$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: DFBJzKlX6CuKvgTmiJIQVujq3dzZ9i/4w4x8LsuEqrw= Subject key identifier: 4D:5F:C1:7B:A4:45:D7:8F:7D:A5:5F:25:88:DB:1D:BA:3C:1C:66:2C Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 5D82D05694C98E27509DBF4E4C57218FA5081CC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: 010A Signing time: Tue 24 Mar 2026 19:31:55 +0000 Manifest this update: Tue 24 Mar 2026 19:26:55 +0000 Manifest next update: Fri 27 Mar 2026 21:05:55 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) 2: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: MMpLcYQ2acDG/R6H9tWHp6iAFhe/HVAMocyWNFj5E3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:82:d0:56:94:c9:8e:27:50:9d:bf:4e:4c:57:21:8f:a5:08:1c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Mar 24 19:26:55 2026 GMT Not After : Mar 27 21:05:55 2026 GMT Subject: CN=4D5FC17BA445D78F7DA55F2588DB1DBA3C1C662C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:96:de:a6:18:2c:ea:ee:b3:99:a3:7d:56:78: bb:9f:4f:48:c1:79:1e:64:79:68:6c:48:72:a1:c3: 57:f5:e9:d9:fb:c7:52:90:fc:d9:f1:39:ec:bb:86: 0c:7b:cc:37:b1:38:ca:24:d5:64:bd:13:f0:05:b9: 00:4f:94:38:93:3e:32:2e:08:e6:ad:e2:94:96:ec: 41:fd:c3:cd:ee:9d:f9:7b:14:2b:a5:d4:1a:38:15: 7d:4c:4f:0e:8b:f3:ed:33:56:bf:49:eb:bd:11:db: b2:a7:06:08:db:79:cd:04:f5:78:93:4e:c9:f8:95: 60:a3:99:14:ad:f2:ea:93:4c:11:4e:d2:6c:c2:5f: 3a:1a:f8:56:0c:77:00:37:52:5e:69:d3:50:ee:0b: cb:ee:99:8d:a9:66:85:02:c6:7d:dd:ee:8a:2f:58: 0b:47:c2:9f:51:1b:6a:b2:a3:de:5e:8c:eb:ce:2c: 89:b0:f5:ce:db:86:79:3f:72:86:4c:89:99:2c:66: 20:0e:8d:52:f8:20:9b:9e:9a:11:6e:ef:3c:ed:83: 32:62:24:31:c0:4c:4f:6a:b6:93:cb:79:61:0b:fe: e3:40:fc:ff:16:53:51:46:39:43:19:f6:90:e0:a8: 5f:98:e1:b8:a2:4d:b5:0d:bb:29:fc:42:4a:60:73: 52:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5F:C1:7B:A4:45:D7:8F:7D:A5:5F:25:88:DB:1D:BA:3C:1C:66:2C X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4d:31:31:7e:08:54:11:b4:01:14:b6:f8:96:9f:c7:68:f7: 79:c6:17:09:52:48:25:65:c1:1e:83:d3:ef:b0:ba:28:f5:49: 5e:03:2a:fe:a5:25:2f:56:70:2b:fc:13:94:e9:fe:e6:80:16: 1b:c3:49:b6:6c:90:2a:09:9b:e3:23:2d:3a:94:a7:bf:4a:96: 12:e5:9c:48:76:14:e7:fa:5e:62:3c:7e:4c:20:15:8a:a9:74: 2a:0a:e4:bd:18:d3:2c:20:48:21:86:91:54:51:7f:4a:68:ef: 98:99:db:56:e2:29:e4:d7:e8:94:3a:14:fa:bc:81:f7:6f:17: b0:66:5f:c1:f8:94:ac:89:73:f9:4c:94:ee:37:63:cf:e9:e8: f2:19:cf:06:70:d7:62:f8:59:8c:c2:06:de:17:f4:d2:49:a6: ca:88:b3:b4:7d:72:5b:d6:1e:8b:fe:14:eb:77:7e:bf:cb:ee: f0:46:2b:9c:da:79:d3:48:92:3d:ed:4c:1d:67:e5:df:2b:30: 2c:54:80:52:e5:36:df:57:f9:89:1e:54:82:7a:83:63:63:0f: f2:c1:80:34:96:30:27:b6:b0:97:a1:b8:24:83:69:64:9c:a7: 89:21:0f:2f:c1:76:f2:bc:6f:fb:4a:0e:b1:48:57:8b:49:0f: d3:ad:73:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYLQVpTJjidQnb9OTFchj6UIHMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNjAzMjQxOTI2NTVaFw0yNjAzMjcyMTA1NTVaMDMxMTAvBgNV BAMTKDRENUZDMTdCQTQ0NUQ3OEY3REE1NUYyNTg4REIxREJBM0MxQzY2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmlt6mGCzq7rOZo31WeLufT0jB eR5keWhsSHKhw1f16dn7x1KQ/NnxOey7hgx7zDexOMok1WS9E/AFuQBPlDiTPjIu COat4pSW7EH9w83unfl7FCul1Bo4FX1MTw6L8+0zVr9J670R27KnBgjbec0E9XiT Tsn4lWCjmRSt8uqTTBFO0mzCXzoa+FYMdwA3Ul5p01DuC8vumY2pZoUCxn3d7oov WAtHwp9RG2qyo95ejOvOLImw9c7bhnk/coZMiZksZiAOjVL4IJuemhFu7zztgzJi JDHATE9qtpPLeWEL/uNA/P8WU1FGOUMZ9pDgqF+Y4biiTbUNuyn8Qkpgc1I7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTV/Be6RF1499pV8liNsdujwcZiwwHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9NMTF+CFQRtAEUtviWn8do93nGFwlSSCVl wR6D0++wuij1SV4DKv6lJS9WcCv8E5Tp/uaAFhvDSbZskCoJm+MjLTqUp79KlhLl nEh2FOf6XmI8fkwgFYqpdCoK5L0Y0ywgSCGGkVRRf0po75iZ21biKeTX6JQ6FPq8 gfdvF7BmX8H4lKyJc/lMlO43Y8/p6PIZzwZw12L4WYzCBt4X9NJJpsqIs7R9clvW Hov+FOt3fr/L7vBGK5zaedNIkj3tTB1n5d8rMCxUgFLlNt9X+YkeVIJ6g2NjD/LB gDSWMCe2sJehuCSDaWScp4khDy/BdvK8b/tKDrFIV4tJD9Otc6E= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:17 2026 by rpki-client