$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: i43pK0SyF6lcUNknr6sw+yod3vFny3+mA9NOaM6wFA8= Subject key identifier: CA:28:2A:1A:1E:EA:7A:4B:EC:D2:CA:A8:E3:EA:63:9D:E6:41:33:88 Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 3CB2317C90347314D0DC1EF422CD53D95F52D492 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01EF Signing time: Sun 01 Mar 2026 23:41:37 +0000 Manifest this update: Sun 01 Mar 2026 23:36:37 +0000 Manifest next update: Thu 05 Mar 2026 09:58:37 +0000 Files and hashes: 1: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: eeupGaZV0PyDiSJZNqrP/MjAgrOzP44pa2+08o7eSUA=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: Qxhmm+FrOJl9N2gO3uMNdKcckPxH2c3YLUPCuEz7Xsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b2:31:7c:90:34:73:14:d0:dc:1e:f4:22:cd:53:d9:5f:52:d4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Mar 1 23:36:37 2026 GMT Not After : Mar 5 09:58:37 2026 GMT Subject: CN=CA282A1A1EEA7A4BECD2CAA8E3EA639DE6413388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:dd:e1:66:28:a5:18:56:89:f5:10:c7:88:f0: f1:d7:73:bc:e5:03:bc:e7:eb:30:1b:73:ed:5d:de: b1:89:10:3c:e8:89:0b:10:15:64:c8:dd:81:4e:83: 86:72:4c:5f:d3:ec:1e:b7:9a:30:3a:f5:21:d9:3e: 64:0a:9f:45:e0:b8:d4:85:58:10:77:36:20:43:29: 9e:ad:20:b0:9f:99:95:86:b0:b9:fc:d6:37:2e:4e: c9:af:20:a5:bb:91:58:a2:53:53:1e:df:1d:5a:51: c0:a6:93:d3:1f:33:e2:6a:72:f5:69:c0:8d:64:fd: d0:ae:62:e2:8c:37:51:2d:a0:26:1f:02:1b:6b:af: 62:2d:fc:05:45:f8:13:63:26:c6:4b:7b:88:23:47: e2:db:7b:13:6d:e5:ae:7b:14:4e:d0:33:ec:f8:d9: 89:5c:36:31:04:0e:15:80:36:c0:64:c8:6d:6c:62: bb:be:f4:87:92:ea:bd:ea:62:d0:76:be:c2:b1:57: 11:f1:f5:22:b0:7d:ba:18:4d:c5:ae:ab:7c:28:14: 04:27:f8:15:88:2a:6f:99:b2:bf:08:ee:e5:3e:d9: 1a:c5:fd:49:14:4e:75:78:af:37:77:5e:a4:2c:f3: 75:15:17:a9:46:c0:76:50:ab:7c:04:42:a0:0a:05: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:28:2A:1A:1E:EA:7A:4B:EC:D2:CA:A8:E3:EA:63:9D:E6:41:33:88 X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c7:27:a0:ef:ea:41:45:1b:66:a3:f1:9b:11:a9:f8:ad:f5: 30:8f:13:75:b7:86:2e:7d:42:0a:54:6b:5f:a0:03:d9:13:0c: 3c:46:2a:08:32:68:b6:0c:be:b8:e4:0a:87:2c:36:30:14:19: 85:61:48:9a:c3:24:5d:ac:8c:50:4c:a0:5e:c7:d4:05:45:95: 18:97:c3:4c:17:cb:b2:dd:4b:1c:93:cd:72:4d:07:92:6c:ae: 3a:36:f3:5e:e4:5b:19:0c:a7:15:d3:a9:d0:03:7b:80:26:ac: 61:b5:7e:d3:07:ff:ee:17:d6:27:77:ae:48:5d:f8:cd:dc:42: 3f:b8:64:c2:26:55:46:a2:8b:9e:9a:e7:d9:0e:18:f1:c3:81: 2b:b5:a7:00:95:a9:ca:ba:7e:78:3e:d9:9b:40:7d:97:b3:38: 92:1b:f8:f9:de:53:89:2a:86:9e:f7:f7:3e:d1:45:bc:92:d1: 1b:c4:9e:14:69:97:85:16:f3:a1:d8:c9:1e:7d:47:32:6b:1d: b3:0d:f5:7e:ed:97:b1:b1:36:38:fe:cb:8e:31:b7:29:6f:26: 98:da:d3:9c:c8:bc:3a:d8:1e:2c:bb:87:ee:fc:8a:f1:41:57: de:5b:41:b9:c4:d0:98:2e:45:af:6c:88:be:b3:ec:6f:5f:d4: 71:d7:79:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLIxfJA0cxTQ3B70Is1T2V9S1JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNjAzMDEyMzM2MzdaFw0yNjAzMDUwOTU4MzdaMDMxMTAvBgNV BAMTKENBMjgyQTFBMUVFQTdBNEJFQ0QyQ0FBOEUzRUE2MzlERTY0MTMzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi3eFmKKUYVon1EMeI8PHXc7zl A7zn6zAbc+1d3rGJEDzoiQsQFWTI3YFOg4ZyTF/T7B63mjA69SHZPmQKn0XguNSF WBB3NiBDKZ6tILCfmZWGsLn81jcuTsmvIKW7kViiU1Me3x1aUcCmk9MfM+JqcvVp wI1k/dCuYuKMN1EtoCYfAhtrr2It/AVF+BNjJsZLe4gjR+LbexNt5a57FE7QM+z4 2YlcNjEEDhWANsBkyG1sYru+9IeS6r3qYtB2vsKxVxHx9SKwfboYTcWuq3woFAQn +BWIKm+Zsr8I7uU+2RrF/UkUTnV4rzd3XqQs83UVF6lGwHZQq3wEQqAKBQGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyigqGh7qekvs0sqo4+pjneZBM4gwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArHJ6Dv6kFFG2aj8ZsRqfit9TCPE3W3hi59 QgpUa1+gA9kTDDxGKggyaLYMvrjkCocsNjAUGYVhSJrDJF2sjFBMoF7H1AVFlRiX w0wXy7LdSxyTzXJNB5Jsrjo2817kWxkMpxXTqdADe4AmrGG1ftMH/+4X1id3rkhd +M3cQj+4ZMImVUaii56a59kOGPHDgSu1pwCVqcq6fng+2ZtAfZezOJIb+PneU4kq hp739z7RRbyS0RvEnhRpl4UW86HYyR59RzJrHbMN9X7tl7GxNjj+y44xtylvJpja 05zIvDrYHiy7h+78ivFBV95bQbnE0JguRa9siL6z7G9f1HHXeWs= -----END CERTIFICATE-----Generated at Mon Mar 2 18:01:15 2026 by rpki-client