$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: ff9KSC9wvF11RCKhzjUSye+hgXCvyDgG8uUho6EenEw= Subject key identifier: 95:36:2D:0C:2A:49:CD:76:F1:22:B9:61:8B:3E:34:0C:C9:C8:EC:7F Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 33A46D562495FB89B771CA695DCF95D53996738A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 0525 Signing time: Wed 25 Mar 2026 17:51:21 +0000 Manifest this update: Wed 25 Mar 2026 17:46:21 +0000 Manifest next update: Sun 29 Mar 2026 01:16:21 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: cvFT9vdkhZZu2mn8PwdVRpbLPIHPbV3/dK05quVU7xA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a4:6d:56:24:95:fb:89:b7:71:ca:69:5d:cf:95:d5:39:96:73:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Mar 25 17:46:21 2026 GMT Not After : Mar 29 01:16:21 2026 GMT Subject: CN=95362D0C2A49CD76F122B9618B3E340CC9C8EC7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:dc:ee:d5:b8:26:f7:bf:df:2d:e4:3c:ff:4f: 6e:c0:87:3c:94:10:b7:42:8b:8b:83:34:81:f7:c0: bd:4b:19:85:9a:94:95:b4:90:bb:f8:80:d2:09:cf: 1b:c8:00:91:d9:71:5a:09:3e:bd:3b:59:54:28:1e: 8d:78:96:c0:2e:1d:77:2b:fb:eb:1f:d4:36:b1:28: 88:64:ae:7d:8b:d9:3f:a5:c8:11:12:44:01:63:40: 8e:34:d0:ec:77:70:a3:e8:be:70:57:01:0a:3e:6d: 44:77:e7:c2:ed:af:09:46:4c:68:63:d0:73:e7:56: f5:18:77:85:1e:13:73:74:5f:57:1d:aa:8f:ac:df: 8d:a6:45:ac:81:0e:9d:17:ce:27:64:05:a6:c4:3d: c2:43:65:5d:60:3f:de:8f:13:ce:c3:5a:1c:a5:08: e7:f0:e5:e4:51:74:c9:60:15:86:90:0a:ad:3c:59: c7:9c:c0:31:50:e2:82:72:62:9c:2b:44:06:2d:85: 8f:70:dd:06:4c:41:7a:cc:79:d1:51:ad:23:a2:ba: 7f:eb:17:36:91:c0:d4:d7:fa:c8:b2:1c:da:84:af: f6:67:a3:03:5c:76:1b:3a:13:6f:3f:4c:b8:08:b2: 57:85:43:8c:02:82:7b:8d:46:4b:ca:5a:d0:ca:78: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:36:2D:0C:2A:49:CD:76:F1:22:B9:61:8B:3E:34:0C:C9:C8:EC:7F X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0f:0b:c9:3f:3b:00:db:7f:25:3e:2d:4f:58:29:5f:b7:97: 97:6b:d6:d2:48:a0:5c:ac:37:c5:a8:b9:2a:25:7e:54:3b:9d: 33:d1:f5:43:7b:cb:d1:4c:1a:80:fa:6b:43:ce:8f:45:e6:cd: b0:0e:4c:b8:c0:2a:4e:4e:2c:48:d0:51:2b:14:9c:64:dc:af: 50:31:89:fc:73:cf:b1:1b:a6:4b:e8:7b:b5:c5:37:f0:fd:df: da:cf:85:eb:8f:69:1f:78:99:95:51:37:4e:b6:ec:56:59:f3: 37:88:25:65:2a:9c:a0:42:ae:6b:2c:a8:97:9e:10:3c:cc:79: df:f6:27:57:5a:8c:78:d6:83:b1:9a:ae:d0:20:97:47:9b:8a: 9a:88:4b:36:a4:92:a0:45:10:ec:4c:be:cf:3a:57:f0:28:02: 9a:85:ee:47:7d:80:ad:ca:ba:bf:09:cc:88:f7:61:74:88:c3: ca:f2:05:8e:f1:78:6d:86:ae:5e:85:f6:5f:7e:54:8a:58:3f: 30:53:09:9d:da:0b:87:f3:b2:cf:3f:5a:2b:c7:dc:ca:14:8e: d1:b1:bc:64:f4:26:da:b3:6c:83:75:94:11:6e:9c:1f:17:c7: d4:5b:6c:44:62:cc:61:6a:a7:27:f5:f3:6c:5c:30:fc:3a:f1: e5:ab:f9:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6RtViSV+4m3ccppXc+V1TmWc4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNjAzMjUxNzQ2MjFaFw0yNjAzMjkwMTE2MjFaMDMxMTAvBgNV BAMTKDk1MzYyRDBDMkE0OUNENzZGMTIyQjk2MThCM0UzNDBDQzlDOEVDN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG3O7VuCb3v98t5Dz/T27AhzyU ELdCi4uDNIH3wL1LGYWalJW0kLv4gNIJzxvIAJHZcVoJPr07WVQoHo14lsAuHXcr ++sf1DaxKIhkrn2L2T+lyBESRAFjQI400Ox3cKPovnBXAQo+bUR358LtrwlGTGhj 0HPnVvUYd4UeE3N0X1cdqo+s342mRayBDp0XzidkBabEPcJDZV1gP96PE87DWhyl COfw5eRRdMlgFYaQCq08WcecwDFQ4oJyYpwrRAYthY9w3QZMQXrMedFRrSOiun/r FzaRwNTX+siyHNqEr/ZnowNcdhs6E28/TLgIsleFQ4wCgnuNRkvKWtDKeMaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTYtDCpJzXbxIrlhiz40DMnI7H8wHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsPC8k/OwDbfyU+LU9YKV+3l5dr1tJIoFys N8WouSolflQ7nTPR9UN7y9FMGoD6a0POj0XmzbAOTLjAKk5OLEjQUSsUnGTcr1Ax ifxzz7Ebpkvoe7XFN/D939rPheuPaR94mZVRN0627FZZ8zeIJWUqnKBCrmssqJee EDzMed/2J1dajHjWg7GartAgl0ebipqISzakkqBFEOxMvs86V/AoApqF7kd9gK3K ur8JzIj3YXSIw8ryBY7xeG2Grl6F9l9+VIpYPzBTCZ3aC4fzss8/WivH3MoUjtGx vGT0JtqzbIN1lBFunB8Xx9RbbERizGFqpyf182xcMPw68eWr+W4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:51:55 2026 by rpki-client