$ rpki-client -vvf repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft File: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft (raw, json) Hash identifier: q7xZsAPa1wxLXh5zYWVqSRr16AbwOwR62fEhX0EKWc0= Subject key identifier: 1F:05:54:69:1C:CD:EB:1B:34:C0:CE:31:A8:A1:35:AB:04:0D:4C:5C Authority key identifier: B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E Certificate issuer: /CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Certificate serial: 3B7EA573BE5506783E1E32452A640FBFE7C3AD79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft Manifest number: 0554 Signing time: Mon 02 Mar 2026 00:32:24 +0000 Manifest this update: Mon 02 Mar 2026 00:27:24 +0000 Manifest next update: Thu 05 Mar 2026 06:30:24 +0000 Files and hashes: 1: B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl (hash: zifuf0guuLtfG4WhdDxYiFdi8msOnZCwNMm1GvGTHi8=) 2: 3130332e38372e3230312e302f32342d3234203d3e203538333639.roa (hash: /bsoYwdDybVaxRYLdodfmTp8ZF3K0bEZOdDFvTt3y8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7e:a5:73:be:55:06:78:3e:1e:32:45:2a:64:0f:bf:e7:c3:ad:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E Validity Not Before: Mar 2 00:27:24 2026 GMT Not After : Mar 5 06:30:24 2026 GMT Subject: CN=1F0554691CCDEB1B34C0CE31A8A135AB040D4C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:86:33:d1:3c:3b:98:7d:ee:87:3a:01:d2: 85:3c:a1:56:13:13:31:47:1d:43:22:18:33:45:28: e6:af:e2:4d:68:49:9a:68:e2:df:cb:c9:c6:24:c0: 5a:49:99:7e:b9:74:e3:5c:c0:13:ed:c6:a3:59:04: 65:e9:fb:53:d1:26:27:f5:89:34:3e:50:9c:e1:27: 80:bf:fa:c9:0f:15:5b:30:d1:d8:95:6d:db:e1:22: d6:86:be:ec:04:4f:4c:0a:f0:d1:c4:4d:96:d2:5f: 19:bf:49:a5:ea:53:a5:41:51:b7:14:7a:23:a8:24: b6:73:fc:9f:a1:f0:75:56:74:a4:82:69:9e:d2:f8: 14:20:57:ed:fb:46:46:1d:53:49:1a:ff:d2:1d:93: 6d:3b:36:3c:e9:61:24:2b:4e:29:77:2c:94:ea:ef: 18:ea:c6:9f:9b:e2:79:cb:ef:57:7f:55:de:4a:9b: ec:65:f6:ac:19:ec:86:5a:5c:8e:3d:92:df:6e:f9: 8a:fd:6e:79:0c:06:ff:79:80:93:bf:c2:19:40:7b: 33:49:73:05:43:ea:ad:3b:23:4c:6e:85:60:90:d5: e9:a4:5b:f5:2c:54:8c:e5:14:06:3e:dd:15:2c:a9: ba:52:94:78:58:a0:4d:73:93:a9:1c:8e:fd:9f:a0: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:05:54:69:1C:CD:EB:1B:34:C0:CE:31:A8:A1:35:AB:04:0D:4C:5C X509v3 Authority Key Identifier: keyid:B5:CE:42:E3:87:51:41:D1:0E:D7:AD:1D:D1:8D:ED:DC:C4:E1:07:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34acc0d8-b0c4-4737-9f44-29ff3241c79b/0/B5CE42E3875141D10ED7AD1DD18DEDDCC4E1071E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1c:74:98:7a:d3:73:1c:9c:46:ea:44:1a:90:83:ef:4f:ea: 09:4b:c5:18:54:62:54:83:79:3d:f0:94:40:8a:8d:8c:f9:73: e3:44:8d:01:f9:6c:fb:05:e5:f9:a3:ef:46:f4:48:5d:7d:5b: cb:cc:a1:5d:ae:bc:e7:f7:1a:47:c8:af:87:8d:0c:d6:fa:fa: 3a:90:d1:2a:78:c0:db:5b:c2:d9:f6:24:3f:d8:3c:50:df:b4: e6:d9:85:70:5d:58:ae:eb:92:82:60:83:a5:e3:2a:8d:ea:9d: 08:f2:ef:75:c4:43:2d:ae:e1:57:ed:ef:d7:cc:aa:95:17:be: 81:d9:26:55:b8:e0:26:ae:99:8f:d2:96:47:3e:0f:8d:8e:19: 21:00:e4:82:31:74:78:42:8e:c1:dd:5a:3e:3b:4e:df:33:78: 20:f8:e8:0d:d2:8e:ae:41:7a:c9:93:d7:9a:9d:63:81:af:07: c9:94:b2:0d:35:ff:dc:a0:bd:cc:eb:01:3b:7d:ea:f3:0f:86: 88:4a:c4:83:86:96:6b:25:bf:95:c1:c3:73:14:5a:11:97:5e: 71:0b:5b:78:12:26:99:56:9c:bc:a6:85:01:c4:06:38:93:cb: 1a:85:1d:42:b9:f0:16:50:05:3b:a1:0f:16:4d:61:32:86:22: db:f6:9f:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO36lc75VBng+HjJFKmQPv+fDrXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVEREND NEUxMDcxRTAeFw0yNjAzMDIwMDI3MjRaFw0yNjAzMDUwNjMwMjRaMDMxMTAvBgNV BAMTKDFGMDU1NDY5MUNDREVCMUIzNEMwQ0UzMUE4QTEzNUFCMDQwRDRDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GoYz0Tw7mH3uhzoB0oU8oVYT EzFHHUMiGDNFKOav4k1oSZpo4t/LycYkwFpJmX65dONcwBPtxqNZBGXp+1PRJif1 iTQ+UJzhJ4C/+skPFVsw0diVbdvhItaGvuwET0wK8NHETZbSXxm/SaXqU6VBUbcU eiOoJLZz/J+h8HVWdKSCaZ7S+BQgV+37RkYdU0ka/9Idk207NjzpYSQrTil3LJTq 7xjqxp+b4nnL71d/Vd5Km+xl9qwZ7IZaXI49kt9u+Yr9bnkMBv95gJO/whlAezNJ cwVD6q07I0xuhWCQ1emkW/UsVIzlFAY+3RUsqbpSlHhYoE1zk6kcjv2foJIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwVUaRzN6xs0wM4xqKE1qwQNTFwwHwYDVR0j BBgwFoAUtc5C44dRQdEO160d0Y3t3MThBx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGFjYzBkOC1iMGM0LTQ3MzctOWY0NC0yOWZmMzI0MWM3OWIvMC9CNUNFNDJFMzg3 NTE0MUQxMEVEN0FEMUREMThERUREQ0M0RTEwNzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVERENDNEUx MDcxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhY2MwZDgtYjBjNC00NzM3LTlm NDQtMjlmZjMyNDFjNzliLzAvQjVDRTQyRTM4NzUxNDFEMTBFRDdBRDFERDE4REVE RENDNEUxMDcxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUcdJh603McnEbqRBqQg+9P6glLxRhUYlSD eT3wlECKjYz5c+NEjQH5bPsF5fmj70b0SF19W8vMoV2uvOf3GkfIr4eNDNb6+jqQ 0Sp4wNtbwtn2JD/YPFDftObZhXBdWK7rkoJgg6XjKo3qnQjy73XEQy2u4Vft79fM qpUXvoHZJlW44CaumY/Slkc+D42OGSEA5IIxdHhCjsHdWj47Tt8zeCD46A3Sjq5B esmT15qdY4GvB8mUsg01/9ygvczrATt96vMPhohKxIOGlmslv5XBw3MUWhGXXnEL W3gSJplWnLymhQHEBjiTyxqFHUK58BZQBTuhDxZNYTKGItv2n2s= -----END CERTIFICATE-----Generated at Mon Mar 2 15:30:08 2026 by rpki-client