:A0:E7:1B:41:8B:42:66:51:D7:71 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 467E75D71CE5D08E4630A19644B197607BFB8DAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 0201 Signing time: Tue 24 Mar 2026 20:11:52 +0000 Manifest this update: Tue 24 Mar 2026 20:06:52 +0000 Manifest next update: Sat 28 Mar 2026 06:33:52 +0000 Files and hashes: 1: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=) 2: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: OZtaXVnEW5RmAPIbRfBEalGcSSTBuYbMeU8t4ca6KEY=) 3: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=) 4: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=) 5: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7e:75:d7:1c:e5:d0:8e:46:30:a1:96:44:b1:97:60:7b:fb:8d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Mar 24 20:06:52 2026 GMT Not After : Mar 28 06:33:52 2026 GMT Subject: CN=A615D8BB73AE8AE6AA76A0E71B418B426651D771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:31:2f:1f:03:7a:87:ec:16:b6:f4:e4:84: 24:5c:b6:e3:75:1a:3b:c2:bb:fa:3e:d7:db:b6:41: c2:c7:16:21:a2:1c:b4:c7:8c:3e:bd:c4:65:72:dc: 2e:d4:87:d3:de:fa:7d:21:30:7a:3c:e4:e2:49:52: c7:45:46:5d:a1:ce:fe:cc:71:3c:79:0f:10:2e:6e: 4c:cf:c4:a6:6a:d6:99:55:a6:34:1e:e0:03:fb:a1: 9c:fd:91:2b:5c:01:dd:c9:5c:bb:1c:7b:f5:b2:e7: 78:44:b4:f7:b1:1e:45:b6:ea:16:e1:20:82:04:4d: 1e:33:d8:15:ad:9d:7b:8a:35:d8:f9:47:c3:a5:b5: b0:f6:98:9b:10:a3:d4:e5:c0:86:2e:84:92:79:b4: 06:f5:ef:94:9a:f1:8f:5b:a0:ef:1f:e0:52:6b:4e: 73:d9:88:c3:3e:43:40:e2:5d:ed:23:2a:42:b4:f3: f8:a1:8c:56:40:43:02:6e:23:89:51:71:17:47:8d: d1:c8:19:b4:e3:f1:13:c7:3c:8f:0a:4a:80:d9:7e: 4b:c0:17:ff:21:85:23:08:f8:74:61:72:f4:e1:23: 28:a7:55:4b:00:a4:d5:9f:2b:11:07:58:60:4f:3b: 0e:59:11:a9:4c:0f:10:e4:b1:bf:77:bd:fc:a0:a0: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:15:D8:BB:73:AE:8A:E6:AA:76:A0:E7:1B:41:8B:42:66:51:D7:71 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7c:e1:64:6f:ac:17:f9:d0:5c:7d:38:fc:e8:ac:97:3f:1d: c5:7e:20:0f:a9:c0:ff:2a:0f:6d:11:f5:c1:42:71:c5:3a:eb: 68:e5:1f:a9:28:e0:03:2e:77:57:4f:6e:57:a6:9f:8e:0d:d0: 9a:7b:cd:5b:de:ca:99:1c:6f:b4:19:12:59:32:c0:a7:07:65: 6b:71:31:c4:6b:8c:1c:14:12:32:e4:44:02:c0:8a:9d:c6:71: 7c:4a:6a:09:da:24:0c:c9:44:15:44:84:a9:f4:fc:1d:e7:7d: dc:fc:65:2a:f9:0a:80:2f:e1:fc:d2:8f:bd:38:cc:bd:8e:0d: bd:5a:ea:ed:c9:cd:5d:f3:54:6e:28:23:15:8f:b7:11:6e:85: 10:b9:fe:a6:d0:b1:f6:dc:ab:7d:49:9a:4c:5b:80:e3:3d:6e: 1e:d6:55:01:99:1f:96:95:03:2f:4a:d4:4b:93:c7:4f:3c:af: 70:75:84:52:fa:be:45:0e:2d:59:22:5d:99:e6:09:7a:86:e0: c4:e2:93:45:7d:b2:94:02:10:00:65:ce:22:60:17:4b:53:94: e9:7c:c5:72:ab:d6:1f:ae:fd:bf:53:8a:7b:0b:e5:b4:96:0e: 22:08:5c:66:dd:df:aa:d1:0f:83:e7:28:b8:d2:e2:e6:93:3b: 83:3a:df:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURn511xzl0I5GMKGWRLGXYHv7jawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNjAzMjQyMDA2NTJaFw0yNjAzMjgwNjMzNTJaMDMxMTAvBgNV BAMTKEE2MTVEOEJCNzNBRThBRTZBQTc2QTBFNzFCNDE4QjQyNjY1MUQ3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM8zEvHwN6h+wWtvTkhCRctuN1 GjvCu/o+19u2QcLHFiGiHLTHjD69xGVy3C7Uh9Pe+n0hMHo85OJJUsdFRl2hzv7M cTx5DxAubkzPxKZq1plVpjQe4AP7oZz9kStcAd3JXLsce/Wy53hEtPexHkW26hbh IIIETR4z2BWtnXuKNdj5R8OltbD2mJsQo9TlwIYuhJJ5tAb175Sa8Y9boO8f4FJr TnPZiMM+Q0DiXe0jKkK08/ihjFZAQwJuI4lRcRdHjdHIGbTj8RPHPI8KSoDZfkvA F/8hhSMI+HRhcvThIyinVUsApNWfKxEHWGBPOw5ZEalMDxDksb93vfygoN+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphXYu3OuiuaqdqDnG0GLQmZR13EwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ84WRvrBf50Fx9OPzorJc/HcV+IA+pwP8q D20R9cFCccU662jlH6ko4AMud1dPblemn44N0Jp7zVveypkcb7QZElkywKcHZWtx McRrjBwUEjLkRALAip3GcXxKagnaJAzJRBVEhKn0/B3nfdz8ZSr5CoAv4fzSj704 zL2ODb1a6u3JzV3zVG4oIxWPtxFuhRC5/qbQsfbcq31JmkxbgOM9bh7WVQGZH5aV Ay9K1EuTx088r3B1hFL6vkUOLVkiXZnmCXqG4MTik0V9spQCEABlziJgF0tTlOl8 xXKr1h+u/b9TinsL5bSWDiIIXGbd36rRD4PnKLjS4uaTO4M6360= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:04 2026 by rpki-client