$ rpki-client -vvf repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft File: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft (raw, json) Hash identifier: E6hE/YK5cGspocOoq/YyUEAObSr6//VWFsStx7JArNk= Subject key identifier: 41:CA:BE:97:DF:42:A7:C6:FC:61:0F:52:71:D2:92:8B:48:F4:DA:16 Authority key identifier: B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E Certificate issuer: /CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Certificate serial: 508D0913F67C748DD72FAC384F4B6D194FC91F45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft Manifest number: 32 Signing time: Wed 25 Mar 2026 16:51:31 +0000 Manifest this update: Wed 25 Mar 2026 16:46:31 +0000 Manifest next update: Sat 28 Mar 2026 21:32:31 +0000 Files and hashes: 1: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: aUiV56swPp0i277EKeACkxB8KCq996e6HKIfY3dUZVk=) 2: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: Kyu9bQtpDSvLwwsNNqwUqQbMYywTTXQyJkLm6NWbIzI=) 3: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl (hash: 7yG1CObC0CpdBkWfQmBoT8QYA6BeUbRcdsSV3/Ez8Ac=) 4: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: dIQVr4EU9vhVUlOy70LmMe/aV/AkNcRz6oJAaRY0RBk=) 5: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: KoQeDklma/MmavV82lm83EnfussemBPyB+je36QbhV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8d:09:13:f6:7c:74:8d:d7:2f:ac:38:4f:4b:6d:19:4f:c9:1f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Validity Not Before: Mar 25 16:46:31 2026 GMT Not After : Mar 28 21:32:31 2026 GMT Subject: CN=41CABE97DF42A7C6FC610F5271D2928B48F4DA16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:3a:1c:e1:fe:df:3e:67:27:40:08:cc:41: 3e:0b:78:ef:cc:80:22:20:dc:34:b9:87:cf:97:e0: 1d:77:1a:f5:cb:53:f3:09:91:c6:91:f4:97:d6:2c: 68:67:3c:c0:45:7f:cd:ca:6f:fe:4c:3f:9e:ab:bb: ea:91:fd:f9:87:55:46:37:d3:18:33:7e:31:dc:9b: bb:36:ed:8e:7d:c4:bd:a6:e7:d9:76:be:3f:07:a7: e0:6c:0d:60:c6:2b:4c:63:51:d1:e2:04:c0:bf:df: f2:27:8c:af:a7:74:7d:81:a4:dc:9a:b8:25:67:df: e2:6b:09:04:56:2f:89:a5:4a:4e:97:e1:ff:6c:d8: 76:d2:30:c5:98:93:16:f6:2f:fc:59:bb:b4:12:5a: 0a:d2:53:99:fc:7f:30:f7:b4:9e:e5:96:0f:65:1b: e9:bf:db:ef:a2:6d:af:75:34:5e:94:8d:79:59:72: c8:f1:88:90:0f:fd:95:95:ab:98:84:4e:ce:da:3f: e6:44:b1:4a:50:5a:e7:42:5a:45:b1:b1:07:58:48: 3a:3e:61:a2:f3:e3:46:b0:e0:0c:b6:48:55:c1:37: 66:12:d2:44:6e:ef:c6:fe:bf:a4:89:2d:7c:37:b5: fe:d7:6d:9d:1d:d6:73:ba:25:44:4e:09:3f:21:e8: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:CA:BE:97:DF:42:A7:C6:FC:61:0F:52:71:D2:92:8B:48:F4:DA:16 X509v3 Authority Key Identifier: keyid:B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:40:84:98:c2:22:60:5c:e7:a8:fa:08:28:8c:2d:35:60:11: 04:03:ef:4c:49:e8:40:9a:d2:76:3b:4c:de:9f:81:75:7b:c8: 91:ac:0a:47:0e:58:17:cf:58:3e:c6:34:43:f1:4a:ea:9b:21: 5b:fa:9c:0f:49:5b:e1:3c:ee:05:ff:d0:e9:8b:88:bf:ae:5e: b7:c4:64:23:eb:fd:41:69:74:f3:6c:29:cf:5f:5d:7e:ed:1c: ee:98:f5:b4:5d:59:c0:e1:d0:e1:bd:19:2d:e2:26:a6:4c:b9: 50:ec:85:48:d1:cb:69:db:ef:e8:0e:49:e4:55:80:c1:cb:82: f7:05:4a:bb:5e:b3:39:05:92:16:a1:72:f7:5b:40:8f:10:3f: a7:5a:68:b2:7d:3d:6a:a4:d7:55:c6:63:db:ce:98:bb:06:f2: f2:53:dd:8c:3f:c0:f1:0d:7a:e2:03:20:b4:bf:cb:d3:4a:c6: 08:15:ff:cf:2f:c2:44:a8:44:02:10:fa:f4:a6:ce:2a:29:ab: 21:04:ef:28:5f:73:53:f3:c7:2c:49:9b:70:17:33:a4:75:d6: a9:da:d3:ea:3a:38:94:76:e6:32:e6:f3:21:26:bf:af:b0:00: 73:f7:a5:94:9e:63:f3:fd:d5:02:b6:3c:9a:88:23:58:a8:37: a1:4c:68:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUI0JE/Z8dI3XL6w4T0ttGU/JH0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5 OThDRkM1RTAeFw0yNjAzMjUxNjQ2MzFaFw0yNjAzMjgyMTMyMzFaMDMxMTAvBgNV BAMTKDQxQ0FCRTk3REY0MkE3QzZGQzYxMEY1MjcxRDI5MjhCNDhGNERBMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwJzoc4f7fPmcnQAjMQT4LeO/M gCIg3DS5h8+X4B13GvXLU/MJkcaR9JfWLGhnPMBFf83Kb/5MP56ru+qR/fmHVUY3 0xgzfjHcm7s27Y59xL2m59l2vj8Hp+BsDWDGK0xjUdHiBMC/3/InjK+ndH2BpNya uCVn3+JrCQRWL4mlSk6X4f9s2HbSMMWYkxb2L/xZu7QSWgrSU5n8fzD3tJ7llg9l G+m/2++iba91NF6UjXlZcsjxiJAP/ZWVq5iETs7aP+ZEsUpQWudCWkWxsQdYSDo+ YaLz40aw4Ay2SFXBN2YS0kRu78b+v6SJLXw3tf7XbZ0d1nO6JUROCT8h6PpRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcq+l99Cp8b8YQ9ScdKSi0j02hYwHwYDVR0j BBgwFoAUuePc5/6F5INH1srjbIPeNZmM/F4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDg4NjgwNS0zYjg1LTRjNWItOWI2YS1kNjJhZDU2YTY2YWMvMC9COUUzRENFN0ZF ODVFNDgzNDdENkNBRTM2QzgzREUzNTk5OENGQzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5OThD RkM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RF MzU5OThDRkM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZAhJjCImBc56j6CCiMLTVgEQQD70xJ6ECa 0nY7TN6fgXV7yJGsCkcOWBfPWD7GNEPxSuqbIVv6nA9JW+E87gX/0OmLiL+uXrfE ZCPr/UFpdPNsKc9fXX7tHO6Y9bRdWcDh0OG9GS3iJqZMuVDshUjRy2nb7+gOSeRV gMHLgvcFSrteszkFkhahcvdbQI8QP6daaLJ9PWqk11XGY9vOmLsG8vJT3Yw/wPEN euIDILS/y9NKxggV/88vwkSoRAIQ+vSmziopqyEE7yhfc1PzxyxJm3AXM6R11qna 0+o6OJR25jLm8yEmv6+wAHP3pZSeY/P91QK2PJqII1ioN6FMaMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:06:49 2026 by rpki-client