$ rpki-client -vvf repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft (raw, json) Hash identifier: 5uSjScDvnEw6Y6qO6IE3TvV7LYKTXBriq0s9iVZFhjA= Subject key identifier: BD:7F:3F:E0:78:3F:ED:0F:5B:28:EE:80:F5:93:68:F1:D7:FC:43:9E Authority key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Certificate issuer: /CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Certificate serial: 427487A5C3BAF35A4BA78251EB46D6F88248D7F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft Manifest number: 0360 Signing time: Wed 18 Mar 2026 22:11:01 +0000 Manifest this update: Wed 18 Mar 2026 22:06:01 +0000 Manifest next update: Sun 22 Mar 2026 01:38:01 +0000 Files and hashes: 1: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl (hash: RsfeHvh8BxaXaiXzACMq7oson8JDoMdoQR5Ys/4gTFA=) 2: 3130332e3137342e32342e302f32332d3234203d3e20313331313131.roa (hash: IcV/PuSEjSNsy6cbDUeXZVgPYs8xhMimlvvll5vTiXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 01:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:74:87:a5:c3:ba:f3:5a:4b:a7:82:51:eb:46:d6:f8:82:48:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Validity Not Before: Mar 18 22:06:01 2026 GMT Not After : Mar 22 01:38:01 2026 GMT Subject: CN=BD7F3FE0783FED0F5B28EE80F59368F1D7FC439E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:16:da:33:3c:5d:c5:60:65:1c:ff:92:bc: 8e:67:4f:61:22:1a:ff:5c:ae:5c:09:4d:04:f2:79: 1c:a3:5f:42:12:7c:26:e9:aa:47:20:da:ce:be:26: 1a:f1:5f:fb:d1:e1:1e:f6:0a:2a:51:ef:71:0a:29: 82:08:2b:b6:52:ef:b8:39:77:04:f2:d0:cb:ae:d4: 4b:ec:ef:f1:07:81:bd:99:20:1c:5a:65:d2:e8:1e: 95:9f:6b:4d:64:4a:36:e9:02:ea:f4:35:ac:82:c6: 1e:ce:b8:98:75:7b:09:ac:b4:7e:e5:35:2f:84:29: 36:c2:48:db:dc:8f:7f:8e:87:44:d8:65:9c:50:53: ba:04:e9:10:45:57:8d:8b:aa:ce:31:cc:9c:2b:3a: ce:2f:74:ea:b0:ae:57:7f:cd:94:7c:e1:8f:19:f0: 5f:b8:d8:b5:e9:fd:09:ea:37:bc:f4:70:3f:b6:d4: c0:f6:bb:60:23:93:ae:84:ee:55:3d:7c:5d:a2:bb: 9d:8a:34:a5:d8:e8:92:ba:bd:08:1a:72:b0:2f:1e: e0:ae:91:eb:3c:e6:89:e0:b8:89:74:8f:7d:47:0f: a9:c4:50:7f:c2:27:b3:6e:d4:ad:b0:b7:3f:c0:f3: 03:ca:69:c9:aa:9f:6c:70:ff:d3:d6:f4:0b:58:0c: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:3F:E0:78:3F:ED:0F:5B:28:EE:80:F5:93:68:F1:D7:FC:43:9E X509v3 Authority Key Identifier: keyid:13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c5:fd:1d:aa:dc:e2:f5:b9:62:9e:ff:d0:5b:0d:63:d9:92: 21:cd:48:58:86:a5:e0:8e:33:ec:6e:c2:0e:6d:2d:62:e7:8a: f3:ed:b4:54:6a:ce:28:9f:46:a1:8c:b2:d1:27:7c:25:fb:09: 99:a1:e6:a3:45:13:ab:ea:36:f5:dd:2a:d2:25:8c:01:55:29: cb:69:b7:9e:34:fb:eb:49:0f:26:a2:58:30:d4:d9:af:bf:2d: e0:87:52:b4:56:78:35:07:ed:b5:a3:f6:a1:67:79:43:eb:b7: 0d:ed:9f:50:b1:f2:0e:69:2d:a1:f6:6d:8b:0d:6b:80:e2:43: af:a7:6c:b2:62:b0:51:ed:84:d7:8f:de:d8:da:33:aa:2c:3b: ee:7e:7b:c6:3d:d2:06:92:e6:bb:0d:a1:7f:f3:b4:07:28:79: d9:0d:f5:05:7a:16:d1:9f:cd:8c:a3:94:70:25:9d:21:92:6f: 67:2d:6d:91:6e:03:7d:fa:2f:d2:d2:de:bc:74:9d:43:8c:47: 05:20:18:13:ce:61:f2:d7:9e:b7:54:95:18:e2:6e:36:4a:00: 29:13:de:a6:cb:6d:ba:da:5b:91:7e:85:d6:bd:fe:b3:6b:5c: bd:63:53:ee:e7:42:ea:3c:c0:f5:09:4d:94:90:16:46:ef:f3: 8f:87:63:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnSHpcO681pLp4JR60bW+IJI1/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNC MDRGRENCRTAeFw0yNjAzMTgyMjA2MDFaFw0yNjAzMjIwMTM4MDFaMDMxMTAvBgNV BAMTKEJEN0YzRkUwNzgzRkVEMEY1QjI4RUU4MEY1OTM2OEYxRDdGQzQzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3RbaMzxdxWBlHP+SvI5nT2Ei Gv9crlwJTQTyeRyjX0ISfCbpqkcg2s6+JhrxX/vR4R72CipR73EKKYIIK7ZS77g5 dwTy0Muu1Evs7/EHgb2ZIBxaZdLoHpWfa01kSjbpAur0NayCxh7OuJh1ewmstH7l NS+EKTbCSNvcj3+Oh0TYZZxQU7oE6RBFV42Lqs4xzJwrOs4vdOqwrld/zZR84Y8Z 8F+42LXp/QnqN7z0cD+21MD2u2Ajk66E7lU9fF2iu52KNKXY6JK6vQgacrAvHuCu kes85onguIl0j31HD6nEUH/CJ7Nu1K2wtz/A8wPKacmqn2xw/9PW9AtYDBVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvX8/4Hg/7Q9bKO6A9ZNo8df8Q54wHwYDVR0j BBgwFoAUExgHvdqvl+1yIU37xcU5rLBP3L4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMC8xMzE4MDdCRERB QUY5N0VENzIyMTRERkJDNUM1MzlBQ0IwNEZEQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5QUNCMDRG RENCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYyNWI5NjgtMDkyNy00NTk0LTg4 N2UtNjdmNTNmOTY3YjEyLzAvMTMxODA3QkREQUFGOTdFRDcyMjE0REZCQzVDNTM5 QUNCMDRGRENCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrF/R2q3OL1uWKe/9BbDWPZkiHNSFiGpeCO M+xuwg5tLWLnivPttFRqziifRqGMstEnfCX7CZmh5qNFE6vqNvXdKtIljAFVKctp t540++tJDyaiWDDU2a+/LeCHUrRWeDUH7bWj9qFneUPrtw3tn1Cx8g5pLaH2bYsN a4DiQ6+nbLJisFHthNeP3tjaM6osO+5+e8Y90gaS5rsNoX/ztAcoedkN9QV6FtGf zYyjlHAlnSGSb2ctbZFuA336L9LS3rx0nUOMRwUgGBPOYfLXnrdUlRjibjZKACkT 3qbLbbraW5F+hda9/rNrXL1jU+7nQuo8wPUJTZSQFkbv84+HYz0= -----END CERTIFICATE-----Generated at Fri Mar 20 23:23:44 2026 by rpki-client