$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: WChZcqgODtSMHnQITXqB+uw7q1dM42lbCXz5i4QBTf4= Subject key identifier: BC:50:F4:2D:4C:D0:3D:BD:B7:AD:83:C6:7F:C8:EC:0E:4D:B4:50:FB Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 3A54602F1C897AEC64C2A11F566C3B24013DE7A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 0240 Signing time: Tue 17 Mar 2026 10:41:19 +0000 Manifest this update: Tue 17 Mar 2026 10:36:19 +0000 Manifest next update: Fri 20 Mar 2026 21:21:19 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: IZzOpKN+GoAn+gMLi4biKd+ppM54vunyTzCJNfVhRxM=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 21:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:54:60:2f:1c:89:7a:ec:64:c2:a1:1f:56:6c:3b:24:01:3d:e7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Mar 17 10:36:19 2026 GMT Not After : Mar 20 21:21:19 2026 GMT Subject: CN=BC50F42D4CD03DBDB7AD83C67FC8EC0E4DB450FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:49:d1:2b:f3:38:93:73:bc:48:0e:c7:5e:2e: de:69:88:4e:a1:d3:ff:f1:6f:c3:27:77:2b:2f:5e: e4:02:c4:55:0f:63:9a:f2:c6:aa:39:97:31:04:41: 71:35:e8:a8:6e:14:96:d3:9c:2e:e3:df:ae:37:11: 5e:09:d1:73:50:ff:71:2b:56:bd:cf:a6:df:30:c1: 56:81:25:7e:89:7e:17:ae:a9:3b:13:7c:40:30:69: 45:33:c1:5e:a4:95:f0:85:c2:0e:c1:a7:b6:83:a8: c0:4e:19:76:f0:94:6c:0a:98:ea:2b:41:69:c8:cf: ee:cf:40:f0:e4:1c:7f:f8:17:f1:b4:90:fd:c1:f6: 87:6b:b8:d0:53:bd:eb:b6:73:6e:de:c5:9d:51:6c: 3a:dc:31:94:7c:95:34:93:01:10:f5:f2:a0:4f:1e: 4f:e6:96:18:37:08:46:38:ba:76:a5:d4:5a:3f:41: d0:73:c2:d6:67:a7:f4:a0:e8:13:19:27:f4:f8:fe: 26:20:f8:65:f7:29:7c:4f:85:3e:aa:41:4b:f2:ef: 1f:a9:fe:f1:00:86:c3:c1:89:e8:68:70:6c:50:e0: 03:b4:90:a3:cd:7e:fe:9d:f8:5f:ad:c4:3f:57:eb: de:d9:bf:e9:e7:04:b1:80:72:ea:67:aa:87:5e:68: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:50:F4:2D:4C:D0:3D:BD:B7:AD:83:C6:7F:C8:EC:0E:4D:B4:50:FB X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c4:1b:92:50:6a:c5:65:30:85:15:bb:dd:7d:6e:c1:52:2e: 79:12:d9:d5:46:e7:38:c2:77:82:b7:7b:d8:32:e0:d9:a8:62: 01:b4:62:c3:86:a8:2b:29:f8:bb:c5:5b:3d:cc:14:53:69:00: 3d:3a:e2:ae:6e:14:69:fe:ca:96:b7:a4:95:4a:1f:14:5a:3f: 22:0c:84:99:1b:4e:c5:91:04:eb:18:0d:6c:d5:92:cd:96:1a: f3:2e:b1:0c:f0:89:86:b6:86:81:0d:83:22:bb:2f:e2:62:50: 86:c5:9e:d1:3c:b7:64:3b:fc:86:39:bf:45:45:2c:cb:93:f2: 39:31:43:e9:d2:83:5e:a1:e2:74:52:25:45:cb:4b:80:3f:5e: 02:26:a2:dd:7c:f0:55:f4:c9:98:53:f7:60:fa:83:d1:90:bb: 39:85:64:ba:84:25:bd:a2:d2:ca:14:f5:ac:80:11:2d:f3:c4: e1:b0:c6:d5:09:26:3f:79:b0:13:b5:17:09:f6:7e:eb:52:15: 55:bf:4c:cb:7c:fd:fc:c2:3c:4f:c8:a2:43:88:80:81:4c:16: 0e:5f:ca:da:24:04:a7:7f:7a:43:73:48:39:df:3f:9b:09:d4: 41:9a:5e:65:07:0d:8a:d1:3b:37:d3:ef:0d:e8:74:79:0a:d7: 2b:ad:be:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlRgLxyJeuxkwqEfVmw7JAE956EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNjAzMTcxMDM2MTlaFw0yNjAzMjAyMTIxMTlaMDMxMTAvBgNV BAMTKEJDNTBGNDJENENEMDNEQkRCN0FEODNDNjdGQzhFQzBFNERCNDUwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1SdEr8ziTc7xIDsdeLt5piE6h 0//xb8MndysvXuQCxFUPY5ryxqo5lzEEQXE16KhuFJbTnC7j3643EV4J0XNQ/3Er Vr3Ppt8wwVaBJX6JfheuqTsTfEAwaUUzwV6klfCFwg7Bp7aDqMBOGXbwlGwKmOor QWnIz+7PQPDkHH/4F/G0kP3B9odruNBTveu2c27exZ1RbDrcMZR8lTSTARD18qBP Hk/mlhg3CEY4unal1Fo/QdBzwtZnp/Sg6BMZJ/T4/iYg+GX3KXxPhT6qQUvy7x+p /vEAhsPBiehocGxQ4AO0kKPNfv6d+F+txD9X697Zv+nnBLGAcupnqodeaPVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFD0LUzQPb23rYPGf8jsDk20UPswHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/EG5JQasVlMIUVu919bsFSLnkS2dVG5zjC d4K3e9gy4NmoYgG0YsOGqCsp+LvFWz3MFFNpAD064q5uFGn+ypa3pJVKHxRaPyIM hJkbTsWRBOsYDWzVks2WGvMusQzwiYa2hoENgyK7L+JiUIbFntE8t2Q7/IY5v0VF LMuT8jkxQ+nSg16h4nRSJUXLS4A/XgImot188FX0yZhT92D6g9GQuzmFZLqEJb2i 0soU9ayAES3zxOGwxtUJJj95sBO1Fwn2futSFVW/TMt8/fzCPE/IokOIgIFMFg5f ytokBKd/ekNzSDnfP5sJ1EGaXmUHDYrROzfT7w3odHkK1yutvjY= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client