$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: w+FWozvtVypVE6RJt48YSqX6K17jvbU9rH/aFWsf87w= Subject key identifier: FB:02:64:BB:A4:08:C6:54:50:A5:33:DC:DE:A9:54:56:42:19:93:F1 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 06B131BAC8374EB5C0D8385CDE460869000B7857 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 027F Signing time: Wed 25 Mar 2026 17:31:33 +0000 Manifest this update: Wed 25 Mar 2026 17:26:33 +0000 Manifest next update: Sat 28 Mar 2026 17:45:33 +0000 Files and hashes: 1: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: pc293ep/4fQQOE2DdqqWAYfU1Bh+ldyDqPDpR8SqPEU=) 2: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: zR+AHlwY68DX0JPtMTmh6nGB9oWIzp8S2sMII7GBl+o=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 4: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: 8ZWQPdcJgeKZrsbUmRYq2OzkrsqVWW52cECdkg/5pH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:b1:31:ba:c8:37:4e:b5:c0:d8:38:5c:de:46:08:69:00:0b:78:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Mar 25 17:26:33 2026 GMT Not After : Mar 28 17:45:33 2026 GMT Subject: CN=FB0264BBA408C65450A533DCDEA95456421993F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e4:c8:2b:1a:08:7c:c0:c6:de:01:9c:71:fc: 2e:b4:67:7e:f0:8e:71:91:42:d0:5f:e7:ed:a7:6a: ce:21:8d:d7:fe:7c:8a:cf:58:c5:99:00:c9:81:03: a7:aa:b4:18:0e:3a:c8:93:fb:37:0a:39:2b:8b:e0: 65:a6:b6:7a:90:8b:13:7e:d4:52:4e:6d:d7:04:cb: 5d:25:89:30:c6:a1:85:31:43:56:94:57:8c:28:a0: 69:38:a8:88:e0:7c:5a:95:03:e8:3b:d4:53:81:24: 54:b5:31:64:15:42:a7:5b:e1:bb:49:38:ad:33:ec: 28:4e:44:45:12:dd:29:fb:4b:a8:8f:f9:28:6b:29: c2:bb:fa:6f:52:b4:0a:48:ec:1d:05:73:30:0c:ee: ac:2c:d6:51:b3:bb:8b:72:12:82:ec:81:6f:01:46: 1e:e8:0b:d7:c6:e6:4f:e2:ac:14:1d:40:5c:9f:d2: 6e:2a:3b:01:0a:bb:f2:06:38:78:71:b6:3b:d8:dc: 74:e7:b3:79:f1:a1:d4:5d:0e:e2:2a:36:df:5b:2e: 75:90:a7:4e:79:15:38:b6:eb:84:5e:8c:b8:ca:bb: d4:7f:ae:78:42:d1:63:2a:b9:4a:21:d3:3d:ce:78: 9c:b3:9d:a8:88:7c:f4:6f:a3:6f:c9:ca:18:87:3b: d3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:02:64:BB:A4:08:C6:54:50:A5:33:DC:DE:A9:54:56:42:19:93:F1 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:08:bd:9f:3d:26:07:32:23:35:2c:16:c1:f1:c6:f7:18:0c: 00:ff:ff:c0:67:6e:c6:97:ca:28:8e:8e:03:52:5c:be:4f:02: 36:05:f4:e1:f6:43:40:23:c2:1e:36:4b:d6:64:70:40:7c:34: ca:ff:3b:7d:fe:c1:ff:06:68:cd:99:8c:31:6f:ea:af:14:4b: a4:6d:7c:31:3a:88:b6:a2:27:a4:1e:84:fd:9a:eb:38:3a:1a: 54:f1:81:96:09:3a:e4:44:33:d1:f8:4e:f6:28:a4:12:4a:8c: 39:a7:6a:12:be:65:ce:c5:c4:e1:b4:f2:05:3c:0f:b9:cb:59: e5:02:be:c7:66:46:5f:05:d2:d6:39:16:2b:1a:fd:6e:5f:fc: 1a:3e:70:b4:60:b9:03:3d:d8:00:99:d9:4f:83:91:e1:ca:10: 46:7e:8b:c6:dc:5b:df:06:b9:2a:1f:a3:d3:2a:7c:bc:dc:f4: 2c:82:0e:c9:eb:b1:61:44:bb:ae:e7:ef:e5:c7:58:71:61:71: 3a:87:70:11:6e:de:45:05:69:6e:78:1e:06:81:74:35:1d:5a: fb:88:fb:19:ff:5e:fd:f3:a9:41:11:fc:70:85:e1:7c:22:cd: 32:86:27:7d:9f:ef:29:ca:71:44:3c:66:18:8c:ee:cd:3a:63: 66:19:15:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBrExusg3TrXA2Dhc3kYIaQALeFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNjAzMjUxNzI2MzNaFw0yNjAzMjgxNzQ1MzNaMDMxMTAvBgNV BAMTKEZCMDI2NEJCQTQwOEM2NTQ1MEE1MzNEQ0RFQTk1NDU2NDIxOTkzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD05MgrGgh8wMbeAZxx/C60Z37w jnGRQtBf5+2nas4hjdf+fIrPWMWZAMmBA6eqtBgOOsiT+zcKOSuL4GWmtnqQixN+ 1FJObdcEy10liTDGoYUxQ1aUV4wooGk4qIjgfFqVA+g71FOBJFS1MWQVQqdb4btJ OK0z7ChOREUS3Sn7S6iP+ShrKcK7+m9StApI7B0FczAM7qws1lGzu4tyEoLsgW8B Rh7oC9fG5k/irBQdQFyf0m4qOwEKu/IGOHhxtjvY3HTns3nxodRdDuIqNt9bLnWQ p055FTi264RejLjKu9R/rnhC0WMquUoh0z3OeJyznaiIfPRvo2/JyhiHO9NlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+wJku6QIxlRQpTPc3qlUVkIZk/EwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYIvZ89JgcyIzUsFsHxxvcYDAD//8BnbsaX yiiOjgNSXL5PAjYF9OH2Q0Ajwh42S9ZkcEB8NMr/O33+wf8GaM2ZjDFv6q8US6Rt fDE6iLaiJ6QehP2a6zg6GlTxgZYJOuREM9H4TvYopBJKjDmnahK+Zc7FxOG08gU8 D7nLWeUCvsdmRl8F0tY5Fisa/W5f/Bo+cLRguQM92ACZ2U+DkeHKEEZ+i8bcW98G uSofo9MqfLzc9CyCDsnrsWFEu67n7+XHWHFhcTqHcBFu3kUFaW54HgaBdDUdWvuI +xn/Xv3zqUER/HCF4XwizTKGJ32f7ynKcUQ8ZhiM7s06Y2YZFYM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:32 2026 by rpki-client