$ rpki-client -vvf repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft File: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft (raw, json) Hash identifier: PLNrFYG/ialaOCgzPhtogaA38XeWr1qjQGH0Mw951Zo= Subject key identifier: CA:AC:1E:44:73:DF:07:69:B6:16:AC:9C:80:27:1C:A4:CD:08:A9:6A Authority key identifier: BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA Certificate issuer: /CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Certificate serial: 7618FD71FEE536B816D3F3722855C2FCC4701362 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft Manifest number: 0334 Signing time: Sun 01 Mar 2026 17:32:09 +0000 Manifest this update: Sun 01 Mar 2026 17:27:09 +0000 Manifest next update: Thu 05 Mar 2026 03:32:09 +0000 Files and hashes: 1: BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl (hash: KEPOh0A5gqdAcv2pKlWGWiLtsvUXr0wKnBi3Mpz6Deg=) 2: 3130332e3136392e3139392e302f32342d3234203d3e20313437313132.roa (hash: m681LM1ItdW4dx+wPJxInCtAMds6i/b/AFLjGDvuwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:32:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:18:fd:71:fe:e5:36:b8:16:d3:f3:72:28:55:c2:fc:c4:70:13:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA Validity Not Before: Mar 1 17:27:09 2026 GMT Not After : Mar 5 03:32:09 2026 GMT Subject: CN=CAAC1E4473DF0769B616AC9C80271CA4CD08A96A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:bc:09:be:70:5a:c1:d2:99:b9:9d:5d:8f:06: ec:43:6f:ef:16:24:31:1f:d8:05:9d:e6:fb:21:83: 69:ec:fb:37:72:12:42:53:1c:37:f7:9e:bd:20:a1: f4:08:26:35:a2:6a:dd:96:06:40:3e:16:25:78:2c: ed:95:95:42:88:b7:25:05:17:00:4d:53:b0:ab:72: 25:7d:8d:f7:17:a5:b7:db:1b:eb:6f:f1:e4:fe:cd: 91:82:0c:eb:bd:3b:d2:0b:11:9e:00:64:74:f4:c4: e9:06:70:97:f7:34:d5:e5:01:28:f2:d0:c3:46:2f: c1:74:25:6b:91:f0:3c:d7:c1:ed:3b:29:7b:20:08: 3f:ac:f0:9c:06:25:1c:67:ed:ad:18:e3:df:98:6f: 55:68:94:b8:c7:ba:29:22:4b:bf:08:18:57:eb:50: 65:cc:e3:37:2a:31:7e:ad:c2:75:03:12:c1:cf:b1: 24:a3:d8:f1:31:b9:a7:c4:d1:3d:5b:89:fd:78:1f: dc:6f:d1:31:61:cc:51:17:54:08:95:5f:cf:d9:ac: 25:12:f6:65:39:dd:15:3a:43:7a:e3:6d:da:b5:47: bd:e0:05:a3:ce:ae:61:f7:1d:a7:ec:98:dc:cd:04: f4:a8:52:86:3b:60:aa:92:61:a6:3c:2d:95:7e:0d: a5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:1E:44:73:DF:07:69:B6:16:AC:9C:80:27:1C:A4:CD:08:A9:6A X509v3 Authority Key Identifier: keyid:BB:27:EA:D4:CC:6F:FF:52:F5:BA:AF:4A:87:53:08:D8:CD:E7:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a54a8ce-18f4-4988-a951-9664dd176cd9/0/BB27EAD4CC6FFF52F5BAAF4A875308D8CDE7CDAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ab:8e:0a:af:7f:c5:fd:30:94:bc:ac:e9:d0:26:ef:7c:02: d5:13:e4:35:b1:04:7f:3a:b0:dd:ce:22:9f:14:59:3b:96:58: 0f:87:dc:0c:32:5c:29:9e:a6:e8:52:24:50:bf:30:d6:e3:4d: 9f:06:98:e2:4d:2b:8e:8c:f4:1a:da:65:73:f9:0a:8a:58:3e: 0f:46:ef:e2:4c:06:26:78:3a:79:ff:32:8f:a2:fa:e8:2e:6f: 93:a8:5b:a0:ae:41:57:db:93:e4:92:82:30:12:94:2b:04:b5: 07:cc:9b:33:9e:a9:c9:6f:36:eb:49:fc:1a:67:38:37:73:52: 05:07:b7:77:d8:81:7e:9d:6e:e5:61:1c:8c:7d:2b:87:d7:33: 63:67:0b:9b:64:c1:cd:f8:9d:96:5d:f5:21:7f:18:a1:ec:53: 26:6e:bd:87:96:01:5d:6e:6c:7d:5e:17:dd:df:46:55:a9:d7: 91:00:83:a2:14:25:23:77:5b:f0:19:66:e3:1f:aa:06:d8:8b: 4e:55:f6:90:61:b1:65:23:d8:54:f5:1d:ea:d0:7e:a8:78:7e: dc:3b:47:43:5f:bb:f5:b6:74:12:b7:da:e2:e3:ed:7c:6b:ec: 6c:5e:68:57:e0:78:87:fa:99:ac:93:51:08:ed:e2:09:c5:18: 0c:eb:6d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdhj9cf7lNrgW0/NyKFXC/MRwE2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhD REU3Q0RBQTAeFw0yNjAzMDExNzI3MDlaFw0yNjAzMDUwMzMyMDlaMDMxMTAvBgNV BAMTKENBQUMxRTQ0NzNERjA3NjlCNjE2QUM5QzgwMjcxQ0E0Q0QwOEE5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTvAm+cFrB0pm5nV2PBuxDb+8W JDEf2AWd5vshg2ns+zdyEkJTHDf3nr0gofQIJjWiat2WBkA+FiV4LO2VlUKItyUF FwBNU7CrciV9jfcXpbfbG+tv8eT+zZGCDOu9O9ILEZ4AZHT0xOkGcJf3NNXlASjy 0MNGL8F0JWuR8DzXwe07KXsgCD+s8JwGJRxn7a0Y49+Yb1VolLjHuikiS78IGFfr UGXM4zcqMX6twnUDEsHPsSSj2PExuafE0T1bif14H9xv0TFhzFEXVAiVX8/ZrCUS 9mU53RU6Q3rjbdq1R73gBaPOrmH3HafsmNzNBPSoUoY7YKqSYaY8LZV+DaUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqweRHPfB2m2FqycgCccpM0IqWowHwYDVR0j BBgwFoAUuyfq1Mxv/1L1uq9Kh1MI2M3nzaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTU0YThjZS0xOGY0LTQ5ODgtYTk1MS05NjY0ZGQxNzZjZDkvMC9CQjI3RUFENEND NkZGRjUyRjVCQUFGNEE4NzUzMDhEOENERTdDREFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4RDhDREU3 Q0RBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWE1NGE4Y2UtMThmNC00OTg4LWE5 NTEtOTY2NGRkMTc2Y2Q5LzAvQkIyN0VBRDRDQzZGRkY1MkY1QkFBRjRBODc1MzA4 RDhDREU3Q0RBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHirjgqvf8X9MJS8rOnQJu98AtUT5DWxBH86 sN3OIp8UWTuWWA+H3AwyXCmepuhSJFC/MNbjTZ8GmOJNK46M9BraZXP5CopYPg9G 7+JMBiZ4Onn/Mo+i+ugub5OoW6CuQVfbk+SSgjASlCsEtQfMmzOeqclvNutJ/Bpn ODdzUgUHt3fYgX6dbuVhHIx9K4fXM2NnC5tkwc34nZZd9SF/GKHsUyZuvYeWAV1u bH1eF93fRlWp15EAg6IUJSN3W/AZZuMfqgbYi05V9pBhsWUj2FT1HerQfqh4ftw7 R0Nfu/W2dBK32uLj7Xxr7GxeaFfgeIf6mayTUQjt4gnFGAzrbak= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:12 2026 by rpki-client