$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: AEa1eHWR88VqcaFamJeU3/4vvbNPIaz2/XdRpl6JHvw= Subject key identifier: 8B:36:AB:D2:49:00:AD:AF:49:1D:32:20:F4:CC:99:ED:E0:7D:5A:A7 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 11EF148952B9C767D5F883E0F2D4449AFC109668 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 027E Signing time: Mon 23 Mar 2026 07:41:35 +0000 Manifest this update: Mon 23 Mar 2026 07:36:35 +0000 Manifest next update: Thu 26 Mar 2026 17:26:35 +0000 Files and hashes: 1: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 2: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: mqF7zeyJrVbWidxtaYgHrkF/hWqswe97oSzdgL2Hujo=) 3: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: 8ZWQPdcJgeKZrsbUmRYq2OzkrsqVWW52cECdkg/5pH0=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: pc293ep/4fQQOE2DdqqWAYfU1Bh+ldyDqPDpR8SqPEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 17:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ef:14:89:52:b9:c7:67:d5:f8:83:e0:f2:d4:44:9a:fc:10:96:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Mar 23 07:36:35 2026 GMT Not After : Mar 26 17:26:35 2026 GMT Subject: CN=8B36ABD24900ADAF491D3220F4CC99EDE07D5AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:89:90:ee:23:5f:82:06:0d:78:15:c7:8a: 51:29:c1:49:ff:60:df:12:33:26:5d:4d:cc:c7:cb: d7:5b:f0:6e:6d:5b:12:d0:71:58:c2:d0:74:9c:ad: 5d:03:8b:df:3f:ef:7b:06:bb:7b:e9:e9:99:f3:c2: 9f:ae:c8:4b:d5:27:b2:95:5b:3a:5a:d4:29:48:22: c4:45:58:07:0f:19:a6:f6:71:36:ae:54:29:94:88: a2:7a:70:df:6b:dd:8a:56:81:2d:a3:95:9c:63:06: 9b:39:0b:03:cb:01:c6:74:a6:a4:47:b5:91:c9:3b: 5f:73:00:37:86:12:b6:ca:61:a6:ed:96:ba:c6:6b: 82:17:e1:e3:f6:85:5c:20:fd:60:99:15:85:04:b2: d1:33:b1:9d:4f:e8:1e:bd:d5:ab:d6:55:27:43:59: 9a:6f:d7:c4:63:70:a8:c8:7c:56:59:9d:e5:96:e1: 0d:f9:6f:30:7f:8d:dd:df:04:f4:ff:d5:c3:33:10: 95:42:8d:b7:9c:58:7b:9d:a7:2a:24:74:b3:58:8a: ca:ef:6d:47:65:37:23:3e:f7:e2:fa:88:6a:00:a2: b0:86:8e:0c:c6:a5:a9:1e:c2:df:85:07:ab:2c:34: 5a:70:84:f1:a2:3c:e8:79:c8:23:72:99:e3:b2:db: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:36:AB:D2:49:00:AD:AF:49:1D:32:20:F4:CC:99:ED:E0:7D:5A:A7 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:01:50:cd:50:76:18:9f:7a:40:f3:c5:00:b3:4d:a0:56:44: ca:36:6c:76:5e:46:80:02:b6:b1:64:a6:87:0b:ad:f7:69:e6: 4b:6f:76:7c:e4:0d:86:57:1b:71:41:4e:fa:9f:ff:4a:09:e7: 10:ca:3a:47:e0:a7:cd:5d:c1:5c:3d:5a:e0:ce:2f:1b:f0:4d: 55:6b:51:97:ac:54:06:be:7c:c2:cc:ba:01:1f:5e:d6:d5:b4: cd:d5:00:46:3f:7d:f5:d7:25:4b:89:89:a2:d5:62:19:66:eb: 18:71:a0:f9:9b:ca:9c:30:6a:7f:f7:6e:cb:5a:23:e5:5b:6f: 9c:45:84:9a:6f:65:3f:16:f0:2d:1d:22:5a:0f:32:d9:b7:41: 99:8e:47:43:99:96:6f:0b:2e:13:7e:1b:3a:c2:29:e8:fe:fa: 53:a9:0b:da:69:7c:44:63:83:1a:3c:f5:1a:0d:58:e3:73:24: 18:89:30:32:7b:64:7b:12:b8:77:48:f3:c0:74:e5:0e:97:f5: b9:9c:b5:cd:6e:3c:06:51:2b:e7:a5:0c:72:9b:60:72:c3:5f: a7:de:e1:a8:fa:12:fc:95:78:cd:9a:58:08:0c:59:da:88:9c: c4:f7:df:4a:3f:22:70:8a:8a:f2:d5:07:0c:4d:ca:5f:1c:aa: f9:fb:a7:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEe8UiVK5x2fV+IPg8tREmvwQlmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNjAzMjMwNzM2MzVaFw0yNjAzMjYxNzI2MzVaMDMxMTAvBgNV BAMTKDhCMzZBQkQyNDkwMEFEQUY0OTFEMzIyMEY0Q0M5OUVERTA3RDVBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oYmQ7iNfggYNeBXHilEpwUn/ YN8SMyZdTczHy9db8G5tWxLQcVjC0HScrV0Di98/73sGu3vp6Znzwp+uyEvVJ7KV Wzpa1ClIIsRFWAcPGab2cTauVCmUiKJ6cN9r3YpWgS2jlZxjBps5CwPLAcZ0pqRH tZHJO19zADeGErbKYabtlrrGa4IX4eP2hVwg/WCZFYUEstEzsZ1P6B691avWVSdD WZpv18RjcKjIfFZZneWW4Q35bzB/jd3fBPT/1cMzEJVCjbecWHudpyokdLNYisrv bUdlNyM+9+L6iGoAorCGjgzGpakewt+FB6ssNFpwhPGiPOh5yCNymeOy2wY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizar0kkAra9JHTIg9MyZ7eB9WqcwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJABUM1QdhifekDzxQCzTaBWRMo2bHZeRoAC trFkpocLrfdp5ktvdnzkDYZXG3FBTvqf/0oJ5xDKOkfgp81dwVw9WuDOLxvwTVVr UZesVAa+fMLMugEfXtbVtM3VAEY/ffXXJUuJiaLVYhlm6xhxoPmbypwwan/3bsta I+Vbb5xFhJpvZT8W8C0dIloPMtm3QZmOR0OZlm8LLhN+GzrCKej++lOpC9ppfERj gxo89RoNWONzJBiJMDJ7ZHsSuHdI88B05Q6X9bmctc1uPAZRK+elDHKbYHLDX6fe 4aj6EvyVeM2aWAgMWdqInMT330o/InCKivLVBwxNyl8cqvn7p14= -----END CERTIFICATE-----Generated at Wed Mar 25 00:21:42 2026 by rpki-client