$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: EtH2zINYwhIIIS9/tIN8x5Jg3t7YHAKfLOM+U4JS3nM= Subject key identifier: 57:65:95:8C:BB:3B:14:5E:73:28:50:C2:A9:1B:D1:FE:8B:C2:B4:38 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 543316C0CBAAF87F27BC464B2D35A4D9DA58E368 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 0143 Signing time: Sat 28 Feb 2026 00:20:02 +0000 Manifest this update: Sat 28 Feb 2026 00:15:02 +0000 Manifest next update: Tue 03 Mar 2026 12:11:02 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: cFu5nteBBzan5faf9I4u2CSs1idRr42+5NP3IOF4DXY=) 2: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: WZyPn+mq0I+eE3vcXNaLpwRID4wqkE6/jQ3zY3AffcI=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: P+lInV3ols6ftIxSpMHmtBDcdqTmvL+gkgGsnZZSjLQ=) 4: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: bc8k2PQ/zl8GgU+nW/7a/bERCoS7NPdyfdO0TdoDSKQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:33:16:c0:cb:aa:f8:7f:27:bc:46:4b:2d:35:a4:d9:da:58:e3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Feb 28 00:15:02 2026 GMT Not After : Mar 3 12:11:02 2026 GMT Subject: CN=5765958CBB3B145E732850C2A91BD1FE8BC2B438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7e:22:82:5f:22:ed:7a:5a:b7:e1:fa:98:67: a0:53:54:7b:2d:cf:92:e3:08:e2:89:6a:b0:01:13: 03:bc:a2:f4:a1:6b:62:e1:85:37:d8:27:ec:b4:af: 4e:72:e9:40:12:59:b3:26:f4:8f:00:60:5d:2e:12: 97:c4:2d:2b:5b:1b:c7:c2:7d:5c:2e:06:a6:33:06: 65:17:37:02:dd:18:c6:24:3c:7a:03:8b:56:d0:22: 06:c5:fc:a1:5d:2f:9a:77:d0:2d:04:e7:ba:09:1c: dd:85:d2:5c:c9:8b:65:f5:dd:61:04:c3:f9:5b:df: d9:d5:f3:1a:b5:da:79:65:81:4d:d5:a3:d7:0f:cc: ca:97:5c:89:61:5c:07:8e:3e:80:9b:20:dd:37:a6: 7d:0e:4d:ed:b6:e8:c3:94:d3:f4:fc:0e:d4:97:66: 10:10:8b:df:96:60:d6:fc:3d:e2:1b:53:9c:d3:f9: b7:48:3e:2b:10:bc:5a:50:6f:4c:d3:24:14:de:d1: f3:3a:6d:11:4d:89:b7:91:65:c2:e2:4f:be:25:26: cc:f8:a8:cd:77:5c:8f:ec:86:5e:a5:50:1d:c9:3c: 71:ba:0d:a5:f1:5b:ae:12:88:5e:02:00:9d:dc:80: 0a:9e:65:03:94:a4:4e:45:72:c0:5d:97:7f:04:a6: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:65:95:8C:BB:3B:14:5E:73:28:50:C2:A9:1B:D1:FE:8B:C2:B4:38 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:33:c2:87:3e:f7:5e:cc:c2:16:99:06:b3:ba:79:0c:9a:78: 5c:1d:cd:5a:c6:20:78:53:f6:3e:8d:ae:91:50:29:aa:1e:ef: b5:09:07:7b:9a:d2:ed:ed:83:7a:d7:cf:99:4e:a6:6c:bc:d2: 32:89:e2:27:b6:c4:27:04:6b:96:d5:c7:37:ee:df:55:3e:18: 1a:83:a2:81:46:bc:1b:80:8a:db:b1:dc:3d:46:bc:a1:7d:65: 9a:16:6f:91:38:53:72:a0:95:ac:7c:6b:a4:5f:27:48:30:ec: 1c:b6:a2:11:3a:6a:37:0d:fd:e5:17:69:d8:2e:68:ae:be:d3: f8:35:20:3d:2f:7e:1b:95:1c:f3:ad:76:32:03:ee:11:11:c3: 05:8b:84:1d:ee:67:bf:b2:89:f8:8e:4e:f4:aa:70:2f:e4:0b: cc:0c:ba:7b:cd:f3:d0:fb:73:08:ef:17:14:19:6e:86:eb:3d: 64:bf:5b:42:f8:02:8a:db:03:aa:47:21:c6:fb:66:b6:96:eb: e6:4e:3c:d8:5b:2e:f5:57:20:02:45:6c:f8:8b:4b:17:4a:98: ae:62:e6:dc:cb:9e:b0:4e:d6:60:6e:50:ef:e8:15:cf:ab:ed: 64:39:4f:4c:9d:ca:68:1a:e7:e0:6b:97:60:57:1e:42:f7:85: 88:a6:6e:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDMWwMuq+H8nvEZLLTWk2dpY42gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNjAyMjgwMDE1MDJaFw0yNjAzMDMxMjExMDJaMDMxMTAvBgNV BAMTKDU3NjU5NThDQkIzQjE0NUU3MzI4NTBDMkE5MUJEMUZFOEJDMkI0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgfiKCXyLtelq34fqYZ6BTVHst z5LjCOKJarABEwO8ovSha2LhhTfYJ+y0r05y6UASWbMm9I8AYF0uEpfELStbG8fC fVwuBqYzBmUXNwLdGMYkPHoDi1bQIgbF/KFdL5p30C0E57oJHN2F0lzJi2X13WEE w/lb39nV8xq12nllgU3Vo9cPzMqXXIlhXAeOPoCbIN03pn0OTe226MOU0/T8DtSX ZhAQi9+WYNb8PeIbU5zT+bdIPisQvFpQb0zTJBTe0fM6bRFNibeRZcLiT74lJsz4 qM13XI/shl6lUB3JPHG6DaXxW64SiF4CAJ3cgAqeZQOUpE5FcsBdl38Eph17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2WVjLs7FF5zKFDCqRvR/ovCtDgwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYzwoc+917MwhaZBrO6eQyaeFwdzVrGIHhT 9j6NrpFQKaoe77UJB3ua0u3tg3rXz5lOpmy80jKJ4ie2xCcEa5bVxzfu31U+GBqD ooFGvBuAitux3D1GvKF9ZZoWb5E4U3Kglax8a6RfJ0gw7By2ohE6ajcN/eUXadgu aK6+0/g1ID0vfhuVHPOtdjID7hERwwWLhB3uZ7+yifiOTvSqcC/kC8wMunvN89D7 cwjvFxQZbobrPWS/W0L4AorbA6pHIcb7ZraW6+ZOPNhbLvVXIAJFbPiLSxdKmK5i 5tzLnrBO1mBuUO/oFc+r7WQ5T0ydymga5+Brl2BXHkL3hYimbpg= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:06 2026 by rpki-client