$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: E/drPe9l5nmyJgpQjlSg3EsJyypFo+QLcYZ1d70NrGY= Subject key identifier: 4C:C3:3C:0F:24:85:46:8F:05:52:C7:54:7E:6B:62:D6:75:1E:08:18 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 7521E2A894D03A562BF0F9C0C4CD1FB29A334C2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0165 Signing time: Sat 28 Feb 2026 17:21:27 +0000 Manifest this update: Sat 28 Feb 2026 17:16:27 +0000 Manifest next update: Tue 03 Mar 2026 22:42:27 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: c5Ptunx0DxSg1RC8HNdaw2kkwRNC2sVu1ggTOO3Xchs=) 2: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: hyQ8fpvpxDomxqPZTRGSMSFSWvWSGT+7ustuYxs0Cc0=) 3: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: D+929vyik9rLnra49U9ffY9oB4C7JSkmWEo+cZ0qzyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:21:e2:a8:94:d0:3a:56:2b:f0:f9:c0:c4:cd:1f:b2:9a:33:4c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Feb 28 17:16:27 2026 GMT Not After : Mar 3 22:42:27 2026 GMT Subject: CN=4CC33C0F2485468F0552C7547E6B62D6751E0818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:e1:f7:86:c7:b9:c6:6e:4a:ff:1c:18:d8: 77:8f:f5:2d:e3:f6:e8:22:9e:ec:25:b4:60:ea:92: 6e:67:fd:5d:6d:7d:cc:cf:28:bb:16:bf:2c:9a:0d: a6:28:d5:da:c8:aa:6e:31:6a:a8:53:c4:bc:fa:8c: 6e:ac:d4:c9:fd:99:67:60:ac:69:d2:5c:6e:68:64: f9:ea:c4:d5:57:06:f0:05:48:34:3a:0e:a8:c9:fe: e7:e5:38:3e:5c:6c:e9:76:f5:6e:ff:6f:44:60:9a: 0c:1c:c8:49:ab:59:1e:4c:8a:8c:e7:2c:df:29:76: b3:53:f1:92:28:ac:de:d4:c2:0a:fb:dc:55:88:ba: 06:76:62:41:3a:58:3a:f2:51:4b:73:80:76:84:1b: c4:7b:bb:3b:25:15:94:dd:74:e7:d8:55:bf:a0:af: a8:0a:f1:98:49:87:33:f4:92:58:a5:42:30:76:60: 13:61:63:15:a5:33:d9:28:ee:06:55:47:d5:06:ca: af:f5:0d:f7:94:42:fd:a6:cb:73:82:0c:58:0d:1a: 08:aa:a2:ed:05:35:43:b5:0b:43:e8:e9:ed:9e:69: 05:cd:f9:3b:48:e4:56:7a:f5:89:c4:5b:f4:3a:e2: 22:34:f9:ad:35:e7:8d:d6:6f:40:7d:79:d8:15:ec: 8f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C3:3C:0F:24:85:46:8F:05:52:C7:54:7E:6B:62:D6:75:1E:08:18 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:f9:7b:77:0e:85:d4:e7:11:6f:e8:94:0b:60:d1:c2:ae:3e: 3e:c6:a2:0f:f3:e1:2e:a3:45:54:1f:9f:2d:bd:23:bb:0a:fb: 40:f8:a0:e0:2b:ce:46:c8:9c:26:7b:e3:cf:47:69:00:8c:76: 4c:13:cc:68:97:d5:83:3a:7b:a3:b0:9d:00:4b:26:69:91:65: 86:9e:9a:7e:27:0c:aa:75:6d:57:3b:fa:66:d6:f1:e2:16:9d: 5f:52:81:bf:25:4f:29:05:a5:a6:ce:e0:80:1c:ca:b2:b4:e0: 99:f1:ab:a8:53:da:74:be:3a:6c:ae:e0:9e:e8:4c:9b:0e:41: 29:27:14:d8:54:fa:0a:97:63:3a:12:4d:1f:a7:f5:14:b3:40: 8d:0c:79:70:e4:a4:86:d4:c9:9e:a4:d1:26:69:7f:72:fe:15: ed:e0:88:e7:e1:85:02:6d:60:1a:3a:c4:61:8f:6b:2b:6f:0a: 95:ee:38:18:96:36:34:c0:f6:f3:53:3d:0c:75:5f:36:43:f9: 3e:81:a8:84:58:a5:96:32:4e:c6:14:97:9a:93:cf:df:2e:2e: 08:64:47:1d:fb:d7:55:42:0c:10:22:fd:f3:ca:bf:64:53:07: 87:f8:a1:b2:54:51:d4:ff:44:39:0b:74:a5:6b:c8:cb:fd:05: 1f:cd:17:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdSHiqJTQOlYr8PnAxM0fspozTC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNjAyMjgxNzE2MjdaFw0yNjAzMDMyMjQyMjdaMDMxMTAvBgNV BAMTKDRDQzMzQzBGMjQ4NTQ2OEYwNTUyQzc1NDdFNkI2MkQ2NzUxRTA4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwguH3hse5xm5K/xwY2HeP9S3j 9uginuwltGDqkm5n/V1tfczPKLsWvyyaDaYo1drIqm4xaqhTxLz6jG6s1Mn9mWdg rGnSXG5oZPnqxNVXBvAFSDQ6DqjJ/uflOD5cbOl29W7/b0RgmgwcyEmrWR5Miozn LN8pdrNT8ZIorN7Uwgr73FWIugZ2YkE6WDryUUtzgHaEG8R7uzslFZTddOfYVb+g r6gK8ZhJhzP0klilQjB2YBNhYxWlM9ko7gZVR9UGyq/1DfeUQv2my3OCDFgNGgiq ou0FNUO1C0Po6e2eaQXN+TtI5FZ69YnEW/Q64iI0+a01543Wb0B9edgV7I/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMM8DySFRo8FUsdUfmti1nUeCBgwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/5e3cOhdTnEW/olAtg0cKuPj7Gog/z4S6j RVQfny29I7sK+0D4oOArzkbInCZ7489HaQCMdkwTzGiX1YM6e6OwnQBLJmmRZYae mn4nDKp1bVc7+mbW8eIWnV9Sgb8lTykFpabO4IAcyrK04Jnxq6hT2nS+Omyu4J7o TJsOQSknFNhU+gqXYzoSTR+n9RSzQI0MeXDkpIbUyZ6k0SZpf3L+Fe3giOfhhQJt YBo6xGGPaytvCpXuOBiWNjTA9vNTPQx1XzZD+T6BqIRYpZYyTsYUl5qTz98uLghk Rx3711VCDBAi/fPKv2RTB4f4obJUUdT/RDkLdKVryMv9BR/NF+o= -----END CERTIFICATE-----Generated at Mon Mar 2 15:11:35 2026 by rpki-client