$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: 3Os66R5kEdRc1iNfdxsLJeYXdrUJ+IVmIT9LvpDByA8= Subject key identifier: 0B:7B:85:22:B3:1C:FC:68:94:13:00:35:9A:D2:FF:6C:D6:AC:2E:B9 Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 2050D71FEE1889C03797BD3F943D26851FFC7F86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03E6 Signing time: Wed 25 Mar 2026 18:21:58 +0000 Manifest this update: Wed 25 Mar 2026 18:16:58 +0000 Manifest next update: Sat 28 Mar 2026 19:50:58 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: ITCh+tFYqc0HYkTDA6BvFsZR5bxxFQkwifdLEI/iw0g=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: dUF8mk3rUSn9hQhTHTNazHIGn2Ws654T0qcBifPDkQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:50:d7:1f:ee:18:89:c0:37:97:bd:3f:94:3d:26:85:1f:fc:7f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Mar 25 18:16:58 2026 GMT Not After : Mar 28 19:50:58 2026 GMT Subject: CN=0B7B8522B31CFC68941300359AD2FF6CD6AC2EB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:f2:3e:93:f4:ee:c2:de:93:33:5f:b5:17: de:1f:ed:1a:2d:8e:09:23:88:d8:e4:db:dc:e1:0d: 98:df:4a:bd:00:53:4d:57:99:c7:51:50:74:20:82: b3:46:99:61:31:d5:b0:54:23:c5:6c:49:c7:7f:1e: 1b:7d:40:81:5a:5e:be:41:4e:b9:58:50:52:6c:e1: dc:d6:7a:1d:ec:7f:2f:9c:50:25:db:d8:a5:25:8e: a3:79:4c:e2:f4:24:8f:d8:00:48:74:97:2e:54:18: 81:7e:dc:c2:5c:93:e6:98:41:b7:09:4c:a1:d9:b5: 1f:80:81:7e:23:59:af:06:7a:5c:f8:29:9e:ac:21: 81:be:28:db:d8:a1:cf:f0:29:dd:15:74:76:5e:78: 72:61:4d:8b:33:4e:a7:32:8e:df:1e:20:b8:46:aa: 4c:ac:db:e6:e9:ba:44:83:fd:fc:b4:06:b0:36:fe: 75:cc:81:d6:32:41:3b:b1:18:4d:59:a0:33:92:75: 30:09:b2:37:d9:1d:8b:6b:5e:4d:28:c2:e4:61:7e: 78:22:cd:e7:38:41:be:c0:ac:3f:04:73:f3:8d:0b: a4:b1:6c:bb:d3:99:74:05:75:38:fc:e4:cf:c5:b3: 0f:f6:d4:f4:00:01:dd:d5:ea:0a:9d:f6:0b:7f:99: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:7B:85:22:B3:1C:FC:68:94:13:00:35:9A:D2:FF:6C:D6:AC:2E:B9 X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b6:65:13:0b:22:16:26:6f:b9:f3:69:a7:32:bd:14:82:39: 8b:5a:9b:d9:45:38:5c:c5:b1:c9:bd:c2:1c:a5:f7:0e:5a:45: 96:5e:a4:8e:7d:7e:a0:b2:43:18:19:da:b6:8b:e9:34:97:9b: 3c:a5:54:54:a6:cb:26:11:15:9b:1a:f4:05:2b:15:ed:4a:0c: 90:c4:98:54:0f:02:9d:c0:3b:6c:0e:3f:58:3c:5a:20:f7:42: 6d:d0:2a:56:3c:d0:51:65:e9:42:8b:49:4a:77:75:01:4b:e1: 1f:c0:da:74:47:ac:1e:19:aa:b5:d4:ff:ae:82:13:c4:9f:dd: 9d:78:56:52:40:d6:ad:3d:45:10:dd:79:8b:a4:c5:a6:75:20: 64:a2:d6:21:85:05:8f:ea:f9:4c:b1:f8:33:b1:8a:62:1b:93: 36:11:6e:ee:60:10:72:30:79:03:f8:7a:b5:9f:fa:9d:cd:f1: 88:4f:f6:e2:a5:db:5c:28:bc:ac:5b:b9:cd:50:aa:c4:4c:a7: ad:f6:cf:2b:57:16:7e:b6:71:c3:8b:1b:04:8a:a9:5c:e9:c0: 41:f1:70:71:9d:6d:a2:30:5c:44:a3:a7:a1:80:76:2f:0c:42: 63:4d:56:88:4f:24:fc:8e:03:d6:dc:8e:e6:09:10:7d:70:97: 45:3e:2d:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIFDXH+4YicA3l70/lD0mhR/8f4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNjAzMjUxODE2NThaFw0yNjAzMjgxOTUwNThaMDMxMTAvBgNV BAMTKDBCN0I4NTIyQjMxQ0ZDNjg5NDEzMDAzNTlBRDJGRjZDRDZBQzJFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut/I+k/Tuwt6TM1+1F94f7Rot jgkjiNjk29zhDZjfSr0AU01XmcdRUHQggrNGmWEx1bBUI8VsScd/Hht9QIFaXr5B TrlYUFJs4dzWeh3sfy+cUCXb2KUljqN5TOL0JI/YAEh0ly5UGIF+3MJck+aYQbcJ TKHZtR+AgX4jWa8Gelz4KZ6sIYG+KNvYoc/wKd0VdHZeeHJhTYszTqcyjt8eILhG qkys2+bpukSD/fy0BrA2/nXMgdYyQTuxGE1ZoDOSdTAJsjfZHYtrXk0owuRhfngi zec4Qb7ArD8Ec/ONC6SxbLvTmXQFdTj85M/Fsw/21PQAAd3V6gqd9gt/mYNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC3uFIrMc/GiUEwA1mtL/bNasLrkwHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa2ZRMLIhYmb7nzaacyvRSCOYtam9lFOFzF scm9whyl9w5aRZZepI59fqCyQxgZ2raL6TSXmzylVFSmyyYRFZsa9AUrFe1KDJDE mFQPAp3AO2wOP1g8WiD3Qm3QKlY80FFl6UKLSUp3dQFL4R/A2nRHrB4ZqrXU/66C E8Sf3Z14VlJA1q09RRDdeYukxaZ1IGSi1iGFBY/q+Uyx+DOximIbkzYRbu5gEHIw eQP4erWf+p3N8YhP9uKl21wovKxbuc1QqsRMp632zytXFn62ccOLGwSKqVzpwEHx cHGdbaIwXESjp6GAdi8MQmNNVohPJPyOA9bcjuYJEH1wl0U+LVg= -----END CERTIFICATE-----Generated at Thu Mar 26 20:09:56 2026 by rpki-client