$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft File: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft (raw, json) Hash identifier: 9ngZJ7nmIr373wH6aThurDZ2Gii5DXFuUa7voShGkrg= Subject key identifier: 02:AE:AB:84:8C:BC:10:C0:DA:9B:48:56:60:FC:A6:D0:82:30:F2:74 Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 Certificate issuer: /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Certificate serial: 6D5D9FA388645E27229DF5F0DD37C53971EEFDEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft Manifest number: 0213 Signing time: Wed 25 Mar 2026 13:50:05 +0000 Manifest this update: Wed 25 Mar 2026 13:45:05 +0000 Manifest next update: Sat 28 Mar 2026 23:16:05 +0000 Files and hashes: 1: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: 0HtGEFB5lVL9KGTJaAeG0cG7Yc1XqVsEKqDCZP63hmI=) 2: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: NK7iP85WMoAKxYMx5lbhJuhwp1xc1m7+bm7ki4OmrgU=) 3: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: CD4KlQzH2eJhKNwTfYMuI96gq5Df2JYdd7khju1XQoY=) 4: B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl (hash: AWxRGOUNxn3U3HrtOw+AD8ou6iJ8kNcVwx5t4iRQLd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5d:9f:a3:88:64:5e:27:22:9d:f5:f0:dd:37:c5:39:71:ee:fd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094 Validity Not Before: Mar 25 13:45:05 2026 GMT Not After : Mar 28 23:16:05 2026 GMT Subject: CN=02AEAB848CBC10C0DA9B485660FCA6D08230F274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:52:42:3e:14:5d:82:f3:95:e5:e6:45:5e: 02:33:c2:1f:37:a2:c4:dc:c5:06:3a:b8:ff:d0:96: 9b:96:77:2a:44:32:db:c4:3c:4d:91:a0:7f:2d:eb: d7:85:1f:6a:a1:12:7e:6c:ec:1c:3c:32:86:0a:60: 59:3e:67:17:2d:cb:f6:8c:24:2c:b4:2e:ee:58:9a: 97:5a:51:11:75:78:ec:9f:7e:9c:0f:46:bb:37:6f: 51:81:e5:06:6b:ec:48:d1:62:16:ca:ec:15:78:69: 30:48:e7:65:04:ef:9e:86:37:8a:26:3b:f7:81:ce: 6f:53:25:cb:b0:e4:fc:34:94:c7:21:9e:67:f5:d3: ca:87:cd:e4:9a:49:59:61:f4:c4:cb:24:b1:cd:22: b2:b3:53:11:af:3e:4a:ee:e7:ef:cf:69:0d:57:c3: ea:18:65:11:cd:1b:c1:a6:95:34:55:99:4e:04:05: 15:47:ed:e1:fe:e0:cf:fa:3f:f3:df:84:ea:be:93: 22:54:36:62:8e:79:52:bc:68:1b:79:fa:7f:7f:ca: 61:f9:14:9a:0a:ce:a5:40:99:29:75:76:60:99:ce: e1:5c:bb:e2:57:ce:2f:cb:83:9c:b2:fd:92:b7:1c: 86:07:a5:f4:80:81:08:86:c6:1f:71:79:7e:8d:97: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AE:AB:84:8C:BC:10:C0:DA:9B:48:56:60:FC:A6:D0:82:30:F2:74 X509v3 Authority Key Identifier: keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:eb:c5:1f:ee:f2:4a:a1:b4:4c:16:cd:08:fa:69:ed:4e:e6: 37:1e:5c:11:6d:ed:64:55:bf:22:14:dd:cb:c8:70:ec:ec:ab: 06:31:8d:e2:4f:23:5b:2d:b8:de:aa:ba:9c:af:ff:30:a6:95: b4:65:4a:d7:77:f1:b3:70:49:5d:1b:82:2f:54:2d:e7:e6:e7: b6:01:58:ba:ea:df:8c:33:59:10:ad:ac:01:14:63:59:9b:75: 5c:b9:ba:ce:69:60:e8:38:f6:12:81:af:8c:d5:27:3d:d8:6f: 30:1c:38:ab:39:c4:90:8d:99:2d:90:5e:58:70:88:fc:45:90: 07:1c:6d:a2:85:60:ab:38:2e:97:b2:cd:b4:4a:10:65:51:66: 52:d4:a6:a3:05:ff:d3:4c:0d:96:34:b1:90:76:69:f2:c6:b9: 1b:f3:6b:a8:6e:54:8d:11:16:a7:d6:28:7c:74:e2:c4:50:43: 1a:02:f7:d8:11:fb:52:2e:53:a7:34:7b:20:11:a9:be:a5:bd: b1:97:d9:52:5e:ee:ba:e5:fb:42:f8:95:7d:35:c9:d8:4a:79: 9c:20:f1:48:53:16:ab:21:cf:dc:25:1e:a9:ed:19:48:9c:0a: 23:3b:96:cb:4d:1b:89:51:fc:d3:e6:21:c8:90:d1:82:53:9b: d3:d0:47:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV2fo4hkXicinfXw3TfFOXHu/e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB MDk5MzA5NDAeFw0yNjAzMjUxMzQ1MDVaFw0yNjAzMjgyMzE2MDVaMDMxMTAvBgNV BAMTKDAyQUVBQjg0OENCQzEwQzBEQTlCNDg1NjYwRkNBNkQwODIzMEYyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSlJCPhRdgvOV5eZFXgIzwh83 osTcxQY6uP/QlpuWdypEMtvEPE2RoH8t69eFH2qhEn5s7Bw8MoYKYFk+Zxcty/aM JCy0Lu5YmpdaURF1eOyffpwPRrs3b1GB5QZr7EjRYhbK7BV4aTBI52UE756GN4om O/eBzm9TJcuw5Pw0lMchnmf108qHzeSaSVlh9MTLJLHNIrKzUxGvPkru5+/PaQ1X w+oYZRHNG8GmlTRVmU4EBRVH7eH+4M/6P/PfhOq+kyJUNmKOeVK8aBt5+n9/ymH5 FJoKzqVAmSl1dmCZzuFcu+JXzi/Lg5yy/ZK3HIYHpfSAgQiGxh9xeX6Nl0NJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAq6rhIy8EMDam0hWYPym0IIw8nQwHwYDVR0j BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5 RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5 MzA5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1 RDJBMDk5MzA5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzrxR/u8kqhtEwWzQj6ae1O5jceXBFt7WRV vyIU3cvIcOzsqwYxjeJPI1stuN6qupyv/zCmlbRlStd38bNwSV0bgi9ULefm57YB WLrq34wzWRCtrAEUY1mbdVy5us5pYOg49hKBr4zVJz3YbzAcOKs5xJCNmS2QXlhw iPxFkAccbaKFYKs4LpeyzbRKEGVRZlLUpqMF/9NMDZY0sZB2afLGuRvza6huVI0R FqfWKHx04sRQQxoC99gR+1IuU6c0eyARqb6lvbGX2VJe7rrl+0L4lX01ydhKeZwg 8UhTFqshz9wlHqntGUicCiM7lstNG4lR/NPmIciQ0YJTm9PQRzg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:27 2026 by rpki-client