$ rpki-client -vvf repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft (raw, json) Hash identifier: ZKd9WwxC1E2Vn9TrPKfmSf4T/8xFfAy9EDPNp5aQVt0= Subject key identifier: 12:A9:72:85:F3:DE:05:00:05:7E:DB:B8:66:A6:00:AD:26:52:F1:42 Authority key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Certificate issuer: /CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Certificate serial: 21743EC6C5351D0FE9D4235844705EC5619D9712 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft Manifest number: 01D2 Signing time: Sun 01 Mar 2026 05:44:46 +0000 Manifest this update: Sun 01 Mar 2026 05:39:46 +0000 Manifest next update: Wed 04 Mar 2026 07:07:46 +0000 Files and hashes: 1: 3130332e3133302e3139382e302f32332d3234203d3e20313338303737.roa (hash: GBdm9qQ0p29KR8e28QB9UjrYbB7/EDKaMJEitqFkR/M=) 2: 3131372e3130332e3131362e302f32342d3234203d3e20313338303737.roa (hash: XZBWXgwi6/bY0uActUG5TDU+WKOBs9TQUHXitVU+Zwk=) 3: 3136302e32302e3232322e302f32342d3234203d3e20313338303737.roa (hash: qNVUMuIrsRym1al7QBcjtB+KpEbJtW/3ayQKIjCttbA=) 4: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl (hash: GSPCW3kVJ3lNkJJuPhIrYQWvaAGTJl5Cp7NuDxzf49A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:74:3e:c6:c5:35:1d:0f:e9:d4:23:58:44:70:5e:c5:61:9d:97:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Validity Not Before: Mar 1 05:39:46 2026 GMT Not After : Mar 4 07:07:46 2026 GMT Subject: CN=12A97285F3DE0500057EDBB866A600AD2652F142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:00:d0:b3:d1:ad:e3:bf:de:e4:73:93:da: 64:2c:b5:80:bd:86:07:d2:20:6c:b1:36:be:22:68: 4a:0d:2f:d2:91:07:91:56:cc:f7:1f:d8:55:21:54: 7a:74:f6:3f:c0:ba:53:e8:81:d5:80:58:cb:af:b3: 5c:7f:12:99:91:20:2e:78:13:5d:6f:db:6e:3e:1b: 32:13:15:6c:fa:7a:05:20:6c:72:b9:92:24:5f:a8: 20:f3:7d:3d:5e:9a:e8:d6:cf:56:e4:a1:ac:cf:55: 0d:04:b8:b6:f5:91:3d:be:74:dc:33:ce:df:d5:b9: 99:f2:a2:dd:33:71:92:03:ec:df:25:e0:00:22:3d: 55:6d:fd:c9:74:2c:be:e7:cd:74:9e:60:c5:d9:fd: 96:f4:17:3d:43:19:00:db:85:5e:a3:ea:b8:1b:70: 82:e9:a1:30:23:ee:13:e5:1c:fb:ec:37:32:1a:10: f3:ba:9b:79:c5:ef:6c:a7:be:b3:9c:be:ac:38:0b: 61:64:35:96:81:de:75:eb:38:0d:c5:1c:ef:be:0e: ff:cc:23:8b:ad:b5:15:19:ef:0d:65:e7:54:65:7b: 71:e9:12:f7:62:d8:d8:b4:39:13:0f:c2:d5:b8:72: 0c:96:04:81:9a:17:8e:1e:60:05:4d:74:d9:90:4e: 54:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:72:85:F3:DE:05:00:05:7E:DB:B8:66:A6:00:AD:26:52:F1:42 X509v3 Authority Key Identifier: keyid:B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:29:25:4a:e4:d0:6d:92:be:d4:71:be:6c:09:f1:54:db:7a: e7:4f:d9:1a:db:81:5d:44:5b:28:8e:62:40:bf:66:29:b4:19: 18:81:01:87:58:e1:0d:8d:2f:2d:30:4b:39:46:47:f2:fd:9a: 0c:d1:4d:ef:da:aa:64:f4:6e:67:04:b9:80:b3:a5:92:d2:ce: 29:b4:9c:59:ac:6f:3d:b5:09:53:e7:cf:91:73:d8:99:aa:d8: a1:9e:50:11:f7:69:6f:5b:8e:f9:8f:b3:8b:4c:95:8b:1e:a4: 16:d9:2c:05:db:66:1b:b7:16:cd:51:bc:92:7a:99:f5:5c:a1: 91:8e:93:6b:ca:39:db:6a:f9:6a:2e:64:35:c2:54:fa:de:8d: 64:81:2d:57:7e:47:2b:f5:0c:b0:0a:6d:db:c0:c8:cf:da:6d: 3b:72:2a:81:ad:77:52:1b:7c:55:34:41:ec:2e:ff:19:dd:e3: 81:ae:d9:6d:66:b3:d6:3b:fd:d8:83:b1:a3:b3:65:ad:e2:a5: bd:27:5d:c1:72:b4:86:8f:b9:0e:90:7e:10:c3:87:6c:62:be: 21:16:78:f2:01:45:23:81:71:13:90:bc:06:b7:50:f0:3e:7a: f2:9e:c8:91:a2:a5:31:8f:97:fe:f8:b2:1e:f1:8c:2e:e1:da: 43:36:fa:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXQ+xsU1HQ/p1CNYRHBexWGdlxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3 RTkzNzZFNDAeFw0yNjAzMDEwNTM5NDZaFw0yNjAzMDQwNzA3NDZaMDMxMTAvBgNV BAMTKDEyQTk3Mjg1RjNERTA1MDAwNTdFREJCODY2QTYwMEFEMjY1MkYxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjQDQs9Gt47/e5HOT2mQstYC9 hgfSIGyxNr4iaEoNL9KRB5FWzPcf2FUhVHp09j/AulPogdWAWMuvs1x/EpmRIC54 E11v224+GzITFWz6egUgbHK5kiRfqCDzfT1emujWz1bkoazPVQ0EuLb1kT2+dNwz zt/VuZnyot0zcZID7N8l4AAiPVVt/cl0LL7nzXSeYMXZ/Zb0Fz1DGQDbhV6j6rgb cILpoTAj7hPlHPvsNzIaEPO6m3nF72ynvrOcvqw4C2FkNZaB3nXrOA3FHO++Dv/M I4uttRUZ7w1l51Rle3HpEvdi2Ni0ORMPwtW4cgyWBIGaF44eYAVNdNmQTlTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqlyhfPeBQAFftu4ZqYArSZS8UIwHwYDVR0j BBgwFoAUuHfNHFQsPeLLuO8VHxebhX6TduQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMC9CODc3Q0QxQzU0 MkMzREUyQ0JCOEVGMTUxRjE3OUI4NTdFOTM3NkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlCODU3RTkz NzZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWY2ZDE4NWUtZDRmNC00ODIwLWI0 YjYtNzk4YzMwN2FkN2U1LzAvQjg3N0NEMUM1NDJDM0RFMkNCQjhFRjE1MUYxNzlC ODU3RTkzNzZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgpJUrk0G2SvtRxvmwJ8VTbeudP2RrbgV1E WyiOYkC/Zim0GRiBAYdY4Q2NLy0wSzlGR/L9mgzRTe/aqmT0bmcEuYCzpZLSzim0 nFmsbz21CVPnz5Fz2Jmq2KGeUBH3aW9bjvmPs4tMlYsepBbZLAXbZhu3Fs1RvJJ6 mfVcoZGOk2vKOdtq+WouZDXCVPrejWSBLVd+Ryv1DLAKbdvAyM/abTtyKoGtd1Ib fFU0Qewu/xnd44Gu2W1ms9Y7/diDsaOzZa3ipb0nXcFytIaPuQ6QfhDDh2xiviEW ePIBRSOBcROQvAa3UPA+evKeyJGipTGPl/74sh7xjC7h2kM2+go= -----END CERTIFICATE-----Generated at Mon Mar 2 21:12:33 2026 by rpki-client