$ rpki-client -vvf repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft File: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft (raw, json) Hash identifier: 38JypR7MTSGdZAV6oPiscqTpOvJm1bsEmrQ5MyG39/M= Subject key identifier: 03:AE:E7:00:87:D2:3E:E9:94:90:44:63:46:A4:80:95:FD:4D:71:23 Authority key identifier: B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD Certificate issuer: /CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Certificate serial: 3B99B66079268EA9FA9B295A8B91EF4A0A3586D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft Manifest number: 0239 Signing time: Sun 01 Mar 2026 18:21:52 +0000 Manifest this update: Sun 01 Mar 2026 18:16:52 +0000 Manifest next update: Thu 05 Mar 2026 01:07:52 +0000 Files and hashes: 1: 3130332e3134392e3233382e302f32342d3234203d3e20313430333834.roa (hash: nzGXD+WO9jNdAgLBDWw3XXsmMEFx1ERW+wySreu0Q7o=) 2: 3130332e3134392e3233382e302f32332d3233203d3e20313430333834.roa (hash: n/ZxzBzZ2gRpYTiml4oQKNkriGvajLH2YwRAWcXMQ3M=) 3: 323430353a663234303a3a2f33322d3332203d3e20313430333834.roa (hash: jCC55QoiailnQ1RFdBW81Arc7TozD6cSp8bDswcvT9g=) 4: 3130332e3134392e3233392e302f32342d3234203d3e20313430333834.roa (hash: qwBhVFJ/29JkjYJBmiXis9vZ9dZgJ/dBqQTkQKD7IUk=) 5: B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl (hash: i4TrTT1Zz99g5PFVTDQPTVUGfRQGS6jIrqo99rJcxK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:99:b6:60:79:26:8e:a9:fa:9b:29:5a:8b:91:ef:4a:0a:35:86:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD Validity Not Before: Mar 1 18:16:52 2026 GMT Not After : Mar 5 01:07:52 2026 GMT Subject: CN=03AEE70087D23EE99490446346A48095FD4D7123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:9f:9e:f1:5b:e4:a9:0d:90:63:f1:42:8c: 49:4a:34:ca:cc:92:bd:43:ad:d9:44:94:4d:58:b1: ec:36:6e:b6:74:c7:4b:aa:40:08:4b:7a:d0:3c:c0: 6b:a8:5f:0c:67:fb:bb:7c:fa:cf:85:c1:d8:6e:4c: a4:44:a2:72:71:d6:55:40:ea:2d:b9:1a:b6:0b:a4: fa:ce:83:15:98:ae:13:38:64:e9:62:5c:1f:a7:8b: 53:50:53:5b:c5:12:0f:e6:71:e8:cf:dd:96:f2:ac: b7:9e:77:34:99:45:67:ab:d4:10:3c:9d:d8:f8:63: a9:b0:7e:26:0d:98:f8:61:c9:a5:8e:9d:c3:c4:8d: 30:06:e7:b0:36:2a:4d:6a:cd:af:c8:f8:10:e5:06: 39:4f:bb:95:5f:66:dc:d3:0b:af:a7:b2:53:fb:b5: cc:a5:ba:a4:58:f5:c8:94:02:62:c6:51:1b:fa:82: 85:33:2d:8b:0c:d5:eb:6e:c5:00:62:be:33:b1:20: 43:18:07:8e:52:f9:28:f5:d2:ec:07:9a:fd:8b:a5: a5:8a:db:4e:be:54:4a:08:c7:27:2a:e0:f7:68:35: 38:5b:c2:b4:9f:98:a7:4b:bc:72:83:84:ac:a1:cc: 5a:12:be:0e:89:0b:55:ce:ce:99:94:77:f0:c1:4d: 6e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AE:E7:00:87:D2:3E:E9:94:90:44:63:46:A4:80:95:FD:4D:71:23 X509v3 Authority Key Identifier: keyid:B6:2E:44:2C:8D:2C:70:D0:F5:AB:5E:2A:3A:1F:11:B2:D0:B4:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40d34e77-6cf6-4187-9083-1c7a8819e965/0/B62E442C8D2C70D0F5AB5E2A3A1F11B2D0B4D8BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:00:e8:73:ac:ca:02:b2:6c:cb:31:33:c9:74:b1:fb:e6:cb: 85:5a:16:a2:96:70:a6:8e:33:29:9f:60:6a:0e:4c:c1:42:89: cb:3b:7d:16:e7:ef:46:53:22:8b:3f:c5:c4:42:64:90:14:1c: 29:66:8f:43:83:3d:a8:cf:8b:64:94:4b:d8:cc:d0:f9:2b:a9: 26:88:1b:29:e7:bf:37:af:7a:4b:d4:99:3b:c8:98:e6:08:b4: d6:e6:f3:f1:81:f2:82:82:f0:f3:83:15:fc:72:67:8a:f2:39: 7f:0c:be:41:db:d9:b2:2f:3e:6f:bc:a3:32:1b:d7:e3:85:c4: bd:70:56:cb:71:ee:b7:5d:3c:73:e7:86:6b:b7:19:78:57:4f: be:ab:9f:28:2d:6c:a5:4f:ec:68:12:4c:82:de:64:b6:ca:18: 36:2c:26:d0:98:4f:a4:21:66:25:b6:5d:9c:6b:11:e0:47:2f: 90:43:ae:ac:4c:03:b3:6b:e6:d0:c4:72:68:24:96:f3:3a:96: bd:63:fd:b9:a0:13:b6:da:b6:62:9e:df:2a:05:08:57:02:17: d0:f2:b9:0b:80:36:15:f2:ee:c4:ac:c8:29:d5:26:aa:d8:e6: 22:38:b5:e4:6a:58:2b:68:61:c0:8f:ac:4c:c5:da:0d:08:aa: b4:1b:4d:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5m2YHkmjqn6mylai5HvSgo1htkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJE MEI0RDhCRDAeFw0yNjAzMDExODE2NTJaFw0yNjAzMDUwMTA3NTJaMDMxMTAvBgNV BAMTKDAzQUVFNzAwODdEMjNFRTk5NDkwNDQ2MzQ2QTQ4MDk1RkQ0RDcxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs95+e8VvkqQ2QY/FCjElKNMrM kr1DrdlElE1Ysew2brZ0x0uqQAhLetA8wGuoXwxn+7t8+s+FwdhuTKREonJx1lVA 6i25GrYLpPrOgxWYrhM4ZOliXB+ni1NQU1vFEg/mcejP3ZbyrLeedzSZRWer1BA8 ndj4Y6mwfiYNmPhhyaWOncPEjTAG57A2Kk1qza/I+BDlBjlPu5VfZtzTC6+nslP7 tcyluqRY9ciUAmLGURv6goUzLYsM1etuxQBivjOxIEMYB45S+Sj10uwHmv2LpaWK 206+VEoIxycq4PdoNThbwrSfmKdLvHKDhKyhzFoSvg6JC1XOzpmUd/DBTW4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA67nAIfSPumUkERjRqSAlf1NcSMwHwYDVR0j BBgwFoAUti5ELI0scND1q14qOh8RstC02L0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGQzNGU3Ny02Y2Y2LTQxODctOTA4My0xYzdhODgxOWU5NjUvMC9CNjJFNDQyQzhE MkM3MEQwRjVBQjVFMkEzQTFGMTFCMkQwQjREOEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjExQjJEMEI0 RDhCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBkMzRlNzctNmNmNi00MTg3LTkw ODMtMWM3YTg4MTllOTY1LzAvQjYyRTQ0MkM4RDJDNzBEMEY1QUI1RTJBM0ExRjEx QjJEMEI0RDhCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUA6HOsygKybMsxM8l0sfvmy4VaFqKWcKaO MymfYGoOTMFCics7fRbn70ZTIos/xcRCZJAUHClmj0ODPajPi2SUS9jM0PkrqSaI GynnvzevekvUmTvImOYItNbm8/GB8oKC8PODFfxyZ4ryOX8MvkHb2bIvPm+8ozIb 1+OFxL1wVstx7rddPHPnhmu3GXhXT76rnygtbKVP7GgSTILeZLbKGDYsJtCYT6Qh ZiW2XZxrEeBHL5BDrqxMA7Nr5tDEcmgklvM6lr1j/bmgE7batmKe3yoFCFcCF9Dy uQuANhXy7sSsyCnVJqrY5iI4teRqWCtoYcCPrEzF2g0IqrQbTWE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:15:34 2026 by rpki-client