$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: h+8erj/9CLx00AW5401MeiXyjgp5JIdUPw/uWGAIhnM= Subject key identifier: DD:B3:9F:92:E0:66:C9:48:A2:27:06:0F:E6:50:10:FB:A1:6B:63:92 Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 04CE5F9FBB0D28B51686C147B6572FACDD771977 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 022D Signing time: Thu 19 Mar 2026 20:31:18 +0000 Manifest this update: Thu 19 Mar 2026 20:26:18 +0000 Manifest next update: Mon 23 Mar 2026 03:04:18 +0000 Files and hashes: 1: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 2: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 3: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: daK7uT+plQKnYbSPlgdc0PqtqiDlNscUGnROq0Omh7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 03:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ce:5f:9f:bb:0d:28:b5:16:86:c1:47:b6:57:2f:ac:dd:77:19:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Mar 19 20:26:18 2026 GMT Not After : Mar 23 03:04:18 2026 GMT Subject: CN=DDB39F92E066C948A227060FE65010FBA16B6392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d5:ce:a0:e4:4b:33:39:7b:9c:09:28:fc:95: d5:01:43:d8:d6:cc:32:f9:92:70:6a:f7:ec:56:66: db:9c:f1:a4:52:7f:6c:09:71:56:55:a1:1d:df:28: ef:dd:6c:f0:a2:98:54:79:7a:53:4a:3c:74:17:a4: 3b:78:fb:47:ce:f2:5a:eb:a8:1f:43:20:c9:7c:42: a3:68:5d:5b:55:67:6a:95:32:b6:1f:e9:0e:90:80: 0b:57:bc:be:17:5f:a7:6a:85:95:15:c7:62:73:b7: 17:4e:cf:2a:b7:a4:4a:e5:64:6f:39:e5:20:31:4f: 93:b8:67:27:15:4d:e0:20:92:7e:09:7e:7e:03:98: 0e:0e:de:55:3a:3e:4d:a5:c7:9d:dd:f4:4b:59:3e: 28:e1:be:11:0c:b0:2d:7c:97:9e:14:c0:c0:9e:9f: 64:95:b6:0d:6d:f6:c3:9f:cd:99:96:98:b9:6c:c1: 1f:33:ea:b2:46:5c:00:11:7d:58:06:8f:da:6b:f7: 4c:a1:ee:bb:b3:85:ec:61:e1:cf:83:95:44:57:0d: e7:fb:e2:e9:26:c6:94:cb:33:66:6b:bf:86:b5:6c: 5b:05:18:1b:37:5c:16:44:a2:75:15:73:74:10:f2: 9f:a0:53:7d:ec:5a:30:a1:e3:6b:75:9e:97:4a:78: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:B3:9F:92:E0:66:C9:48:A2:27:06:0F:E6:50:10:FB:A1:6B:63:92 X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6b:99:c6:df:cf:02:7d:d6:83:9d:2a:6d:38:91:ac:cb:48: 19:8f:30:18:14:a5:40:d1:06:5a:9c:57:11:8f:31:9a:f6:a9: 1b:16:75:8b:2c:3f:94:21:37:c5:a1:c3:ce:57:56:76:3b:65: de:38:0a:d0:b1:3f:81:d5:95:e8:fb:6f:f6:f2:cd:6b:a7:89: 90:e5:44:25:cc:56:57:2b:5b:e0:da:21:6a:c8:99:ae:bd:af: 0c:9e:f4:58:2b:f9:ab:85:26:94:39:ea:39:55:6e:34:d7:d1: 38:8c:86:89:1f:3d:d4:50:cb:25:2d:0b:96:85:27:68:32:d4: 8c:28:a5:c9:4d:bd:b2:91:82:84:95:f3:95:1c:0c:18:dd:78: f7:27:47:59:9a:ec:68:a4:25:09:a5:bd:dd:4b:93:49:ff:43: 9d:fc:7d:3a:95:6d:ec:07:47:83:94:0c:85:dc:a6:c3:38:55: ce:51:30:cf:10:12:a7:8f:f1:c9:ad:7c:e4:00:cd:b3:a2:60: ee:e3:50:35:a2:54:95:4e:0c:ea:86:d4:e7:b1:51:99:13:b2: 5e:1d:dd:6b:7d:71:90:95:07:8b:30:40:26:25:b3:89:20:e4: 04:52:ef:7f:fc:57:ac:e0:ac:33:1f:1e:59:7a:c3:cf:60:6a: 8d:e6:82:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBM5fn7sNKLUWhsFHtlcvrN13GXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNjAzMTkyMDI2MThaFw0yNjAzMjMwMzA0MThaMDMxMTAvBgNV BAMTKEREQjM5RjkyRTA2NkM5NDhBMjI3MDYwRkU2NTAxMEZCQTE2QjYzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd1c6g5EszOXucCSj8ldUBQ9jW zDL5knBq9+xWZtuc8aRSf2wJcVZVoR3fKO/dbPCimFR5elNKPHQXpDt4+0fO8lrr qB9DIMl8QqNoXVtVZ2qVMrYf6Q6QgAtXvL4XX6dqhZUVx2JztxdOzyq3pErlZG85 5SAxT5O4ZycVTeAgkn4Jfn4DmA4O3lU6Pk2lx53d9EtZPijhvhEMsC18l54UwMCe n2SVtg1t9sOfzZmWmLlswR8z6rJGXAARfVgGj9pr90yh7ruzhexh4c+DlURXDef7 4ukmxpTLM2Zrv4a1bFsFGBs3XBZEonUVc3QQ8p+gU33sWjCh42t1npdKeJrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3bOfkuBmyUiiJwYP5lAQ+6FrY5IwHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhrmcbfzwJ91oOdKm04kazLSBmPMBgUpUDR BlqcVxGPMZr2qRsWdYssP5QhN8Whw85XVnY7Zd44CtCxP4HVlej7b/byzWuniZDl RCXMVlcrW+DaIWrIma69rwye9Fgr+auFJpQ56jlVbjTX0TiMhokfPdRQyyUtC5aF J2gy1IwopclNvbKRgoSV85UcDBjdePcnR1ma7GikJQmlvd1Lk0n/Q538fTqVbewH R4OUDIXcpsM4Vc5RMM8QEqeP8cmtfOQAzbOiYO7jUDWiVJVODOqG1OexUZkTsl4d 3Wt9cZCVB4swQCYls4kg5ARS73/8V6zgrDMfHll6w89gao3mgos= -----END CERTIFICATE-----Generated at Sat Mar 21 00:21:26 2026 by rpki-client