$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: HPBVZ3eUxnQMDaNVREwN/RVgbcIe6zAVRsn9fDvMK6g= Subject key identifier: C0:62:85:E5:8E:19:5A:DC:10:AA:D2:16:F6:00:6C:A7:89:11:48:8A Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 6FA0A7CC72174EE44746C86C23E832883BC7EB7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 01FD Signing time: Tue 24 Mar 2026 23:31:08 +0000 Manifest this update: Tue 24 Mar 2026 23:26:08 +0000 Manifest next update: Sat 28 Mar 2026 10:38:08 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: 5UTt+j+hELHSKRu3jvEPd0zCI/Bg+KKFL7hAIIzVKTQ=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: IQtHv5dJn+zbb+MIajlDdDAnYnBEq1Yu3MvRxA0jXsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a0:a7:cc:72:17:4e:e4:47:46:c8:6c:23:e8:32:88:3b:c7:eb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Mar 24 23:26:08 2026 GMT Not After : Mar 28 10:38:08 2026 GMT Subject: CN=C06285E58E195ADC10AAD216F6006CA78911488A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:51:25:f6:19:83:00:2a:1b:e6:47:3a:b7:10: 92:ea:fe:05:32:1e:92:a8:20:cb:dc:71:77:18:79: 63:b8:f0:75:48:f6:4f:ea:f4:68:ab:5c:18:40:c5: 1d:72:f5:6b:fd:c2:40:8f:72:92:af:04:6d:0a:4e: 40:13:c2:f5:53:0d:3a:77:d4:61:ef:bb:ca:3e:0f: 07:4b:81:8c:49:59:52:c9:25:2b:df:c2:7e:f9:b9: 8e:d3:24:80:47:40:ff:b8:cb:bd:2e:90:5d:f7:a4: 24:ea:ce:4c:ee:cd:b1:46:5c:d4:f5:e1:ac:f8:64: c1:04:ea:cf:bd:f8:11:cc:a0:0b:58:8a:8c:a2:ab: a9:61:81:d9:7b:0e:5a:17:5f:9a:38:f3:24:29:f7: 2e:8f:16:7a:42:1c:04:5e:39:bc:12:48:70:48:8b: 49:2a:41:0b:04:56:ac:a8:8b:32:e6:ba:18:48:6c: 87:78:59:33:2f:5a:29:54:66:6a:38:62:81:4d:34: 31:21:57:9c:d8:e7:ae:5b:ba:fb:98:8c:34:53:95: c2:ba:b6:ef:73:ce:4a:67:08:1b:27:99:74:2f:70: 36:da:91:93:2c:fb:8d:e4:65:66:45:8b:6e:7d:ad: 9d:0b:0c:fd:c6:9e:53:3b:2f:8b:0e:bb:01:ef:f2: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:62:85:E5:8E:19:5A:DC:10:AA:D2:16:F6:00:6C:A7:89:11:48:8A X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:49:f6:2b:7b:ab:26:ed:5b:54:c6:2e:82:e5:8e:bc:b6:eb: ca:95:65:b6:77:65:06:b6:1f:fc:69:e2:89:61:b9:0a:7b:89: 1f:69:c3:70:c8:de:17:ea:25:ca:39:65:67:39:9e:88:f2:84: 97:58:66:78:d4:e3:5f:8c:93:16:66:d5:43:87:7e:ca:0e:dc: 50:92:39:ee:95:96:99:3e:a0:8a:3c:bf:71:7b:2a:6c:77:40: db:49:03:10:ad:3a:09:7d:28:31:66:c8:b0:1e:ac:81:fb:5a: a6:27:32:15:4f:26:04:fd:22:2c:c6:41:e4:c8:3d:16:d2:48: fe:57:61:a3:d4:ab:aa:07:c8:79:11:4f:5e:f2:0c:71:ab:17: 4c:9b:1d:fe:a6:7b:e4:c2:19:4c:1b:c4:98:cc:63:99:10:38: e1:dc:66:93:5c:c8:d6:a8:b3:5d:cb:f7:47:59:8a:0a:8c:0d: 16:11:08:5d:7c:c8:ba:f4:bb:bd:f6:31:fe:84:7e:0a:bd:21: 53:6f:63:cf:2c:cd:fe:c3:f5:16:69:29:b5:24:44:13:9e:9e: 15:6d:c0:88:07:86:0f:ec:bd:e8:30:39:34:8e:ab:a0:37:5c: bc:44:33:91:b5:37:b5:86:d2:51:b5:25:30:4f:f3:46:e7:98: 24:c4:3e:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6CnzHIXTuRHRshsI+gyiDvH63owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNjAzMjQyMzI2MDhaFw0yNjAzMjgxMDM4MDhaMDMxMTAvBgNV BAMTKEMwNjI4NUU1OEUxOTVBREMxMEFBRDIxNkY2MDA2Q0E3ODkxMTQ4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUSX2GYMAKhvmRzq3EJLq/gUy HpKoIMvccXcYeWO48HVI9k/q9GirXBhAxR1y9Wv9wkCPcpKvBG0KTkATwvVTDTp3 1GHvu8o+DwdLgYxJWVLJJSvfwn75uY7TJIBHQP+4y70ukF33pCTqzkzuzbFGXNT1 4az4ZMEE6s+9+BHMoAtYioyiq6lhgdl7DloXX5o48yQp9y6PFnpCHAReObwSSHBI i0kqQQsEVqyoizLmuhhIbId4WTMvWilUZmo4YoFNNDEhV5zY565buvuYjDRTlcK6 tu9zzkpnCBsnmXQvcDbakZMs+43kZWZFi259rZ0LDP3GnlM7L4sOuwHv8kZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwGKF5Y4ZWtwQqtIW9gBsp4kRSIowHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhJ9it7qybtW1TGLoLljry268qVZbZ3ZQa2 H/xp4olhuQp7iR9pw3DI3hfqJco5ZWc5nojyhJdYZnjU41+MkxZm1UOHfsoO3FCS Oe6Vlpk+oIo8v3F7Kmx3QNtJAxCtOgl9KDFmyLAerIH7WqYnMhVPJgT9IizGQeTI PRbSSP5XYaPUq6oHyHkRT17yDHGrF0ybHf6me+TCGUwbxJjMY5kQOOHcZpNcyNao s13L90dZigqMDRYRCF18yLr0u732Mf6Efgq9IVNvY88szf7D9RZpKbUkRBOenhVt wIgHhg/svegwOTSOq6A3XLxEM5G1N7WG0lG1JTBP80bnmCTEPi8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:10 2026 by rpki-client