$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft File: B5A68ADE81322F194320BE4302C6897D29D13BDD.mft (raw, json) Hash identifier: GRF1f1+GWE73pNi9xPFqvEs+WqiJuywVoHhTKhwRK9M= Subject key identifier: DD:95:E2:F8:1D:2F:E7:9F:43:6F:92:AB:23:CF:57:18:B5:C8:5A:33 Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD Certificate issuer: /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Certificate serial: 6A9A95D803E9E0B9179AB3AF92FD3BB32088BEB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft Manifest number: 0108 Signing time: Wed 25 Mar 2026 04:01:34 +0000 Manifest this update: Wed 25 Mar 2026 03:56:34 +0000 Manifest next update: Sat 28 Mar 2026 12:08:34 +0000 Files and hashes: 1: 3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (hash: 5ddjKzEo7R2HXRPV5KVablgruigb2N4v7X9sDbCb8p8=) 2: B5A68ADE81322F194320BE4302C6897D29D13BDD.crl (hash: c2nfwS54/ewATypeTfKvZkaK6bu0RZ6RxXEIAmlcbK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9a:95:d8:03:e9:e0:b9:17:9a:b3:af:92:fd:3b:b3:20:88:be:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD Validity Not Before: Mar 25 03:56:34 2026 GMT Not After : Mar 28 12:08:34 2026 GMT Subject: CN=DD95E2F81D2FE79F436F92AB23CF5718B5C85A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:11:c9:7e:a6:52:ec:5b:f7:7b:55:95:9a:96: 5a:10:3a:ce:8f:30:89:8a:19:1c:95:a7:fc:e5:6f: ca:f7:ab:fd:88:4a:51:46:49:9e:0d:42:f7:ed:39: 6f:c7:33:a5:99:cf:55:83:c5:0d:91:db:44:84:bc: 3c:8e:ec:85:06:e3:d4:ee:13:b5:49:a2:8f:df:47: a7:49:f4:2c:4d:cc:4a:df:13:2b:32:54:47:ed:6b: ec:11:f9:03:73:b2:a9:4a:87:9c:b0:25:52:1d:7c: 53:18:4f:3f:e5:fc:4a:d2:ef:10:5a:a5:92:35:b0: da:b4:c9:74:68:21:56:c9:34:ab:b9:62:6b:15:4d: 1d:65:87:04:fc:34:ef:71:92:34:97:60:12:86:ba: 9b:db:93:df:24:67:74:f6:87:e3:d0:71:0e:d6:d5: f2:0d:47:d5:8c:09:dd:0e:c7:86:c8:1a:0a:71:29: c9:5c:24:7a:39:88:9e:37:11:67:2d:45:fe:7e:b5: dc:6f:fb:11:a3:88:af:c9:fd:26:b0:0c:f7:8d:c7: 08:0e:23:a6:99:2e:eb:d0:e7:91:f5:63:32:88:3d: 3c:7c:b6:86:bd:fa:f9:a6:fc:1d:1f:cf:5e:ae:b1: 06:de:5d:f1:f5:c2:f8:5d:b0:57:96:8e:d5:a4:f9: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:95:E2:F8:1D:2F:E7:9F:43:6F:92:AB:23:CF:57:18:B5:C8:5A:33 X509v3 Authority Key Identifier: keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4a:9d:cf:ca:7b:ea:81:6b:cd:59:a2:85:86:35:4c:1f:ed: 6a:03:a4:90:e0:6a:c7:e9:64:c0:9d:6f:6a:3b:7b:7b:b9:f4: 40:2c:d4:6f:9c:6c:96:10:19:29:ac:69:53:0c:c7:c6:37:c5: a1:41:19:6c:c8:57:ad:68:58:68:8c:9f:7d:57:26:f7:0c:20: bb:2e:2e:79:cd:c9:d9:3b:ea:2a:39:21:3a:33:47:f6:27:80: ea:d0:16:3d:9e:5a:26:85:19:5c:02:09:5f:4a:11:df:c2:69: f4:f6:37:29:fb:a0:1b:8f:ee:5a:d0:8b:69:f7:5c:14:b6:35: be:57:a9:0f:17:4b:b9:c9:2f:6b:f5:77:1e:82:75:a0:6a:52: 41:6f:61:1b:da:ef:30:e3:c3:2a:b0:53:90:02:2a:53:7b:14: 1e:53:b0:77:0d:4a:b5:9e:fd:f2:fb:dc:3c:32:61:98:78:97: f1:cb:17:29:d3:42:3e:b7:02:48:0e:d0:88:e3:c0:8b:b6:08: 77:1c:b1:f5:f3:8b:b8:f5:b5:0c:b8:04:99:ff:f0:ca:e9:6e: eb:5e:a2:0e:09:6e:f7:42:6a:47:5b:a4:01:a7:4b:37:e8:69: 6b:92:7d:85:dd:6d:53:f1:fc:5b:dc:78:81:c9:ba:78:0a:25: a5:0e:84:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapqV2APp4LkXmrOvkv07syCIvrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy OUQxM0JERDAeFw0yNjAzMjUwMzU2MzRaFw0yNjAzMjgxMjA4MzRaMDMxMTAvBgNV BAMTKEREOTVFMkY4MUQyRkU3OUY0MzZGOTJBQjIzQ0Y1NzE4QjVDODVBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEcl+plLsW/d7VZWalloQOs6P MImKGRyVp/zlb8r3q/2ISlFGSZ4NQvftOW/HM6WZz1WDxQ2R20SEvDyO7IUG49Tu E7VJoo/fR6dJ9CxNzErfEysyVEfta+wR+QNzsqlKh5ywJVIdfFMYTz/l/ErS7xBa pZI1sNq0yXRoIVbJNKu5YmsVTR1lhwT8NO9xkjSXYBKGupvbk98kZ3T2h+PQcQ7W 1fINR9WMCd0Ox4bIGgpxKclcJHo5iJ43EWctRf5+tdxv+xGjiK/J/SawDPeNxwgO I6aZLuvQ55H1YzKIPTx8toa9+vmm/B0fz16usQbeXfH1wvhdsFeWjtWk+aEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZXi+B0v559Db5KrI89XGLXIWjMwHwYDVR0j BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx M0JERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGIwMTYwODUtMmY5NC00MGZmLTgw Y2UtY2UyM2QzOWU2NWExLzAvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5 N0QyOUQxM0JERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhKnc/Ke+qBa81ZooWGNUwf7WoDpJDgasfp ZMCdb2o7e3u59EAs1G+cbJYQGSmsaVMMx8Y3xaFBGWzIV61oWGiMn31XJvcMILsu LnnNydk76io5ITozR/YngOrQFj2eWiaFGVwCCV9KEd/CafT2Nyn7oBuP7lrQi2n3 XBS2Nb5XqQ8XS7nJL2v1dx6CdaBqUkFvYRva7zDjwyqwU5ACKlN7FB5TsHcNSrWe /fL73DwyYZh4l/HLFynTQj63AkgO0IjjwIu2CHccsfXzi7j1tQy4BJn/8Mrpbute og4JbvdCakdbpAGnSzfoaWuSfYXdbVPx/FvceIHJungKJaUOhLQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:48:22 2026 by rpki-client