$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: zJLU9+iRwxtMrqaFtY4fMkoCFkpZD5QSOQz1/E7O458= Subject key identifier: 74:06:FA:1F:38:9C:89:3F:C9:53:AC:DC:12:38:01:2C:46:C0:7D:62 Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 7A68846566550BF058AAFDCB59F573B4A4FD18B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 03DA Signing time: Wed 25 Mar 2026 06:21:35 +0000 Manifest this update: Wed 25 Mar 2026 06:16:35 +0000 Manifest next update: Sat 28 Mar 2026 09:15:35 +0000 Files and hashes: 1: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: gi32RXV8JZ3+geKXJ775zfQ6NviF8gztZ4frnl7zPLc=) 2: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: 8stycaBADERxb5wNhTXS4t5r0mcnh0Pfl4VSFoOwA6E=) 3: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: 7lt/Pu+263UL3s6kz24cYhGTnyx1FA6xGEj7++kkFpc=) 4: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: 0qtvESVyNKD7Aha3YGc7JQ2v09wcRG3LvxHILCYb604=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:68:84:65:66:55:0b:f0:58:aa:fd:cb:59:f5:73:b4:a4:fd:18:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Mar 25 06:16:35 2026 GMT Not After : Mar 28 09:15:35 2026 GMT Subject: CN=7406FA1F389C893FC953ACDC1238012C46C07D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:25:d2:e4:54:1a:5a:25:4f:18:03:d0:cf: 4e:d5:eb:4e:d5:c3:e9:bd:f4:d6:f9:3d:d9:92:ec: 2f:69:22:b7:34:84:2c:72:e9:e0:70:5b:35:b7:6d: e6:e4:1c:37:cd:6a:d7:fa:2e:2c:71:8a:17:b3:4b: 38:19:1d:a6:1f:f2:ba:1f:dd:dd:68:6f:7a:8f:be: a0:07:3b:05:de:e3:89:d1:d7:a0:89:27:61:af:3b: ef:e7:cf:52:3b:4b:68:f7:19:40:6f:e6:80:69:88: 30:3a:9c:98:9f:40:0a:c1:1e:88:de:08:88:d7:6d: d4:b2:06:4b:22:3e:dd:25:ae:f3:43:ed:84:df:8f: 19:a8:fd:3e:b8:b7:6b:2a:bf:97:ae:8c:8c:66:27: d3:5b:87:d5:84:55:16:07:06:3f:b9:8b:da:32:f2: a9:ea:0d:31:74:7f:29:cb:4a:32:5f:d0:59:8a:31: 9e:22:68:76:6b:ff:82:b3:61:ed:42:85:f4:eb:79: 57:44:42:82:3b:36:e4:c2:29:f0:bd:bb:c9:d3:4d: 19:64:51:b9:d0:a3:af:67:31:64:a9:24:1a:52:64: 94:95:7d:25:30:28:07:50:d7:f0:c8:40:81:0b:76: 8b:cb:cc:3e:7e:a1:2c:82:8e:4c:ec:18:fe:1f:f2: ec:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:FA:1F:38:9C:89:3F:C9:53:AC:DC:12:38:01:2C:46:C0:7D:62 X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:19:94:b1:12:d4:01:59:a5:a1:3b:52:54:94:18:9c:77:37: 76:7b:49:59:73:ad:12:04:65:d3:5b:23:0f:fb:24:86:82:65: 11:e8:7a:94:68:76:2b:7a:dc:10:f3:71:0a:f0:58:55:ad:ae: bd:1b:d8:24:33:03:4b:6d:e1:17:b3:9e:dc:6b:67:ce:01:4e: b6:0c:f3:76:1b:bb:99:47:ba:35:44:35:da:4a:b9:56:0e:5a: 24:e8:69:8a:50:80:ab:20:53:12:a1:12:27:74:62:42:e9:ab: fa:39:93:22:d6:8f:5b:60:45:84:1c:37:f9:82:cf:7f:85:8c: 81:26:53:06:93:87:cf:7b:ea:77:30:df:9d:f2:7c:a4:ea:35: 0b:99:2b:3a:0e:4b:6b:d2:99:bb:58:bd:38:7a:5e:79:91:48: 5a:cd:f0:65:68:f4:75:50:91:8c:56:86:e4:bc:e1:cc:1f:11: e5:0c:87:00:78:3f:8c:2d:eb:83:32:fc:38:7d:1b:a1:6a:37: e8:a9:67:2d:f8:30:a1:79:aa:c9:f4:a8:e1:9a:c7:15:95:e5: 27:e0:af:4f:c2:ba:86:a5:f4:48:5e:4a:d8:27:51:7f:d0:2e: 2c:ee:25:05:79:52:cd:1e:7b:4e:3c:42:2c:71:1a:96:19:ba: 78:f5:d4:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemiEZWZVC/BYqv3LWfVztKT9GLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNjAzMjUwNjE2MzVaFw0yNjAzMjgwOTE1MzVaMDMxMTAvBgNV BAMTKDc0MDZGQTFGMzg5Qzg5M0ZDOTUzQUNEQzEyMzgwMTJDNDZDMDdENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQyXS5FQaWiVPGAPQz07V607V w+m99Nb5PdmS7C9pIrc0hCxy6eBwWzW3bebkHDfNatf6LixxihezSzgZHaYf8rof 3d1ob3qPvqAHOwXe44nR16CJJ2GvO+/nz1I7S2j3GUBv5oBpiDA6nJifQArBHoje CIjXbdSyBksiPt0lrvND7YTfjxmo/T64t2sqv5eujIxmJ9Nbh9WEVRYHBj+5i9oy 8qnqDTF0fynLSjJf0FmKMZ4iaHZr/4KzYe1ChfTreVdEQoI7NuTCKfC9u8nTTRlk UbnQo69nMWSpJBpSZJSVfSUwKAdQ1/DIQIELdovLzD5+oSyCjkzsGP4f8uwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAb6HziciT/JU6zcEjgBLEbAfWIwHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAZlLES1AFZpaE7UlSUGJx3N3Z7SVlzrRIE ZdNbIw/7JIaCZRHoepRodit63BDzcQrwWFWtrr0b2CQzA0tt4RezntxrZ84BTrYM 83Ybu5lHujVENdpKuVYOWiToaYpQgKsgUxKhEid0YkLpq/o5kyLWj1tgRYQcN/mC z3+FjIEmUwaTh8976ncw353yfKTqNQuZKzoOS2vSmbtYvTh6XnmRSFrN8GVo9HVQ kYxWhuS84cwfEeUMhwB4P4wt64My/Dh9G6FqN+ipZy34MKF5qsn0qOGaxxWV5Sfg r0/Cuoal9EheStgnUX/QLizuJQV5Us0ee048QixxGpYZunj11Pg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:36:51 2026 by rpki-client