$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: A8w+o1lADikUaVLGQtm6RDXxoBO2H6kwjxKiy+D9kWs= Subject key identifier: C7:39:A6:13:EA:96:E1:DD:BF:F0:3C:F9:40:EB:0D:58:A2:F9:29:85 Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 3ABC68A5FA11EF78242B4E2DF23F3C91470FAA4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 01DD Signing time: Wed 25 Mar 2026 23:42:39 +0000 Manifest this update: Wed 25 Mar 2026 23:37:39 +0000 Manifest next update: Sun 29 Mar 2026 02:06:39 +0000 Files and hashes: 1: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA=) 2: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: XZBWXgwi6/bY0uActUG5TDU+WKOBs9TQUHXitVU+Zwk=) 3: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) 4: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: uQelNGCham65p0/OZUMSan9rdrek5gsgOzTicon+VPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:bc:68:a5:fa:11:ef:78:24:2b:4e:2d:f2:3f:3c:91:47:0f:aa:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Mar 25 23:37:39 2026 GMT Not After : Mar 29 02:06:39 2026 GMT Subject: CN=C739A613EA96E1DDBFF03CF940EB0D58A2F92985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:c3:0e:34:b5:30:95:ff:cb:2c:8c:d0:93: ba:e5:6a:d7:db:d7:fd:17:be:40:12:a8:4a:ad:5f: 12:9c:5d:8f:6d:51:3b:a3:58:f3:c6:d2:f4:6f:3c: f6:bd:ce:96:6b:42:56:3a:fc:03:76:b5:6c:c1:70: ea:4f:90:b8:e9:5e:46:1d:21:c0:ae:4d:63:78:6e: 1d:0a:0e:f4:89:57:63:d5:e6:3e:05:67:38:cd:f7: 4d:31:af:d1:40:ee:ef:f5:4f:40:7e:d9:1a:2a:26: 8c:62:3a:bb:12:76:3a:dc:2e:14:4a:22:80:cc:6f: 96:f0:4b:80:29:e5:f1:99:b1:d0:ce:c4:4a:75:5c: 97:12:2b:cc:34:4b:60:5d:ff:fb:c4:96:db:72:3c: 63:f5:64:1c:4f:05:f8:18:27:32:30:79:0e:40:3b: f6:cd:70:70:50:58:7a:f0:a3:a3:3a:93:42:2f:87: ea:d6:8f:42:b8:9a:11:e6:f3:70:18:f4:ba:ab:d2: 34:a3:2f:a3:7d:a8:4f:26:4b:30:a3:52:d4:0c:94: 48:92:94:e5:e3:c4:cd:fd:4a:8a:ae:e4:97:e3:15: 73:24:6b:e2:f5:23:21:21:f9:7d:33:67:29:bb:8d: 51:56:47:ce:97:92:b3:01:64:ce:69:f2:fd:2d:da: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:39:A6:13:EA:96:E1:DD:BF:F0:3C:F9:40:EB:0D:58:A2:F9:29:85 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:da:c6:1e:6b:13:46:d0:32:f7:53:9f:52:e7:a9:33:11:27: 8d:04:58:cd:fd:f2:eb:d9:ca:46:07:7f:43:9a:56:2b:0d:1d: 01:59:fb:48:7b:29:38:c0:57:2e:96:77:78:0a:51:b1:73:62: f7:a7:91:ad:70:45:f0:c1:9c:13:46:fa:8f:a4:7e:86:33:1d: 7e:a0:25:cb:15:01:36:0a:59:0a:86:d2:3b:56:76:0a:81:85: 66:e0:94:77:99:3d:87:0d:51:6e:28:d7:cf:20:fb:ac:0a:6f: 4c:f7:41:ef:31:be:c1:2a:91:fe:d0:0c:b4:53:c5:61:ef:b2: 2d:f9:39:51:88:3b:64:a0:6f:83:99:6d:73:6b:df:3e:af:4b: 52:af:e7:74:23:85:b9:99:f8:ff:c2:04:3d:32:bd:85:47:fe: e6:88:45:67:f4:bc:88:56:5c:91:10:0a:1d:df:bc:5a:a9:67: b8:72:88:a1:2e:fa:f6:b9:92:49:8a:db:85:a4:69:c6:19:7e: 76:72:12:b2:30:46:76:77:e1:a5:6f:df:80:5a:de:b8:2e:fa: b6:66:e6:91:72:ad:66:9e:ea:31:11:2a:82:03:f9:08:8e:85: 19:86:b6:75:03:2e:a7:8a:1c:a1:b9:b0:d7:89:b8:27:28:b5: 5f:55:2b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrxopfoR73gkK04t8j88kUcPqk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNjAzMjUyMzM3MzlaFw0yNjAzMjkwMjA2MzlaMDMxMTAvBgNV BAMTKEM3MzlBNjEzRUE5NkUxRERCRkYwM0NGOTQwRUIwRDU4QTJGOTI5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVsMONLUwlf/LLIzQk7rlatfb 1/0XvkASqEqtXxKcXY9tUTujWPPG0vRvPPa9zpZrQlY6/AN2tWzBcOpPkLjpXkYd IcCuTWN4bh0KDvSJV2PV5j4FZzjN900xr9FA7u/1T0B+2RoqJoxiOrsSdjrcLhRK IoDMb5bwS4Ap5fGZsdDOxEp1XJcSK8w0S2Bd//vElttyPGP1ZBxPBfgYJzIweQ5A O/bNcHBQWHrwo6M6k0Ivh+rWj0K4mhHm83AY9Lqr0jSjL6N9qE8mSzCjUtQMlEiS lOXjxM39Soqu5JfjFXMka+L1IyEh+X0zZym7jVFWR86XkrMBZM5p8v0t2pbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxzmmE+qW4d2/8Dz5QOsNWKL5KYUwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfaxh5rE0bQMvdTn1LnqTMRJ40EWM398uvZ ykYHf0OaVisNHQFZ+0h7KTjAVy6Wd3gKUbFzYvenka1wRfDBnBNG+o+kfoYzHX6g JcsVATYKWQqG0jtWdgqBhWbglHeZPYcNUW4o188g+6wKb0z3Qe8xvsEqkf7QDLRT xWHvsi35OVGIO2Sgb4OZbXNr3z6vS1Kv53QjhbmZ+P/CBD0yvYVH/uaIRWf0vIhW XJEQCh3fvFqpZ7hyiKEu+va5kkmK24WkacYZfnZyErIwRnZ34aVv34Ba3rgu+rZm 5pFyrWae6jERKoID+QiOhRmGtnUDLqeKHKG5sNeJuCcotV9VK4A= -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:26 2026 by rpki-client