$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft File: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft (raw, json) Hash identifier: mB1ZEa+9368wh9wCJD8HdjYkIwAynSWJbYTxQiF+yb4= Subject key identifier: 09:DA:47:F3:13:95:B8:8F:F4:CE:17:B7:E0:21:37:65:47:87:B8:A5 Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 Certificate issuer: /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Certificate serial: 4DA0B4B66ABA617E8F15970FC6EC77CB5BE80244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft Manifest number: 0270 Signing time: Wed 25 Mar 2026 03:20:55 +0000 Manifest this update: Wed 25 Mar 2026 03:15:55 +0000 Manifest next update: Sat 28 Mar 2026 08:55:55 +0000 Files and hashes: 1: 323030313a6466333a313230303a3a2f34382d3438203d3e20313335343535.roa (hash: H9jyrX4t2mUOdkzDAjL/yXJRGmywtOSsC6VhjXRa+ns=) 2: 3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (hash: ef8K/s+loJfcDNcQd9jMxXM6ibzQu1hDbe8Y7AKrwdI=) 3: 3130332e36382e3133372e302f32342d3234203d3e20313335343535.roa (hash: a9rngyDnHCXUi8yMVgMhHvcKP7ul4CPYYGjkW0jQDZY=) 4: B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl (hash: O9kNcx8nBp0b0oeYGTJf0stQgP0IPNhwHOf0m7oGMtI=) 5: 3130332e36382e3133372e302f32342d3234203d3e203338353131.roa (hash: kW0dkbVl3axDrA3JYmOP/J+VOWaOXAqel6hQB21C0fo=) 6: 3130332e36382e3133362e302f32332d3234203d3e20313335343535.roa (hash: YzSIY1zA+8vDnTROTWhvMUw0lDxbU9DG47hg5g9YYoc=) 7: 3130332e36382e3133362e302f32342d3234203d3e20313335343535.roa (hash: 6TKkLJ/vA8ZX1xyW1i7zZdkDISa15oqAT2rL7tkJxYE=) 8: 3130332e36382e3133362e302f32332d3233203d3e203338353131.roa (hash: Xfgb/bosimr9cD6CvubfYOrFF8ltCqJCXBNQnnNDr+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a0:b4:b6:6a:ba:61:7e:8f:15:97:0f:c6:ec:77:cb:5b:e8:02:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416 Validity Not Before: Mar 25 03:15:55 2026 GMT Not After : Mar 28 08:55:55 2026 GMT Subject: CN=09DA47F31395B88FF4CE17B7E02137654787B8A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:ad:42:15:16:0a:42:d8:a8:52:f2:24:e2: f3:67:cc:6f:d6:0e:fe:c2:fe:ef:1a:6e:d2:ea:21: 4f:f8:54:21:35:55:ab:a5:64:b4:08:b9:b3:80:9d: 90:00:df:2f:c8:5d:43:b3:3e:51:dc:33:30:62:93: 6b:62:31:40:97:83:07:6c:37:07:ab:bb:ec:83:f8: 2e:f6:96:fb:dd:29:5c:e9:58:35:f1:fc:d3:c4:fc: fb:66:37:f1:af:81:e1:03:32:4f:55:2c:6f:02:c0: 89:d1:46:ea:3f:5a:08:ae:8b:09:5e:51:29:fa:2e: 1d:d8:0d:5d:b6:90:06:ed:e5:c8:dc:5a:69:cc:88: d9:84:ac:6f:52:92:bc:a9:10:5a:84:d6:9f:ee:6c: 5f:8d:96:55:88:52:1f:1e:7f:b2:33:39:11:f6:48: 90:02:52:42:44:0c:56:f7:d7:c3:05:c6:1b:f8:03: d8:ba:71:68:42:0a:b0:0c:b6:ae:37:5c:f8:a3:b2: bd:76:f6:d7:2c:25:af:0d:92:6f:a0:f8:73:11:fc: 6c:22:f1:f7:1a:60:38:d3:ee:d6:4b:cf:9b:77:ba: 3a:f4:54:94:10:53:a6:a1:6c:69:96:b7:7d:4b:1e: 19:5c:8c:22:20:33:f3:3d:f4:f2:a1:ab:35:e4:0b: 84:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DA:47:F3:13:95:B8:8F:F4:CE:17:B7:E0:21:37:65:47:87:B8:A5 X509v3 Authority Key Identifier: keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:2f:46:8e:05:87:07:8a:e7:20:bf:51:fc:81:23:df:b9:2b: 5b:4b:4f:bc:d1:c2:e5:fc:02:6a:77:5b:36:fc:ca:ad:fa:42: 40:e7:f6:9c:94:9c:89:4a:fd:c8:c0:ba:73:e8:67:df:21:be: 4c:57:82:0d:32:3c:d0:97:46:40:10:7d:e8:99:3d:17:05:59: b6:81:b6:df:6e:17:f6:f0:1b:7e:9e:f2:b6:c6:39:c0:dd:47: 66:fb:42:16:be:3f:dc:67:32:f5:a1:70:ff:74:dd:c6:e6:09: 5f:f5:2f:79:3b:61:be:e3:c6:d1:76:ce:82:10:ed:23:01:fe: df:ae:f2:af:ee:3e:e9:1f:5e:5a:d9:ed:59:2e:b8:a0:69:b2: e8:02:e4:de:a6:80:20:be:19:29:68:95:13:fb:7b:f6:e5:fe: 77:4c:4a:35:11:b2:86:ca:74:bd:fe:a0:a6:34:ca:87:84:61: 14:5c:2c:14:73:70:46:75:79:f4:9b:49:75:e1:d0:70:1d:3c: 46:11:9b:ea:19:45:fc:54:35:6a:9b:db:be:d3:dc:ab:bd:2d: d3:1f:ca:ef:85:b7:e1:c4:b6:e3:3a:37:16:95:73:1d:68:20: 19:05:b6:bd:9c:ac:2a:af:2b:e8:bd:1f:18:6c:96:df:18:ca: 23:5a:0d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTaC0tmq6YX6PFZcPxux3y1voAkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1 RjlEQTQxNjAeFw0yNjAzMjUwMzE1NTVaFw0yNjAzMjgwODU1NTVaMDMxMTAvBgNV BAMTKDA5REE0N0YzMTM5NUI4OEZGNENFMTdCN0UwMjEzNzY1NDc4N0I4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2361CFRYKQtioUvIk4vNnzG/W Dv7C/u8abtLqIU/4VCE1VaulZLQIubOAnZAA3y/IXUOzPlHcMzBik2tiMUCXgwds Nweru+yD+C72lvvdKVzpWDXx/NPE/PtmN/GvgeEDMk9VLG8CwInRRuo/Wgiuiwle USn6Lh3YDV22kAbt5cjcWmnMiNmErG9SkrypEFqE1p/ubF+NllWIUh8ef7IzORH2 SJACUkJEDFb318MFxhv4A9i6cWhCCrAMtq43XPijsr129tcsJa8Nkm+g+HMR/Gwi 8fcaYDjT7tZLz5t3ujr0VJQQU6ahbGmWt31LHhlcjCIgM/M99PKhqzXkC4QtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCdpH8xOVuI/0zhe34CE3ZUeHuKUwHwYDVR0j BBgwFoAUssGOEchTC99O4zP13r0LBV+dpBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2RjMWIwNS0yYTY5LTQ1YjAtOGM0NC02MjY3NzIyNzZiZDkvMC9CMkMxOEUxMUM4 NTMwQkRGNEVFMzMzRjVERUJEMEIwNTVGOURBNDE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBCMDU1RjlE QTQxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkYzFiMDUtMmE2OS00NWIwLThj NDQtNjI2NzcyMjc2YmQ5LzAvQjJDMThFMTFDODUzMEJERjRFRTMzM0Y1REVCRDBC MDU1RjlEQTQxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgvRo4FhweK5yC/UfyBI9+5K1tLT7zRwuX8 Amp3Wzb8yq36QkDn9pyUnIlK/cjAunPoZ98hvkxXgg0yPNCXRkAQfeiZPRcFWbaB tt9uF/bwG36e8rbGOcDdR2b7Qha+P9xnMvWhcP903cbmCV/1L3k7Yb7jxtF2zoIQ 7SMB/t+u8q/uPukfXlrZ7VkuuKBpsugC5N6mgCC+GSlolRP7e/bl/ndMSjURsobK dL3+oKY0yoeEYRRcLBRzcEZ1efSbSXXh0HAdPEYRm+oZRfxUNWqb277T3Ku9LdMf yu+Ft+HEtuM6NxaVcx1oIBkFtr2crCqvK+i9Hxhslt8YyiNaDdM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:31 2026 by rpki-client