$ rpki-client -vvf repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft File: B2D1CBD015A419010845E6F56D8385C8647B5390.mft (raw, json) Hash identifier: nfhdLmqGLp3/MIjrjL8jjnD3BNMgUGXaHnCTeiZ2g+k= Subject key identifier: 22:E5:4A:FD:65:96:9D:0C:7A:5A:D3:02:18:1B:2E:B2:A5:D9:99:29 Authority key identifier: B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 Certificate issuer: /CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Certificate serial: 3580AC8FC7CC0F22800CBE96B8BC6A6242CBD85A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft Manifest number: 030F Signing time: Tue 24 Mar 2026 16:02:22 +0000 Manifest this update: Tue 24 Mar 2026 15:57:22 +0000 Manifest next update: Fri 27 Mar 2026 19:36:22 +0000 Files and hashes: 1: 323430363a343534303a3a2f33322d3332203d3e20313430343634.roa (hash: fW6me2gng7+RFAgwfv3lcoF9Ov98BB9yIZ6/btVVKsw=) 2: 3130332e3135332e3133342e302f32342d3234203d3e20313430343634.roa (hash: cn1hAJHYGCMSOghgviiiSzFiPXYh8mLQKkzicGhK/aE=) 3: B2D1CBD015A419010845E6F56D8385C8647B5390.crl (hash: a8rHClQ1F+fDH5rmxq2ADdS01lb27252wOeGs4KNgs4=) 4: 3130332e3135332e3133342e302f32332d3233203d3e20313430343634.roa (hash: bAHbnIP0Wicgt74YcQMMyo48qnOQtogRe4ndD6XNQrg=) 5: 3130332e3135332e3133352e302f32342d3234203d3e20313430343634.roa (hash: oUlQyF3I0zLJjLl9EcH8NBVRAz863HrDlDUllspbny0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:80:ac:8f:c7:cc:0f:22:80:0c:be:96:b8:bc:6a:62:42:cb:d8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2D1CBD015A419010845E6F56D8385C8647B5390 Validity Not Before: Mar 24 15:57:22 2026 GMT Not After : Mar 27 19:36:22 2026 GMT Subject: CN=22E54AFD65969D0C7A5AD302181B2EB2A5D99929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0c:51:f6:ad:cd:0e:77:25:f7:fe:3f:77:f6: d5:9e:bd:1a:32:db:7f:11:dd:e2:8e:72:6f:b5:1f: e5:ff:28:cc:1e:a2:ca:04:57:fd:36:7b:68:cb:0e: 79:6b:68:9e:fe:10:c7:ce:94:ea:b1:6e:bf:71:32: 5f:30:42:38:45:a4:79:61:af:41:b2:74:f0:27:d8: fa:9b:72:ed:b2:28:79:5b:f0:f4:8f:27:f3:f1:af: d3:d8:28:22:b3:b3:cd:db:29:26:54:2b:e8:04:cc: 7f:e2:69:fa:82:34:26:00:74:75:b0:a3:43:83:07: f3:24:a7:fb:67:7f:09:09:99:37:de:d2:ab:b7:ab: 33:eb:69:64:b2:1b:11:93:29:94:b8:38:73:30:89: fc:f6:26:2f:aa:5d:79:cd:93:f4:e6:7c:e0:f4:fb: 50:e8:2b:c2:bf:27:dc:f8:ce:a5:6f:2f:e3:23:91: 23:36:04:0f:ec:f7:e0:aa:58:0d:69:1e:b0:f1:a7: 94:29:64:fb:38:3f:de:ab:c1:3d:d2:fa:a9:ea:b6: f6:69:6b:37:69:04:fd:d9:7d:fd:d3:03:44:f3:95: 82:a9:57:5f:6a:19:84:23:f0:d1:0d:42:db:c9:d8: 37:fb:0a:88:62:d0:c6:34:2f:b6:53:5d:22:2c:08: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E5:4A:FD:65:96:9D:0C:7A:5A:D3:02:18:1B:2E:B2:A5:D9:99:29 X509v3 Authority Key Identifier: keyid:B2:D1:CB:D0:15:A4:19:01:08:45:E6:F5:6D:83:85:C8:64:7B:53:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2D1CBD015A419010845E6F56D8385C8647B5390.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8be905-f296-45d1-a879-4a4de52cb2d6/0/B2D1CBD015A419010845E6F56D8385C8647B5390.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a2:67:40:49:57:c4:9b:d5:81:9c:85:a5:7c:d0:63:70:ad: 5c:3c:b8:6a:66:80:ff:94:95:55:c5:d6:61:58:85:2c:f3:28: 2c:d0:d7:25:e1:f1:ff:e1:c5:2c:56:34:d5:0b:02:3e:bc:8f: b4:ff:88:6b:ae:1f:ef:74:52:6f:20:5a:53:f0:17:63:fe:48: fb:26:72:1d:fa:98:4f:b2:b1:fd:77:13:f4:b5:1f:59:b4:07: f0:53:cb:a1:ec:d2:ce:1f:63:02:f2:78:f7:0e:2e:53:02:d9: 93:8c:61:2f:ec:e5:5a:48:72:e3:fe:8f:39:71:48:f4:d7:7e: 58:b8:02:8b:0e:a2:43:6b:85:73:f7:b3:2a:21:8c:80:4f:0b: a8:9f:e9:d0:74:71:4a:2a:52:7c:37:2e:fa:e2:6b:62:3e:39: 44:1f:8c:94:22:4f:62:c8:32:da:89:58:0e:24:4b:e7:53:74: 45:17:59:f4:10:0a:30:2d:e0:32:19:11:39:40:6b:a3:a8:3f: 2f:6b:ba:22:95:cd:4b:62:02:6d:20:e0:a0:91:9a:8f:a2:42: 49:38:e7:f3:54:ca:5b:27:6b:60:d5:ab:8a:35:bb:02:a9:7b: 12:bc:66:ad:a1:b0:1e:02:7a:14:46:58:b7:c7:b6:bd:7d:32: 28:50:ea:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYCsj8fMDyKADL6WuLxqYkLL2FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2 NDdCNTM5MDAeFw0yNjAzMjQxNTU3MjJaFw0yNjAzMjcxOTM2MjJaMDMxMTAvBgNV BAMTKDIyRTU0QUZENjU5NjlEMEM3QTVBRDMwMjE4MUIyRUIyQTVEOTk5MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqDFH2rc0OdyX3/j939tWevRoy 238R3eKOcm+1H+X/KMweosoEV/02e2jLDnlraJ7+EMfOlOqxbr9xMl8wQjhFpHlh r0GydPAn2Pqbcu2yKHlb8PSPJ/Pxr9PYKCKzs83bKSZUK+gEzH/iafqCNCYAdHWw o0ODB/Mkp/tnfwkJmTfe0qu3qzPraWSyGxGTKZS4OHMwifz2Ji+qXXnNk/TmfOD0 +1DoK8K/J9z4zqVvL+MjkSM2BA/s9+CqWA1pHrDxp5QpZPs4P96rwT3S+qnqtvZp azdpBP3Zff3TA0TzlYKpV19qGYQj8NENQtvJ2Df7Cohi0MY0L7ZTXSIsCH1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuVK/WWWnQx6WtMCGBsusqXZmSkwHwYDVR0j BBgwFoAUstHL0BWkGQEIReb1bYOFyGR7U5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YjhiZTkwNS1mMjk2LTQ1ZDEtYTg3OS00YTRkZTUyY2IyZDYvMC9CMkQxQ0JEMDE1 QTQxOTAxMDg0NUU2RjU2RDgzODVDODY0N0I1MzkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1Qzg2NDdC NTM5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4YmU5MDUtZjI5Ni00NWQxLWE4 NzktNGE0ZGU1MmNiMmQ2LzAvQjJEMUNCRDAxNUE0MTkwMTA4NDVFNkY1NkQ4Mzg1 Qzg2NDdCNTM5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiiZ0BJV8Sb1YGchaV80GNwrVw8uGpmgP+U lVXF1mFYhSzzKCzQ1yXh8f/hxSxWNNULAj68j7T/iGuuH+90Um8gWlPwF2P+SPsm ch36mE+ysf13E/S1H1m0B/BTy6Hs0s4fYwLyePcOLlMC2ZOMYS/s5VpIcuP+jzlx SPTXfli4AosOokNrhXP3syohjIBPC6if6dB0cUoqUnw3Lvria2I+OUQfjJQiT2LI MtqJWA4kS+dTdEUXWfQQCjAt4DIZETlAa6OoPy9ruiKVzUtiAm0g4KCRmo+iQkk4 5/NUylsna2DVq4o1uwKpexK8Zq2hsB4CehRGWLfHtr19MihQ6mg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:38 2026 by rpki-client