$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: /4zqSJx8iKF50UsP/zh5aDFaRA0BiefTBxSXxifb26I= Subject key identifier: 6A:8D:FD:AC:0D:05:9C:8A:52:E4:FD:EC:0E:2C:7E:90:4E:D8:92:BF Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 7F4F979C9E6704CBB0138B350A813A17B3E2CE25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 0133 Signing time: Thu 26 Mar 2026 03:52:13 +0000 Manifest this update: Thu 26 Mar 2026 03:47:13 +0000 Manifest next update: Sun 29 Mar 2026 08:37:13 +0000 Files and hashes: 1: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=) 2: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: tHzJEc4tVJbK/5ReWDfkb8wKbAgEEvzCH+vbGF7LXac=) 3: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: HkpCO+L+gWjO3X3fziv8r7Flrf6l3JTsxl0W7kQQW8Y=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: 7cY2fjKwV/HHKZsrfzlu8ZyOit5FsK86Mnd1T/8Ljpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4f:97:9c:9e:67:04:cb:b0:13:8b:35:0a:81:3a:17:b3:e2:ce:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Mar 26 03:47:13 2026 GMT Not After : Mar 29 08:37:13 2026 GMT Subject: CN=6A8DFDAC0D059C8A52E4FDEC0E2C7E904ED892BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:e5:d2:b2:b3:96:b8:59:c0:90:93:65:50: 04:22:a4:aa:08:b1:1d:f3:2c:52:d8:d4:30:ae:cd: a9:ca:e4:0b:14:78:9e:9c:00:b9:9a:a3:dd:73:2d: 9b:62:e0:5f:cb:89:a1:dc:47:56:d3:b4:87:50:5b: 3d:99:6d:e9:3a:96:57:70:3e:12:6d:9d:92:e7:00: 8e:5d:e1:a1:a8:1c:cd:55:03:b4:11:ed:3e:d4:c9: ee:f1:92:99:15:59:77:ae:f3:96:32:25:94:e2:ce: 69:f5:51:63:04:e5:2f:12:7c:34:bd:1b:43:22:77: a7:36:b9:89:48:5a:97:5a:13:2e:ce:18:db:e2:ab: 53:54:ae:2e:70:0b:ce:40:d8:11:13:b8:96:d7:a9: ad:7f:96:56:de:0a:58:5d:1f:56:f1:3a:fb:1d:7e: 45:49:66:75:2b:f8:2d:c0:01:60:0b:03:cf:7f:64: 37:de:6c:7a:d1:6f:15:b6:fc:30:19:55:2e:62:94: 48:06:45:08:c0:98:63:d5:d2:09:63:34:1c:4c:1f: 8a:75:cb:1f:a4:b2:fb:a9:53:b3:97:ce:6c:a0:eb: 32:46:5a:7a:4f:88:3b:bf:a5:1a:4c:84:33:a0:0a: bf:12:ea:d7:25:c8:27:40:d5:d9:d8:35:27:c2:49: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:FD:AC:0D:05:9C:8A:52:E4:FD:EC:0E:2C:7E:90:4E:D8:92:BF X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ab:7c:26:80:6e:3d:ea:18:e0:91:24:f9:96:ef:58:b3:88: 0e:ea:4b:b9:fe:b1:02:9b:d3:8f:c5:21:38:f4:f3:90:69:11: 17:11:cf:80:6d:9e:8c:6f:82:59:51:10:a2:14:66:6b:7c:82: 00:0d:ae:99:58:d1:e3:be:5f:a2:53:73:57:19:6b:f3:20:b3: ef:ea:4d:32:f5:6b:0f:2f:9c:f0:31:ae:81:c1:fc:2a:f4:54: f6:af:4e:b1:17:10:d7:7b:8b:06:a6:e3:44:ad:3d:eb:37:ea: 84:d0:e7:db:28:23:4f:cd:74:32:e2:77:41:71:1f:07:e7:d2: 3a:d2:8e:40:26:b2:90:43:5b:62:28:08:96:f1:4c:7f:e0:32: aa:5e:e2:29:5a:c9:97:20:0b:ce:0c:71:f4:ab:69:07:8f:cd: 44:78:fa:73:54:0e:75:53:95:44:5a:d4:d2:c9:ab:ed:28:8a: 87:6d:7b:29:19:7a:c7:b1:b9:c4:1d:d2:97:7b:8b:44:06:2e: 33:85:5c:d6:97:fc:fd:39:45:ae:99:01:88:5c:fb:11:ae:4b: f6:7c:d8:2a:90:d6:6c:ab:f3:86:a7:3e:a8:2a:b4:e5:31:bf: e4:85:69:2e:a5:4f:4e:25:33:cf:62:20:73:b7:8c:7c:98:5a: 95:ce:d6:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0+XnJ5nBMuwE4s1CoE6F7PiziUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNjAzMjYwMzQ3MTNaFw0yNjAzMjkwODM3MTNaMDMxMTAvBgNV BAMTKDZBOERGREFDMEQwNTlDOEE1MkU0RkRFQzBFMkM3RTkwNEVEODkyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuaeXSsrOWuFnAkJNlUAQipKoI sR3zLFLY1DCuzanK5AsUeJ6cALmao91zLZti4F/LiaHcR1bTtIdQWz2Zbek6lldw PhJtnZLnAI5d4aGoHM1VA7QR7T7Uye7xkpkVWXeu85YyJZTizmn1UWME5S8SfDS9 G0Mid6c2uYlIWpdaEy7OGNviq1NUri5wC85A2BETuJbXqa1/llbeClhdH1bxOvsd fkVJZnUr+C3AAWALA89/ZDfebHrRbxW2/DAZVS5ilEgGRQjAmGPV0gljNBxMH4p1 yx+ksvupU7OXzmyg6zJGWnpPiDu/pRpMhDOgCr8S6tclyCdA1dnYNSfCSZPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUao39rA0FnIpS5P3sDix+kE7Ykr8wHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWrfCaAbj3qGOCRJPmW71iziA7qS7n+sQKb 04/FITj085BpERcRz4BtnoxvgllREKIUZmt8ggANrplY0eO+X6JTc1cZa/Mgs+/q TTL1aw8vnPAxroHB/Cr0VPavTrEXENd7iwam40StPes36oTQ59soI0/NdDLid0Fx Hwfn0jrSjkAmspBDW2IoCJbxTH/gMqpe4ilayZcgC84McfSraQePzUR4+nNUDnVT lURa1NLJq+0oiodteykZesexucQd0pd7i0QGLjOFXNaX/P05Ra6ZAYhc+xGuS/Z8 2CqQ1myr84anPqgqtOUxv+SFaS6lT04lM89iIHO3jHyYWpXO1mc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:51:04 2026 by rpki-client