$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft File: B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft (raw, json) Hash identifier: mh9PinqlCKS9KJxw+tg3BvRsn9hbAG/andVC2aBCwxg= Subject key identifier: BA:4C:AD:F4:E8:2C:29:8F:DE:D6:66:21:76:40:55:EF:50:74:25:2B Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 Certificate issuer: /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Certificate serial: 643C2F4DB33D84274E29ED3021AE295124395853 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft Manifest number: 01FD Signing time: Tue 24 Mar 2026 12:41:44 +0000 Manifest this update: Tue 24 Mar 2026 12:36:44 +0000 Manifest next update: Fri 27 Mar 2026 20:58:44 +0000 Files and hashes: 1: 3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (hash: dGH13Oomieqd64n8363u8ec1lNW9Om122vPQ7Gk+LN4=) 2: B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl (hash: jbIFVIJcB536anCPRUkE18bFTh/37yJKPJqTvAMJzPs=) 3: 323030313a6466313a653034303a3a2f34382d3438203d3e20313530323435.roa (hash: m7KnWwAi9Wa3iEU4N72OuT0qFvC4fal0YR1U67/6bgk=) 4: 3130332e32332e39392e302f32342d3234203d3e20313530323435.roa (hash: 8XPZdSOWhiN4sDNWCAz5bAh63j/+nMyIzLXNoiqYe4I=) 5: 3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (hash: qlt9XTkJ4F0GfOW5becHUk3LV0da9rpuvfoDawVXZZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3c:2f:4d:b3:3d:84:27:4e:29:ed:30:21:ae:29:51:24:39:58:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919 Validity Not Before: Mar 24 12:36:44 2026 GMT Not After : Mar 27 20:58:44 2026 GMT Subject: CN=BA4CADF4E82C298FDED66621764055EF5074252B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:55:c4:62:79:83:b4:0b:e7:27:03:4d:38: 74:6d:5a:0d:d2:55:7e:84:65:2e:46:bb:31:98:9f: 36:b3:17:29:ba:e2:21:3d:9d:c2:d6:b8:a3:4e:6f: fb:3f:58:37:39:b4:5e:13:ae:38:5e:f9:5f:47:59: c8:7d:5a:df:c8:d6:dc:ce:07:03:25:52:6c:bf:53: 5b:d4:d7:bc:43:31:97:37:0a:ae:46:9f:c1:e7:a1: e1:48:92:3f:6e:5f:85:6f:64:70:1d:f3:bc:2a:21: 8c:a8:49:cb:55:42:6a:f8:87:08:cb:d3:ac:8b:51: b8:bc:7b:80:2e:b7:79:33:c5:21:42:67:71:30:19: fa:b7:1b:fe:b2:fd:73:9b:b3:7d:b0:1c:23:e8:5d: 45:e3:d3:22:15:bf:f6:dd:dc:59:11:60:11:53:63: dc:8c:c8:81:e6:05:f6:ca:e6:6f:9a:d1:7a:39:a9: 63:30:80:71:18:87:24:51:4b:ab:3f:57:fe:b4:f0: ee:c7:c2:ca:22:6f:0c:f4:5f:9e:78:5f:29:63:19: e4:5e:fc:52:ec:fb:d9:c4:c9:78:d2:4d:3d:8f:5a: 7d:e2:3b:48:02:47:e3:26:82:ec:63:62:83:3f:8e: 21:c1:78:17:c4:b2:87:8c:e3:fe:90:0d:69:74:dc: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4C:AD:F4:E8:2C:29:8F:DE:D6:66:21:76:40:55:EF:50:74:25:2B X509v3 Authority Key Identifier: keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:c8:8e:87:39:3b:00:4b:d8:60:66:c8:1a:5f:8b:10:8e: a1:27:70:11:4b:af:1d:d9:28:bd:1a:d3:66:55:41:70:5a:ce: b1:b3:83:cf:f5:d1:27:d0:e8:76:78:6d:0b:e2:7b:78:70:dc: 2c:02:87:38:dc:a8:fc:38:5f:41:e0:1c:66:ee:7b:fd:9b:7d: 1f:42:99:04:9c:8d:57:68:62:57:5f:69:9e:d2:bc:3d:86:03: 4b:8d:c2:0e:82:86:fa:e6:01:3c:d3:aa:38:68:37:dc:a3:b7: 2c:d0:a0:98:be:da:cb:ca:46:e5:8c:1b:31:f0:3c:06:b6:21: c5:33:d9:6d:d7:44:c3:2d:88:25:20:3e:8e:ee:17:aa:51:f6: 04:9f:ee:79:d5:f2:5a:d7:a7:db:da:d4:1e:5a:f9:70:dc:5f: a9:97:43:33:5c:04:21:67:52:f7:8d:ab:d6:7d:e6:69:66:c2: 0e:e6:04:0c:05:0c:93:03:6d:1a:22:a4:27:32:d3:4e:a9:aa: 36:67:b9:eb:54:d9:84:44:2c:a1:a0:ef:7d:61:54:99:ed:2d: 8b:60:f3:90:78:f9:de:c4:0e:8d:29:bf:fe:40:d4:a6:6e:38: 09:93:bc:cb:5b:d2:4d:0f:f3:a1:4f:c6:27:1f:09:d1:c4:a4: b7:a0:22:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDwvTbM9hCdOKe0wIa4pUSQ5WFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZG RDdDMjkxOTAeFw0yNjAzMjQxMjM2NDRaFw0yNjAzMjcyMDU4NDRaMDMxMTAvBgNV BAMTKEJBNENBREY0RTgyQzI5OEZERUQ2NjYyMTc2NDA1NUVGNTA3NDI1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdz1XEYnmDtAvnJwNNOHRtWg3S VX6EZS5GuzGYnzazFym64iE9ncLWuKNOb/s/WDc5tF4Trjhe+V9HWch9Wt/I1tzO BwMlUmy/U1vU17xDMZc3Cq5Gn8HnoeFIkj9uX4VvZHAd87wqIYyoSctVQmr4hwjL 06yLUbi8e4Aut3kzxSFCZ3EwGfq3G/6y/XObs32wHCPoXUXj0yIVv/bd3FkRYBFT Y9yMyIHmBfbK5m+a0Xo5qWMwgHEYhyRRS6s/V/608O7Hwsoibwz0X554XyljGeRe /FLs+9nEyXjSTT2PWn3iO0gCR+MmguxjYoM/jiHBeBfEsoeM4/6QDWl03DRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukyt9OgsKY/e1mYhdkBV71B0JSswHwYDVR0j BBgwFoAUsrL0K/GXitCUGGSAp9oAhv18KRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODQ2ZjQyMi1jMzAyLTQ0NjItYjU4NC03MDBlOTM0NmNhMDkvMC9CMkIyRjQyQkYx OTc4QUQwOTQxODY0ODBBN0RBMDA4NkZEN0MyOTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAwODZGRDdD MjkxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg0NmY0MjItYzMwMi00NDYyLWI1 ODQtNzAwZTkzNDZjYTA5LzAvQjJCMkY0MkJGMTk3OEFEMDk0MTg2NDgwQTdEQTAw ODZGRDdDMjkxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBByI6HOTsAS9hgZsgaX4sQjqEncBFLrx3Z KL0a02ZVQXBazrGzg8/10SfQ6HZ4bQvie3hw3CwChzjcqPw4X0HgHGbue/2bfR9C mQScjVdoYldfaZ7SvD2GA0uNwg6ChvrmATzTqjhoN9yjtyzQoJi+2svKRuWMGzHw PAa2IcUz2W3XRMMtiCUgPo7uF6pR9gSf7nnV8lrXp9va1B5a+XDcX6mXQzNcBCFn UveNq9Z95mlmwg7mBAwFDJMDbRoipCcy006pqjZnuetU2YRELKGg731hVJntLYtg 85B4+d7EDo0pv/5A1KZuOAmTvMtb0k0P86FPxicfCdHEpLegIs0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:22:50 2026 by rpki-client