$ rpki-client -vvf repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft File: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft (raw, json) Hash identifier: ttzABynghHb8NTsQv1JY/D8/RSPEnlNdddyMj+8aNDY= Subject key identifier: F1:F5:01:04:44:7D:3E:7C:FB:46:72:04:53:08:6B:CB:44:52:4D:74 Authority key identifier: B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E Certificate issuer: /CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Certificate serial: 3B8F81BA7E314FB34822B4077A72AC8A98037DD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft Manifest number: 27 Signing time: Sun 01 Mar 2026 17:21:29 +0000 Manifest this update: Sun 01 Mar 2026 17:16:29 +0000 Manifest next update: Wed 04 Mar 2026 18:08:29 +0000 Files and hashes: 1: 3130332e31302e38312e302f32342d3234203d3e203536323435.roa (hash: aUiV56swPp0i277EKeACkxB8KCq996e6HKIfY3dUZVk=) 2: 3130332e31302e38302e302f32342d3234203d3e203536323435.roa (hash: dIQVr4EU9vhVUlOy70LmMe/aV/AkNcRz6oJAaRY0RBk=) 3: B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl (hash: vxGFZbIzz/NkX9eOpG8rxAxfLU57Ab+If8Gnn3RGUUY=) 4: 3130332e36312e3131382e302f32342d3234203d3e203536323435.roa (hash: Kyu9bQtpDSvLwwsNNqwUqQbMYywTTXQyJkLm6NWbIzI=) 5: 3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (hash: KoQeDklma/MmavV82lm83EnfussemBPyB+je36QbhV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:8f:81:ba:7e:31:4f:b3:48:22:b4:07:7a:72:ac:8a:98:03:7d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E Validity Not Before: Mar 1 17:16:29 2026 GMT Not After : Mar 4 18:08:29 2026 GMT Subject: CN=F1F50104447D3E7CFB46720453086BCB44524D74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:d4:5f:fe:e3:8c:e7:6c:c7:a6:3d:a7:5a: 97:98:3f:c7:bc:3a:69:b0:3a:16:f8:78:27:89:df: 41:d3:fc:86:94:b3:a3:12:06:4a:83:f5:10:91:84: 82:b3:47:a7:40:d9:93:2c:15:20:e1:88:b3:b6:55: 4e:51:5f:59:b1:c7:59:fc:f0:0c:e7:44:c1:06:46: ca:bb:1a:8a:d9:d9:e7:7d:5b:4d:49:c7:4b:d1:23: b1:03:a2:27:c5:38:da:8a:a5:cf:e7:59:b3:e4:b0: 77:05:89:9e:10:cd:b8:13:de:21:eb:94:2f:d2:ac: 5e:70:3a:ff:fc:f6:a5:c1:b2:b0:4b:af:3c:80:4d: 96:db:f3:78:27:87:56:d8:89:a4:12:e4:92:71:eb: 85:0d:ab:5b:e5:49:1e:39:5c:81:2c:31:45:5c:ef: 0a:5a:9b:95:8e:8c:20:bf:61:21:ad:70:bd:8f:38: ed:52:95:37:7c:d7:20:bb:e2:d3:d5:09:5a:1d:86: a3:2d:44:d7:3d:44:a5:a3:e6:32:ab:28:a9:9d:11: 34:7b:66:d6:85:ca:86:f4:85:0b:61:fb:3a:8c:1a: 65:06:9c:f6:a5:8d:00:63:16:34:16:93:48:81:fa: 05:22:4b:87:43:f2:26:a3:d7:8b:d8:66:f7:9d:77: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F5:01:04:44:7D:3E:7C:FB:46:72:04:53:08:6B:CB:44:52:4D:74 X509v3 Authority Key Identifier: keyid:B9:E3:DC:E7:FE:85:E4:83:47:D6:CA:E3:6C:83:DE:35:99:8C:FC:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/B9E3DCE7FE85E48347D6CAE36C83DE35998CFC5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:12:bc:e7:8d:92:90:bb:f1:e6:74:82:af:c1:4d:ec:be:1b: 29:97:50:23:a2:a1:58:81:a4:4a:ef:c3:f4:b0:aa:63:46:61: 48:c6:2f:e5:f9:21:2b:8e:91:a2:21:83:54:b0:81:60:e6:6d: 5d:8a:c2:21:63:e5:96:44:70:66:9c:39:b3:00:74:f4:96:8d: 76:9d:ec:e6:2f:51:bb:1f:3d:a0:b2:f4:27:21:9a:a9:e5:b4: aa:d9:60:87:0a:b0:ac:d4:25:93:14:08:4d:d7:3d:2e:7f:07: 38:a4:c3:4a:2c:bb:c9:06:f4:0e:d8:2e:de:5f:f2:f8:ac:3d: 6f:d3:3f:07:96:9c:eb:c1:c5:2e:3d:cc:04:e5:9d:f1:a0:44: 21:37:91:b8:a3:b7:52:58:bf:0e:22:00:17:de:71:72:20:27: 6b:c4:12:a6:d5:4f:a6:b8:4a:0e:f7:32:15:be:54:8f:f5:ff: f4:12:57:31:26:80:67:62:e6:c5:87:fb:c0:6f:a2:6d:10:3e: c1:08:f4:83:20:5e:2d:f9:a4:fd:01:c7:9d:59:b5:e2:e4:da: 16:18:25:c9:62:fd:02:1f:3d:e3:0c:fc:d4:4f:9f:16:c6:47: a6:cd:df:32:60:92:d8:66:28:11:fc:f9:f3:1d:ca:54:37:49: 4f:d3:09:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4+Bun4xT7NIIrQHenKsipgDfdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5 OThDRkM1RTAeFw0yNjAzMDExNzE2MjlaFw0yNjAzMDQxODA4MjlaMDMxMTAvBgNV BAMTKEYxRjUwMTA0NDQ3RDNFN0NGQjQ2NzIwNDUzMDg2QkNCNDQ1MjRENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/dRf/uOM52zHpj2nWpeYP8e8 OmmwOhb4eCeJ30HT/IaUs6MSBkqD9RCRhIKzR6dA2ZMsFSDhiLO2VU5RX1mxx1n8 8AznRMEGRsq7GorZ2ed9W01Jx0vRI7EDoifFONqKpc/nWbPksHcFiZ4QzbgT3iHr lC/SrF5wOv/89qXBsrBLrzyATZbb83gnh1bYiaQS5JJx64UNq1vlSR45XIEsMUVc 7wpam5WOjCC/YSGtcL2POO1SlTd81yC74tPVCVodhqMtRNc9RKWj5jKrKKmdETR7 ZtaFyob0hQth+zqMGmUGnPaljQBjFjQWk0iB+gUiS4dD8iaj14vYZvedd4hzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8fUBBER9Pnz7RnIEUwhry0RSTXQwHwYDVR0j BBgwFoAUuePc5/6F5INH1srjbIPeNZmM/F4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDg4NjgwNS0zYjg1LTRjNWItOWI2YS1kNjJhZDU2YTY2YWMvMC9COUUzRENFN0ZF ODVFNDgzNDdENkNBRTM2QzgzREUzNTk5OENGQzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RFMzU5OThD RkM1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA4ODY4MDUtM2I4NS00YzViLTli NmEtZDYyYWQ1NmE2NmFjLzAvQjlFM0RDRTdGRTg1RTQ4MzQ3RDZDQUUzNkM4M0RF MzU5OThDRkM1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUSvOeNkpC78eZ0gq/BTey+GymXUCOioViB pErvw/SwqmNGYUjGL+X5ISuOkaIhg1SwgWDmbV2KwiFj5ZZEcGacObMAdPSWjXad 7OYvUbsfPaCy9CchmqnltKrZYIcKsKzUJZMUCE3XPS5/Bzikw0osu8kG9A7YLt5f 8visPW/TPweWnOvBxS49zATlnfGgRCE3kbijt1JYvw4iABfecXIgJ2vEEqbVT6a4 Sg73MhW+VI/1//QSVzEmgGdi5sWH+8Bvom0QPsEI9IMgXi35pP0Bx51ZteLk2hYY Jcli/QIfPeMM/NRPnxbGR6bN3zJgkthmKBH8+fMdylQ3SU/TCbk= -----END CERTIFICATE-----Generated at Mon Mar 2 16:19:45 2026 by rpki-client