$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: joSaeSZ4y2jr/pvtjTkoxd32mF4lX5WYIJDWqYN5ovw= Subject key identifier: 49:35:22:3E:66:69:60:AF:28:08:67:CA:87:A7:86:61:C9:0A:72:BB Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 3049BB6A84B85ED454C609A361C8D9F9C07A5048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 051A Signing time: Sat 28 Feb 2026 14:21:20 +0000 Manifest this update: Sat 28 Feb 2026 14:16:19 +0000 Manifest next update: Tue 03 Mar 2026 19:43:19 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: 9H+0DBTTTJieEu88BECpqtaxTGMDBGcs+ikTmW5IqWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:49:bb:6a:84:b8:5e:d4:54:c6:09:a3:61:c8:d9:f9:c0:7a:50:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Feb 28 14:16:19 2026 GMT Not After : Mar 3 19:43:19 2026 GMT Subject: CN=4935223E666960AF280867CA87A78661C90A72BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:34:0a:60:33:36:b5:ed:1f:0a:a8:e4:9a: 4e:70:64:be:6d:7a:d1:8f:1c:ba:3d:ef:e8:0b:7e: cc:62:7f:7b:5b:21:ef:0e:e8:d6:ba:9b:82:84:01: 12:ba:61:db:88:60:4b:a5:3b:75:61:62:0a:0c:db: d5:d3:52:5b:22:f3:09:e0:7d:34:46:5d:49:ca:fe: 80:cd:97:3b:d8:03:9c:dd:1f:c9:51:9b:b2:0e:8d: 97:9d:aa:47:80:b7:7a:44:ce:34:e0:fd:34:35:14: 2a:b9:1c:69:a6:7f:ee:32:43:ee:4e:db:3b:22:18: 4e:e4:1b:6c:40:97:19:28:a8:71:71:0b:dc:eb:3e: 19:de:b8:00:83:b1:0a:d6:56:5d:be:61:e1:78:56: fd:d4:6b:d3:00:15:86:da:ab:ca:20:13:8a:d3:2b: 44:68:20:ac:56:09:10:95:bd:cb:f0:d5:89:4b:6b: 0a:33:9e:47:39:dc:31:3b:54:3f:67:1c:2c:a2:91: 30:03:37:70:73:ed:ef:27:82:dd:d3:17:05:9c:3a: 57:14:1e:54:44:a0:28:f8:4a:c3:e3:66:ea:62:fa: 1f:e7:cb:b7:70:d4:fb:a3:33:32:f0:ea:09:cd:d5: 5d:0a:31:7c:6e:ce:c9:24:33:b6:fd:ed:f6:43:ce: b5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:35:22:3E:66:69:60:AF:28:08:67:CA:87:A7:86:61:C9:0A:72:BB X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7f:e3:14:72:6f:d0:a0:34:dd:33:3e:2d:61:8f:65:0a:bc: 1b:be:85:e7:47:02:56:56:29:35:b1:ab:5c:8e:d8:e1:5b:01: b7:9a:87:15:b5:b2:6a:63:66:da:2f:c5:02:d0:cc:e7:44:70: 10:a7:7d:66:99:48:f7:7b:fd:7a:74:bc:e5:03:5b:12:8a:25: b4:b7:bc:a2:d3:8f:fe:59:f9:7d:c9:db:cf:9e:c3:6b:d1:1f: 68:72:95:ea:28:a2:07:3d:75:2d:a4:7b:bb:e1:d6:82:d4:ad: bd:06:df:28:b4:b7:b9:fd:91:86:49:a8:5d:99:55:7b:c6:54: 7d:d6:a0:52:3d:96:e9:4c:a8:09:4e:5a:bb:a4:bf:c6:08:f7: cf:95:e8:ae:8a:7c:24:07:71:3b:e0:b7:00:01:4e:3e:13:6e: 4b:5d:9d:44:e6:21:4f:9d:89:ca:99:87:3f:73:5e:ed:f6:ca: 71:89:62:d1:ef:e7:17:3d:89:f7:47:6f:64:44:f8:c4:ee:03: a6:00:36:20:54:04:5c:1f:ab:1e:0a:86:32:49:32:17:02:60: 4f:42:29:d2:26:28:19:03:62:66:65:1c:36:b8:a9:ee:1e:ad: fd:57:89:18:36:a5:87:ab:a5:1c:76:69:de:9b:01:43:11:7c: bd:5d:7a:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMEm7aoS4XtRUxgmjYcjZ+cB6UEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNjAyMjgxNDE2MTlaFw0yNjAzMDMxOTQzMTlaMDMxMTAvBgNV BAMTKDQ5MzUyMjNFNjY2OTYwQUYyODA4NjdDQTg3QTc4NjYxQzkwQTcyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ODQKYDM2te0fCqjkmk5wZL5t etGPHLo97+gLfsxif3tbIe8O6Na6m4KEARK6YduIYEulO3VhYgoM29XTUlsi8wng fTRGXUnK/oDNlzvYA5zdH8lRm7IOjZedqkeAt3pEzjTg/TQ1FCq5HGmmf+4yQ+5O 2zsiGE7kG2xAlxkoqHFxC9zrPhneuACDsQrWVl2+YeF4Vv3Ua9MAFYbaq8ogE4rT K0RoIKxWCRCVvcvw1YlLawoznkc53DE7VD9nHCyikTADN3Bz7e8ngt3TFwWcOlcU HlREoCj4SsPjZupi+h/ny7dw1PujMzLw6gnN1V0KMXxuzskkM7b97fZDzrWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSTUiPmZpYK8oCGfKh6eGYckKcrswHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp/4xRyb9CgNN0zPi1hj2UKvBu+hedHAlZW KTWxq1yO2OFbAbeahxW1smpjZtovxQLQzOdEcBCnfWaZSPd7/Xp0vOUDWxKKJbS3 vKLTj/5Z+X3J28+ew2vRH2hyleooogc9dS2ke7vh1oLUrb0G3yi0t7n9kYZJqF2Z VXvGVH3WoFI9lulMqAlOWrukv8YI98+V6K6KfCQHcTvgtwABTj4TbktdnUTmIU+d icqZhz9zXu32ynGJYtHv5xc9ifdHb2RE+MTuA6YANiBUBFwfqx4KhjJJMhcCYE9C KdImKBkDYmZlHDa4qe4erf1XiRg2pYerpRx2ad6bAUMRfL1dego= -----END CERTIFICATE-----Generated at Mon Mar 2 12:13:52 2026 by rpki-client