$ rpki-client -vvf repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft File: B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft (raw, json) Hash identifier: 1RCyZW8/GUHj3lThB/dmS/alPLV/ars8ScSny4/lGKM= Subject key identifier: A2:B6:CF:D6:24:2D:16:64:44:B2:D7:6E:0B:7C:F6:AB:34:ED:CE:C8 Authority key identifier: B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA Certificate issuer: /CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Certificate serial: 3BE373E6498ED66051DA1ECFF41B29F9B3892C0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft Manifest number: 026D Signing time: Wed 25 Mar 2026 14:51:19 +0000 Manifest this update: Wed 25 Mar 2026 14:46:19 +0000 Manifest next update: Sat 28 Mar 2026 19:20:19 +0000 Files and hashes: 1: B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl (hash: I9OttdnJ0qusCaLUTCkbXAAcPAyU3CN1gNhuS9HTdh0=) 2: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ZaP6okTPzJHZKniyIdhQXNdEudbstzWU4bsphJPUV9E=) 3: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: +EIRv+917tyCp6af/W5OPwQRzSNyoSTvU7kccVrs+vw=) 4: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: v00vtP0bWL7Buk01yo84+tSjfHLcJv0ez1bijApcHM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e3:73:e6:49:8e:d6:60:51:da:1e:cf:f4:1b:29:f9:b3:89:2c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0734A32D13A96FCB3FDF982C2EEC500150411CA Validity Not Before: Mar 25 14:46:19 2026 GMT Not After : Mar 28 19:20:19 2026 GMT Subject: CN=A2B6CFD6242D166444B2D76E0B7CF6AB34EDCEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:e2:ad:21:a9:7c:59:2e:b4:6f:0a:fb:34: 02:46:22:4e:95:d2:b1:3c:1c:1d:66:94:1d:69:38: f8:51:5a:ef:f3:86:4a:84:2c:cb:bb:f0:90:1d:0a: 1c:3c:e0:55:e7:f2:a9:5c:ea:46:d7:fe:56:f4:ed: 8b:d2:72:06:fb:5e:5a:32:e1:3e:af:14:81:56:27: 0c:e6:98:48:ce:48:06:d6:ec:97:f2:00:48:41:50: a7:2d:4a:93:4b:b5:15:1e:9a:0e:1d:d2:36:28:ed: 84:c7:e4:e6:4a:12:77:54:38:d8:38:34:e7:f5:7d: 5b:bb:cd:80:45:ff:24:ef:f6:36:f1:37:7a:f1:e8: 14:4b:a9:b5:64:74:1d:6e:fc:26:91:c6:eb:43:29: 3e:40:b5:97:40:5f:12:9a:b2:3d:3c:19:08:fd:5b: f5:c3:40:51:be:ea:98:41:25:6a:15:6e:a8:ca:48: aa:6e:48:ae:4d:f0:ae:22:58:5b:b2:88:bb:9a:43: 96:b8:43:d5:2a:49:d2:94:d5:6a:59:51:87:9c:b7: ca:64:f1:4d:1d:bb:a2:0c:5c:5f:74:cf:f1:6f:f8: 57:d5:f1:41:99:d7:57:76:8a:3e:2e:58:7b:93:6a: 85:15:b0:20:dd:1e:c3:a4:02:cf:19:12:42:9c:4b: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B6:CF:D6:24:2D:16:64:44:B2:D7:6E:0B:7C:F6:AB:34:ED:CE:C8 X509v3 Authority Key Identifier: keyid:B0:73:4A:32:D1:3A:96:FC:B3:FD:F9:82:C2:EE:C5:00:15:04:11:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0734A32D13A96FCB3FDF982C2EEC500150411CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B0734A32D13A96FCB3FDF982C2EEC500150411CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:bd:9f:ad:14:b5:60:a7:2a:ee:5a:6e:e3:6f:70:6a:4b:e9: a6:bb:cf:d5:a7:1e:d2:76:e8:bb:ab:05:9e:57:7d:8b:3d:08: 48:f7:40:c3:4d:c2:c8:1d:4c:61:3d:8b:7d:31:fb:cb:cf:1a: c6:91:7b:c0:f2:fc:76:3a:fe:25:8d:38:fc:98:fc:32:97:a4: de:00:61:89:93:de:dd:8b:be:0b:4c:dd:6c:76:5f:99:04:0a: 48:da:f9:48:77:37:1b:03:43:43:16:97:8f:19:bc:43:3b:24: ee:46:25:4d:e3:da:27:2b:30:dc:d7:4b:4b:cb:3b:39:88:50: 22:53:d9:b1:8b:2d:70:a1:11:62:97:7c:f9:5d:e9:1d:05:93: a2:54:b3:de:73:44:99:66:bb:51:8d:12:d4:09:71:d8:aa:cc: 85:1a:a4:99:8a:c8:ff:9b:39:f2:ab:0a:76:34:5c:90:dc:f7: c5:a2:a6:c4:6c:9d:a5:30:13:d9:6f:30:27:77:41:27:03:7a: 05:4c:26:43:b6:81:99:f3:0b:4d:8c:55:4b:b4:3d:dc:88:1f: c5:07:4a:40:e6:0b:77:27:97:ce:06:e5:08:b8:b9:e9:3c:82: 5d:37:f1:49:77:9d:f9:e3:e2:c0:f4:1f:e5:7e:fe:e0:4c:dc: fc:ef:d8:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+Nz5kmO1mBR2h7P9Bsp+bOJLA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAx NTA0MTFDQTAeFw0yNjAzMjUxNDQ2MTlaFw0yNjAzMjgxOTIwMTlaMDMxMTAvBgNV BAMTKEEyQjZDRkQ2MjQyRDE2NjQ0NEIyRDc2RTBCN0NGNkFCMzRFRENFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9+KtIal8WS60bwr7NAJGIk6V 0rE8HB1mlB1pOPhRWu/zhkqELMu78JAdChw84FXn8qlc6kbX/lb07YvScgb7Xloy 4T6vFIFWJwzmmEjOSAbW7JfyAEhBUKctSpNLtRUemg4d0jYo7YTH5OZKEndUONg4 NOf1fVu7zYBF/yTv9jbxN3rx6BRLqbVkdB1u/CaRxutDKT5AtZdAXxKasj08GQj9 W/XDQFG+6phBJWoVbqjKSKpuSK5N8K4iWFuyiLuaQ5a4Q9UqSdKU1WpZUYect8pk 8U0du6IMXF90z/Fv+FfV8UGZ11d2ij4uWHuTaoUVsCDdHsOkAs8ZEkKcSykLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUorbP1iQtFmREstduC3z2qzTtzsgwHwYDVR0j BBgwFoAUsHNKMtE6lvyz/fmCwu7FABUEEcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjMwOTdmMC0zOTc4LTQ5Y2UtYjY5Yy00YjIwYjRkY2ZiN2UvMC9CMDczNEEzMkQx M0E5NkZDQjNGREY5ODJDMkVFQzUwMDE1MDQxMUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1MDAxNTA0 MTFDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjA3MzRBMzJEMTNBOTZGQ0IzRkRGOTgyQzJFRUM1 MDAxNTA0MTFDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW9n60UtWCnKu5abuNvcGpL6aa7z9WnHtJ2 6LurBZ5XfYs9CEj3QMNNwsgdTGE9i30x+8vPGsaRe8Dy/HY6/iWNOPyY/DKXpN4A YYmT3t2LvgtM3Wx2X5kECkja+Uh3NxsDQ0MWl48ZvEM7JO5GJU3j2icrMNzXS0vL OzmIUCJT2bGLLXChEWKXfPld6R0Fk6JUs95zRJlmu1GNEtQJcdiqzIUapJmKyP+b OfKrCnY0XJDc98WipsRsnaUwE9lvMCd3QScDegVMJkO2gZnzC02MVUu0PdyIH8UH SkDmC3cnl84G5Qi4uek8gl038Ul3nfnj4sD0H+V+/uBM3Pzv2Ic= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:10 2026 by rpki-client