$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft File: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft (raw, json) Hash identifier: Ode7Y3yO3Q92ry/KkKDuNp5366qmVTNfP9Jafl4KGsk= Subject key identifier: B2:2E:C6:4A:CD:25:C8:58:A0:E7:46:23:63:A7:15:84:C6:F0:6A:0E Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 Certificate issuer: /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Certificate serial: 307533B4DF5F18F9845BC2A9A95C40A9CCE502F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft Manifest number: 0278 Signing time: Tue 24 Mar 2026 05:01:01 +0000 Manifest this update: Tue 24 Mar 2026 04:56:01 +0000 Manifest next update: Fri 27 Mar 2026 14:26:01 +0000 Files and hashes: 1: 3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (hash: 36f1oVCDIma5/edGeBmPtM2U4zeHtnBlVDsNRr5sez8=) 2: B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl (hash: FUG7lGy8ZIkXO0yc2fo6nFhcg622tq2PAhtRijMGe6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:75:33:b4:df:5f:18:f9:84:5b:c2:a9:a9:5c:40:a9:cc:e5:02:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741 Validity Not Before: Mar 24 04:56:01 2026 GMT Not After : Mar 27 14:26:01 2026 GMT Subject: CN=B22EC64ACD25C858A0E7462363A71584C6F06A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:80:63:02:f6:51:29:c1:34:1c:29:4f:7b: b4:29:46:9d:f0:4e:bf:75:2d:42:0f:0b:37:77:d6: 17:60:8e:81:5a:2f:b0:2c:69:06:f6:52:46:fe:ad: 0a:be:35:8b:4d:fd:da:5a:42:33:d8:25:37:97:3b: b0:0b:4e:ac:23:7c:6b:a1:b7:b8:4a:50:c8:78:4f: 13:b0:af:ce:2a:58:9f:ee:65:9e:f9:58:aa:2e:2b: 45:b5:19:20:c2:5c:48:1d:0b:57:81:bb:57:6c:36: 27:b1:96:d0:c4:a5:67:0c:bf:96:5b:5d:23:92:7c: b6:40:77:59:47:43:06:99:68:56:44:92:72:45:fd: 2c:7e:f8:d2:45:e8:f9:b8:50:5b:01:5f:0d:b0:53: dd:0b:0c:f0:3c:af:fd:31:c6:8e:0b:29:39:51:a7: 3c:80:b6:d0:64:aa:31:8f:2b:5b:25:3a:28:5b:92: 2b:f9:15:f7:0c:01:bb:60:f9:98:b0:f5:f1:57:d0: f7:6d:f2:53:66:c8:6f:15:9d:ee:07:7f:1a:04:b5: c8:7e:49:8f:33:d0:ad:45:88:27:f1:f8:ad:49:00: 71:1f:f9:a5:59:a6:57:70:1b:d9:ca:cb:35:40:d4: e1:85:7e:20:17:96:82:97:f2:b9:af:c2:15:9c:03: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2E:C6:4A:CD:25:C8:58:A0:E7:46:23:63:A7:15:84:C6:F0:6A:0E X509v3 Authority Key Identifier: keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6b:a0:9d:5c:1c:3a:ee:73:7f:a3:02:f0:95:ba:a4:46:ba: 97:a8:8e:fc:1f:8c:f1:80:f0:db:c1:59:ab:d8:dd:15:4f:21: ff:08:97:a0:1b:5a:3d:d9:25:9e:68:01:1c:ec:3f:b8:46:2a: 2c:f1:6c:ad:5b:fd:d9:78:5f:e0:39:5f:ea:5c:1e:c6:88:81: 36:0b:22:62:e0:51:d7:ad:f4:e8:bf:20:25:07:38:92:a5:e3: d6:2c:b8:fe:b7:d5:ca:03:96:cb:47:17:1c:3a:f7:85:b4:3f: 7a:35:15:5c:97:b5:2f:d9:13:c3:c4:4d:b9:d2:4a:08:26:64: c0:e8:ed:cf:61:c4:1c:dc:e4:fc:32:9e:d5:c7:b2:73:46:cd: 4c:d6:84:c9:b3:a4:0d:d7:90:3a:6d:43:5a:8f:07:ea:54:4b: 40:b7:dc:fd:98:1f:b7:df:73:9c:e9:1d:d5:f0:cb:67:f5:4a: 1c:77:2e:15:60:8c:2d:21:06:05:8a:77:60:24:a1:60:98:65: 2a:ab:14:23:0b:4d:af:37:f9:7e:4d:10:df:57:f7:dd:fe:ff: 49:a1:71:71:d1:c9:b5:54:34:e9:29:bd:79:ee:18:02:3d:e5: fc:e1:d9:75:c9:32:78:46:22:c1:00:a3:cf:c8:c3:d2:75:51: f3:3b:e0:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHUztN9fGPmEW8KpqVxAqczlAvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC RTAwRDc0MTAeFw0yNjAzMjQwNDU2MDFaFw0yNjAzMjcxNDI2MDFaMDMxMTAvBgNV BAMTKEIyMkVDNjRBQ0QyNUM4NThBMEU3NDYyMzYzQTcxNTg0QzZGMDZBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDIBjAvZRKcE0HClPe7QpRp3w Tr91LUIPCzd31hdgjoFaL7AsaQb2Ukb+rQq+NYtN/dpaQjPYJTeXO7ALTqwjfGuh t7hKUMh4TxOwr84qWJ/uZZ75WKouK0W1GSDCXEgdC1eBu1dsNiexltDEpWcMv5Zb XSOSfLZAd1lHQwaZaFZEknJF/Sx++NJF6Pm4UFsBXw2wU90LDPA8r/0xxo4LKTlR pzyAttBkqjGPK1slOihbkiv5FfcMAbtg+Ziw9fFX0Pdt8lNmyG8Vne4HfxoEtch+ SY8z0K1FiCfx+K1JAHEf+aVZpldwG9nKyzVA1OGFfiAXloKX8rmvwhWcAxqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsi7GSs0lyFig50YjY6cVhMbwag4wHwYDVR0j BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw RDc0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y3Yjc2NzctNjIwNC00MDVmLThi YTItZTcxNDMyNGMxNWQ3LzAvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMz RkJCRTAwRDc0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1roJ1cHDruc3+jAvCVuqRGupeojvwfjPGA 8NvBWavY3RVPIf8Il6AbWj3ZJZ5oARzsP7hGKizxbK1b/dl4X+A5X+pcHsaIgTYL ImLgUdet9Oi/ICUHOJKl49YsuP631coDlstHFxw694W0P3o1FVyXtS/ZE8PETbnS SggmZMDo7c9hxBzc5PwyntXHsnNGzUzWhMmzpA3XkDptQ1qPB+pUS0C33P2YH7ff c5zpHdXwy2f1Shx3LhVgjC0hBgWKd2AkoWCYZSqrFCMLTa83+X5NEN9X993+/0mh cXHRybVUNOkpvXnuGAI95fzh2XXJMnhGIsEAo8/Iw9J1UfM74Ao= -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:39 2026 by rpki-client