$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: tpKQw+fPBePXJ/0773z5X8oLz65hOx1pAqKEiDKtDKw= Subject key identifier: 83:96:EE:94:8F:11:9B:DC:EE:00:45:98:89:7C:F7:FA:16:EB:F7:49 Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 24F2E740DFE37F20BD3DF61E7A58E041CA5E714F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 0382 Signing time: Sun 01 Mar 2026 19:22:20 +0000 Manifest this update: Sun 01 Mar 2026 19:17:20 +0000 Manifest next update: Wed 04 Mar 2026 22:37:20 +0000 Files and hashes: 1: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: JHKyQ9Zf6gERilPpekWbZTNlPhbVjuKKMamGGFiRwFM=) 2: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: eAolVNFu5RbZ8vrRSJHTSAnnItGXFwJM+Qxe0653Ja4=) 3: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: hdRTJYsi8eswhC1onrTfel6azdbRvum1qwnVMu+58TM=) 4: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: UMxzpZwJkuyWT8WiV33AdNXTdJHylmbT6yyy6htu0s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f2:e7:40:df:e3:7f:20:bd:3d:f6:1e:7a:58:e0:41:ca:5e:71:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: Mar 1 19:17:20 2026 GMT Not After : Mar 4 22:37:20 2026 GMT Subject: CN=8396EE948F119BDCEE004598897CF7FA16EBF749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:c5:ab:21:55:db:9c:a2:22:37:80:22:80: ec:7c:b3:05:f0:6f:ff:12:95:c6:aa:01:b3:d4:9f: fc:64:32:b1:6d:d0:8c:b3:97:ec:8c:0a:6a:72:92: 20:32:4b:78:e1:d5:53:b2:4c:27:81:73:0f:ad:c1: 43:9a:5e:31:24:47:ca:bb:b4:de:80:46:a3:01:a0: 56:7e:17:c8:52:0b:b0:09:0a:23:cd:13:b6:1d:14: 9f:01:99:48:de:98:aa:7d:3a:bf:2a:ee:b0:67:83: dd:3d:bc:c8:c5:eb:31:2d:8e:27:27:7d:88:98:9f: 93:0b:0b:45:c7:d4:a0:a7:8c:e4:2f:2a:e9:3f:65: a1:1a:f4:b6:18:a8:d8:33:c8:52:f4:ab:d5:ad:1a: 62:8f:8c:42:df:c9:8d:b5:8e:09:92:7b:2e:b9:d4: 5f:bd:81:5f:2b:8f:19:be:42:82:72:79:24:3c:4e: 12:60:70:57:a1:4e:a7:1c:62:f0:79:b7:4a:e0:41: 5d:b8:4f:f8:f6:67:57:f5:db:02:cd:c9:0e:1d:06: 0a:19:ca:e6:dc:36:52:88:4d:11:4f:c9:92:c8:47: ef:d2:db:79:a9:02:83:fd:b2:26:b8:f3:81:8b:de: 04:1b:95:7e:73:28:62:bc:c7:38:d7:d9:37:b6:00: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:96:EE:94:8F:11:9B:DC:EE:00:45:98:89:7C:F7:FA:16:EB:F7:49 X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:93:a5:72:db:bc:05:2e:b6:bf:c5:7e:77:a5:f6:94:85:bd: 4c:b0:02:8b:d9:d8:cc:2c:28:45:5d:d9:27:6a:33:5f:b5:af: 38:60:38:9d:54:81:85:f4:4f:d9:20:d7:e0:28:21:6d:0e:3e: 84:93:c7:2d:cb:3d:fc:b3:a9:58:60:39:fd:e3:9f:3d:97:a0: 2d:9d:43:13:4e:e1:36:b3:a6:c8:70:e1:3f:70:78:a9:85:63: d4:35:90:ac:b6:3d:b1:90:76:a2:75:69:52:5d:3a:bd:12:40: 3d:52:55:09:f4:78:34:8c:ab:75:d8:06:78:51:d9:03:c0:6c: aa:f2:32:d4:ae:23:c4:0a:d0:56:a0:f5:2e:36:33:35:0a:f5: fd:67:2a:2f:57:f1:84:49:fc:46:2b:dc:cd:8d:74:37:ee:ae: db:e7:2a:af:75:6c:cf:c5:7c:b7:84:2b:73:fa:f8:3e:ca:27: 40:ef:3f:c0:4a:60:db:9f:07:fc:1d:2c:8c:a7:75:87:ad:55: 46:cd:5d:fb:59:c8:23:1a:f2:51:87:25:3d:5a:2b:18:38:40: ef:2e:bf:99:7f:61:ce:54:28:b8:b1:ae:04:69:97:1c:18:98: c9:40:91:fe:ea:c9:73:59:4b:ea:a0:8f:ba:ef:99:97:25:e2: 9e:23:3a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPLnQN/jfyC9PfYeeljgQcpecU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNjAzMDExOTE3MjBaFw0yNjAzMDQyMjM3MjBaMDMxMTAvBgNV BAMTKDgzOTZFRTk0OEYxMTlCRENFRTAwNDU5ODg5N0NGN0ZBMTZFQkY3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7csWrIVXbnKIiN4AigOx8swXw b/8SlcaqAbPUn/xkMrFt0Iyzl+yMCmpykiAyS3jh1VOyTCeBcw+twUOaXjEkR8q7 tN6ARqMBoFZ+F8hSC7AJCiPNE7YdFJ8BmUjemKp9Or8q7rBng909vMjF6zEtjicn fYiYn5MLC0XH1KCnjOQvKuk/ZaEa9LYYqNgzyFL0q9WtGmKPjELfyY21jgmSey65 1F+9gV8rjxm+QoJyeSQ8ThJgcFehTqccYvB5t0rgQV24T/j2Z1f12wLNyQ4dBgoZ yubcNlKITRFPyZLIR+/S23mpAoP9sia484GL3gQblX5zKGK8xzjX2Te2AISPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg5bulI8Rm9zuAEWYiXz3+hbr90kwHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyTpXLbvAUutr/Ffnel9pSFvUywAovZ2Mws KEVd2SdqM1+1rzhgOJ1UgYX0T9kg1+AoIW0OPoSTxy3LPfyzqVhgOf3jnz2XoC2d QxNO4Tazpshw4T9weKmFY9Q1kKy2PbGQdqJ1aVJdOr0SQD1SVQn0eDSMq3XYBnhR 2QPAbKryMtSuI8QK0Fag9S42MzUK9f1nKi9X8YRJ/EYr3M2NdDfurtvnKq91bM/F fLeEK3P6+D7KJ0DvP8BKYNufB/wdLIyndYetVUbNXftZyCMa8lGHJT1aKxg4QO8u v5l/Yc5UKLixrgRplxwYmMlAkf7qyXNZS+qgj7rvmZcl4p4jOl8= -----END CERTIFICATE-----Generated at Mon Mar 2 19:30:37 2026 by rpki-client