$ rpki-client -vvf repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft File: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft (raw, json) Hash identifier: CHu9zLTt3k0cAZLKBl80SPPjYQLwKkjQmn3H+pv8tJo= Subject key identifier: 28:12:D3:DC:84:3B:7C:EA:6C:5E:CB:B2:27:D6:E8:41:D1:B3:60:6C Authority key identifier: B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 Certificate issuer: /CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Certificate serial: 1972889565C301E7C24374AC01A8D4AEB621FEB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft Manifest number: 04D4 Signing time: Wed 25 Mar 2026 06:12:24 +0000 Manifest this update: Wed 25 Mar 2026 06:07:24 +0000 Manifest next update: Sat 28 Mar 2026 10:14:24 +0000 Files and hashes: 1: 3130332e3135372e362e302f32342d3234203d3e20313431313036.roa (hash: 2XQOc628Et0oqO8CO0VRKDq3/7F6VNJ+Q07NK/QPZuc=) 2: B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl (hash: Bbkn9gz1q+mdKbqvxnqgmtfpA6AmV10sRP7v6KfPank=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:14:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:72:88:95:65:c3:01:e7:c2:43:74:ac:01:a8:d4:ae:b6:21:fe:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582 Validity Not Before: Mar 25 06:07:24 2026 GMT Not After : Mar 28 10:14:24 2026 GMT Subject: CN=2812D3DC843B7CEA6C5ECBB227D6E841D1B3606C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:e3:41:74:9c:22:e7:aa:ee:be:ce:2b:37: 5f:d2:f3:69:fb:07:79:a9:60:c9:e9:28:20:eb:2e: a8:4f:dd:b3:00:89:ac:f2:0c:18:ec:b3:4b:4c:45: 81:0e:92:b4:2d:a3:66:10:da:93:75:a9:39:f5:28: 76:2a:7b:17:1b:10:ff:89:e1:3d:6d:bd:c8:51:46: 6b:61:0a:01:ab:1d:54:e9:b9:6e:e8:fd:91:94:cf: dd:9f:c3:12:20:4a:16:00:00:c5:33:3c:18:ba:42: 33:0c:d7:48:d8:88:93:c2:3e:40:d5:bc:81:42:95: 19:b9:f3:04:75:e5:b6:03:ad:82:9d:6c:0d:20:49: 38:7e:cb:a4:8f:0b:42:4e:2e:52:43:eb:b8:6b:a2: 00:f7:fa:5f:27:72:ea:17:3d:ca:93:d7:8b:28:28: f9:fb:b3:c2:07:cd:10:d1:55:f8:a0:7f:63:cf:18: d5:b8:37:40:10:20:36:9d:28:74:7f:5b:f6:44:99: fd:97:18:b1:72:84:0e:83:c5:12:39:3b:f8:79:9b: d6:76:85:f5:c7:99:77:69:96:b1:b3:87:56:ea:13: a8:c0:84:fe:dd:38:98:97:d7:99:da:0b:6a:a4:50: ad:e7:af:cf:12:aa:1c:22:14:ad:e0:04:3d:c5:1c: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:12:D3:DC:84:3B:7C:EA:6C:5E:CB:B2:27:D6:E8:41:D1:B3:60:6C X509v3 Authority Key Identifier: keyid:B2:07:7B:9B:AF:0B:F3:E5:FC:B8:45:13:B1:D7:44:5E:30:CE:65:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85dd4f16-570e-4c8c-a992-db89ea3bad36/0/B2077B9BAF0BF3E5FCB84513B1D7445E30CE6582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:50:97:6c:43:b1:71:23:36:c8:34:16:73:6f:83:ac:8b:9b: 8e:bb:5a:92:ff:5b:40:d6:e7:a0:2f:c1:56:33:c0:b4:3e:9f: 39:1a:2b:45:33:d5:b0:dc:fc:a2:09:86:5d:50:7a:94:f2:bb: 71:26:f3:13:49:44:7f:d3:2f:06:4d:7d:51:76:46:f7:a7:74: 71:6f:87:79:e9:03:e4:c3:37:3c:1d:b3:4a:92:d9:67:a0:fa: e4:07:25:31:1d:4f:f5:59:6f:f0:b9:2d:4f:57:c3:d3:96:a0: 76:2c:23:81:2b:7a:45:69:36:b7:8c:24:76:8c:55:24:69:1c: b9:6f:81:fd:f6:bc:5c:56:e8:cc:dc:f9:66:dc:2b:df:bd:4a: fc:d3:0f:3b:61:2f:51:84:e5:7e:21:ca:9a:af:e7:f4:0f:e7: e6:41:ba:83:2e:02:19:0c:5b:05:ad:b5:76:23:c4:c7:e8:e5: 2e:85:39:4e:63:ae:d3:98:f8:b4:b7:e6:b9:dc:ad:5e:67:32: 2f:06:d0:2a:b8:40:92:62:ea:5b:70:42:80:02:21:1a:7a:84: 98:c7:dc:86:eb:5d:ea:cd:61:8a:4c:cd:19:47:cf:e7:82:93: 03:f4:28:ae:30:12:be:69:59:11:68:55:6e:73:45:6a:b0:00: 79:51:ce:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXKIlWXDAefCQ3SsAajUrrYh/rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUz MENFNjU4MjAeFw0yNjAzMjUwNjA3MjRaFw0yNjAzMjgxMDE0MjRaMDMxMTAvBgNV BAMTKDI4MTJEM0RDODQzQjdDRUE2QzVFQ0JCMjI3RDZFODQxRDFCMzYwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJuNBdJwi56ruvs4rN1/S82n7 B3mpYMnpKCDrLqhP3bMAiazyDBjss0tMRYEOkrQto2YQ2pN1qTn1KHYqexcbEP+J 4T1tvchRRmthCgGrHVTpuW7o/ZGUz92fwxIgShYAAMUzPBi6QjMM10jYiJPCPkDV vIFClRm58wR15bYDrYKdbA0gSTh+y6SPC0JOLlJD67hrogD3+l8ncuoXPcqT14so KPn7s8IHzRDRVfigf2PPGNW4N0AQIDadKHR/W/ZEmf2XGLFyhA6DxRI5O/h5m9Z2 hfXHmXdplrGzh1bqE6jAhP7dOJiX15naC2qkUK3nr88SqhwiFK3gBD3FHBUhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKBLT3IQ7fOpsXsuyJ9boQdGzYGwwHwYDVR0j BBgwFoAUsgd7m68L8+X8uEUTsddEXjDOZYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWRkNGYxNi01NzBlLTRjOGMtYTk5Mi1kYjg5ZWEzYmFkMzYvMC9CMjA3N0I5QkFG MEJGM0U1RkNCODQ1MTNCMUQ3NDQ1RTMwQ0U2NTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0NUUzMENF NjU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVkZDRmMTYtNTcwZS00YzhjLWE5 OTItZGI4OWVhM2JhZDM2LzAvQjIwNzdCOUJBRjBCRjNFNUZDQjg0NTEzQjFENzQ0 NUUzMENFNjU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1Ql2xDsXEjNsg0FnNvg6yLm467WpL/W0DW 56AvwVYzwLQ+nzkaK0Uz1bDc/KIJhl1QepTyu3Em8xNJRH/TLwZNfVF2RvendHFv h3npA+TDNzwds0qS2Weg+uQHJTEdT/VZb/C5LU9Xw9OWoHYsI4ErekVpNreMJHaM VSRpHLlvgf32vFxW6Mzc+WbcK9+9SvzTDzthL1GE5X4hypqv5/QP5+ZBuoMuAhkM WwWttXYjxMfo5S6FOU5jrtOY+LS35rncrV5nMi8G0Cq4QJJi6ltwQoACIRp6hJjH 3IbrXerNYYpMzRlHz+eCkwP0KK4wEr5pWRFoVW5zRWqwAHlRzpo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:18:47 2026 by rpki-client