$ rpki-client -vvf repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft (raw, json) Hash identifier: MIx9rmWLUUxA7w8/an+cxIE8KFBSIul6yjAo5XedQD0= Subject key identifier: D9:5B:17:3E:15:CD:98:DE:AE:15:5A:77:77:80:E4:22:51:32:47:0A Authority key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Certificate issuer: /CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Certificate serial: 0708CFFD869A007C84B8D626084F06B06EF4517C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft Manifest number: 018B Signing time: Tue 24 Mar 2026 11:02:07 +0000 Manifest this update: Tue 24 Mar 2026 10:57:07 +0000 Manifest next update: Fri 27 Mar 2026 19:31:07 +0000 Files and hashes: 1: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl (hash: QjTsEmMPc+dgrcpTMAU/fmBbtos3Gzw6A40NaLuVBlk=) 2: 3130332e33382e3130382e302f32332d3234203d3e20313531353539.roa (hash: FEHaz0M5qWTtLzVTFwwxjOLyrh7B+FWo8+ydx+5qUx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:08:cf:fd:86:9a:00:7c:84:b8:d6:26:08:4f:06:b0:6e:f4:51:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Validity Not Before: Mar 24 10:57:07 2026 GMT Not After : Mar 27 19:31:07 2026 GMT Subject: CN=D95B173E15CD98DEAE155A777780E4225132470A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:13:18:fe:8c:11:60:dc:6c:c3:d1:fb:b5: c7:4b:e7:09:d0:f1:29:db:46:f3:05:2e:48:72:47: 97:9e:9c:65:d9:b2:23:4e:3d:0b:55:f3:e6:ea:11: 50:93:0d:28:58:2b:7f:46:e4:b6:49:f4:d0:71:02: e1:74:26:45:88:9a:9f:a1:3b:57:de:a3:85:e6:09: 6f:5a:8a:03:85:70:23:7d:54:58:bd:20:85:15:08: 6d:1d:fe:88:d9:82:b1:41:3b:a3:1f:75:e9:d8:44: f0:36:0f:fc:2d:26:45:a9:65:01:71:2d:6c:39:a4: 36:cc:57:15:20:c7:fd:98:bb:c2:f8:27:fd:a1:42: 78:40:2f:22:e2:83:23:b3:e4:78:e1:bb:a5:6f:5e: 85:0c:eb:6b:88:39:a3:8b:cb:94:29:c0:d8:6c:54: 84:9a:32:a9:c6:87:82:e2:fd:f2:1f:36:3d:25:4a: 2a:11:ad:21:26:69:3b:62:bb:bd:71:d9:af:d1:00: 84:ee:d1:1a:6b:fa:19:53:eb:11:80:05:3e:52:81: eb:64:07:03:31:7d:9e:25:fc:b6:42:0c:19:6b:04: ac:a0:ee:ac:09:b7:93:f9:8e:b6:09:1c:b5:34:1d: 86:39:83:9a:16:0a:b9:21:7e:73:d5:4c:f5:19:ee: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5B:17:3E:15:CD:98:DE:AE:15:5A:77:77:80:E4:22:51:32:47:0A X509v3 Authority Key Identifier: keyid:B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:81:60:fd:f4:c6:7d:97:61:5b:f2:68:54:ef:e2:dc:92:d8: e4:7b:85:c9:64:92:a3:bb:64:08:3a:b5:1f:5d:51:73:ed:37: 3b:ca:c8:4e:b6:16:d5:04:10:83:6d:40:2b:39:d9:5b:a2:59: 5f:5d:05:bc:33:f1:2e:c7:a2:fd:45:d1:6c:bc:90:9d:9f:89: 3a:86:fa:1a:e5:2e:d4:24:80:75:c1:31:c9:7c:df:7f:ea:3b: ec:e5:93:3e:66:36:90:ec:b3:33:e7:1c:53:5d:dc:0f:d9:59: 44:31:9d:f7:0e:15:f4:72:06:0d:b2:22:46:18:74:a0:9a:7c: 9c:08:18:3d:16:7a:c1:f2:de:58:1a:00:84:57:18:fe:0d:f2: 2e:14:0c:5c:b0:b4:69:da:75:66:10:8e:52:09:24:5b:4f:5c: 6a:71:db:ec:38:59:d8:d5:8d:46:2d:dc:22:6f:39:86:49:54: bd:80:d8:f3:9a:0f:b3:b9:77:51:e2:50:c9:d5:83:3c:d7:b4: 4c:b6:8d:0a:45:bb:c9:f1:35:54:8a:cf:e2:5e:3e:ba:4a:52: 39:23:e9:13:89:e4:ec:cb:d7:21:2f:b2:90:5f:90:6d:17:fd: f9:9a:3b:50:24:69:27:e9:d5:c8:f5:9e:ac:dd:fb:26:42:e8: 1f:69:1f:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwjP/YaaAHyEuNYmCE8GsG70UXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJG MDNCNjY4MjAeFw0yNjAzMjQxMDU3MDdaFw0yNjAzMjcxOTMxMDdaMDMxMTAvBgNV BAMTKEQ5NUIxNzNFMTVDRDk4REVBRTE1NUE3Nzc3ODBFNDIyNTEzMjQ3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EhMY/owRYNxsw9H7tcdL5wnQ 8SnbRvMFLkhyR5eenGXZsiNOPQtV8+bqEVCTDShYK39G5LZJ9NBxAuF0JkWImp+h O1feo4XmCW9aigOFcCN9VFi9IIUVCG0d/ojZgrFBO6MfdenYRPA2D/wtJkWpZQFx LWw5pDbMVxUgx/2Yu8L4J/2hQnhALyLigyOz5Hjhu6VvXoUM62uIOaOLy5QpwNhs VISaMqnGh4Li/fIfNj0lSioRrSEmaTtiu71x2a/RAITu0Rpr+hlT6xGABT5Sgetk BwMxfZ4l/LZCDBlrBKyg7qwJt5P5jrYJHLU0HYY5g5oWCrkhfnPVTPUZ7icpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2VsXPhXNmN6uFVp3d4DkIlEyRwowHwYDVR0j BBgwFoAUtfjncSqDvivXjPxAZYyAMvA7ZoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMC9CNUY4RTc3MTJB ODNCRTJCRDc4Q0ZDNDA2NThDODAzMkYwM0I2NjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4QzgwMzJGMDNC NjY4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2RiNTlhMTAtNThkMC00NjJlLWIw OWItMTkxOWIxYzM1ZDcyLzAvQjVGOEU3NzEyQTgzQkUyQkQ3OENGQzQwNjU4Qzgw MzJGMDNCNjY4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFiBYP30xn2XYVvyaFTv4tyS2OR7hclkkqO7 ZAg6tR9dUXPtNzvKyE62FtUEEINtQCs52VuiWV9dBbwz8S7Hov1F0Wy8kJ2fiTqG +hrlLtQkgHXBMcl833/qO+zlkz5mNpDsszPnHFNd3A/ZWUQxnfcOFfRyBg2yIkYY dKCafJwIGD0WesHy3lgaAIRXGP4N8i4UDFywtGnadWYQjlIJJFtPXGpx2+w4WdjV jUYt3CJvOYZJVL2A2POaD7O5d1HiUMnVgzzXtEy2jQpFu8nxNVSKz+JePrpKUjkj 6ROJ5OzL1yEvspBfkG0X/fmaO1AkaSfp1cj1nqzd+yZC6B9pH/c= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:23 2026 by rpki-client