$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: rTPZxhhj5xla+IBMB5SZxX0SEkLLsqJZ9/b4iMOFebI= Subject key identifier: 1A:81:22:BE:78:4C:3E:A9:81:D1:E0:5E:A8:EC:08:82:CB:29:8B:AB Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 4FA5CBC2364A5B732236A0C498E8D92EAFDFCDF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 0556 Signing time: Sun 01 Mar 2026 17:20:48 +0000 Manifest this update: Sun 01 Mar 2026 17:15:48 +0000 Manifest next update: Wed 04 Mar 2026 21:00:48 +0000 Files and hashes: 1: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: u7gLkqqjJIRy61IRtU3I20gevzesj12IAvTjXg/Hmgk=) 2: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) 3: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a5:cb:c2:36:4a:5b:73:22:36:a0:c4:98:e8:d9:2e:af:df:cd:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Mar 1 17:15:48 2026 GMT Not After : Mar 4 21:00:48 2026 GMT Subject: CN=1A8122BE784C3EA981D1E05EA8EC0882CB298BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5f:8a:8f:12:f3:a9:0d:87:a7:25:5e:69:20: ad:e1:ba:39:c3:1d:14:58:8f:00:d8:97:03:7a:ba: 9d:f3:84:a4:6c:70:46:46:50:ca:cd:c0:55:ac:c0: 33:07:e2:df:5e:f7:5e:bb:7b:60:9a:83:a6:f8:28: 73:bd:02:58:9c:fa:f9:00:0d:24:77:56:43:9b:3f: 53:c7:30:7e:84:ea:02:d5:69:7f:f1:9b:55:e9:2c: 9c:7f:80:65:b8:a4:fb:d7:1a:3c:58:a7:25:98:b2: 94:77:e9:30:a0:32:15:ab:79:20:75:92:38:09:f1: 6e:a5:c2:f2:13:2a:c1:17:60:b3:52:cc:2f:2d:1a: 11:0c:ff:2f:5c:b3:c8:37:a3:26:c9:08:54:f6:7d: 78:a6:0e:c1:ac:a1:a2:68:4a:47:3b:b8:6f:88:31: d0:de:c7:03:0f:da:06:55:4f:c5:1b:06:e8:64:d0: bc:26:21:c3:d0:cf:c9:e2:c6:ec:f7:14:49:b9:8f: c1:c2:1c:54:b6:4d:1d:ec:bd:3a:0b:3f:bf:e3:ac: bb:97:c3:38:09:d9:60:b5:a7:24:47:c5:0a:ee:95: 9d:b1:cb:0f:5a:2b:ae:87:73:85:83:9a:c3:32:49: 8e:1a:d3:41:8d:98:de:3d:f1:6b:97:1e:6a:f4:9b: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:81:22:BE:78:4C:3E:A9:81:D1:E0:5E:A8:EC:08:82:CB:29:8B:AB X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:87:f0:a9:ff:de:67:c4:84:e8:fa:37:39:33:27:3d:9a:63: 37:7a:21:68:6a:d1:2c:c9:e6:d9:98:c0:4f:06:2a:9f:aa:dc: 64:6a:df:25:be:98:14:78:92:aa:82:d4:b9:8f:a5:92:f3:2b: 38:41:55:73:ad:cd:0b:1b:22:d2:ca:e3:8b:55:1d:60:d0:bf: a2:41:25:77:ed:48:ae:04:35:d9:75:47:fd:c0:45:d8:ca:c2: 90:3b:a9:96:18:09:0b:af:f6:5d:01:77:70:20:8c:56:0d:ce: 35:2c:5e:e8:b0:3a:15:7c:e0:28:75:88:0b:cc:7d:31:d0:9d: 7e:78:d4:81:88:31:25:59:6f:13:65:41:a4:f3:d6:c4:ac:47: 61:f4:a0:20:54:0c:c4:98:4c:5b:c1:27:5f:44:d7:dc:90:b7: 53:1b:1f:4c:eb:8b:82:d2:a0:d3:80:0f:cb:80:9f:96:34:06: 0e:e6:f0:dd:bc:4c:b0:92:92:14:09:8a:79:2e:c5:35:6c:67: d8:bf:3e:e0:0c:79:fc:17:31:4a:d9:4f:a2:08:0f:b0:1e:52: d4:18:1f:34:ca:01:fe:82:5e:ce:2c:a5:ee:17:2b:fd:01:4b: ef:ac:17:d0:39:a8:29:71:22:07:06:a4:91:69:72:1f:54:e6: b2:e8:6d:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6XLwjZKW3MiNqDEmOjZLq/fzfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNjAzMDExNzE1NDhaFw0yNjAzMDQyMTAwNDhaMDMxMTAvBgNV BAMTKDFBODEyMkJFNzg0QzNFQTk4MUQxRTA1RUE4RUMwODgyQ0IyOThCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3X4qPEvOpDYenJV5pIK3hujnD HRRYjwDYlwN6up3zhKRscEZGUMrNwFWswDMH4t9e9167e2Cag6b4KHO9Alic+vkA DSR3VkObP1PHMH6E6gLVaX/xm1XpLJx/gGW4pPvXGjxYpyWYspR36TCgMhWreSB1 kjgJ8W6lwvITKsEXYLNSzC8tGhEM/y9cs8g3oybJCFT2fXimDsGsoaJoSkc7uG+I MdDexwMP2gZVT8UbBuhk0LwmIcPQz8nixuz3FEm5j8HCHFS2TR3svToLP7/jrLuX wzgJ2WC1pyRHxQrulZ2xyw9aK66Hc4WDmsMySY4a00GNmN498WuXHmr0m3ZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoEivnhMPqmB0eBeqOwIgsspi6swHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuH8Kn/3mfEhOj6NzkzJz2aYzd6IWhq0SzJ 5tmYwE8GKp+q3GRq3yW+mBR4kqqC1LmPpZLzKzhBVXOtzQsbItLK44tVHWDQv6JB JXftSK4ENdl1R/3ARdjKwpA7qZYYCQuv9l0Bd3AgjFYNzjUsXuiwOhV84Ch1iAvM fTHQnX541IGIMSVZbxNlQaTz1sSsR2H0oCBUDMSYTFvBJ19E19yQt1MbH0zri4LS oNOAD8uAn5Y0Bg7m8N28TLCSkhQJinkuxTVsZ9i/PuAMefwXMUrZT6IID7AeUtQY HzTKAf6CXs4spe4XK/0BS++sF9A5qClxIgcGpJFpch9U5rLobbQ= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:19 2026 by rpki-client