$ rpki-client -vvf repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft (raw, json) Hash identifier: keyeRSW45UG7D+uPx5fFF3JAlv2HAa9p9Z6RwuuoOL0= Subject key identifier: DE:85:52:FA:1A:F8:E2:84:AB:C3:6E:F5:EF:CA:3D:90:0E:F7:3D:34 Authority key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Certificate issuer: /CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Certificate serial: 49B383800A23AC071E1109191021D12F3D1A18FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 22:41:44 +0000 Manifest this update: Wed 25 Mar 2026 22:36:44 +0000 Manifest next update: Sun 29 Mar 2026 02:11:44 +0000 Files and hashes: 1: 323030313a6466343a363463303a3a2f34382d3438203d3e20313533313430.roa (hash: tCFWfM3xPDNAE6hYqcghBjN3a3o8405nfAZiA3LJhEE=) 2: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl (hash: CkxpP3nVmRy/5F5+DjZRbaqKXm4srr9WOQh5lnUYheg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b3:83:80:0a:23:ac:07:1e:11:09:19:10:21:d1:2f:3d:1a:18:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Validity Not Before: Mar 25 22:36:44 2026 GMT Not After : Mar 29 02:11:44 2026 GMT Subject: CN=DE8552FA1AF8E284ABC36EF5EFCA3D900EF73D34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:2a:8f:84:89:7c:f4:59:2d:40:32:1b:66: db:cc:0f:cb:f9:e6:4f:4a:52:72:4e:05:25:ca:cc: ac:2d:56:71:cc:a0:a7:44:10:bd:1c:d8:55:40:b3: 6d:02:ce:e9:77:45:af:77:f2:3d:5b:f0:ba:c7:aa: 58:c1:4c:e5:5e:31:f1:5e:c6:c0:07:0a:32:cd:44: a4:0c:ba:84:9d:02:28:41:02:8e:95:10:dd:96:ff: 0e:a2:45:66:8f:2a:f5:a5:2c:fa:76:ba:75:70:62: 0d:10:25:3e:0b:cb:1f:25:dd:b2:2c:25:eb:8e:a3: af:94:4b:12:03:d6:de:60:ad:0c:67:05:da:2f:e5: 10:db:0c:6a:0a:4a:76:75:af:35:68:50:89:57:54: 3a:b7:af:04:a9:8e:4a:cb:e0:69:90:9d:a7:26:40: 5e:4b:79:7c:5a:95:a6:37:e5:f4:d5:5c:e1:9d:e7: 1e:74:94:e6:bc:98:c6:f7:88:f8:41:e1:39:53:43: 0d:f0:be:30:bb:e2:3e:ba:b7:47:bc:f9:a3:cd:f0: 95:fa:4f:42:8f:c1:f0:ab:36:24:29:2f:54:09:1f: ac:20:f2:f5:d9:2a:c2:90:39:61:fc:18:30:95:c2: cf:3b:56:01:5f:c3:0c:d0:ab:06:3a:49:0e:32:87: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:85:52:FA:1A:F8:E2:84:AB:C3:6E:F5:EF:CA:3D:90:0E:F7:3D:34 X509v3 Authority Key Identifier: keyid:B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c3:c4:d1:12:f9:24:00:9c:e2:18:97:a1:b9:2a:bd:6a:7e: a0:fd:47:9e:53:f6:11:e3:f9:0c:2f:fa:f9:11:33:69:7e:7d: 07:0b:8a:2c:71:ee:a8:b7:db:63:27:03:f0:b9:04:d7:24:a7: ba:d6:de:93:ab:c3:8e:72:26:c3:14:07:e8:bf:35:af:71:0d: 21:74:76:d1:a2:66:3c:54:f9:21:3d:2b:8a:70:47:d0:61:8e: 71:77:ab:ae:d1:b5:0e:f6:ce:10:99:4c:b1:d1:0d:c8:1f:89: 25:72:a9:8a:e4:bf:18:68:d8:db:cd:06:f6:70:ed:57:ef:13: 14:2c:6a:da:05:ab:17:03:da:cb:84:fa:25:40:61:b9:8a:dd: a6:3c:86:49:47:c3:f4:12:f8:89:78:19:36:5b:e4:c6:53:78: 33:bd:bb:d3:ec:37:48:84:55:26:d8:49:49:e2:d7:b9:ba:22: 66:1d:e7:e1:d4:bc:3e:29:5d:ae:4f:45:0f:69:b2:f2:e6:b3: 5d:c0:7e:2f:82:3a:cb:e2:c0:dd:b0:15:93:1b:0d:c1:af:d4: de:89:48:91:ab:b0:f9:41:ed:8e:4e:0a:e6:fa:f6:9c:ed:85: ac:35:9d:4b:5a:3c:88:51:b5:5e:c8:90:3a:dc:e0:fd:d5:d8: 6f:f6:3f:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSbODgAojrAceEQkZECHRLz0aGPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3 MjNGNjBFMjAeFw0yNjAzMjUyMjM2NDRaFw0yNjAzMjkwMjExNDRaMDMxMTAvBgNV BAMTKERFODU1MkZBMUFGOEUyODRBQkMzNkVGNUVGQ0EzRDkwMEVGNzNEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9iqPhIl89FktQDIbZtvMD8v5 5k9KUnJOBSXKzKwtVnHMoKdEEL0c2FVAs20Czul3Ra938j1b8LrHqljBTOVeMfFe xsAHCjLNRKQMuoSdAihBAo6VEN2W/w6iRWaPKvWlLPp2unVwYg0QJT4Lyx8l3bIs JeuOo6+USxID1t5grQxnBdov5RDbDGoKSnZ1rzVoUIlXVDq3rwSpjkrL4GmQnacm QF5LeXxalaY35fTVXOGd5x50lOa8mMb3iPhB4TlTQw3wvjC74j66t0e8+aPN8JX6 T0KPwfCrNiQpL1QJH6wg8vXZKsKQOWH8GDCVws87VgFfwwzQqwY6SQ4yhziVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3oVS+hr44oSrw27178o9kA73PTQwHwYDVR0j BBgwFoAUuS8Ps+FB1S7Spx+kg+08bXI/YOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMS9COTJGMEZCM0Ux NDFENTJFRDJBNzFGQTQ4M0VEM0M2RDcyM0Y2MEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDNDNkQ3MjNG NjBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmY2JmYmItYmEzZi00ZDUzLWEw NGYtMTRkNmY0YmUwY2IxLzEvQjkyRjBGQjNFMTQxRDUyRUQyQTcxRkE0ODNFRDND NkQ3MjNGNjBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjDxNES+SQAnOIYl6G5Kr1qfqD9R55T9hHj +Qwv+vkRM2l+fQcLiixx7qi322MnA/C5BNckp7rW3pOrw45yJsMUB+i/Na9xDSF0 dtGiZjxU+SE9K4pwR9BhjnF3q67RtQ72zhCZTLHRDcgfiSVyqYrkvxho2NvNBvZw 7VfvExQsatoFqxcD2suE+iVAYbmK3aY8hklHw/QS+Il4GTZb5MZTeDO9u9PsN0iE VSbYSUni17m6ImYd5+HUvD4pXa5PRQ9psvLms13Afi+COsviwN2wFZMbDcGv1N6J SJGrsPlB7Y5OCub69pzthaw1nUtaPIhRtV7IkDrc4P3V2G/2P18= -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:04 2026 by rpki-client