$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft File: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft (raw, json) Hash identifier: BwvbXCUM+COC1Dzen5AL/eSHsRAJasioJDIiIh2JpKY= Subject key identifier: FF:17:AC:CF:5F:85:FA:B4:5A:4A:CB:2A:F6:D4:AE:04:B8:8E:AE:81 Authority key identifier: B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 Certificate issuer: /CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Certificate serial: 02BCA34DD87ED93929662A723DF5010879E99AA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft Manifest number: 011B Signing time: Sat 07 Mar 2026 01:01:00 +0000 Manifest this update: Sat 07 Mar 2026 00:56:00 +0000 Manifest next update: Tue 10 Mar 2026 05:20:00 +0000 Files and hashes: 1: B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl (hash: AXnDuUqkcVs3MVJNjLs2oOiXmcJDj8xewiA8ak8PVY0=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: 1cb+dRF1cCmzlK2LUqHDHTpgVi9SG86amprY/lPnWU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bc:a3:4d:d8:7e:d9:39:29:66:2a:72:3d:f5:01:08:79:e9:9a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D673B78DBE219F1EEEF056E3E49FB6D58A5550 Validity Not Before: Mar 7 00:56:00 2026 GMT Not After : Mar 10 05:20:00 2026 GMT Subject: CN=FF17ACCF5F85FAB45A4ACB2AF6D4AE04B88EAE81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:4c:0f:38:34:26:01:e2:5b:e3:4e:6b:72: 11:1b:a0:b3:a8:4e:fc:8f:d8:fe:be:f1:2a:85:00: 03:db:57:52:ec:46:5f:09:ed:79:6c:8f:e8:83:13: e3:f2:c9:c4:f8:c4:0e:28:7a:4c:da:75:ff:9b:7c: 55:48:ed:84:57:f7:d2:c1:bc:44:97:8b:87:f9:e0: 21:db:75:2d:f4:1d:1d:2b:2f:b3:c8:ee:4a:06:39: 3e:f6:91:2f:85:3e:27:c9:5d:50:f6:de:07:ee:ae: ed:21:66:85:8d:e3:df:b7:d3:ab:70:58:7b:03:95: 4b:ee:48:94:2d:6a:60:3d:40:5f:53:1a:7f:14:b5: f4:bf:c8:79:24:22:2e:36:35:f2:a3:45:86:10:26: d6:20:13:1a:c6:6f:13:3b:ec:f6:ef:17:54:30:87: 9e:da:66:ce:32:fc:ab:7e:ab:e6:66:9d:4f:65:1d: bc:c8:f0:87:79:22:48:2d:56:24:a3:e7:22:0d:4e: d6:65:1b:16:d1:63:ab:35:6d:9e:10:a3:07:fd:4f: 98:4d:13:9f:ae:8a:fd:42:76:fe:13:3a:49:a8:ec: 77:db:1f:2a:9b:8c:cf:71:a8:9b:2f:1c:99:5e:52: a1:45:2a:aa:15:3c:0f:aa:30:35:a8:ad:95:b3:01: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:AC:CF:5F:85:FA:B4:5A:4A:CB:2A:F6:D4:AE:04:B8:8E:AE:81 X509v3 Authority Key Identifier: keyid:B0:D6:73:B7:8D:BE:21:9F:1E:EE:F0:56:E3:E4:9F:B6:D5:8A:55:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/B0D673B78DBE219F1EEEF056E3E49FB6D58A5550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:05:f5:c5:4a:6c:c1:f2:8f:a1:91:9b:dd:77:77:f2:b3: d8:55:a2:e8:8b:20:4c:be:d0:3c:f6:7b:7c:18:d6:48:fe:2d: 55:d9:53:cb:af:14:a6:35:84:48:6e:1a:1c:35:dc:d2:58:af: df:6b:ba:6f:b5:eb:a8:a4:98:10:2f:5f:08:6b:75:f4:5a:28: 52:53:c3:e8:3a:31:d6:40:80:4c:be:d4:f2:cc:aa:54:8f:78: fe:e7:28:db:69:c6:29:21:47:e2:6f:2c:e8:27:d6:c7:93:22: 1a:55:90:3d:b1:3d:20:10:0f:5c:10:30:85:72:52:2b:81:94: e9:40:48:60:22:db:c0:e6:2c:25:12:bb:dd:1e:e5:24:2f:2d: a2:84:97:f5:d2:62:79:4c:74:db:53:69:26:9a:14:92:5c:9e: fe:a8:3c:f0:10:6b:b1:5f:1c:b5:f9:90:2d:e4:df:4d:11:b7: 77:3b:92:d9:f8:dd:78:3a:1e:03:f0:0a:13:ac:e3:db:eb:e8: 6d:71:01:33:39:bc:44:1a:70:59:1f:7b:68:b5:13:ac:86:73: 5d:eb:93:fa:4c:61:8d:7c:a3:67:e7:3f:27:08:49:78:1a:0d: 26:9b:47:82:25:d7:d1:b6:66:f2:f5:dd:35:25:e2:af:02:3f: 85:18:96:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAryjTdh+2TkpZipyPfUBCHnpmqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZE NThBNTU1MDAeFw0yNjAzMDcwMDU2MDBaFw0yNjAzMTAwNTIwMDBaMDMxMTAvBgNV BAMTKEZGMTdBQ0NGNUY4NUZBQjQ1QTRBQ0IyQUY2RDRBRTA0Qjg4RUFFODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDckwPODQmAeJb405rchEboLOo TvyP2P6+8SqFAAPbV1LsRl8J7Xlsj+iDE+PyycT4xA4oekzadf+bfFVI7YRX99LB vESXi4f54CHbdS30HR0rL7PI7koGOT72kS+FPifJXVD23gfuru0hZoWN49+306tw WHsDlUvuSJQtamA9QF9TGn8UtfS/yHkkIi42NfKjRYYQJtYgExrGbxM77PbvF1Qw h57aZs4y/Kt+q+ZmnU9lHbzI8Id5IkgtViSj5yINTtZlGxbRY6s1bZ4Qowf9T5hN E5+uiv1Cdv4TOkmo7HfbHyqbjM9xqJsvHJleUqFFKqoVPA+qMDWorZWzAbi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xesz1+F+rRaSssq9tSuBLiOroEwHwYDVR0j BBgwFoAUsNZzt42+IZ8e7vBW4+SfttWKVVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMC9CMEQ2NzNCNzhE QkUyMTlGMUVFRUYwNTZFM0U0OUZCNkQ1OEE1NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlGQjZENThB NTU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQjBENjczQjc4REJFMjE5RjFFRUVGMDU2RTNFNDlG QjZENThBNTU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbCBfXFSmzB8o+hkZvdd3fys9hVouiLIEy+ 0Dz2e3wY1kj+LVXZU8uvFKY1hEhuGhw13NJYr99rum+166ikmBAvXwhrdfRaKFJT w+g6MdZAgEy+1PLMqlSPeP7nKNtpxikhR+JvLOgn1seTIhpVkD2xPSAQD1wQMIVy UiuBlOlASGAi28DmLCUSu90e5SQvLaKEl/XSYnlMdNtTaSaaFJJcnv6oPPAQa7Ff HLX5kC3k300Rt3c7ktn43Xg6HgPwChOs49vr6G1xATM5vEQacFkfe2i1E6yGc13r k/pMYY18o2fnPycISXgaDSabR4Il19G2ZvL13TUl4q8CP4UYltg= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:33 2026 by rpki-client