$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: wktyx7Mv38roZBs8m1iIdg30la3r7HGnjWDHrJZCgDA= Subject key identifier: DD:8D:22:F5:19:E7:52:CF:00:A2:41:8C:9F:5C:14:84:11:7B:31:34 Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 01B9FCFD025C600A98A4E9FB322FD0A4019D13A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 0349 Signing time: Sun 01 Mar 2026 10:41:08 +0000 Manifest this update: Sun 01 Mar 2026 10:36:08 +0000 Manifest next update: Wed 04 Mar 2026 19:25:08 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: L0Si6LWzM1gNaRkzOgJwiHp2aWHNfsKVZ2MpvDKVitY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b9:fc:fd:02:5c:60:0a:98:a4:e9:fb:32:2f:d0:a4:01:9d:13:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Mar 1 10:36:08 2026 GMT Not After : Mar 4 19:25:08 2026 GMT Subject: CN=DD8D22F519E752CF00A2418C9F5C1484117B3134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:7a:05:b2:2b:4b:00:3b:b9:23:f8:6e:4e: a1:a2:40:4f:87:c7:bd:8a:02:d3:48:a1:52:6f:aa: fc:80:61:97:bb:55:50:0c:ec:1c:62:eb:e5:16:13: 2a:26:16:3f:00:19:ef:2b:48:f7:92:3f:86:f8:27: 03:e5:a4:5e:26:53:86:e3:f3:7d:1d:4e:fa:40:3a: 3b:dd:6d:99:66:ed:62:4f:b3:f1:dd:76:bf:f6:a8: a5:58:57:05:f8:11:22:84:61:6d:8c:65:d0:d6:79: 36:a3:6b:82:f1:42:4b:03:3d:59:f4:05:a7:cc:50: 50:d7:47:4a:07:aa:d6:65:d3:99:92:10:4c:20:6f: b6:5a:ca:af:26:f8:7b:d5:64:bf:3e:4d:0a:13:09: 96:4c:59:6e:57:b5:71:a4:67:05:c8:e7:67:af:f6: d1:64:c4:18:03:29:20:bd:b2:5c:d1:5c:7c:a4:cb: 09:e2:4e:6d:12:c8:bf:cc:ff:50:79:df:1d:73:d8: 8e:60:c2:60:5c:75:ba:bc:b1:0e:fc:aa:6e:7d:45: d6:c1:dc:31:32:51:ca:4f:de:fb:d9:5d:bb:36:f1: 3f:cd:2b:e2:53:17:00:0b:53:5f:03:0c:8f:ae:c4: 98:bf:30:3f:62:6e:53:12:09:cd:77:33:c9:27:44: da:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8D:22:F5:19:E7:52:CF:00:A2:41:8C:9F:5C:14:84:11:7B:31:34 X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:49:a6:d8:8d:de:6c:7c:2b:30:a0:d7:29:de:8f:21:32:8a: 83:4e:f2:c1:4e:8c:80:14:25:5d:27:ec:d0:a4:93:03:58:26: 22:f0:a7:eb:a1:6c:35:4e:0b:83:fc:af:f2:0a:86:fe:0f:a8: ff:91:86:ea:9e:6a:f2:40:cd:5e:50:2f:0f:81:ba:cf:6b:9b: 7a:fe:65:5a:21:74:22:f3:a0:15:af:b8:82:61:13:0a:0c:74: cb:b5:5b:9f:d1:6d:8b:4b:ae:da:8c:9e:15:59:68:8f:44:6d: 4e:2f:1e:c3:da:57:2f:b5:3b:7b:0e:2c:63:28:1a:ff:6c:57: 9a:b5:b9:81:6f:81:24:3b:92:4d:cd:82:74:6a:63:1f:bc:d1: 69:a2:75:32:db:56:1b:2b:12:35:48:fc:83:ad:8e:94:64:e5: 73:e0:6f:7e:f8:2d:da:4a:c3:0f:1e:90:5e:20:9a:e1:64:1a: 15:26:d4:b9:c4:68:c4:e3:c8:b0:95:60:a7:70:70:09:ef:98: 3e:ca:be:0c:c2:19:fc:d0:9b:db:dd:f9:d3:c3:80:32:3b:58: 19:2f:d9:23:33:a2:d5:bd:08:2a:98:46:8e:8c:b0:a4:11:c3: 8e:0d:e9:a2:a4:7e:0b:15:4a:82:41:c0:20:05:0e:2c:0d:c0: a9:83:b8:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbn8/QJcYAqYpOn7Mi/QpAGdE6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNjAzMDExMDM2MDhaFw0yNjAzMDQxOTI1MDhaMDMxMTAvBgNV BAMTKEREOEQyMkY1MTlFNzUyQ0YwMEEyNDE4QzlGNUMxNDg0MTE3QjMxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOXoFsitLADu5I/huTqGiQE+H x72KAtNIoVJvqvyAYZe7VVAM7Bxi6+UWEyomFj8AGe8rSPeSP4b4JwPlpF4mU4bj 830dTvpAOjvdbZlm7WJPs/Hddr/2qKVYVwX4ESKEYW2MZdDWeTaja4LxQksDPVn0 BafMUFDXR0oHqtZl05mSEEwgb7Zayq8m+HvVZL8+TQoTCZZMWW5XtXGkZwXI52ev 9tFkxBgDKSC9slzRXHykywniTm0SyL/M/1B53x1z2I5gwmBcdbq8sQ78qm59RdbB 3DEyUcpP3vvZXbs28T/NK+JTFwALU18DDI+uxJi/MD9iblMSCc13M8knRNonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Y0i9RnnUs8AokGMn1wUhBF7MTQwHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtJptiN3mx8KzCg1ynejyEyioNO8sFOjIAU JV0n7NCkkwNYJiLwp+uhbDVOC4P8r/IKhv4PqP+RhuqeavJAzV5QLw+Bus9rm3r+ ZVohdCLzoBWvuIJhEwoMdMu1W5/RbYtLrtqMnhVZaI9EbU4vHsPaVy+1O3sOLGMo Gv9sV5q1uYFvgSQ7kk3NgnRqYx+80WmidTLbVhsrEjVI/IOtjpRk5XPgb374LdpK ww8ekF4gmuFkGhUm1LnEaMTjyLCVYKdwcAnvmD7KvgzCGfzQm9vd+dPDgDI7WBkv 2SMzotW9CCqYRo6MsKQRw44N6aKkfgsVSoJBwCAFDiwNwKmDuJk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:36:16 2026 by rpki-client