$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: D+aoVHgWgSUbfBOUNsviln5f4TnvbEcB2A75xXg4PrU= Subject key identifier: F1:CB:21:8F:32:0A:0A:27:69:2B:98:C4:2F:5C:EA:C0:F9:AE:B2:E6 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 08B70AFEFD76481B0F35E66DB7250F6A0A9F879A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 020B Signing time: Thu 16 Apr 2026 05:51:53 +0000 Manifest this update: Thu 16 Apr 2026 05:46:53 +0000 Manifest next update: Sun 19 Apr 2026 15:02:53 +0000 Files and hashes: 1: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=) 2: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=) 3: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=) 4: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: RyKYYk7JsNcYB9Ai3ojDLOXWBlRqJsby9sHb33M/gJM=) 5: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b7:0a:fe:fd:76:48:1b:0f:35:e6:6d:b7:25:0f:6a:0a:9f:87:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Apr 16 05:46:53 2026 GMT Not After : Apr 19 15:02:53 2026 GMT Subject: CN=F1CB218F320A0A27692B98C42F5CEAC0F9AEB2E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:99:1b:8e:50:25:16:b4:fe:54:93:2b:76:36: 5b:f3:39:ad:f8:69:13:24:dd:bf:96:dd:e5:38:f8: 61:d0:d1:93:3f:a4:cb:f1:4d:b3:35:44:7c:04:05: 98:55:86:f9:c6:57:c6:ae:35:22:c9:4b:a2:e4:4e: c5:66:fa:03:86:ae:2d:95:50:0b:8b:95:48:d1:5b: 0f:d0:20:a0:02:88:bd:e3:0f:56:cc:66:49:15:1f: 98:ef:b8:7a:dc:17:fb:d0:a7:1d:e7:4f:f6:16:73: 8e:9f:fe:1d:1a:0f:c0:b0:03:74:db:56:37:58:2b: 39:ba:30:68:b3:f6:6c:9c:e4:d5:00:f8:c2:80:5b: 28:68:a8:b2:d3:86:c4:67:73:b9:0a:40:8c:35:36: dc:57:6e:4e:68:8a:41:b7:9f:cf:79:1a:fe:07:2b: 86:78:6f:ba:a1:34:1f:ea:da:38:32:7f:12:98:19: 78:ea:eb:30:d0:c9:86:c7:e7:c8:26:f1:ac:03:6d: 8f:ae:25:1f:e1:15:fb:6b:90:0c:07:9a:16:14:d2: 64:f2:c5:99:d9:b5:d5:8d:ae:98:67:04:b6:aa:46: a9:45:89:bd:b2:d2:36:8d:45:14:f0:ec:ab:31:99: 02:41:84:e5:1d:d4:1f:ed:7b:4f:a1:8b:65:54:62: 04:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:21:8F:32:0A:0A:27:69:2B:98:C4:2F:5C:EA:C0:F9:AE:B2:E6 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:11:fe:a6:70:62:86:fc:74:fd:44:04:63:fc:0e:4a:1b:05: b5:97:8e:71:04:dc:d7:14:bb:42:ba:c2:60:8a:e6:10:af:e8: de:4f:4c:ea:16:6d:03:9c:b2:cc:d2:8a:5e:78:bd:d1:75:7a: 3d:58:d6:fe:4b:52:2f:c5:e3:36:21:5b:f8:47:5a:de:ad:82: a4:b5:e9:32:61:21:04:3e:cc:af:87:c9:83:11:d0:e1:37:24: a5:08:ae:66:17:28:28:8d:23:d3:59:b4:11:8f:2e:d3:e7:a8: f6:85:25:09:df:f7:17:4d:8c:6b:18:cc:b5:15:9c:e0:1d:05: 1a:99:a7:a8:c7:92:06:79:e0:18:91:2b:5b:9f:44:9c:52:de: 37:a9:36:e5:db:7b:61:c2:b4:03:64:dd:67:88:75:b4:ca:0f: b0:e2:1d:ab:0c:c2:83:75:03:5b:ef:c9:d8:73:59:21:bb:82: 7f:ca:57:69:f8:0d:84:18:ce:33:c7:25:3d:ab:fb:05:d4:d4: 19:28:2f:f0:08:f0:e9:59:60:c0:fa:5e:e9:ab:ee:31:38:d7: 73:94:4b:88:db:25:e0:15:a4:3b:7c:b1:42:b3:c7:bf:4f:a3: f2:30:f0:9c:9e:52:e6:60:da:75:77:ee:20:55:3e:bf:0c:d4: c8:5a:cc:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCLcK/v12SBsPNeZttyUPagqfh5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNjA0MTYwNTQ2NTNaFw0yNjA0MTkxNTAyNTNaMDMxMTAvBgNV BAMTKEYxQ0IyMThGMzIwQTBBMjc2OTJCOThDNDJGNUNFQUMwRjlBRUIyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmRuOUCUWtP5Ukyt2NlvzOa34 aRMk3b+W3eU4+GHQ0ZM/pMvxTbM1RHwEBZhVhvnGV8auNSLJS6LkTsVm+gOGri2V UAuLlUjRWw/QIKACiL3jD1bMZkkVH5jvuHrcF/vQpx3nT/YWc46f/h0aD8CwA3Tb VjdYKzm6MGiz9myc5NUA+MKAWyhoqLLThsRnc7kKQIw1NtxXbk5oikG3n895Gv4H K4Z4b7qhNB/q2jgyfxKYGXjq6zDQyYbH58gm8awDbY+uJR/hFftrkAwHmhYU0mTy xZnZtdWNrphnBLaqRqlFib2y0jaNRRTw7KsxmQJBhOUd1B/te0+hi2VUYgQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8cshjzIKCidpK5jEL1zqwPmusuYwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4R/qZwYob8dP1EBGP8DkobBbWXjnEE3NcU u0K6wmCK5hCv6N5PTOoWbQOcsszSil54vdF1ej1Y1v5LUi/F4zYhW/hHWt6tgqS1 6TJhIQQ+zK+HyYMR0OE3JKUIrmYXKCiNI9NZtBGPLtPnqPaFJQnf9xdNjGsYzLUV nOAdBRqZp6jHkgZ54BiRK1ufRJxS3jepNuXbe2HCtANk3WeIdbTKD7DiHasMwoN1 A1vvydhzWSG7gn/KV2n4DYQYzjPHJT2r+wXU1BkoL/AI8OlZYMD6Xumr7jE413OU S4jbJeAVpDt8sUKzx79Po/Iw8JyeUuZg2nV37iBVPr8M1MhazFI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:58:58 2026 by rpki-client