$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: Odhfn64Pa9lGu8fj3Amqi+MavOPal6EhAk0Ly4vUHKE= Subject key identifier: 83:4A:CE:6D:1B:C4:B4:93:47:DB:35:8A:12:DD:12:3F:FE:2E:EC:28 Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 40EDE0941D46E78A473D7E2078BB5583A51A3399 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0270 Signing time: Thu 26 Mar 2026 18:52:27 +0000 Manifest this update: Thu 26 Mar 2026 18:47:27 +0000 Manifest next update: Mon 30 Mar 2026 00:08:27 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: 6Ll+KVU1lsdr/MLq/XmtBZBAXBY3FlBiRA4zbHmqAz0=) 2: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: t+4ejWWVpCyupE0/dAQ0FQh6YQM/Nth43B2HEabAe/I=) 3: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: Z/zTcdKY/+1D+wTbr5C9zS1eONmhv6Y/LtFvtIw5rss=) 4: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: S0m3NoE7x/Fz2SeGhmKVFO7GdK+yNzE8a9/5uPO+rbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ed:e0:94:1d:46:e7:8a:47:3d:7e:20:78:bb:55:83:a5:1a:33:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Mar 26 18:47:27 2026 GMT Not After : Mar 30 00:08:27 2026 GMT Subject: CN=834ACE6D1BC4B49347DB358A12DD123FFE2EEC28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:93:c2:36:44:20:83:ba:7a:6f:d4:07:e9: 04:78:8e:2b:fc:f8:98:91:26:f7:7a:00:14:17:fa: 83:54:9f:fa:0f:5b:6d:c2:a9:0a:39:01:dc:c5:c0: 75:3b:cd:30:66:aa:d1:d3:97:0e:0f:90:c0:2e:73: 2f:b3:8d:34:f3:f2:53:5a:5e:b1:6a:2f:7b:41:c6: a2:2d:29:ae:6f:0b:1c:4b:1e:27:58:09:49:b7:3d: 1a:9d:e5:97:86:25:42:14:d3:d8:50:0e:09:53:ef: f2:ed:e0:5b:07:da:96:9a:68:fb:94:79:e3:33:ff: 4a:68:f1:05:8c:0d:ad:a1:75:c8:01:3a:56:0e:6b: 5d:4f:85:1b:25:b4:6b:e2:33:87:99:8b:ff:0b:74: b4:1d:e1:fa:3a:a3:4d:99:d6:07:b9:67:72:df:f7: 62:db:1c:de:9d:ae:53:ea:c8:1b:89:6a:0b:cb:83: 09:77:87:86:c3:1a:28:eb:bd:f1:00:fb:0f:88:91: e8:56:14:4e:b8:d2:05:ec:59:bd:aa:70:61:3b:6f: d7:5a:65:70:43:df:eb:80:19:0e:f5:54:10:49:ac: 97:19:8c:a5:f8:d6:58:a8:2c:c7:f1:2e:29:07:1a: dc:34:09:d9:dd:2e:40:ca:19:6c:7c:3e:91:8c:1e: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4A:CE:6D:1B:C4:B4:93:47:DB:35:8A:12:DD:12:3F:FE:2E:EC:28 X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b8:3f:a3:42:a3:4e:fd:3b:9f:08:c9:d1:16:db:e0:de:9d: c1:e5:92:57:79:5f:5f:1f:1e:64:ba:a4:fb:d3:87:e7:59:67: 91:78:cd:dd:68:b9:82:61:5d:17:ae:3c:a5:24:02:75:15:d7: df:dd:f5:4e:85:7e:fc:5c:24:35:77:bc:4d:51:b6:31:a9:f1: af:56:e8:27:1a:6e:1d:ad:35:58:55:fd:33:75:c1:b8:60:43: 99:97:a9:84:cd:9a:31:95:83:06:c5:22:db:a3:37:00:88:b5: e2:00:e8:a4:b7:92:95:1e:e1:27:e8:62:1f:9c:3f:65:38:64: b9:69:1d:98:cb:b2:41:0c:7c:99:c3:18:ac:57:22:8e:0e:e2: 1a:3e:f1:e2:f9:1a:6d:58:0c:a6:6d:6c:38:31:36:de:7b:e6: 69:35:99:b8:64:3e:b0:c2:b8:46:91:55:82:17:5a:cf:2f:ed: e0:8b:8f:58:05:f1:32:de:39:a0:ad:3d:ed:c7:dc:78:0d:05: c3:01:87:e1:87:cb:4c:68:34:d3:dd:b2:4a:42:1c:00:97:ee: e2:ba:16:85:7f:e5:89:d4:12:25:e0:ed:77:40:92:a3:25:b0: 20:fe:c2:0c:eb:0e:0f:8a:99:c1:65:97:98:0f:1d:d4:d1:66: a1:29:71:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQO3glB1G54pHPX4geLtVg6UaM5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNjAzMjYxODQ3MjdaFw0yNjAzMzAwMDA4MjdaMDMxMTAvBgNV BAMTKDgzNEFDRTZEMUJDNEI0OTM0N0RCMzU4QTEyREQxMjNGRkUyRUVDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wJPCNkQgg7p6b9QH6QR4jiv8 +JiRJvd6ABQX+oNUn/oPW23CqQo5AdzFwHU7zTBmqtHTlw4PkMAucy+zjTTz8lNa XrFqL3tBxqItKa5vCxxLHidYCUm3PRqd5ZeGJUIU09hQDglT7/Lt4FsH2paaaPuU eeMz/0po8QWMDa2hdcgBOlYOa11PhRsltGviM4eZi/8LdLQd4fo6o02Z1ge5Z3Lf 92LbHN6drlPqyBuJagvLgwl3h4bDGijrvfEA+w+IkehWFE640gXsWb2qcGE7b9da ZXBD3+uAGQ71VBBJrJcZjKX41lioLMfxLikHGtw0CdndLkDKGWx8PpGMHmUNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg0rObRvEtJNH2zWKEt0SP/4u7CgwHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa4P6NCo079O58IydEW2+DencHlkld5X18f HmS6pPvTh+dZZ5F4zd1ouYJhXReuPKUkAnUV19/d9U6FfvxcJDV3vE1RtjGp8a9W 6Ccabh2tNVhV/TN1wbhgQ5mXqYTNmjGVgwbFItujNwCIteIA6KS3kpUe4SfoYh+c P2U4ZLlpHZjLskEMfJnDGKxXIo4O4ho+8eL5Gm1YDKZtbDgxNt575mk1mbhkPrDC uEaRVYIXWs8v7eCLj1gF8TLeOaCtPe3H3HgNBcMBh+GHy0xoNNPdskpCHACX7uK6 FoV/5YnUEiXg7XdAkqMlsCD+wgzrDg+KmcFll5gPHdTRZqEpceg= -----END CERTIFICATE-----Generated at Fri Mar 27 03:40:00 2026 by rpki-client