$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: XvQa711sYj46+LxXd3SOSOqD+LRLxzaEpENhow39KmE= Subject key identifier: 03:C6:B4:A5:BF:45:B5:36:E3:1A:AF:9C:5E:15:9B:DF:18:F4:50:D8 Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 42B169DBAC75D0EA56AB4DCC4205E0758ABFC435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 029B Signing time: Wed 25 Mar 2026 05:22:40 +0000 Manifest this update: Wed 25 Mar 2026 05:17:40 +0000 Manifest next update: Sat 28 Mar 2026 08:34:40 +0000 Files and hashes: 1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=) 2: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: iU5eKTBD0Ygn5JEuYmpI+2FJ3FIzFd7zGPgM/uKNwWk=) 3: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) 4: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) 5: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: yqDA1Gh+nI24zoKtqUazyok0UGXURA+Nlb1kM1EqJCo=) 6: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: 8qmJTm3w/YB+pPXRr4kfQMyCGfmyB46RphMFNG6KdwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b1:69:db:ac:75:d0:ea:56:ab:4d:cc:42:05:e0:75:8a:bf:c4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Mar 25 05:17:40 2026 GMT Not After : Mar 28 08:34:40 2026 GMT Subject: CN=03C6B4A5BF45B536E31AAF9C5E159BDF18F450D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:6a:43:cf:01:ba:2b:d0:8a:d0:8a:83:20: 75:f0:98:fa:88:c5:74:a2:73:b6:02:84:35:ef:4f: 1e:dd:6d:2e:f9:46:19:61:a6:d4:64:cb:2b:ed:9d: 40:7c:34:43:4e:5b:28:c7:c7:48:fb:c3:65:81:3f: fc:93:31:f9:81:34:f0:01:01:a9:91:ad:c6:a9:54: e4:84:e8:de:5b:7e:cf:8f:48:51:ae:04:ae:d7:8f: 00:22:fe:8d:69:68:7a:e7:82:e7:ce:2c:db:f7:47: 6d:60:6c:b2:dc:88:2b:d7:60:93:01:b3:fa:1d:de: f4:a2:00:6d:fd:72:84:d0:d6:ed:83:85:43:37:0d: 4f:fb:3e:26:6b:3f:51:b2:82:c2:07:eb:7c:40:f3: a9:5e:92:4f:04:23:ad:f9:50:ea:7f:34:db:8c:4b: af:51:bf:f1:f3:68:c7:4c:5a:cf:bb:67:a0:0b:48: 96:4d:54:4b:20:ab:71:d1:57:da:4b:97:7c:1c:de: 32:4c:68:84:0a:38:54:55:44:23:9a:0e:98:c9:75: ca:81:da:f9:a9:6e:87:4c:19:24:d1:93:cf:2f:c2: 80:79:79:ba:aa:c3:6a:a7:d0:00:b7:6e:4e:79:a2: a2:16:79:c0:24:25:f0:d8:13:d4:0e:47:04:7b:9d: 92:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:B4:A5:BF:45:B5:36:E3:1A:AF:9C:5E:15:9B:DF:18:F4:50:D8 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:aa:cc:d5:b8:57:c0:37:e2:19:e3:5f:4e:c8:54:ed:ab:9e: 6b:e7:70:7e:1e:cc:f8:31:6c:26:cd:6c:c4:7d:4d:82:0f:71: f0:5c:5e:40:6f:fb:25:f2:56:1d:d5:60:68:45:23:90:a2:87: c9:9f:9d:f1:41:b5:fb:e3:df:e8:c9:22:4c:9a:bb:99:88:91: 9d:1a:75:84:86:c5:fe:ac:9b:0b:d9:eb:7c:fb:62:1d:89:d9: 8e:92:2a:f7:1c:7f:14:18:0e:84:f6:6d:15:2a:8e:f0:1c:f3: a3:c8:8a:a9:a0:2d:43:02:33:f8:6f:ee:17:8d:e3:b5:b9:cb: de:29:0d:04:0e:43:43:3a:b6:14:c6:3d:00:4b:36:e6:be:31: 1f:e5:f6:e1:29:df:4a:55:b5:64:a0:34:f2:b2:4c:2e:a1:a4: 9f:0b:83:8c:30:38:e1:2d:2c:f7:aa:13:f4:2e:c7:a4:8b:97: 81:41:b0:7c:c6:8f:95:7d:b6:75:c4:ae:f2:f9:dd:cf:85:63: e2:44:60:ed:5e:d6:61:df:6d:96:be:93:2f:13:24:77:ad:4d: 96:3f:c0:0e:78:ea:ea:fa:97:60:0f:e4:37:2a:26:5d:24:96: a5:a4:18:f1:21:dc:87:31:b3:6b:60:db:78:aa:59:f5:60:55: 2d:6c:5c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrFp26x10OpWq03MQgXgdYq/xDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNjAzMjUwNTE3NDBaFw0yNjAzMjgwODM0NDBaMDMxMTAvBgNV BAMTKDAzQzZCNEE1QkY0NUI1MzZFMzFBQUY5QzVFMTU5QkRGMThGNDUwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1WpDzwG6K9CK0IqDIHXwmPqI xXSic7YChDXvTx7dbS75RhlhptRkyyvtnUB8NENOWyjHx0j7w2WBP/yTMfmBNPAB AamRrcapVOSE6N5bfs+PSFGuBK7XjwAi/o1paHrngufOLNv3R21gbLLciCvXYJMB s/od3vSiAG39coTQ1u2DhUM3DU/7PiZrP1GygsIH63xA86lekk8EI635UOp/NNuM S69Rv/HzaMdMWs+7Z6ALSJZNVEsgq3HRV9pLl3wc3jJMaIQKOFRVRCOaDpjJdcqB 2vmpbodMGSTRk88vwoB5ebqqw2qn0AC3bk55oqIWecAkJfDYE9QORwR7nZIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8a0pb9FtTbjGq+cXhWb3xj0UNgwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSqzNW4V8A34hnjX07IVO2rnmvncH4ezPgx bCbNbMR9TYIPcfBcXkBv+yXyVh3VYGhFI5Cih8mfnfFBtfvj3+jJIkyau5mIkZ0a dYSGxf6smwvZ63z7Yh2J2Y6SKvccfxQYDoT2bRUqjvAc86PIiqmgLUMCM/hv7heN 47W5y94pDQQOQ0M6thTGPQBLNua+MR/l9uEp30pVtWSgNPKyTC6hpJ8Lg4wwOOEt LPeqE/Qux6SLl4FBsHzGj5V9tnXErvL53c+FY+JEYO1e1mHfbZa+ky8TJHetTZY/ wA546ur6l2AP5DcqJl0klqWkGPEh3Icxs2tg23iqWfVgVS1sXDo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:09 2026 by rpki-client