$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: Fh0khzs0kurEWCzW/ICGqeuPvqQXVHYLgcuYiHEDjsY= Subject key identifier: DF:2C:8E:EC:23:D0:89:23:15:D8:F4:6E:18:79:AA:5D:2D:68:C9:48 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 0348B7335A4790AF91AE364CF68F0B9A4AD9FFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: 0119 Signing time: Mon 02 Mar 2026 11:31:00 +0000 Manifest this update: Mon 02 Mar 2026 11:26:00 +0000 Manifest next update: Thu 05 Mar 2026 20:25:00 +0000 Files and hashes: 1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: rK0jK6T27ca39Fp1TL+UbJIM4VrRYgbepDfjr9NFnFk=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 20:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:48:b7:33:5a:47:90:af:91:ae:36:4c:f6:8f:0b:9a:4a:d9:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Mar 2 11:26:00 2026 GMT Not After : Mar 5 20:25:00 2026 GMT Subject: CN=DF2C8EEC23D0892315D8F46E1879AA5D2D68C948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:6d:2b:92:b7:fc:74:ca:07:53:f2:eb:d6:e5: e0:4e:4f:3d:f2:ee:67:dc:26:70:54:92:f4:3b:4b: f1:3a:6c:f1:07:d7:c4:22:66:af:e8:7b:ba:6c:61: b9:9f:49:fd:01:e7:71:40:2c:87:90:65:b1:d8:ed: 66:53:e7:8b:0c:cb:56:30:e9:72:a9:4b:a7:ed:64: 31:3b:1e:8a:f1:87:5f:90:35:bb:e4:df:1b:f2:dd: ca:ae:1b:28:93:10:d9:02:c1:28:d5:8c:8b:d7:c1: 0e:8c:76:22:44:c1:24:60:5d:57:12:7c:50:21:1c: 57:2e:42:89:f3:83:df:81:92:ee:28:31:8a:04:ca: 05:79:ca:02:de:c4:49:1a:9e:fe:97:aa:9f:4e:6e: 70:97:8a:51:79:0f:56:0a:d1:2d:e2:b9:02:4c:ec: 5e:b0:f2:d3:75:9c:98:9f:67:c5:b0:e6:9a:53:fe: 80:db:a0:fc:a0:ca:7b:5b:1d:26:2d:24:c0:9b:33: a2:a5:49:d1:33:14:73:96:3e:cf:f5:d1:f2:16:3d: e0:73:ca:16:6e:69:90:67:3b:2d:04:0c:9f:f2:a3: b7:1d:4d:38:90:44:42:03:2b:3a:67:6c:7d:a6:56: 39:30:4c:94:78:d4:79:41:ab:d5:1a:55:af:ac:45: df:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2C:8E:EC:23:D0:89:23:15:D8:F4:6E:18:79:AA:5D:2D:68:C9:48 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:84:56:c2:74:91:00:30:b2:c7:1c:85:56:66:77:2f:56:28: c5:d3:aa:3f:53:7c:58:d1:ca:07:01:16:10:28:83:04:c5:da: 29:d5:8e:e5:1a:bc:be:b3:5a:b7:15:0e:d2:53:37:c2:30:90: 33:6d:af:a4:af:62:a3:6c:3b:e8:ad:c6:d1:a4:8b:a3:be:e6: a7:34:10:1f:71:fa:72:11:17:6e:0b:a2:04:49:85:33:da:c5: d5:02:2c:f1:44:87:78:ae:42:7c:9c:eb:5e:02:56:57:b4:b2: 98:c1:29:aa:c1:4f:59:07:d3:cc:dd:e5:dd:2a:a1:c3:4e:cd: d9:57:07:34:01:19:d2:c3:97:28:6c:fa:05:33:eb:f3:58:f8: ba:00:80:24:62:a6:74:3e:a6:4e:77:fa:cc:cf:3a:67:11:5d: d7:e9:c1:16:d7:f2:78:9e:87:75:de:61:f3:c4:bf:85:d4:24: 17:be:da:68:be:fd:63:8d:a4:a3:12:7f:ed:5d:e9:8f:bf:80: 2b:1f:72:22:85:4a:12:dc:5a:fa:85:fc:02:1d:7b:c0:cb:89: 0d:5f:b2:3f:a4:fe:79:8c:d3:ec:db:88:49:01:a9:87:da:c5: df:d7:36:2e:7f:43:46:22:9f:81:46:12:0c:29:22:77:29:12: 5e:50:9b:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA0i3M1pHkK+RrjZM9o8LmkrZ/+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNjAzMDIxMTI2MDBaFw0yNjAzMDUyMDI1MDBaMDMxMTAvBgNV BAMTKERGMkM4RUVDMjNEMDg5MjMxNUQ4RjQ2RTE4NzlBQTVEMkQ2OEM5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4bSuSt/x0ygdT8uvW5eBOTz3y 7mfcJnBUkvQ7S/E6bPEH18QiZq/oe7psYbmfSf0B53FALIeQZbHY7WZT54sMy1Yw 6XKpS6ftZDE7Horxh1+QNbvk3xvy3cquGyiTENkCwSjVjIvXwQ6MdiJEwSRgXVcS fFAhHFcuQonzg9+Bku4oMYoEygV5ygLexEkanv6Xqp9ObnCXilF5D1YK0S3iuQJM 7F6w8tN1nJifZ8Ww5ppT/oDboPygyntbHSYtJMCbM6KlSdEzFHOWPs/10fIWPeBz yhZuaZBnOy0EDJ/yo7cdTTiQREIDKzpnbH2mVjkwTJR41HlBq9UaVa+sRd+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yyO7CPQiSMV2PRuGHmqXS1oyUgwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOEVsJ0kQAwsscchVZmdy9WKMXTqj9TfFjR ygcBFhAogwTF2inVjuUavL6zWrcVDtJTN8IwkDNtr6SvYqNsO+itxtGki6O+5qc0 EB9x+nIRF24LogRJhTPaxdUCLPFEh3iuQnyc614CVle0spjBKarBT1kH08zd5d0q ocNOzdlXBzQBGdLDlyhs+gUz6/NY+LoAgCRipnQ+pk53+szPOmcRXdfpwRbX8nie h3XeYfPEv4XUJBe+2mi+/WONpKMSf+1d6Y+/gCsfciKFShLcWvqF/AIde8DLiQ1f sj+k/nmM0+zbiEkBqYfaxd/XNi5/Q0Yin4FGEgwpIncpEl5Qm9Y= -----END CERTIFICATE-----Generated at Mon Mar 2 23:58:29 2026 by rpki-client