$ rpki-client -vvf repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft File: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft (raw, json) Hash identifier: /zZa/Rw4S8tEODfMLC+Eeblj39ZLx/y49b8j9QpqQcc= Subject key identifier: 26:EB:D1:55:4C:36:75:C7:2A:A4:C7:28:13:36:E4:93:7E:22:74:6A Authority key identifier: B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B Certificate issuer: /CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Certificate serial: 1D8BC8F41EC3C1FB8C41A1EFE79B38ADC29CA0E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft Manifest number: 0100 Signing time: Sun 01 Mar 2026 12:31:55 +0000 Manifest this update: Sun 01 Mar 2026 12:26:55 +0000 Manifest next update: Wed 04 Mar 2026 22:25:55 +0000 Files and hashes: 1: 3135372e31302e3137392e302f32342d3234203d3e20313532333436.roa (hash: I8nLPluTJWLYyGtu9yBeYoUlVfCol4rqRzuAbdB/G2g=) 2: B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl (hash: 0zgDVpQpCkCFNR2NztHd7Wq7Zoh4ks1wBQVbXKdkzBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8b:c8:f4:1e:c3:c1:fb:8c:41:a1:ef:e7:9b:38:ad:c2:9c:a0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B914C61A5DB1C65E66CE5AF64C3E20C201962B5B Validity Not Before: Mar 1 12:26:55 2026 GMT Not After : Mar 4 22:25:55 2026 GMT Subject: CN=26EBD1554C3675C72AA4C7281336E4937E22746A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:47:14:c5:a2:89:28:6e:78:a4:7e:0f:97: 63:0c:c9:56:08:7f:15:7a:5a:67:92:f8:c4:86:fd: b7:86:e9:c3:2c:d2:10:f1:7d:37:d7:99:42:ba:c2: 95:e8:02:f7:c0:65:18:3e:3b:4f:b6:27:be:28:33: f8:e7:af:01:d9:7e:36:25:52:5e:b9:48:55:c6:c9: fd:ec:74:ec:3c:c6:c2:05:a0:25:87:0f:22:99:80: 49:16:77:9b:12:43:3c:43:d3:f6:fa:c2:7d:86:9f: dc:05:9b:69:e2:0f:5c:63:47:67:2f:f0:39:40:a5: 59:16:35:f1:a2:8a:cc:c4:e4:8d:f9:43:83:7a:8c: 8c:88:d5:28:a9:5e:49:84:b5:a5:88:92:81:92:77: ea:be:2e:d8:c6:ca:c6:aa:01:89:fb:c0:b1:66:a5: 5d:70:52:74:7c:a6:0f:59:f0:2a:5a:e9:77:b1:89: ea:ca:d1:37:8e:ca:c3:98:03:94:a7:6e:5b:26:68: b5:42:37:65:43:53:bc:30:9c:f7:36:96:d7:8d:64: a0:ae:92:38:05:62:8a:a2:7c:08:4b:17:72:bf:8a: 02:00:97:ce:9f:59:b6:c9:55:e9:3f:cf:5e:65:4b: d9:a4:df:47:57:dc:97:c4:7f:ec:d1:d6:aa:7f:cc: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EB:D1:55:4C:36:75:C7:2A:A4:C7:28:13:36:E4:93:7E:22:74:6A X509v3 Authority Key Identifier: keyid:B9:14:C6:1A:5D:B1:C6:5E:66:CE:5A:F6:4C:3E:20:C2:01:96:2B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8dc13ff-5b10-44a6-b6f3-8f035e5897d8/0/B914C61A5DB1C65E66CE5AF64C3E20C201962B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fd:09:f5:d3:e3:1b:44:04:6c:c2:9a:30:95:22:c1:40:7d: 0e:36:54:70:e5:e6:bc:b2:36:9f:71:17:a8:51:1e:77:5b:df: b1:f5:23:bf:6d:88:d6:84:04:ce:02:a1:ac:45:40:44:dc:ad: b6:87:cf:54:3d:86:c7:99:f9:bd:f0:49:da:16:1d:3d:64:e5: d2:b8:c7:74:ef:16:03:e0:71:74:d5:7b:4c:84:b8:1d:d1:7f: 53:14:63:06:8e:a9:a7:0b:2d:35:d2:3f:b7:e3:02:91:f8:7b: 76:ec:08:1c:fb:b0:ed:e9:47:32:87:8f:96:5f:9d:99:b1:15: 8f:cc:9a:c5:9e:c8:de:4f:48:6f:4f:1f:18:b5:94:bc:cd:2e: e2:67:27:61:c2:20:d4:99:5f:f0:fa:48:f6:1f:54:a9:7c:cb: a1:20:19:c2:6d:79:1d:22:06:d9:d1:7b:d0:8a:1c:ab:62:86: 06:c0:02:6b:34:45:dc:58:8d:91:52:52:47:d0:ef:ba:09:15: 01:ff:63:eb:ca:39:33:86:d1:a0:c4:fc:ca:27:8a:b7:59:bd: 6a:8f:74:3d:1a:38:17:4f:a8:87:54:a8:1a:b0:1b:f5:b5:d9: ad:2e:15:17:51:50:5e:42:62:f7:2a:35:73:f5:fc:4b:26:06: 26:73:2d:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHYvI9B7DwfuMQaHv55s4rcKcoOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIw MTk2MkI1QjAeFw0yNjAzMDExMjI2NTVaFw0yNjAzMDQyMjI1NTVaMDMxMTAvBgNV BAMTKDI2RUJEMTU1NEMzNjc1QzcyQUE0QzcyODEzMzZFNDkzN0UyMjc0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hUcUxaKJKG54pH4Pl2MMyVYI fxV6WmeS+MSG/beG6cMs0hDxfTfXmUK6wpXoAvfAZRg+O0+2J74oM/jnrwHZfjYl Ul65SFXGyf3sdOw8xsIFoCWHDyKZgEkWd5sSQzxD0/b6wn2Gn9wFm2niD1xjR2cv 8DlApVkWNfGiiszE5I35Q4N6jIyI1SipXkmEtaWIkoGSd+q+LtjGysaqAYn7wLFm pV1wUnR8pg9Z8Cpa6XexierK0TeOysOYA5SnblsmaLVCN2VDU7wwnPc2lteNZKCu kjgFYoqifAhLF3K/igIAl86fWbbJVek/z15lS9mk30dX3JfEf+zR1qp/zHvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJuvRVUw2dccqpMcoEzbkk34idGowHwYDVR0j BBgwFoAUuRTGGl2xxl5mzlr2TD4gwgGWK1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRjMTNmZi01YjEwLTQ0YTYtYjZmMy04ZjAzNWU1ODk3ZDgvMC9COTE0QzYxQTVE QjFDNjVFNjZDRTVBRjY0QzNFMjBDMjAxOTYyQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIwQzIwMTk2 MkI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkYzEzZmYtNWIxMC00NGE2LWI2 ZjMtOGYwMzVlNTg5N2Q4LzAvQjkxNEM2MUE1REIxQzY1RTY2Q0U1QUY2NEMzRTIw QzIwMTk2MkI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF39CfXT4xtEBGzCmjCVIsFAfQ42VHDl5ryy Np9xF6hRHndb37H1I79tiNaEBM4CoaxFQETcrbaHz1Q9hseZ+b3wSdoWHT1k5dK4 x3TvFgPgcXTVe0yEuB3Rf1MUYwaOqacLLTXSP7fjApH4e3bsCBz7sO3pRzKHj5Zf nZmxFY/MmsWeyN5PSG9PHxi1lLzNLuJnJ2HCINSZX/D6SPYfVKl8y6EgGcJteR0i BtnRe9CKHKtihgbAAms0RdxYjZFSUkfQ77oJFQH/Y+vKOTOG0aDE/MonirdZvWqP dD0aOBdPqIdUqBqwG/W12a0uFRdRUF5CYvcqNXP1/EsmBiZzLe4= -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:30 2026 by rpki-client