$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: 95nZ1u9Jdd2/1ZN86yMN5ahj3bGyhLgbJhURzDODOC8= Subject key identifier: AB:EB:74:6B:23:F2:34:E4:58:6E:08:1C:59:87:F8:07:02:EA:0A:88 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 379C0CA3F018C73C3709A3CF0521FB2CE9DF8480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: 011B Signing time: Thu 26 Mar 2026 09:12:13 +0000 Manifest this update: Thu 26 Mar 2026 09:07:13 +0000 Manifest next update: Sun 29 Mar 2026 15:50:13 +0000 Files and hashes: 1: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 2KoUt2/IqlrBdeTYa4zU+PXccPJfUuUeEVNRh95cwQ4=) 2: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: gJZtTz2WA8mi8sWbFO881YcpfxivtMg3czZx+wEgBU8=) 3: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9c:0c:a3:f0:18:c7:3c:37:09:a3:cf:05:21:fb:2c:e9:df:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Mar 26 09:07:13 2026 GMT Not After : Mar 29 15:50:13 2026 GMT Subject: CN=ABEB746B23F234E4586E081C5987F80702EA0A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:93:be:5b:0b:8b:6d:a0:8b:3b:64:64:cc:8f: 48:b1:fb:ef:b1:23:04:5b:27:54:36:63:e9:25:f0: 44:8f:d3:bf:78:ed:51:f9:91:48:59:7d:6b:92:c0: 0b:d0:7d:44:fc:df:db:d3:ea:44:5e:86:23:26:73: 70:f7:5a:22:8f:78:72:4c:2a:d3:f7:e6:a4:1a:9f: 6d:e3:26:f1:70:f8:3e:e5:88:ba:bd:ff:56:2f:ee: 1f:7e:c3:66:f6:2a:0b:22:a3:5d:da:95:66:4e:bc: 76:70:bc:46:c3:c9:4c:a4:5b:a6:ca:b1:85:b7:64: 82:5b:98:bd:5a:ce:ec:fe:36:58:f7:8a:a3:e8:3e: 2a:84:34:4f:ef:b1:4a:41:d3:0d:4e:e7:4d:15:b1: 7f:1c:f4:65:32:1f:9d:df:7d:44:ee:1b:07:d6:d3: f7:db:54:58:33:5a:5a:b9:43:43:84:17:9d:46:c3: e9:c3:25:18:06:3d:fe:6f:e5:c8:bc:74:c8:f3:01: bf:d2:30:d8:4c:60:6d:a8:92:87:08:0f:be:82:5f: ea:a1:af:5e:58:5c:7b:eb:c4:47:5c:b0:52:80:20: 2a:b2:c8:84:f0:b6:c8:52:6f:74:24:7e:17:ce:5f: 7d:0d:a6:97:1d:e3:25:f5:ea:d4:22:c4:cd:e0:b0: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EB:74:6B:23:F2:34:E4:58:6E:08:1C:59:87:F8:07:02:EA:0A:88 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:6b:17:b2:0b:c5:da:4f:c3:b8:ee:16:a1:a5:7c:dd:7a:0c: c8:56:5e:19:06:87:44:01:15:8d:8b:4c:7b:e5:52:ab:9f:4a: e0:9f:ee:82:08:f5:b5:ab:48:aa:81:99:8d:0c:b1:fd:fb:48: 87:ff:3c:62:04:b8:3b:62:7a:71:73:7d:df:02:f7:45:d3:a6: 69:44:23:59:d0:ec:c1:47:c6:11:75:25:0b:5c:dc:ed:71:6a: 0f:86:82:8b:86:57:79:51:26:4c:b4:20:f2:87:23:73:28:96: 80:b9:ab:dc:b5:b9:86:d6:e2:62:7c:a7:fb:60:0e:93:d2:9e: 0c:a3:6f:af:f4:f6:f2:46:b0:3f:7d:1c:ef:3d:1b:0a:36:90: 16:68:de:73:b1:3c:21:3a:88:6e:fa:85:af:df:5d:29:d6:7a: 53:9f:f9:4c:e6:d0:c9:44:9d:88:92:cf:95:7e:af:53:d5:bd: ac:57:ce:c4:b5:0c:0f:45:8b:e9:db:c3:46:fd:c1:ff:b1:74: 81:14:56:7a:32:ad:73:82:95:cc:29:8b:2a:2b:48:5c:21:30: a9:be:1a:57:3a:d9:72:76:05:90:33:32:89:fb:51:77:06:87: 88:87:e9:91:69:58:57:2f:b0:bd:72:d7:76:1d:b2:77:b3:87: 96:b2:04:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN5wMo/AYxzw3CaPPBSH7LOnfhIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNjAzMjYwOTA3MTNaFw0yNjAzMjkxNTUwMTNaMDMxMTAvBgNV BAMTKEFCRUI3NDZCMjNGMjM0RTQ1ODZFMDgxQzU5ODdGODA3MDJFQTBBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdk75bC4ttoIs7ZGTMj0ix+++x IwRbJ1Q2Y+kl8ESP07947VH5kUhZfWuSwAvQfUT839vT6kRehiMmc3D3WiKPeHJM KtP35qQan23jJvFw+D7liLq9/1Yv7h9+w2b2Kgsio13alWZOvHZwvEbDyUykW6bK sYW3ZIJbmL1azuz+Nlj3iqPoPiqENE/vsUpB0w1O500VsX8c9GUyH53ffUTuGwfW 0/fbVFgzWlq5Q0OEF51Gw+nDJRgGPf5v5ci8dMjzAb/SMNhMYG2okocID76CX+qh r15YXHvrxEdcsFKAICqyyITwtshSb3QkfhfOX30Nppcd4yX16tQixM3gsFcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+t0ayPyNORYbggcWYf4BwLqCogwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFrF7ILxdpPw7juFqGlfN16DMhWXhkGh0QB FY2LTHvlUqufSuCf7oII9bWrSKqBmY0Msf37SIf/PGIEuDtienFzfd8C90XTpmlE I1nQ7MFHxhF1JQtc3O1xag+GgouGV3lRJky0IPKHI3MoloC5q9y1uYbW4mJ8p/tg DpPSngyjb6/09vJGsD99HO89Gwo2kBZo3nOxPCE6iG76ha/fXSnWelOf+Uzm0MlE nYiSz5V+r1PVvaxXzsS1DA9Fi+nbw0b9wf+xdIEUVnoyrXOClcwpiyorSFwhMKm+ Glc62XJ2BZAzMon7UXcGh4iH6ZFpWFcvsL1y13Ydsnezh5ayBKA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:40:55 2026 by rpki-client