$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft File: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft (raw, json) Hash identifier: fyHUjEpfYaMaGi9FxhzOhdKTlm7b+Tqz9XHLFkL0xjw= Subject key identifier: 8A:13:F9:5D:6E:74:9E:CA:54:5E:87:65:75:E4:13:35:20:C8:1E:33 Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D Certificate issuer: /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Certificate serial: 6F50F8A0013DD041C3A6CF29133F65F5A82CFEE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft Manifest number: 0571 Signing time: Thu 26 Mar 2026 08:02:18 +0000 Manifest this update: Thu 26 Mar 2026 07:57:18 +0000 Manifest next update: Sun 29 Mar 2026 08:47:18 +0000 Files and hashes: 1: 32372e302e3139382e302f32342d3234203d3e20313338313138.roa (hash: MMkB+mYw9fGjubHcr3S3RTRAdY7MvLNuzUgjIii6Fis=) 2: 3130332e3232392e3136322e302f32342d3234203d3e20313338313138.roa (hash: 8cifjhYzuAjNoyrAY06aaQInEhEBLt9qHUL65hosVi4=) 3: 32372e302e3139362e302f32322d3234203d3e203539323838.roa (hash: RNWDlcxD4hGN5htL+zEva85XMaiHyQP7jUNJ4v1dxa8=) 4: B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl (hash: /OEFhshyqYdKdtTB7ZXP5/su8H3YTsZRNFp8M03N0KU=) 5: 3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (hash: i48IqlSbYMMK+v7SGCXzplkE2cHzSzt1Yn2nChsSsLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:50:f8:a0:01:3d:d0:41:c3:a6:cf:29:13:3f:65:f5:a8:2c:fe:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D Validity Not Before: Mar 26 07:57:18 2026 GMT Not After : Mar 29 08:47:18 2026 GMT Subject: CN=8A13F95D6E749ECA545E876575E4133520C81E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d5:9d:bd:60:e3:40:9b:38:b4:50:42:51:c2: 67:68:4f:50:68:6f:24:17:49:c9:c7:78:f8:bc:ae: 51:06:cc:86:52:56:f0:1e:98:d1:0a:5a:e5:84:f6: 3f:d7:3d:a5:9f:cb:8c:67:1d:d6:3c:d6:55:73:48: 48:f0:2c:dc:7f:eb:61:33:e6:ce:81:e2:bd:a8:e5: 73:ba:87:b3:fe:2b:5b:d2:36:d6:ee:3a:50:de:74: bb:72:15:81:86:19:c0:dc:d2:26:ab:4f:f1:15:b9: 69:e1:6a:2d:c4:b7:9d:ca:62:9f:f0:9c:e8:77:c6: 56:ae:9b:d0:fc:a1:e5:5a:dc:b3:1c:43:7d:db:b6: fc:2e:cd:58:70:bc:38:aa:15:a0:bf:21:52:1f:ee: 89:f4:fb:f4:91:13:c5:c9:94:c1:e7:76:86:18:13: 96:c3:c8:0b:72:f8:b9:23:ce:2e:5d:1d:55:33:95: 4c:d1:60:70:c1:a4:f9:4f:b4:21:a1:35:f5:b1:99: 17:50:de:0c:4a:65:58:7f:7c:b4:b6:3b:cf:58:46: b7:cc:74:bc:89:d9:30:60:51:bf:8a:eb:93:03:cd: 51:dd:8e:61:db:a0:66:10:70:76:21:5c:78:8f:ed: 50:ea:9e:88:6e:2e:98:5b:de:3e:f2:4f:07:61:ea: 97:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:F9:5D:6E:74:9E:CA:54:5E:87:65:75:E4:13:35:20:C8:1E:33 X509v3 Authority Key Identifier: keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:c7:c7:f4:cd:2e:87:6d:e4:ea:01:01:5c:b3:f6:da:56: 54:d7:aa:c7:12:36:0d:ba:33:15:1c:24:72:81:e8:1f:34:27: 54:13:6a:54:28:b5:07:8c:a2:50:dd:f5:0f:1a:6d:50:f1:54: 50:31:d1:80:7f:77:c2:2d:42:25:ae:34:b6:c6:a2:02:18:d7: 2d:5e:5c:7b:84:24:2d:9b:57:64:d1:d6:57:2a:0c:93:0d:3a: 01:00:04:78:65:19:a0:cf:7e:91:d6:51:bf:74:99:e8:e1:02: e7:0a:a1:2f:fb:92:cd:0e:9f:7d:16:5a:99:75:27:71:3c:bf: aa:99:5e:cb:2b:23:b6:c8:1c:34:af:25:52:4a:8a:b6:17:b0: ab:90:17:85:9a:10:2c:2e:de:d2:ce:e1:a5:34:be:03:90:51: 67:c4:0e:27:a9:66:ed:e5:1a:65:4b:92:5e:8f:71:30:6c:95: 92:26:e8:20:cc:d1:6f:9e:32:a2:41:6c:7b:78:5a:2a:15:fb: 34:96:74:c6:9b:b9:79:1c:d5:1e:ba:a4:2b:8a:e1:f6:91:f5: c0:5c:b6:7b:38:4f:3f:7d:33:b7:08:2f:a8:73:7f:5f:05:38: bd:aa:94:e6:f8:1e:10:6e:9b:96:0d:5f:51:73:ae:6f:73:9a: 89:35:c2:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1D4oAE90EHDps8pEz9l9ags/ugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5 N0U0OTgyRDAeFw0yNjAzMjYwNzU3MThaFw0yNjAzMjkwODQ3MThaMDMxMTAvBgNV BAMTKDhBMTNGOTVENkU3NDlFQ0E1NDVFODc2NTc1RTQxMzM1MjBDODFFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1Z29YONAmzi0UEJRwmdoT1Bo byQXScnHePi8rlEGzIZSVvAemNEKWuWE9j/XPaWfy4xnHdY81lVzSEjwLNx/62Ez 5s6B4r2o5XO6h7P+K1vSNtbuOlDedLtyFYGGGcDc0iarT/EVuWnhai3Et53KYp/w nOh3xlaum9D8oeVa3LMcQ33btvwuzVhwvDiqFaC/IVIf7on0+/SRE8XJlMHndoYY E5bDyAty+Lkjzi5dHVUzlUzRYHDBpPlPtCGhNfWxmRdQ3gxKZVh/fLS2O89YRrfM dLyJ2TBgUb+K65MDzVHdjmHboGYQcHYhXHiP7VDqnohuLphb3j7yTwdh6pcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihP5XW50nspUXodldeQTNSDIHjMwHwYDVR0j BBgwFoAUsRpuunwPAgkwRz+3+vwtnJfkmC0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTNlYjhmNi1iYjZjLTRlYTctODZkZi1iMjQzYzUxNjRkMjIvMC9CMTFBNkVCQTdD MEYwMjA5MzA0NzNGQjdGQUZDMkQ5Qzk3RTQ5ODJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJEOUM5N0U0 OTgyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzZWI4ZjYtYmI2Yy00ZWE3LTg2 ZGYtYjI0M2M1MTY0ZDIyLzAvQjExQTZFQkE3QzBGMDIwOTMwNDczRkI3RkFGQzJE OUM5N0U0OTgyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo2x8f0zS6HbeTqAQFcs/baVlTXqscSNg26 MxUcJHKB6B80J1QTalQotQeMolDd9Q8abVDxVFAx0YB/d8ItQiWuNLbGogIY1y1e XHuEJC2bV2TR1lcqDJMNOgEABHhlGaDPfpHWUb90mejhAucKoS/7ks0On30WWpl1 J3E8v6qZXssrI7bIHDSvJVJKirYXsKuQF4WaECwu3tLO4aU0vgOQUWfEDiepZu3l GmVLkl6PcTBslZIm6CDM0W+eMqJBbHt4WioV+zSWdMabuXkc1R66pCuK4faR9cBc tns4Tz99M7cIL6hzf18FOL2qlOb4HhBum5YNX1Fzrm9zmok1wlE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:43 2026 by rpki-client