$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: M2bJbAWr43w+M3oEv4JT4Fa00Wgm+pmH1gzHWhi7aOw= Subject key identifier: 42:A8:DB:BE:32:29:8D:B0:77:75:B8:50:21:28:2D:8F:E3:1E:EF:04 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 0653A8B51342DBF0DB88F0A81BED4C5B341FD159 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 0245 Signing time: Sun 01 Mar 2026 20:01:07 +0000 Manifest this update: Sun 01 Mar 2026 19:56:07 +0000 Manifest next update: Thu 05 Mar 2026 03:20:07 +0000 Files and hashes: 1: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) 2: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 3: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) 4: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: uOjzBJAURqnJlvvkYEqBjBih5HDtKIA+/LnvN7cW4eA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:53:a8:b5:13:42:db:f0:db:88:f0:a8:1b:ed:4c:5b:34:1f:d1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Mar 1 19:56:07 2026 GMT Not After : Mar 5 03:20:07 2026 GMT Subject: CN=42A8DBBE32298DB07775B85021282D8FE31EEF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:73:6f:48:98:ba:79:87:54:c8:1f:d0:de: 37:c8:17:d3:4b:53:e4:50:fc:54:94:3d:4b:0e:ec: de:2f:71:28:c0:c2:7b:5d:7f:f2:0e:35:a2:a9:f5: 0b:7f:6b:f2:4b:f9:7e:8e:63:63:a2:70:1d:dc:4b: 6c:e7:50:6d:17:d8:1c:66:c9:af:78:f2:11:88:96: c6:ad:54:a3:64:5d:10:26:13:4c:31:ea:20:26:de: 24:d1:4e:32:db:e9:1c:33:d6:f5:ba:76:e2:07:8c: ae:d8:6a:a9:a4:72:9a:39:05:a3:88:c0:da:1f:1a: dd:a0:fb:b5:bf:5d:51:b9:50:15:cc:26:a0:dd:37: 9c:99:3f:9c:94:c5:bc:12:94:f6:a3:9e:09:d4:e1: 9f:0d:c1:89:eb:ef:b3:90:32:9c:fa:c7:81:8a:b9: 7b:a4:51:fd:60:45:dc:94:24:6a:25:bc:0b:b0:fa: 3d:0e:3e:b2:9d:de:ea:6a:9a:bf:07:17:6f:34:b7: f4:93:1a:9d:44:8a:09:d7:34:91:48:38:1c:af:09: 6e:97:83:f1:5f:fe:48:69:11:9f:77:3b:13:ea:8b: 48:02:39:d5:95:87:c7:8a:21:03:f2:82:87:31:0c: d6:96:0f:9f:bc:fb:d3:25:10:ec:df:67:8a:aa:4e: bd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A8:DB:BE:32:29:8D:B0:77:75:B8:50:21:28:2D:8F:E3:1E:EF:04 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:84:20:aa:27:54:6d:fa:26:96:90:5f:51:b2:71:36:4f:95: f8:63:cb:99:ec:7c:49:d6:8f:30:ce:51:26:f4:0e:d5:91:d4: 19:7b:ed:da:57:44:cc:42:3f:6c:79:dc:58:07:d7:9d:34:2a: c0:ad:25:1c:d9:46:81:27:1e:80:2f:2d:8b:39:ff:e2:5c:55: 80:f3:99:25:a2:0c:c3:1f:49:3f:29:c4:66:cf:3b:67:56:13: 51:aa:87:00:80:b2:fd:bf:99:e8:41:eb:e2:de:d3:61:46:ec: 9a:00:ff:f1:f6:e2:e0:86:60:ae:cd:59:f7:56:ff:f2:1f:c2: ef:67:f2:cb:55:b1:b2:84:5f:a6:3b:22:b7:37:b0:f0:c2:44: 48:a3:02:fc:35:ec:45:d7:6e:fb:ce:02:01:e4:ab:40:a3:36: 7c:d2:40:e4:72:40:c4:bc:a9:93:18:24:9c:df:16:ba:3d:a5: f1:02:72:ae:cd:4a:68:e5:9c:83:76:ed:48:2d:fb:84:78:51: da:c9:8d:cc:fa:56:2d:09:41:81:c5:a8:11:f6:3c:87:24:d6: a4:d4:81:4b:18:b5:77:5a:1a:1d:b5:91:20:34:fa:20:3e:b0: 62:72:4f:9d:ba:e8:51:44:b4:25:f5:12:58:77:2e:f4:30:87: fc:b1:17:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlOotRNC2/DbiPCoG+1MWzQf0VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNjAzMDExOTU2MDdaFw0yNjAzMDUwMzIwMDdaMDMxMTAvBgNV BAMTKDQyQThEQkJFMzIyOThEQjA3Nzc1Qjg1MDIxMjgyRDhGRTMxRUVGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73XNvSJi6eYdUyB/Q3jfIF9NL U+RQ/FSUPUsO7N4vcSjAwntdf/IONaKp9Qt/a/JL+X6OY2OicB3cS2znUG0X2Bxm ya948hGIlsatVKNkXRAmE0wx6iAm3iTRTjLb6Rwz1vW6duIHjK7Yaqmkcpo5BaOI wNofGt2g+7W/XVG5UBXMJqDdN5yZP5yUxbwSlPajngnU4Z8NwYnr77OQMpz6x4GK uXukUf1gRdyUJGolvAuw+j0OPrKd3upqmr8HF280t/STGp1EignXNJFIOByvCW6X g/Ff/khpEZ93OxPqi0gCOdWVh8eKIQPygocxDNaWD5+8+9MlEOzfZ4qqTr07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqjbvjIpjbB3dbhQISgtj+Me7wQwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSEIKonVG36JpaQX1GycTZPlfhjy5nsfEnW jzDOUSb0DtWR1Bl77dpXRMxCP2x53FgH1500KsCtJRzZRoEnHoAvLYs5/+JcVYDz mSWiDMMfST8pxGbPO2dWE1GqhwCAsv2/mehB6+Le02FG7JoA//H24uCGYK7NWfdW //Ifwu9n8stVsbKEX6Y7Irc3sPDCREijAvw17EXXbvvOAgHkq0CjNnzSQORyQMS8 qZMYJJzfFro9pfECcq7NSmjlnIN27Ugt+4R4UdrJjcz6Vi0JQYHFqBH2PIck1qTU gUsYtXdaGh21kSA0+iA+sGJyT5266FFEtCX1Elh3LvQwh/yxF80= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:51 2026 by rpki-client