$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft (raw, json) Hash identifier: XIjxtuyrOc5yF0dgdj2KMz99ou6ZHNirC/SjQZj6CNg= Subject key identifier: D8:AB:C8:D4:D0:8C:13:F9:65:2B:87:90:92:D8:16:F8:77:4B:1D:DF Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Certificate issuer: /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Certificate serial: 74E97FAB7BEFEFB4FD84799840F2CE1861531D2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft Manifest number: 0265 Signing time: Mon 02 Mar 2026 04:22:22 +0000 Manifest this update: Mon 02 Mar 2026 04:17:22 +0000 Manifest next update: Thu 05 Mar 2026 08:49:22 +0000 Files and hashes: 1: 3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (hash: t+4ejWWVpCyupE0/dAQ0FQh6YQM/Nth43B2HEabAe/I=) 2: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl (hash: rqfpGsmLuGD2fck67vhyagQ9n3H4GUCV/0bEgvp3P9Y=) 3: 3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (hash: 6Ll+KVU1lsdr/MLq/XmtBZBAXBY3FlBiRA4zbHmqAz0=) 4: 3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (hash: Z/zTcdKY/+1D+wTbr5C9zS1eONmhv6Y/LtFvtIw5rss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:e9:7f:ab:7b:ef:ef:b4:fd:84:79:98:40:f2:ce:18:61:53:1d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Validity Not Before: Mar 2 04:17:22 2026 GMT Not After : Mar 5 08:49:22 2026 GMT Subject: CN=D8ABC8D4D08C13F9652B879092D816F8774B1DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1f:e1:7c:58:9c:b8:26:37:a3:32:5a:10:8e: 8b:86:68:82:c6:92:77:a6:fe:c9:1d:8d:67:58:a9: 79:24:61:59:b4:c7:34:2d:76:dd:1c:7a:b7:26:15: 36:92:3f:53:6a:ee:4e:bf:47:f0:72:b5:0c:f7:f3: da:a3:f8:3c:ea:ba:33:80:71:c0:78:7b:e1:0a:61: 1a:26:0d:a4:43:69:35:ff:35:c8:fd:05:c9:ce:a0: 1d:df:9f:c0:f5:6f:53:94:b5:4c:a4:6d:b1:fb:20: 8d:2f:95:1f:38:63:ce:32:87:0a:0c:84:04:5a:ef: 4c:e4:88:3f:4a:2b:6b:93:39:00:d9:c4:0b:07:a4: d8:37:64:00:f9:d4:26:12:6a:e4:b6:85:f9:c4:a9: 91:1e:d4:43:17:f1:33:73:34:07:24:bf:e1:2c:1a: d6:a9:8a:08:71:0f:73:dc:07:64:15:93:e7:90:03: aa:0a:f9:d5:b1:43:42:7d:44:17:11:ac:35:b5:6c: 5f:0a:9c:5c:18:67:04:66:99:72:74:29:e2:f3:4b: a7:71:f9:b6:69:0a:00:6d:ac:20:6e:ef:36:bb:6e: 4b:73:e6:8d:2e:b5:42:ee:17:c9:8a:1c:88:79:93: 0b:78:d0:59:d9:e4:ee:c3:0a:a4:ee:72:92:a1:ac: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AB:C8:D4:D0:8C:13:F9:65:2B:87:90:92:D8:16:F8:77:4B:1D:DF X509v3 Authority Key Identifier: keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ab:62:71:97:b2:ae:24:6c:26:74:bf:36:95:3b:01:dc:4c: e6:91:1f:60:f3:64:fe:1c:06:e0:f5:16:54:d1:86:c9:4f:8c: a7:d6:13:17:6b:77:05:a0:b3:c9:07:95:c7:7e:01:1d:b3:90: 78:92:05:f8:b7:cf:7e:ac:23:6d:cb:9a:c7:bf:20:49:a1:c7: 90:ff:3f:5b:9b:a6:fe:57:a1:71:e6:ad:a6:66:98:45:2b:af: 1b:2a:2d:dc:2d:ff:93:4a:64:d0:0b:aa:24:e9:c7:8e:7e:3a: 90:37:2e:b3:a4:03:1c:d4:1f:ca:6c:d4:bd:f5:f0:c2:a9:33: 25:d6:53:95:c9:17:19:43:07:a4:e0:ef:10:c1:83:c9:d0:d4: 7a:bc:d0:15:2b:40:a1:ee:dd:25:05:0b:d7:d7:6b:84:32:54: b6:f0:77:e2:08:52:47:08:23:06:65:fb:26:9b:1e:26:da:44: a3:36:77:d1:b1:7e:49:23:94:74:17:76:16:01:12:78:ad:25: 74:11:f2:55:37:24:b0:45:b6:8c:16:49:dc:72:a5:73:aa:12: 36:7f:01:22:77:16:3d:8e:59:c5:36:a8:3f:5d:d2:15:82:6a: 6b:fb:f4:1c:69:6c:71:6d:e8:70:a4:b5:89:9e:22:ad:ef:70: bb:99:b7:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOl/q3vv77T9hHmYQPLOGGFTHS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlG RDIxRkE1QzAeFw0yNjAzMDIwNDE3MjJaFw0yNjAzMDUwODQ5MjJaMDMxMTAvBgNV BAMTKEQ4QUJDOEQ0RDA4QzEzRjk2NTJCODc5MDkyRDgxNkY4Nzc0QjFEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsH+F8WJy4JjejMloQjouGaILG knem/skdjWdYqXkkYVm0xzQtdt0cercmFTaSP1Nq7k6/R/BytQz389qj+DzqujOA ccB4e+EKYRomDaRDaTX/Ncj9BcnOoB3fn8D1b1OUtUykbbH7II0vlR84Y84yhwoM hARa70zkiD9KK2uTOQDZxAsHpNg3ZAD51CYSauS2hfnEqZEe1EMX8TNzNAckv+Es GtapighxD3PcB2QVk+eQA6oK+dWxQ0J9RBcRrDW1bF8KnFwYZwRmmXJ0KeLzS6dx +bZpCgBtrCBu7za7bktz5o0utULuF8mKHIh5kwt40FnZ5O7DCqTucpKhrOsJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KvI1NCME/llK4eQktgW+HdLHd8wHwYDVR0j BBgwFoAUs0e7pr0Rv8XlX3/zNMFl6f0h+lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMC9CMzQ3QkJBNkJE MTFCRkM1RTU1RjdGRjMzNEMxNjVFOUZEMjFGQTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1RTlGRDIx RkE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxMDY4MjctODY2ZS00YWMzLThm NzktYTZlMzIwYjIwZGU3LzAvQjM0N0JCQTZCRDExQkZDNUU1NUY3RkYzMzRDMTY1 RTlGRDIxRkE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWrYnGXsq4kbCZ0vzaVOwHcTOaRH2DzZP4c BuD1FlTRhslPjKfWExdrdwWgs8kHlcd+AR2zkHiSBfi3z36sI23Lmse/IEmhx5D/ P1ubpv5XoXHmraZmmEUrrxsqLdwt/5NKZNALqiTpx45+OpA3LrOkAxzUH8ps1L31 8MKpMyXWU5XJFxlDB6Tg7xDBg8nQ1Hq80BUrQKHu3SUFC9fXa4QyVLbwd+IIUkcI IwZl+yabHibaRKM2d9GxfkkjlHQXdhYBEnitJXQR8lU3JLBFtowWSdxypXOqEjZ/ ASJ3Fj2OWcU2qD9d0hWCamv79BxpbHFt6HCktYmeIq3vcLuZt0Q= -----END CERTIFICATE-----Generated at Mon Mar 2 11:58:57 2026 by rpki-client