$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: OjkFKxTowvvBrBXf+iCY2QHbxXo+w6w9lZ+18RgRRI4= Subject key identifier: 26:E5:C7:19:0F:09:49:65:D4:84:82:46:AF:A7:6B:4E:C2:2A:CB:93 Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 5A50F975573CFC10E84DB7CB1EBE5CB7F5FE6835 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 0206 Signing time: Wed 25 Mar 2026 10:41:15 +0000 Manifest this update: Wed 25 Mar 2026 10:36:15 +0000 Manifest next update: Sat 28 Mar 2026 18:53:15 +0000 Files and hashes: 1: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: PymGJBtcf2BbEhLIvNoHiy1Mb2P/x61Bs29YxaHSsg8=) 2: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: jbeNAM8uIrcuyXo9L60I9mV9bFqM+96eyJHSvni2ZAo=) 3: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: /38osmS1ovCsNqWoBte+rgzduLMxUE6ppFENnBxm0Os=) 4: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: Ovv2ETM/TwcVTfyu6Kr+ausDEpr6HmSaSG285SkzGoE=) 5: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: yLe+iYFKBLn1P16uwSPKyydD9LXoMHT6kyursxgCZ18=) 6: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 7: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: Gb7BtMa3ZwQg1TqLmijU1iSRdOGqKu707FAgIn+V6/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:50:f9:75:57:3c:fc:10:e8:4d:b7:cb:1e:be:5c:b7:f5:fe:68:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Mar 25 10:36:15 2026 GMT Not After : Mar 28 18:53:15 2026 GMT Subject: CN=26E5C7190F094965D4848246AFA76B4EC22ACB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7d:5f:03:c2:18:d6:2e:49:61:ee:32:3a:e2: 89:f1:fe:97:ca:7c:cc:43:ee:38:44:47:52:39:58: d4:10:46:16:d9:8e:cd:34:4a:1b:67:3b:4c:bb:3f: 57:e3:0f:d3:13:f1:15:83:1a:ac:8c:f0:1b:bd:f7: 3a:12:a8:d3:39:c5:c4:31:ef:c2:16:1c:1f:a1:f6: a1:e6:ba:95:93:66:75:d8:58:21:d4:8a:da:ad:23: dc:dc:4c:7f:24:81:bf:a9:5e:44:38:69:6d:3b:53: f2:33:01:10:fa:21:a5:d6:10:49:03:4f:06:14:7a: 66:5f:b1:91:e2:b7:f3:73:ac:62:df:32:a5:10:ee: 1b:50:85:0a:32:a7:6f:2d:20:fb:9f:32:b8:20:4a: 2c:8f:67:dd:1a:ef:99:49:33:c5:18:33:d1:7b:39: e1:c5:e0:59:17:54:00:69:3c:04:cf:45:5c:59:9e: 37:a2:d1:6f:6e:74:7f:a7:f9:a1:05:20:88:2b:a6: db:f0:b4:97:83:18:c6:bb:90:f3:28:66:38:55:47: b0:3a:92:71:57:57:cd:0d:1c:6b:82:e9:d8:2a:2a: a3:2c:8c:91:85:ca:82:f8:21:ec:5c:27:8d:25:5e: 67:44:70:52:34:06:93:41:6c:28:f0:58:2d:99:b3: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E5:C7:19:0F:09:49:65:D4:84:82:46:AF:A7:6B:4E:C2:2A:CB:93 X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c5:ef:c8:36:ac:56:69:4e:5b:df:1b:d0:c6:4a:9d:7d:f9: c3:25:da:1f:db:58:fb:ef:6f:93:a0:33:f8:37:ff:bd:77:4c: a0:a6:aa:f9:ff:e4:fb:f5:ba:47:f7:ad:a6:f9:81:ab:e3:82: 22:0e:bd:64:84:8b:f9:db:95:76:3a:f3:33:8d:83:c4:7c:f2: d2:c9:21:31:ad:4b:13:2d:e9:fc:a0:9a:26:d7:15:ac:11:2c: 6c:7f:22:6c:8e:b3:56:5d:1d:8c:c4:80:3c:f6:c4:82:1c:ae: d8:c8:07:af:a6:b9:e5:65:bb:8d:08:a9:bd:55:36:37:65:26: d9:bd:ca:ee:2d:13:a7:03:3c:a7:0e:5f:24:21:9a:29:1b:2b: 36:2a:c1:c5:a9:c9:4e:66:dc:91:ff:4d:38:6e:4f:41:a1:7a: 3e:a1:60:6f:08:21:af:ea:ad:23:05:e7:2b:42:ae:d8:24:44: c7:34:84:90:df:25:d5:e2:39:7a:d2:60:b0:08:3f:c2:9c:b1: f7:84:13:51:4a:3b:3f:64:44:0e:de:1b:cd:31:2e:35:e7:55: 78:b6:b6:3c:b1:37:b5:01:9c:c6:65:eb:c6:0a:9d:c3:04:7f: 9b:3f:4d:2d:95:04:b3:ec:ab:76:ed:4b:ca:bd:2c:cc:7e:6e: 40:82:71:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlD5dVc8/BDoTbfLHr5ct/X+aDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNjAzMjUxMDM2MTVaFw0yNjAzMjgxODUzMTVaMDMxMTAvBgNV BAMTKDI2RTVDNzE5MEYwOTQ5NjVENDg0ODI0NkFGQTc2QjRFQzIyQUNCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fV8DwhjWLklh7jI64onx/pfK fMxD7jhER1I5WNQQRhbZjs00ShtnO0y7P1fjD9MT8RWDGqyM8Bu99zoSqNM5xcQx 78IWHB+h9qHmupWTZnXYWCHUitqtI9zcTH8kgb+pXkQ4aW07U/IzARD6IaXWEEkD TwYUemZfsZHit/NzrGLfMqUQ7htQhQoyp28tIPufMrggSiyPZ90a75lJM8UYM9F7 OeHF4FkXVABpPATPRVxZnjei0W9udH+n+aEFIIgrptvwtJeDGMa7kPMoZjhVR7A6 knFXV80NHGuC6dgqKqMsjJGFyoL4IexcJ40lXmdEcFI0BpNBbCjwWC2ZsxWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuXHGQ8JSWXUhIJGr6drTsIqy5MwHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7F78g2rFZpTlvfG9DGSp19+cMl2h/bWPvv b5OgM/g3/713TKCmqvn/5Pv1ukf3rab5gavjgiIOvWSEi/nblXY68zONg8R88tLJ ITGtSxMt6fygmibXFawRLGx/ImyOs1ZdHYzEgDz2xIIcrtjIB6+mueVlu40Iqb1V NjdlJtm9yu4tE6cDPKcOXyQhmikbKzYqwcWpyU5m3JH/TThuT0Ghej6hYG8IIa/q rSMF5ytCrtgkRMc0hJDfJdXiOXrSYLAIP8KcsfeEE1FKOz9kRA7eG80xLjXnVXi2 tjyxN7UBnMZl68YKncMEf5s/TS2VBLPsq3btS8q9LMx+bkCCcYM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:46 2026 by rpki-client