$ rpki-client -vvf repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft File: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft (raw, json) Hash identifier: EHEqp1CswaiBb5kCxx9u2l6AmV4Hhppl1dDsQWX4TMo= Subject key identifier: A1:B2:E5:A0:52:5D:A3:E7:AB:58:EF:47:35:E5:74:43:0E:55:9B:E7 Authority key identifier: B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 Certificate issuer: /CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Certificate serial: 1D8F39770CEF81A41656F44E616CE8EFF3E3B381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft Manifest number: 0171 Signing time: Sun 01 Mar 2026 13:51:43 +0000 Manifest this update: Sun 01 Mar 2026 13:46:43 +0000 Manifest next update: Wed 04 Mar 2026 23:00:43 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: dEzIqEvBQoLb4jDZxATrGmBvt2RxQTfgU7Js5Mbni88=) 2: B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl (hash: VcpZawFpvJpwXFChcKXJkKseFrE+o8mhDoqvEN9mApo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8f:39:77:0c:ef:81:a4:16:56:f4:4e:61:6c:e8:ef:f3:e3:b3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B32E9EABD055A12FD3AA7A307C1DF6832A481AF8 Validity Not Before: Mar 1 13:46:43 2026 GMT Not After : Mar 4 23:00:43 2026 GMT Subject: CN=A1B2E5A0525DA3E7AB58EF4735E574430E559BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:06:ad:1d:18:00:90:2e:3a:89:14:78:a4: 75:55:9e:0d:c5:7c:4f:53:06:bb:9f:3a:a3:6a:97: 7a:68:84:1e:ef:e0:80:9a:dd:94:02:3a:53:8b:b9: 2a:7b:73:bb:be:b9:67:13:69:b4:92:a6:23:62:12: f2:bd:4c:5a:44:c9:42:f7:40:4b:b8:e7:bd:84:7d: 55:4e:05:60:7c:5f:9d:83:4f:0c:52:77:04:99:85: 72:7f:0c:dc:82:ef:ba:78:6e:ba:c7:54:08:dd:61: 73:ca:ee:6e:84:92:34:9e:a9:e3:03:5a:f5:94:19: b2:d1:b9:04:23:28:c6:31:d2:e9:6d:70:1d:05:4f: ba:e3:39:f3:2c:1a:28:5f:6a:25:d3:e1:f0:0c:74: c2:ae:42:8f:fa:9c:66:30:38:5d:43:ba:ab:67:5d: f0:6c:50:d0:89:3d:c9:79:18:80:bf:b1:c8:06:f2: 23:61:81:2e:3a:4b:9c:b6:99:d8:8b:11:8c:b0:0e: 0d:87:0f:2e:e7:c7:19:f6:70:b4:fb:2b:e7:34:f6: e7:a2:69:96:61:a6:fc:f7:e6:e5:87:2d:5c:b6:22: ac:0d:65:fe:1c:17:18:5f:4b:78:e5:d5:87:4f:fa: 01:d1:26:43:ad:da:91:37:79:91:d5:54:4f:9e:e3: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B2:E5:A0:52:5D:A3:E7:AB:58:EF:47:35:E5:74:43:0E:55:9B:E7 X509v3 Authority Key Identifier: keyid:B3:2E:9E:AB:D0:55:A1:2F:D3:AA:7A:30:7C:1D:F6:83:2A:48:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/B32E9EABD055A12FD3AA7A307C1DF6832A481AF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ed:68:7a:67:b6:5c:20:c8:a6:06:b5:71:5d:66:13:4d:28: 4d:47:77:de:54:c6:bb:ac:cb:0e:f0:27:03:41:ae:5a:b8:52: 69:57:f4:f4:f8:11:36:92:10:cc:c2:1e:4c:1a:93:33:7c:09: d3:55:15:41:00:79:29:8b:30:7f:b5:00:05:79:b5:f2:8d:53: 91:c8:57:70:a5:b8:e8:06:9d:b2:53:c2:d1:d4:de:65:a6:1b: c8:b3:6c:36:96:c4:74:b0:8d:11:49:83:96:ed:95:bb:42:2d: 2b:5a:10:19:4a:ca:d0:4e:f9:5c:ac:8a:0f:00:bf:54:f0:02: 71:f2:9b:43:0d:fd:96:e7:05:c4:bb:3f:86:91:8c:3c:b6:e0: 49:05:27:85:7b:ae:1c:26:b4:dc:aa:d5:62:b4:7b:1e:e7:14: 7a:88:9c:86:81:c8:b8:af:37:a6:7d:b3:7a:c0:fa:87:a5:2a: a5:49:47:42:01:d2:b0:f0:1e:29:09:1d:fa:ad:0d:68:23:dc: 40:1c:bb:02:79:59:1b:00:8b:ee:70:1a:32:f4:a5:c2:14:f4: aa:29:b3:ff:41:7c:89:58:3a:69:c5:af:6d:a6:0a:1b:52:68: ca:27:82:af:40:6e:c0:85:da:b6:32:1a:8c:65:39:c4:f1:a2: 63:a0:ef:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHY85dwzvgaQWVvROYWzo7/Pjs4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMy QTQ4MUFGODAeFw0yNjAzMDExMzQ2NDNaFw0yNjAzMDQyMzAwNDNaMDMxMTAvBgNV BAMTKEExQjJFNUEwNTI1REEzRTdBQjU4RUY0NzM1RTU3NDQzMEU1NTlCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhgatHRgAkC46iRR4pHVVng3F fE9TBrufOqNql3pohB7v4ICa3ZQCOlOLuSp7c7u+uWcTabSSpiNiEvK9TFpEyUL3 QEu4572EfVVOBWB8X52DTwxSdwSZhXJ/DNyC77p4brrHVAjdYXPK7m6EkjSeqeMD WvWUGbLRuQQjKMYx0ultcB0FT7rjOfMsGihfaiXT4fAMdMKuQo/6nGYwOF1Duqtn XfBsUNCJPcl5GIC/scgG8iNhgS46S5y2mdiLEYywDg2HDy7nxxn2cLT7K+c09uei aZZhpvz35uWHLVy2IqwNZf4cFxhfS3jl1YdP+gHRJkOt2pE3eZHVVE+e46dLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobLloFJdo+erWO9HNeV0Qw5Vm+cwHwYDVR0j BBgwFoAUsy6eq9BVoS/TqnowfB32gypIGvgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZjJhODAxMS00YzY2LTQzZDEtYmJjNS1mYjExZTg5ZjkxZTAvMC9CMzJFOUVBQkQw NTVBMTJGRDNBQTdBMzA3QzFERjY4MzJBNDgxQUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2ODMyQTQ4 MUFGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvQjMyRTlFQUJEMDU1QTEyRkQzQUE3QTMwN0MxREY2 ODMyQTQ4MUFGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXtaHpntlwgyKYGtXFdZhNNKE1Hd95Uxrus yw7wJwNBrlq4UmlX9PT4ETaSEMzCHkwakzN8CdNVFUEAeSmLMH+1AAV5tfKNU5HI V3CluOgGnbJTwtHU3mWmG8izbDaWxHSwjRFJg5btlbtCLStaEBlKytBO+Vysig8A v1TwAnHym0MN/ZbnBcS7P4aRjDy24EkFJ4V7rhwmtNyq1WK0ex7nFHqInIaByLiv N6Z9s3rA+oelKqVJR0IB0rDwHikJHfqtDWgj3EAcuwJ5WRsAi+5wGjL0pcIU9Kop s/9BfIlYOmnFr22mChtSaMongq9AbsCF2rYyGoxlOcTxomOg75E= -----END CERTIFICATE-----Generated at Mon Mar 2 19:51:18 2026 by rpki-client