$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft File: B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft (raw, json) Hash identifier: nwit66fNGeAuWq2rAnGGpnXmMa5g/b0Xm6hzPgFmXrs= Subject key identifier: 5E:07:46:0E:F8:A2:CA:65:D5:F5:DA:20:25:73:85:89:24:57:FC:8E Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F Certificate issuer: /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Certificate serial: 158CF5551EE0F2387A27BC2A0C007C9FA3945D0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft Manifest number: 03CF Signing time: Sun 01 Mar 2026 10:21:32 +0000 Manifest this update: Sun 01 Mar 2026 10:16:32 +0000 Manifest next update: Wed 04 Mar 2026 12:27:32 +0000 Files and hashes: 1: 3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (hash: gi32RXV8JZ3+geKXJ775zfQ6NviF8gztZ4frnl7zPLc=) 2: 3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (hash: 0qtvESVyNKD7Aha3YGc7JQ2v09wcRG3LvxHILCYb604=) 3: 3130332e3136342e35362e302f32342d3234203d3e20313431393033.roa (hash: 7lt/Pu+263UL3s6kz24cYhGTnyx1FA6xGEj7++kkFpc=) 4: B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl (hash: QMtHa3b6nVmY+9DLgUNIVcL/YnDg/G5z4Y0QD8QGGZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8c:f5:55:1e:e0:f2:38:7a:27:bc:2a:0c:00:7c:9f:a3:94:5d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F Validity Not Before: Mar 1 10:16:32 2026 GMT Not After : Mar 4 12:27:32 2026 GMT Subject: CN=5E07460EF8A2CA65D5F5DA20257385892457FC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:33:10:24:22:19:5b:e7:a9:9d:06:29:c1: 5a:dc:a4:d1:68:13:64:37:f4:d9:44:6b:08:ff:b3: ae:77:0c:c2:a7:84:e8:db:95:c1:1c:00:f1:8f:29: ef:0d:ca:23:ae:1f:25:60:ae:92:22:72:ae:24:66: 56:50:78:0f:c3:03:c2:6f:8b:0e:35:71:ce:20:73: b0:00:43:33:35:07:67:c4:01:50:30:24:6a:fe:73: 1a:86:f0:a9:2d:f1:28:e6:a3:3c:13:4b:ae:9c:a9: b0:ea:d6:8e:07:49:92:1e:46:e3:c0:b9:e8:7e:f4: 85:e8:07:72:13:3b:7a:e6:70:32:b2:d0:4c:9c:57: 4e:8c:5e:c1:ac:32:9c:8a:8c:67:e2:1d:79:0b:94: 84:0c:7b:14:24:4a:ba:58:8f:8e:ab:1c:84:26:1f: 0d:ef:ee:a1:88:be:78:e5:51:e1:02:71:77:8b:15: 8a:b0:9d:2d:5b:fc:e0:c7:dc:77:7a:23:ec:bf:1f: 46:b6:db:27:97:e4:cb:48:0a:63:a9:81:5a:ce:fc: 0b:6d:4a:2c:5d:65:29:ee:e3:1e:c0:a8:99:61:ce: 44:1d:b4:49:a8:64:58:4a:1a:d5:bf:6b:04:23:07: 91:a8:34:80:cb:03:cb:51:87:ec:09:c2:25:6b:60: ff:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:07:46:0E:F8:A2:CA:65:D5:F5:DA:20:25:73:85:89:24:57:FC:8E X509v3 Authority Key Identifier: keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e1:b3:a6:49:af:b4:1f:41:49:8f:44:c8:2d:a8:29:9f:9c: 0c:da:e9:48:3d:ad:bb:68:2e:e1:65:56:44:b3:58:f7:55:64: 87:34:58:36:fe:5e:58:4e:53:a4:1e:9c:0d:8f:c6:6c:75:e7: 2f:7f:6f:c3:43:27:3e:92:b5:8f:8a:0e:74:53:0f:9c:b6:63: c8:19:6b:81:3f:25:61:9b:bb:f9:65:51:61:9b:11:f8:99:01: be:32:c0:3c:0e:aa:7b:f6:14:49:b1:9d:13:dc:2f:46:44:e7: 2a:ae:b5:5b:84:87:e1:99:4a:75:07:4a:88:a3:6c:2c:60:f9: 61:f6:3d:57:69:39:ae:28:f7:7b:19:e1:6f:01:b9:31:f7:3c: 0b:00:29:e0:0f:ca:f2:be:26:05:9c:01:85:26:ab:3d:6c:e1: c7:1b:18:a3:af:56:70:4b:df:c8:4a:c7:a2:23:31:30:d2:5c: 3f:42:1f:d4:c1:81:17:5b:dc:2f:70:98:e7:c0:d0:47:86:3d: 61:07:0b:81:98:ad:52:34:49:5d:7f:27:c6:e2:01:84:53:2f: 75:ef:90:70:c9:a2:cd:4a:58:e1:06:4b:4f:7d:ce:d7:02:2f: 66:e5:d2:d0:0e:32:d6:f9:d8:de:4c:dd:66:87:d6:73:99:63: 8c:b9:ff:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFYz1VR7g8jh6J7wqDAB8n6OUXQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4 MjIyMDcwRjAeFw0yNjAzMDExMDE2MzJaFw0yNjAzMDQxMjI3MzJaMDMxMTAvBgNV BAMTKDVFMDc0NjBFRjhBMkNBNjVENUY1REEyMDI1NzM4NTg5MjQ1N0ZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQjMQJCIZW+epnQYpwVrcpNFo E2Q39NlEawj/s653DMKnhOjblcEcAPGPKe8NyiOuHyVgrpIicq4kZlZQeA/DA8Jv iw41cc4gc7AAQzM1B2fEAVAwJGr+cxqG8Kkt8SjmozwTS66cqbDq1o4HSZIeRuPA ueh+9IXoB3ITO3rmcDKy0EycV06MXsGsMpyKjGfiHXkLlIQMexQkSrpYj46rHIQm Hw3v7qGIvnjlUeECcXeLFYqwnS1b/ODH3Hd6I+y/H0a22yeX5MtICmOpgVrO/Att SixdZSnu4x7AqJlhzkQdtEmoZFhKGtW/awQjB5GoNIDLA8tRh+wJwiVrYP8PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXgdGDviiymXV9dogJXOFiSRX/I4wHwYDVR0j BBgwFoAUsLTQpf1OWNgFNJd7AnyLxoIiBw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2NkNTExZi1hZmZmLTRmZWMtODcyNC1kNDExOWY4OTFkZjIvMC9CMEI0RDBBNUZE NEU1OEQ4MDUzNDk3N0IwMjdDOEJDNjgyMjIwNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhCQzY4MjIy MDcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdjZDUxMWYtYWZmZi00ZmVjLTg3 MjQtZDQxMTlmODkxZGYyLzAvQjBCNEQwQTVGRDRFNThEODA1MzQ5NzdCMDI3QzhC QzY4MjIyMDcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArhs6ZJr7QfQUmPRMgtqCmfnAza6Ug9rbto LuFlVkSzWPdVZIc0WDb+XlhOU6QenA2Pxmx15y9/b8NDJz6StY+KDnRTD5y2Y8gZ a4E/JWGbu/llUWGbEfiZAb4ywDwOqnv2FEmxnRPcL0ZE5yqutVuEh+GZSnUHSoij bCxg+WH2PVdpOa4o93sZ4W8BuTH3PAsAKeAPyvK+JgWcAYUmqz1s4ccbGKOvVnBL 38hKx6IjMTDSXD9CH9TBgRdb3C9wmOfA0EeGPWEHC4GYrVI0SV1/J8biAYRTL3Xv kHDJos1KWOEGS099ztcCL2bl0tAOMtb52N5M3WaH1nOZY4y5//4= -----END CERTIFICATE-----Generated at Mon Mar 2 06:01:11 2026 by rpki-client