$ rpki-client -vvf repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft File: CB8106D827747D008C9DE9181B4EC6739C8EE800.mft (raw, json) Hash identifier: yMNwkxz3Am+ccE/nAW4hWCWf1EfrsQqXlx4N0RytXGs= Subject key identifier: 07:BF:44:91:89:20:AF:7B:87:74:DA:67:7C:05:0B:80:41:03:0C:2B Authority key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Certificate issuer: /CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Certificate serial: 37905309991EBE6CDE5FC9A84E720EED80443FDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft Manifest number: 055A Signing time: Thu 26 Mar 2026 12:31:02 +0000 Manifest this update: Thu 26 Mar 2026 12:26:02 +0000 Manifest next update: Sun 29 Mar 2026 14:46:02 +0000 Files and hashes: 1: 3130332e32312e3230342e302f32322d3234203d3e20313331373436.roa (hash: V0+izgb3kW/OtzIxZT6l6U4KDpKCH9ZjxQM8fPyZ410=) 2: 323430303a663334303a3a2f33322d3438203d3e20313331373436.roa (hash: 3L/LuNQCHJ1QppGAGjYDYBbeNVsrf3Si2Cax6eMLnCM=) 3: CB8106D827747D008C9DE9181B4EC6739C8EE800.crl (hash: 9uukRU/3djdPAzCclvSmHjC7VuY8moW+AYmlW1oE1Tc=) 4: 3130332e3234382e3139362e302f32322d3234203d3e20313331373436.roa (hash: 9V43hWJhD106Qur+e/iXVkOrJHa3wYOoVgiuMpwP8PI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:90:53:09:99:1e:be:6c:de:5f:c9:a8:4e:72:0e:ed:80:44:3f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Validity Not Before: Mar 26 12:26:02 2026 GMT Not After : Mar 29 14:46:02 2026 GMT Subject: CN=07BF44918920AF7B8774DA677C050B8041030C2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:8a:71:8b:58:1e:93:72:24:b3:b2:78:af: b6:b1:44:0e:f5:ae:97:36:1a:36:30:6b:aa:ba:46: 3e:a7:58:24:c0:2f:c1:97:eb:88:19:ce:69:44:b5: 83:15:91:46:86:d0:42:cf:70:5a:f6:28:85:99:12: 7a:fe:2b:06:fe:b4:7f:98:fd:1a:ec:b1:48:57:97: 96:ca:23:a8:8c:58:3b:27:0e:b1:fc:b3:1a:4f:bf: 23:9b:a5:1c:6f:ac:88:98:6d:cd:40:67:88:67:59: b5:0e:03:13:cf:2f:a3:a6:40:f3:8f:32:cc:e7:c3: c0:7e:67:d3:8a:fb:fa:33:87:f7:32:a2:3e:20:44: d1:87:6a:ac:6f:db:fc:a2:07:65:8d:1d:5e:30:20: 33:1d:09:21:a1:a9:b5:e8:3a:39:5f:5d:be:01:a5: 5f:e2:41:54:93:e5:40:8b:18:b5:50:a5:1e:f0:7f: ac:8a:68:09:ab:2f:17:ad:92:6d:d0:9f:f2:20:a3: 08:32:cd:7d:6a:5c:5b:87:ec:89:98:5d:69:40:b0: 60:a7:bc:47:69:ea:0f:e9:89:32:8b:76:6d:4f:9f: 70:e0:fe:25:78:6c:38:49:e4:62:89:5d:be:a1:c7: 9d:14:0e:15:be:4a:0f:eb:23:57:2a:5d:d3:58:84: 5d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BF:44:91:89:20:AF:7B:87:74:DA:67:7C:05:0B:80:41:03:0C:2B X509v3 Authority Key Identifier: keyid:CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:46:1d:9e:58:8a:dc:a3:d1:1d:c0:c3:a4:7f:51:08:7f:8b: d7:af:10:28:0a:6c:3e:fb:91:38:fe:ba:2b:a7:0e:e4:49:3e: 8d:3a:2e:d2:20:44:cf:55:94:dd:75:d2:2a:84:e1:2a:c8:95: d1:12:bc:fd:61:1d:ed:36:9c:a4:7c:47:f0:b4:84:19:7e:cd: 57:4f:d3:f9:f8:be:66:a3:a5:74:0e:c3:b1:d5:73:64:d5:f5: 0a:cf:5c:94:a0:a5:a1:5a:9d:1d:f4:81:a9:c4:c5:13:1c:40: d0:bb:a9:95:6c:12:25:33:0d:d3:9d:37:ad:f0:c5:be:95:eb: 0b:7b:08:d9:e1:b9:f2:a7:19:97:ec:0c:3d:59:36:e0:e9:42: e3:b5:61:71:8e:f7:e9:4b:a4:09:8c:6c:6f:f6:d6:54:58:b7: 48:68:86:a9:e2:59:55:56:7c:6a:c5:1b:2c:12:dc:61:39:55: 21:c6:88:85:13:99:d3:73:41:d8:76:9f:9e:39:b0:3a:d0:ba: 42:61:30:eb:63:76:36:86:b8:d1:2e:2f:4f:00:05:98:5f:07: 62:0a:c6:b1:9c:fb:6a:57:b1:4a:a6:a1:6f:75:50:dd:4b:16: 04:50:66:6d:38:38:af:e7:39:f1:72:a2:02:7a:f5:43:1f:f8: 2e:79:19:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5BTCZkevmzeX8moTnIO7YBEP90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5 QzhFRTgwMDAeFw0yNjAzMjYxMjI2MDJaFw0yNjAzMjkxNDQ2MDJaMDMxMTAvBgNV BAMTKDA3QkY0NDkxODkyMEFGN0I4Nzc0REE2NzdDMDUwQjgwNDEwMzBDMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Vopxi1gek3Iks7J4r7axRA71 rpc2GjYwa6q6Rj6nWCTAL8GX64gZzmlEtYMVkUaG0ELPcFr2KIWZEnr+Kwb+tH+Y /RrssUhXl5bKI6iMWDsnDrH8sxpPvyObpRxvrIiYbc1AZ4hnWbUOAxPPL6OmQPOP Msznw8B+Z9OK+/ozh/cyoj4gRNGHaqxv2/yiB2WNHV4wIDMdCSGhqbXoOjlfXb4B pV/iQVST5UCLGLVQpR7wf6yKaAmrLxetkm3Qn/IgowgyzX1qXFuH7ImYXWlAsGCn vEdp6g/piTKLdm1Pn3Dg/iV4bDhJ5GKJXb6hx50UDhW+Sg/rI1cqXdNYhF1NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB79EkYkgr3uHdNpnfAULgEEDDCswHwYDVR0j BBgwFoAUy4EG2Cd0fQCMnekYG07Gc5yO6AAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMC9DQjgxMDZEODI3 NzQ3RDAwOEM5REU5MTgxQjRFQzY3MzlDOEVFODAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2NzM5QzhF RTgwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJlNTc4ZDAtZDNhYS00ZjBmLWJi OWQtZjc0YjQ5YzZhNjU1LzAvQ0I4MTA2RDgyNzc0N0QwMDhDOURFOTE4MUI0RUM2 NzM5QzhFRTgwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpGHZ5Yityj0R3Aw6R/UQh/i9evECgKbD77 kTj+uiunDuRJPo06LtIgRM9VlN110iqE4SrIldESvP1hHe02nKR8R/C0hBl+zVdP 0/n4vmajpXQOw7HVc2TV9QrPXJSgpaFanR30ganExRMcQNC7qZVsEiUzDdOdN63w xb6V6wt7CNnhufKnGZfsDD1ZNuDpQuO1YXGO9+lLpAmMbG/21lRYt0hohqniWVVW fGrFGywS3GE5VSHGiIUTmdNzQdh2n545sDrQukJhMOtjdjaGuNEuL08ABZhfB2IK xrGc+2pXsUqmoW91UN1LFgRQZm04OK/nOfFyogJ69UMf+C55GcY= -----END CERTIFICATE-----Generated at Fri Mar 27 02:41:31 2026 by rpki-client