$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: i9l3sku8GIP0fUjJZ48Q3eU5gOozIR0GCrPzBoAJPR8= Subject key identifier: FA:D4:06:FB:AA:E4:70:43:1A:6A:DC:F2:6B:64:65:BF:4F:8E:CE:3B Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 6F9659A7DFB83242CEFA8BE5266E73F0555ADA2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 026F Signing time: Tue 24 Mar 2026 18:02:32 +0000 Manifest this update: Tue 24 Mar 2026 17:57:32 +0000 Manifest next update: Fri 27 Mar 2026 18:45:32 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: 6Ll+KVU1lsdr/MLq/XmtBZBAXBY3FlBiRA4zbHmqAz0=) 2: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: t+4ejWWVpCyupE0/dAQ0FQh6YQM/Nth43B2HEabAe/I=) 3: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: HzbWbaNaqTsM5PuEFIPNS62vwM1colLqToQ8uF+9YjA=) 4: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: Z/zTcdKY/+1D+wTbr5C9zS1eONmhv6Y/LtFvtIw5rss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:96:59:a7:df:b8:32:42:ce:fa:8b:e5:26:6e:73:f0:55:5a:da:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Mar 24 17:57:32 2026 GMT Not After : Mar 27 18:45:32 2026 GMT Subject: CN=FAD406FBAAE470431A6ADCF26B6465BF4F8ECE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:7c:5d:ec:92:6f:e4:64:f8:b8:4c:32:84: a8:a1:30:e0:cc:9e:4a:34:60:ba:18:8f:d7:56:20: 88:6c:3b:5f:9c:79:9c:32:44:c5:fc:2b:0f:27:94: f4:db:f1:25:41:97:5a:62:46:7c:ef:5e:b4:32:a0: 0e:69:31:67:3f:4f:d9:1a:93:3e:68:f5:08:33:41: 33:f9:0b:51:b2:4b:98:42:f3:61:da:30:c8:09:07: 81:0d:ff:63:bf:0f:ec:e4:39:78:71:3b:72:19:70: ff:9b:91:e6:8c:cf:31:cd:cd:66:49:17:5e:5e:65: 71:0f:e7:e6:b4:cb:38:e8:eb:05:03:a0:78:b9:05: 99:a0:a6:94:8b:52:c0:30:c3:47:d1:e7:bc:96:2e: 73:41:a5:c6:b7:5b:ff:12:84:b9:9d:c4:1e:b1:9b: 66:51:8d:63:31:ed:61:e7:b3:20:47:d7:b4:b7:4e: 7a:4e:fe:97:66:c1:a2:f9:6c:03:28:61:e9:61:96: b3:c4:00:8b:45:31:57:41:c5:78:3d:8d:a1:7e:b1: e6:61:dc:9e:05:4b:99:f0:8c:a6:d7:52:1f:03:ac: 1b:0b:4f:52:89:69:ee:ea:d5:cc:63:a1:44:26:14: d6:af:39:ad:2b:da:3c:94:ae:ce:ed:29:c9:bd:8a: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D4:06:FB:AA:E4:70:43:1A:6A:DC:F2:6B:64:65:BF:4F:8E:CE:3B X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c2:3e:df:0c:21:d4:f3:7b:c0:06:03:97:b5:c5:0d:80:ff: 5c:cd:df:ce:ac:50:4f:0c:30:68:6b:be:43:80:76:42:0f:8c: e6:8b:41:c9:d5:77:4e:82:dd:2f:ad:90:51:17:40:d6:86:96: 1a:a9:66:64:4f:09:4e:93:3c:d9:84:54:b5:0f:ca:80:b3:ef: 00:69:8e:19:cc:32:ca:60:93:ce:ce:3e:3a:7f:62:e6:7c:3d: 4e:57:00:17:a8:8c:bb:a1:17:a8:af:cf:b7:2c:3c:89:0f:a0: e6:28:ca:1a:9b:aa:2c:23:88:44:50:94:b6:7a:d7:97:ba:f6: b8:63:65:ce:7d:6c:43:ba:74:fd:20:da:6a:d6:9c:ac:44:26: 57:bc:ff:17:1f:99:e9:71:1c:01:06:4c:7b:09:e2:1f:09:7c: 57:96:89:ac:3d:12:16:f7:b4:31:67:94:aa:53:64:f2:99:34: 0c:82:bc:ae:b4:df:62:48:6c:3d:92:c6:75:08:c2:e3:ed:75: 96:b9:8d:71:6d:ed:5a:a1:5a:36:f7:b5:90:aa:34:13:1f:ff: 9b:b5:76:1c:08:e8:32:d4:56:1c:5c:f9:b7:fa:14:0a:ac:6d: ee:c6:84:e8:a3:64:fb:ea:05:a2:a8:98:fa:28:af:b9:00:28: b0:38:2a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5ZZp9+4MkLO+ovlJm5z8FVa2i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNjAzMjQxNzU3MzJaFw0yNjAzMjcxODQ1MzJaMDMxMTAvBgNV BAMTKEZBRDQwNkZCQUFFNDcwNDMxQTZBRENGMjZCNjQ2NUJGNEY4RUNFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxEXxd7JJv5GT4uEwyhKihMODM nko0YLoYj9dWIIhsO1+ceZwyRMX8Kw8nlPTb8SVBl1piRnzvXrQyoA5pMWc/T9ka kz5o9QgzQTP5C1GyS5hC82HaMMgJB4EN/2O/D+zkOXhxO3IZcP+bkeaMzzHNzWZJ F15eZXEP5+a0yzjo6wUDoHi5BZmgppSLUsAww0fR57yWLnNBpca3W/8ShLmdxB6x m2ZRjWMx7WHnsyBH17S3TnpO/pdmwaL5bAMoYelhlrPEAItFMVdBxXg9jaF+seZh 3J4FS5nwjKbXUh8DrBsLT1KJae7q1cxjoUQmFNavOa0r2jyUrs7tKcm9iplBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+tQG+6rkcEMaatzya2Rlv0+OzjswHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTCPt8MIdTze8AGA5e1xQ2A/1zN386sUE8M MGhrvkOAdkIPjOaLQcnVd06C3S+tkFEXQNaGlhqpZmRPCU6TPNmEVLUPyoCz7wBp jhnMMspgk87OPjp/YuZ8PU5XABeojLuhF6ivz7csPIkPoOYoyhqbqiwjiERQlLZ6 15e69rhjZc59bEO6dP0g2mrWnKxEJle8/xcfmelxHAEGTHsJ4h8JfFeWiaw9Ehb3 tDFnlKpTZPKZNAyCvK6032JIbD2SxnUIwuPtdZa5jXFt7VqhWjb3tZCqNBMf/5u1 dhwI6DLUVhxc+bf6FAqsbe7GhOijZPvqBaKomPoor7kAKLA4Kvk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:43 2026 by rpki-client