$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: ySGy0JmE4dUFmn6cOTHrzOkauUAru1iL93+e9f4206E= Subject key identifier: 67:CD:F1:3F:1D:E0:58:15:5D:24:06:44:A9:9B:E4:10:4F:14:73:D1 Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 61BE3FE7305BC0C87A24CF662EBCA665BB01BA85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 0128 Signing time: Sun 01 Mar 2026 16:52:12 +0000 Manifest this update: Sun 01 Mar 2026 16:47:12 +0000 Manifest next update: Thu 05 Mar 2026 03:33:12 +0000 Files and hashes: 1: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: xVhdnNQ8fvmzcEhUmVc5PHlz64UI+u58L2zOhpkg7sQ=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=) 3: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: tHzJEc4tVJbK/5ReWDfkb8wKbAgEEvzCH+vbGF7LXac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:be:3f:e7:30:5b:c0:c8:7a:24:cf:66:2e:bc:a6:65:bb:01:ba:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Mar 1 16:47:12 2026 GMT Not After : Mar 5 03:33:12 2026 GMT Subject: CN=67CDF13F1DE058155D240644A99BE4104F1473D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:a5:d2:76:06:0f:79:b0:4d:af:6f:43:7b: 14:80:9b:7a:e4:96:f9:14:c2:34:1d:42:18:52:80: 93:15:fa:e8:5f:72:f3:db:04:f6:c0:4e:78:5b:9e: 4b:63:39:0f:8e:a9:e8:c4:a2:f0:dd:1f:ef:5f:95: 66:78:9f:21:a4:25:2f:90:d6:ae:7c:13:2e:16:33: 9a:ac:47:02:76:2e:ee:70:c7:50:e0:ad:bd:33:6f: 9f:17:cc:84:49:98:d6:8f:bd:cd:52:bc:87:40:92: 80:51:38:b1:ad:9c:63:bc:4d:24:f8:b6:e3:0f:53: dc:cd:2f:85:e9:ec:b8:ae:e8:cf:0f:a6:40:5a:32: f6:0d:42:07:96:61:6d:26:0f:97:d8:55:52:c0:bc: 96:97:4a:05:f9:a6:39:e6:62:ea:4c:30:0b:88:87: c4:f5:7f:bd:ea:e6:0a:68:ae:fc:3a:fe:c8:c4:8c: 31:2c:34:4a:7c:3c:fc:3e:65:8f:ea:74:07:21:19: ec:94:cd:af:78:35:e1:73:4f:1e:03:e7:bc:e4:f1: cd:dd:51:84:f5:f5:86:e2:b7:44:40:03:28:7d:11: 85:05:b9:f1:65:05:c4:4c:cd:d0:1b:10:f3:9c:21: 57:9e:6a:0a:23:84:70:54:ac:c1:4a:60:fa:d4:38: d5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CD:F1:3F:1D:E0:58:15:5D:24:06:44:A9:9B:E4:10:4F:14:73:D1 X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6a:69:9d:0c:3e:9c:05:1b:99:5a:4f:37:6a:c5:07:38:7d: 32:23:da:9a:d0:14:97:2e:c3:d1:c9:1e:f7:3d:dd:c7:1e:20: 5d:ed:46:99:f5:ab:f5:45:ac:3b:d0:75:6b:ba:a4:04:de:62: 47:d3:69:ae:5c:2b:de:5a:62:5b:24:b3:8d:0d:66:0c:41:d7: 1c:c2:0b:4a:e3:9d:5b:b9:0f:db:96:8c:37:e7:71:88:8c:27: d2:01:ce:8f:3b:38:ca:d6:30:9f:23:72:60:da:be:1f:4e:8a: c9:1c:b6:cf:0e:5b:03:77:d2:06:fd:dc:47:0c:9a:e3:37:b8: 98:25:03:9e:6b:2d:a7:07:c9:ba:34:b5:d7:2a:f3:df:2a:83: 74:12:4c:02:92:d8:9d:7e:a3:cd:f5:46:75:c8:8d:33:3d:16: be:70:57:3b:75:47:6d:99:54:01:7f:b5:88:57:51:1a:c1:3d: 6c:fe:f2:5a:ba:7f:c9:5a:a4:1d:4d:dc:26:e7:2a:d2:97:08: c7:69:fe:63:42:f5:b2:d1:46:01:99:fa:18:1d:24:84:57:b3: 55:3d:08:40:18:94:83:d5:48:41:68:a7:a2:89:29:cf:20:e9: 5a:e3:29:34:6c:62:03:9d:46:4c:a3:32:70:8a:f8:68:ac:85: 1e:73:83:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYb4/5zBbwMh6JM9mLrymZbsBuoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNjAzMDExNjQ3MTJaFw0yNjAzMDUwMzMzMTJaMDMxMTAvBgNV BAMTKDY3Q0RGMTNGMURFMDU4MTU1RDI0MDY0NEE5OUJFNDEwNEYxNDczRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQqXSdgYPebBNr29DexSAm3rk lvkUwjQdQhhSgJMV+uhfcvPbBPbATnhbnktjOQ+OqejEovDdH+9flWZ4nyGkJS+Q 1q58Ey4WM5qsRwJ2Lu5wx1Dgrb0zb58XzIRJmNaPvc1SvIdAkoBROLGtnGO8TST4 tuMPU9zNL4Xp7Liu6M8PpkBaMvYNQgeWYW0mD5fYVVLAvJaXSgX5pjnmYupMMAuI h8T1f73q5gporvw6/sjEjDEsNEp8PPw+ZY/qdAchGeyUza94NeFzTx4D57zk8c3d UYT19Ybit0RAAyh9EYUFufFlBcRMzdAbEPOcIVeeagojhHBUrMFKYPrUONWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ83xPx3gWBVdJAZEqZvkEE8Uc9EwHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBqaZ0MPpwFG5laTzdqxQc4fTIj2prQFJcu w9HJHvc93cceIF3tRpn1q/VFrDvQdWu6pATeYkfTaa5cK95aYlsks40NZgxB1xzC C0rjnVu5D9uWjDfncYiMJ9IBzo87OMrWMJ8jcmDavh9Oiskcts8OWwN30gb93EcM muM3uJglA55rLacHybo0tdcq898qg3QSTAKS2J1+o831RnXIjTM9Fr5wVzt1R22Z VAF/tYhXURrBPWz+8lq6f8lapB1N3CbnKtKXCMdp/mNC9bLRRgGZ+hgdJIRXs1U9 CEAYlIPVSEFop6KJKc8g6VrjKTRsYgOdRkyjMnCK+GishR5zg1s= -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:04 2026 by rpki-client