$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: vrsQE+WSoz+P3OpPx27scgK67hNfYXmQbfba/OICels= Subject key identifier: 2D:17:28:A9:43:A8:05:0D:BE:98:5D:91:B8:DA:4E:0E:08:74:5D:C2 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 66D0727D954A6470728ADE79003A371020FE8443 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 01F7 Signing time: Sun 01 Mar 2026 18:51:52 +0000 Manifest this update: Sun 01 Mar 2026 18:46:52 +0000 Manifest next update: Thu 05 Mar 2026 03:44:52 +0000 Files and hashes: 1: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=) 2: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=) 3: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=) 4: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=) 5: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: ezniKwlOzvmQ402jXJKlGRkUDBS1FTid4r/9OzdlGLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d0:72:7d:95:4a:64:70:72:8a:de:79:00:3a:37:10:20:fe:84:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Mar 1 18:46:52 2026 GMT Not After : Mar 5 03:44:52 2026 GMT Subject: CN=2D1728A943A8050DBE985D91B8DA4E0E08745DC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2e:95:38:5c:bf:ca:ef:49:83:5c:51:f8:d6: 8b:5e:36:c5:da:00:4e:92:1e:a9:a9:3b:1c:a3:60: e4:dd:7b:b3:4d:a5:a9:04:84:fa:68:5d:f7:bd:f7: 8f:a4:0c:fb:55:5b:7f:e4:f2:e9:55:42:d5:ec:79: d4:0e:93:c0:24:a2:b8:3e:29:b6:35:fb:ba:bd:c2: 1f:66:36:42:2f:05:a1:f3:3f:17:d7:aa:6b:26:7c: 95:9b:c5:06:c8:35:6a:c6:76:59:63:22:7f:c9:f2: f9:97:b6:2c:d9:2d:05:70:0f:65:a8:23:9a:c8:7b: 45:cb:7d:d8:f3:76:21:1b:41:10:d3:a1:c2:94:be: c3:c6:5a:6a:08:9c:f2:72:d7:e0:c3:5c:7f:48:eb: 6e:01:55:d8:2e:18:a7:f7:01:d3:04:81:50:86:8a: f3:da:99:c9:51:ee:11:d9:34:11:74:f1:08:12:28: 27:4a:a3:54:7b:c5:c1:58:06:5d:1b:62:60:f2:d4: a7:da:12:8b:7f:91:f0:2c:aa:d4:d2:de:8b:c5:6c: 15:c5:3c:3a:ed:81:4b:1f:35:f3:85:fd:bc:f2:de: bf:4c:99:b8:57:a5:1e:00:11:8f:02:3e:01:4e:cd: e0:70:8d:32:72:4f:bb:ef:85:0a:8e:31:97:33:1c: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:28:A9:43:A8:05:0D:BE:98:5D:91:B8:DA:4E:0E:08:74:5D:C2 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ec:ca:1e:d1:92:bf:08:1d:c8:f7:50:f8:55:7e:a3:c6:ca: bd:e3:64:64:e6:dd:e7:82:35:c7:a4:b3:19:a1:b6:32:df:25: 5b:02:09:fa:41:38:91:7d:eb:ed:a3:63:22:93:77:0a:93:6c: 40:11:e2:94:8f:a8:5d:df:44:d0:12:02:e1:24:35:fb:d5:77: 2d:7c:5d:50:dc:5f:4f:d3:fd:93:21:d1:1f:59:f0:22:d4:d5: 96:b1:35:37:e9:52:30:bb:12:38:6d:01:23:d3:f5:ef:73:61: de:63:0e:f2:50:ae:1d:be:9c:41:26:91:78:ea:bd:04:6e:2d: 03:e0:37:2a:06:45:82:ec:7c:d7:ab:20:bc:82:4a:00:40:7f: a1:a2:df:4f:cf:8e:46:d7:44:71:61:28:f5:ca:84:92:c5:af: 15:80:e1:ea:f4:62:b9:ed:25:f3:81:45:e1:2b:8f:ef:66:d6: 92:06:a3:c8:10:ff:90:df:b1:8a:d1:67:87:33:82:81:5e:ea: 6d:82:9f:e1:4d:c5:a9:4d:f4:1f:84:91:a9:bb:5d:e8:b0:aa: 00:54:c2:17:ba:01:1f:c7:95:82:b2:ee:63:b4:9b:c6:4a:ea: ba:92:e0:be:54:76:b0:c3:2c:ab:48:6b:42:99:2d:3b:c6:95: 63:14:4a:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtByfZVKZHByit55ADo3ECD+hEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNjAzMDExODQ2NTJaFw0yNjAzMDUwMzQ0NTJaMDMxMTAvBgNV BAMTKDJEMTcyOEE5NDNBODA1MERCRTk4NUQ5MUI4REE0RTBFMDg3NDVEQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LpU4XL/K70mDXFH41oteNsXa AE6SHqmpOxyjYOTde7NNpakEhPpoXfe994+kDPtVW3/k8ulVQtXsedQOk8Akorg+ KbY1+7q9wh9mNkIvBaHzPxfXqmsmfJWbxQbINWrGdlljIn/J8vmXtizZLQVwD2Wo I5rIe0XLfdjzdiEbQRDTocKUvsPGWmoInPJy1+DDXH9I624BVdguGKf3AdMEgVCG ivPamclR7hHZNBF08QgSKCdKo1R7xcFYBl0bYmDy1KfaEot/kfAsqtTS3ovFbBXF PDrtgUsfNfOF/bzy3r9MmbhXpR4AEY8CPgFOzeBwjTJyT7vvhQqOMZczHHr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRcoqUOoBQ2+mF2RuNpODgh0XcIwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3syh7Rkr8IHcj3UPhVfqPGyr3jZGTm3eeC NceksxmhtjLfJVsCCfpBOJF96+2jYyKTdwqTbEAR4pSPqF3fRNASAuEkNfvVdy18 XVDcX0/T/ZMh0R9Z8CLU1ZaxNTfpUjC7EjhtASPT9e9zYd5jDvJQrh2+nEEmkXjq vQRuLQPgNyoGRYLsfNerILyCSgBAf6Gi30/PjkbXRHFhKPXKhJLFrxWA4er0Yrnt JfOBReErj+9m1pIGo8gQ/5DfsYrRZ4czgoFe6m2Cn+FNxalN9B+Ekam7XeiwqgBU whe6AR/HlYKy7mO0m8ZK6rqS4L5UdrDDLKtIa0KZLTvGlWMUSqo= -----END CERTIFICATE-----Generated at Mon Mar 2 00:38:47 2026 by rpki-client