$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft File: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft (raw, json) Hash identifier: jv38OCahCQ8oS4lrvT70wr8rVaxaio8a39p4u84lQgA= Subject key identifier: D8:88:79:71:2B:12:64:3E:3D:AB:D3:29:F9:E7:73:38:98:01:86:55 Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB Certificate issuer: /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Certificate serial: 1B5B8B593481B3A4CE26B15E7D087EFEE50EFD3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft Manifest number: 027F Signing time: Thu 26 Mar 2026 12:22:25 +0000 Manifest this update: Thu 26 Mar 2026 12:17:25 +0000 Manifest next update: Sun 29 Mar 2026 20:25:25 +0000 Files and hashes: 1: 3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (hash: qVOs5fg6/pJ4qMK43Sua93AGLLp0Y1L5pAbuR4z7+e8=) 2: 3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (hash: Pg2iO6bQNogm2CNZTMQHaR8j/iayRorOo/9bDyh9hZU=) 3: B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl (hash: oHwg2x/tEl2+/AhCmCKD2yVG4Kwq3g+MGFPBxR0kqnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:5b:8b:59:34:81:b3:a4:ce:26:b1:5e:7d:08:7e:fe:e5:0e:fd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB Validity Not Before: Mar 26 12:17:25 2026 GMT Not After : Mar 29 20:25:25 2026 GMT Subject: CN=D88879712B12643E3DABD329F9E7733898018655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:1b:06:56:b1:83:3d:16:bb:2f:ad:f0:5b: 63:8c:5f:86:c6:d0:c7:3f:b0:ae:85:70:58:e9:1a: 81:d3:5d:9e:bc:13:a9:46:89:bb:5e:04:ec:6f:04: 98:8a:31:b8:c0:33:86:0e:e2:4e:27:27:a0:c9:f6: 14:c1:65:5e:c9:81:aa:23:ee:10:81:06:e1:12:29: 9d:7c:31:5d:87:5c:71:b4:39:0b:e9:31:b0:0e:48: 29:48:62:54:7e:3e:c3:0a:8b:c1:ce:51:14:70:90: 47:d5:bc:22:c3:8c:2d:06:6d:2d:90:ec:fe:39:d7: b5:f4:f4:8f:7a:29:9c:67:6a:ea:63:46:bf:66:97: 4e:90:e1:00:f2:ab:48:ce:4a:b2:b2:81:bf:3e:55: 60:18:f1:21:d2:9e:e6:7a:45:ce:fa:12:d7:56:62: 26:65:4a:cf:e1:51:91:cd:90:b9:d2:84:2a:e2:8e: 42:d8:e7:ed:62:bc:04:5b:de:45:d5:4f:6e:a0:c0: ff:18:72:bf:7c:f9:75:be:56:da:c4:43:0f:8e:28: a2:15:c8:b3:23:ae:ec:ab:9b:2a:ed:56:c4:48:84: 34:d3:7b:d6:89:76:8b:8a:0e:98:cd:12:76:0d:0c: 99:42:d5:58:35:e2:60:2e:1a:97:41:8a:8b:da:56: f4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:79:71:2B:12:64:3E:3D:AB:D3:29:F9:E7:73:38:98:01:86:55 X509v3 Authority Key Identifier: keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:c9:eb:4b:82:7a:d5:ed:2c:d9:d6:92:b6:69:0d:ba:eb:7a: fd:60:5c:0c:68:41:8e:78:ba:e5:c0:76:9d:86:97:d4:63:7f: 9a:8e:68:12:fb:d6:f8:d4:1d:28:8c:40:05:1d:74:9e:a1:61: f2:21:4c:62:68:0b:01:36:89:91:ba:f4:35:8c:1a:60:07:1f: 3e:2f:55:8a:1e:15:11:a7:58:61:14:22:ee:78:b3:a5:27:48: 8f:07:a2:35:d9:ef:b2:be:45:81:7c:10:37:08:d3:16:24:a3: dd:0e:82:bf:86:d0:15:80:a6:f8:b6:68:29:46:30:32:6d:85: ee:d0:f4:0a:df:b7:de:53:04:9c:03:d9:08:dc:78:35:e3:5a: 04:74:88:e5:72:2c:64:66:1f:46:d3:c4:9f:80:c4:80:45:5d: 36:07:57:f3:b0:d0:2a:41:4b:d2:91:78:63:e6:63:d1:4d:a1: 11:ac:dd:c9:c9:e6:9d:4a:72:64:90:c9:ff:92:aa:e1:a8:b2: 7c:db:f4:7e:17:ad:2c:02:6e:c3:26:2e:c5:a6:a6:6d:af:c9: 54:15:91:1d:7b:13:51:6d:cb:37:e0:db:87:92:89:49:ee:12: 08:b0:16:7f:e9:38:f9:85:94:d0:2e:4e:4d:a6:3f:92:3c:fd: 51:f3:74:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1uLWTSBs6TOJrFefQh+/uUO/TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZC RDFDOTFCQjAeFw0yNjAzMjYxMjE3MjVaFw0yNjAzMjkyMDI1MjVaMDMxMTAvBgNV BAMTKEQ4ODg3OTcxMkIxMjY0M0UzREFCRDMyOUY5RTc3MzM4OTgwMTg2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCztxsGVrGDPRa7L63wW2OMX4bG 0Mc/sK6FcFjpGoHTXZ68E6lGibteBOxvBJiKMbjAM4YO4k4nJ6DJ9hTBZV7Jgaoj 7hCBBuESKZ18MV2HXHG0OQvpMbAOSClIYlR+PsMKi8HOURRwkEfVvCLDjC0GbS2Q 7P4517X09I96KZxnaupjRr9ml06Q4QDyq0jOSrKygb8+VWAY8SHSnuZ6Rc76EtdW YiZlSs/hUZHNkLnShCrijkLY5+1ivARb3kXVT26gwP8Ycr98+XW+VtrEQw+OKKIV yLMjruyrmyrtVsRIhDTTe9aJdouKDpjNEnYNDJlC1Vg14mAuGpdBiovaVvQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Ih5cSsSZD49q9Mp+edzOJgBhlUwHwYDVR0j BBgwFoAUswMghLEhG7tSLgGrVuyUv70ckbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTYzMWQ3Ny1mODA1LTQzOWMtOThmNC1iMGRhNjBmZThkZDEvMC9CMzAzMjA4NEIx MjExQkJCNTIyRTAxQUI1NkVDOTRCRkJEMUM5MUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0QkZCRDFD OTFCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E2MzFkNzctZjgwNS00MzljLTk4 ZjQtYjBkYTYwZmU4ZGQxLzAvQjMwMzIwODRCMTIxMUJCQjUyMkUwMUFCNTZFQzk0 QkZCRDFDOTFCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrJ60uCetXtLNnWkrZpDbrrev1gXAxoQY54 uuXAdp2Gl9Rjf5qOaBL71vjUHSiMQAUddJ6hYfIhTGJoCwE2iZG69DWMGmAHHz4v VYoeFRGnWGEUIu54s6UnSI8HojXZ77K+RYF8EDcI0xYko90Ogr+G0BWApvi2aClG MDJthe7Q9Arft95TBJwD2QjceDXjWgR0iOVyLGRmH0bTxJ+AxIBFXTYHV/Ow0CpB S9KReGPmY9FNoRGs3cnJ5p1KcmSQyf+SquGosnzb9H4XrSwCbsMmLsWmpm2vyVQV kR17E1Ftyzfg24eSiUnuEgiwFn/pOPmFlNAuTk2mP5I8/VHzdEQ= -----END CERTIFICATE-----Generated at Thu Mar 26 20:15:13 2026 by rpki-client