$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: yRKrc6O+QRrHsb/tt/4xXVeeuFsolG0PmocKytJm3UA= Subject key identifier: D6:DF:06:04:8E:09:41:B9:CA:AA:1B:84:B1:B9:01:82:F2:65:F4:F1 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 74A074BEB54FFD791B6D2B501D846E8ADA238711 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 014E Signing time: Wed 25 Mar 2026 09:00:03 +0000 Manifest this update: Wed 25 Mar 2026 08:55:03 +0000 Manifest next update: Sat 28 Mar 2026 15:45:03 +0000 Files and hashes: 1: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: f57QAxVg9vERyVlEpncxIOOJmOiPdKi/oXUgkkYVRl8=) 2: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: WZyPn+mq0I+eE3vcXNaLpwRID4wqkE6/jQ3zY3AffcI=) 3: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: cFu5nteBBzan5faf9I4u2CSs1idRr42+5NP3IOF4DXY=) 4: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: P+lInV3ols6ftIxSpMHmtBDcdqTmvL+gkgGsnZZSjLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a0:74:be:b5:4f:fd:79:1b:6d:2b:50:1d:84:6e:8a:da:23:87:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Mar 25 08:55:03 2026 GMT Not After : Mar 28 15:45:03 2026 GMT Subject: CN=D6DF06048E0941B9CAAA1B84B1B90182F265F4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:ff:01:4b:77:b3:2e:35:90:23:af:53:e6: 9d:39:63:66:20:02:6e:b1:c8:53:74:a4:43:44:81: 0f:cf:85:89:7a:45:b8:14:97:dd:58:d8:7e:55:e3: a2:45:03:7a:60:8a:49:3e:c5:88:71:8f:ae:6b:a9: 30:ad:23:2c:10:e5:40:9d:62:3a:0f:da:44:ba:c0: 57:56:1c:56:71:a5:82:c5:95:00:3f:3f:25:84:60: ed:cd:79:93:18:b7:a6:c6:9b:7d:15:24:42:7d:ad: 13:25:b9:76:94:f0:7c:b7:fe:ea:e5:5f:0d:9d:da: 8a:88:6c:78:6a:f0:ee:e9:8f:d9:f4:b8:91:86:75: d7:e3:e8:ad:5b:8a:3a:c2:0e:16:c8:48:fd:eb:90: ff:60:a7:f9:c4:29:9b:fa:f3:a5:e1:2d:f7:0c:3b: 80:e0:64:b7:5b:a0:3d:7f:99:4c:5c:93:e6:95:0b: f2:55:10:31:28:1a:3d:de:41:d0:19:77:6b:b5:93: c5:ef:bb:c8:e7:7f:82:a2:5f:dc:cc:4f:9a:1d:0d: e0:ff:4f:8a:77:1e:da:1a:ce:ae:3a:68:58:32:b4: 75:b0:7c:19:9a:e9:e9:97:25:9a:ef:79:be:a6:13: 6a:92:38:1d:2e:1a:c0:ad:36:43:64:aa:43:b1:56: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DF:06:04:8E:09:41:B9:CA:AA:1B:84:B1:B9:01:82:F2:65:F4:F1 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:36:a8:81:68:5a:7a:04:ab:dc:77:19:c8:1f:67:00:37:91: 30:17:f9:74:07:02:51:5b:ed:6d:f9:bf:ac:e6:72:87:ca:b0: 69:cd:ca:2e:72:74:9c:39:72:d4:c8:2d:af:62:b4:8f:3b:e1: 71:8b:c1:04:9b:15:f1:9b:c5:0d:02:b7:30:9e:cb:f5:3f:05: 28:b3:82:b6:1d:a5:13:2f:60:93:b8:be:87:5b:39:35:0c:30: 0a:76:2c:b8:7e:33:62:a0:1b:46:82:22:45:6b:2a:74:a4:1b: 56:30:f8:24:23:0b:22:49:06:13:7b:8c:04:fd:25:d8:58:b8: e7:08:de:61:3a:50:60:3b:1e:86:f7:a5:40:de:ff:80:b5:08: cb:1f:38:ff:8c:14:93:ff:9b:79:22:b7:7c:86:93:e7:1e:9a: cf:f1:fb:a7:fc:61:30:aa:d7:f0:86:b0:31:79:51:a1:c4:df: 2c:b5:73:42:18:bc:8e:0a:3b:01:08:14:e1:16:89:be:12:ca: 67:1f:3e:f6:49:be:89:4f:a6:bd:8a:d2:6d:ea:43:2b:01:85: 84:ff:62:8f:c7:4e:43:39:15:5a:3e:ad:e9:78:66:38:76:23: 32:62:21:aa:f9:a8:7f:de:03:e6:3e:0e:85:d7:26:6c:63:1a: 1c:65:02:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKB0vrVP/XkbbStQHYRuitojhxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNjAzMjUwODU1MDNaFw0yNjAzMjgxNTQ1MDNaMDMxMTAvBgNV BAMTKEQ2REYwNjA0OEUwOTQxQjlDQUFBMUI4NEIxQjkwMTgyRjI2NUY0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRf8BS3ezLjWQI69T5p05Y2Yg Am6xyFN0pENEgQ/PhYl6RbgUl91Y2H5V46JFA3pgikk+xYhxj65rqTCtIywQ5UCd YjoP2kS6wFdWHFZxpYLFlQA/PyWEYO3NeZMYt6bGm30VJEJ9rRMluXaU8Hy3/url Xw2d2oqIbHhq8O7pj9n0uJGGddfj6K1bijrCDhbISP3rkP9gp/nEKZv686XhLfcM O4DgZLdboD1/mUxck+aVC/JVEDEoGj3eQdAZd2u1k8Xvu8jnf4KiX9zMT5odDeD/ T4p3Htoazq46aFgytHWwfBma6emXJZrveb6mE2qSOB0uGsCtNkNkqkOxVlZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1t8GBI4JQbnKqhuEsbkBgvJl9PEwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQ2qIFoWnoEq9x3GcgfZwA3kTAX+XQHAlFb 7W35v6zmcofKsGnNyi5ydJw5ctTILa9itI874XGLwQSbFfGbxQ0CtzCey/U/BSiz grYdpRMvYJO4vodbOTUMMAp2LLh+M2KgG0aCIkVrKnSkG1Yw+CQjCyJJBhN7jAT9 JdhYuOcI3mE6UGA7Hob3pUDe/4C1CMsfOP+MFJP/m3kit3yGk+cems/x+6f8YTCq 1/CGsDF5UaHE3yy1c0IYvI4KOwEIFOEWib4SymcfPvZJvolPpr2K0m3qQysBhYT/ Yo/HTkM5FVo+rel4Zjh2IzJiIar5qH/eA+Y+DoXXJmxjGhxlAuQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:07:13 2026 by rpki-client