$ rpki-client -vvf repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft File: BB64FDB64281947C3567104C08735A011C6210F4.mft (raw, json) Hash identifier: EcZU7DlcsgdztuKSjaqbrF0BnFd4uPDDGQ0J74umHFQ= Subject key identifier: 3A:41:9F:7E:AC:D5:6A:5E:BD:A8:99:78:29:0F:D9:FF:37:11:E6:AB Authority key identifier: BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 Certificate issuer: /CN=BB64FDB64281947C3567104C08735A011C6210F4 Certificate serial: 3442C6BA4E65C9BB03059E1BDEE6698960A8DD34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft Manifest number: 03DA Signing time: Sat 28 Feb 2026 21:12:00 +0000 Manifest this update: Sat 28 Feb 2026 21:07:00 +0000 Manifest next update: Wed 04 Mar 2026 04:26:00 +0000 Files and hashes: 1: 3130332e3136392e3139322e302f32332d3234203d3e20313432333438.roa (hash: WO1pfWHoqTdWNx4bevNPCtJdd2Sq+t2I2uTA3HBPJBM=) 2: BB64FDB64281947C3567104C08735A011C6210F4.crl (hash: Ye6ZyUOZO2iTMBEclwWm7AJy1ePUaJm4+OEhmvFCly8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:42:c6:ba:4e:65:c9:bb:03:05:9e:1b:de:e6:69:89:60:a8:dd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB64FDB64281947C3567104C08735A011C6210F4 Validity Not Before: Feb 28 21:07:00 2026 GMT Not After : Mar 4 04:26:00 2026 GMT Subject: CN=3A419F7EACD56A5EBDA89978290FD9FF3711E6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:41:55:e3:cb:cd:19:a7:76:b5:70:40:05: ee:c4:3e:4e:66:b8:30:d6:8e:3a:38:e4:35:92:e2: 83:68:f3:f8:25:7a:c3:30:2a:39:b7:30:10:46:c8: 1b:58:9c:83:ef:5e:f6:18:a5:2f:76:fd:65:57:9e: 70:47:8c:70:04:47:50:9d:27:99:f9:75:d4:2f:26: 8b:43:ae:86:fb:9f:4a:29:2a:19:b0:ba:0f:91:e2: 1a:85:cb:fa:76:fc:92:36:fa:4f:c6:12:c7:6b:46: 24:e4:a6:73:74:d2:ff:a8:01:ab:5b:93:df:ac:b2: fa:3d:a6:17:21:c9:58:77:78:5b:b5:c9:df:08:9e: 10:5b:d4:98:da:aa:f3:a0:70:e5:96:8a:81:c0:d7: a7:cd:0c:c8:5a:c2:af:84:f4:22:bf:c8:0f:76:ad: a6:c9:da:b4:7f:62:2d:a9:df:be:ba:ce:79:0e:b5: b8:d3:69:d3:64:9b:a0:da:d4:0f:57:ac:d6:89:ca: db:d4:ab:a4:62:5f:4b:a8:c1:93:a2:f0:00:b8:b9: 6a:d8:bd:28:43:21:78:a0:69:85:eb:6b:6c:dd:b8: a7:93:6f:ac:cc:50:1e:0c:25:06:4a:3f:fb:37:24: 16:0f:e1:db:64:9b:8c:db:d9:70:43:85:ba:fd:dc: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:41:9F:7E:AC:D5:6A:5E:BD:A8:99:78:29:0F:D9:FF:37:11:E6:AB X509v3 Authority Key Identifier: keyid:BB:64:FD:B6:42:81:94:7C:35:67:10:4C:08:73:5A:01:1C:62:10:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB64FDB64281947C3567104C08735A011C6210F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4a02d37-3b9d-453a-8c81-328e540141fd/0/BB64FDB64281947C3567104C08735A011C6210F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:39:bc:2a:9d:ce:db:c1:d6:55:b9:5c:58:37:29:e6:e8:54: 3f:1b:09:38:4e:49:fe:e1:b2:3a:f8:d3:a1:0f:ba:0c:61:62: 53:76:c5:27:1a:68:f5:a9:b7:af:83:e7:da:d6:f2:f7:c6:c2: 36:ec:bd:ad:8a:99:bd:2d:33:1d:e7:48:39:0a:9e:79:11:94: 30:f9:c5:5e:20:4a:0e:15:12:ee:65:0a:ee:09:83:c4:c6:f8: 6b:a5:99:31:89:a2:b7:b0:be:40:94:6a:fd:05:43:51:2e:4d: ec:e3:d1:63:49:80:1b:30:3e:77:35:84:d2:fc:6f:f6:86:a5: c0:c9:4c:c5:25:82:18:9a:1b:c9:16:7f:61:61:78:26:0e:fe: 68:96:41:c2:0f:8b:0b:c8:a0:06:d0:23:6a:fd:6a:47:6b:3f: 26:5a:b2:5b:4f:8a:f8:88:4a:24:5d:30:31:7a:df:1e:91:f1: 45:14:51:19:76:22:bd:41:30:38:90:f1:c0:27:ef:2f:48:2e: 05:02:d2:2e:6c:1f:ed:60:45:64:22:a7:b9:f1:58:db:f1:43: 1c:9c:c2:20:85:c5:78:4d:00:d7:14:80:49:fd:2d:b9:73:6d: 93:27:42:b2:44:d2:ee:dc:f7:e2:0c:d9:55:35:51:29:d6:d3: bd:50:ab:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNELGuk5lybsDBZ4b3uZpiWCo3TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDEx QzYyMTBGNDAeFw0yNjAyMjgyMTA3MDBaFw0yNjAzMDQwNDI2MDBaMDMxMTAvBgNV BAMTKDNBNDE5RjdFQUNENTZBNUVCREE4OTk3ODI5MEZEOUZGMzcxMUU2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyEFV48vNGad2tXBABe7EPk5m uDDWjjo45DWS4oNo8/glesMwKjm3MBBGyBtYnIPvXvYYpS92/WVXnnBHjHAER1Cd J5n5ddQvJotDrob7n0opKhmwug+R4hqFy/p2/JI2+k/GEsdrRiTkpnN00v+oAatb k9+ssvo9phchyVh3eFu1yd8InhBb1JjaqvOgcOWWioHA16fNDMhawq+E9CK/yA92 rabJ2rR/Yi2p3766znkOtbjTadNkm6Da1A9XrNaJytvUq6RiX0uowZOi8AC4uWrY vShDIXigaYXra2zduKeTb6zMUB4MJQZKP/s3JBYP4dtkm4zb2XBDhbr93Gm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkGffqzVal69qJl4KQ/Z/zcR5qswHwYDVR0j BBgwFoAUu2T9tkKBlHw1ZxBMCHNaARxiEPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGEwMmQzNy0zYjlkLTQ1M2EtOGM4MS0zMjhlNTQwMTQxZmQvMC9CQjY0RkRCNjQy ODE5NDdDMzU2NzEwNEMwODczNUEwMTFDNjIxMEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVBMDExQzYy MTBGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRhMDJkMzctM2I5ZC00NTNhLThj ODEtMzI4ZTU0MDE0MWZkLzAvQkI2NEZEQjY0MjgxOTQ3QzM1NjcxMDRDMDg3MzVB MDExQzYyMTBGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk5vCqdztvB1lW5XFg3KeboVD8bCThOSf7h sjr406EPugxhYlN2xScaaPWpt6+D59rW8vfGwjbsva2Kmb0tMx3nSDkKnnkRlDD5 xV4gSg4VEu5lCu4Jg8TG+GulmTGJorewvkCUav0FQ1EuTezj0WNJgBswPnc1hNL8 b/aGpcDJTMUlghiaG8kWf2FheCYO/miWQcIPiwvIoAbQI2r9akdrPyZasltPiviI SiRdMDF63x6R8UUUURl2Ir1BMDiQ8cAn7y9ILgUC0i5sH+1gRWQip7nxWNvxQxyc wiCFxXhNANcUgEn9LblzbZMnQrJE0u7c9+IM2VU1USnW071Qq6I= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:08 2026 by rpki-client