$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: iJcowGpilVzLKqQZSWFybaVDFV5ETZfiqzbyeSf3sX8= Subject key identifier: 33:B9:D3:26:E3:3C:95:F7:DF:B4:31:72:C4:A7:0B:8C:03:53:08:D3 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 06F7A645F00D2906B0BEA2289C8640DC157A1001 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: 0146 Signing time: Sat 07 Mar 2026 05:20:02 +0000 Manifest this update: Sat 07 Mar 2026 05:15:02 +0000 Manifest next update: Tue 10 Mar 2026 16:45:02 +0000 Files and hashes: 1: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: cFu5nteBBzan5faf9I4u2CSs1idRr42+5NP3IOF4DXY=) 2: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: I3syTOSE8a296OErKuO+1cfLIfMgX9l2nCIidFzZrxY=) 3: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: P+lInV3ols6ftIxSpMHmtBDcdqTmvL+gkgGsnZZSjLQ=) 4: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: WZyPn+mq0I+eE3vcXNaLpwRID4wqkE6/jQ3zY3AffcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f7:a6:45:f0:0d:29:06:b0:be:a2:28:9c:86:40:dc:15:7a:10:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: Mar 7 05:15:02 2026 GMT Not After : Mar 10 16:45:02 2026 GMT Subject: CN=33B9D326E33C95F7DFB43172C4A70B8C035308D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:4e:9e:7f:63:e6:22:70:12:d1:38:da:10: c3:ac:9a:80:4d:3f:99:05:b7:62:dc:9f:c1:e1:fe: d8:ca:03:e8:c7:65:f6:5e:70:ea:26:d6:a0:69:a4: d6:2c:01:3f:ae:95:a2:82:d2:5c:b4:71:d9:73:6a: 19:a3:34:45:0e:8d:ae:e1:6e:6f:fd:83:65:88:0f: b1:2c:15:e3:fc:a5:4f:9b:db:5a:7e:65:69:0c:67: 1a:94:a5:35:73:06:16:bc:e4:63:08:73:13:c2:c9: a6:5c:72:35:69:98:2a:e7:85:e1:86:f8:94:5d:69: 6c:59:7b:5f:3b:d7:fc:b1:62:8a:a1:f3:18:ae:02: 5b:96:16:e4:8c:cb:d6:61:53:b0:70:90:76:ba:52: e2:ec:67:76:da:53:19:f9:76:b1:d5:a3:86:49:09: b2:85:09:c7:45:32:2b:ee:81:3a:76:a9:9f:11:32: c8:ce:3f:36:fb:63:12:d8:37:27:01:2f:ce:c5:a6: 8d:cd:f2:78:f3:4c:66:e3:bf:85:c5:4e:3e:d8:bf: 14:84:05:4e:bf:57:1f:8b:f7:08:62:70:2b:06:6b: a3:94:84:ba:18:d7:2a:13:4c:83:52:15:80:21:eb: 73:a8:f7:83:3e:40:30:a9:d8:3b:ea:85:37:f8:d7: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B9:D3:26:E3:3C:95:F7:DF:B4:31:72:C4:A7:0B:8C:03:53:08:D3 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ae:6d:dd:76:ff:74:69:82:06:dd:1d:32:6d:0c:0c:af:d3: 12:59:ad:b4:7a:8d:c4:94:f8:26:df:2f:89:be:59:c4:b4:42: ec:17:97:9c:7d:d0:15:56:5d:0c:53:39:dd:cb:b4:52:13:0e: 40:8d:d1:43:e7:89:f2:d0:27:58:94:33:5c:9a:3e:fa:88:02: ca:47:de:1b:b3:dc:09:47:9c:91:ad:88:5c:c7:3d:3c:56:36: 2b:e1:34:7a:60:55:7c:59:f3:a8:ce:d5:b4:b2:22:e6:74:1c: 39:da:9b:3c:cd:58:1a:76:77:38:d3:d5:4e:7a:d2:5b:46:aa: 10:a0:e7:e8:de:bd:50:72:e7:48:13:93:b4:4a:82:e2:30:92: 66:3f:4b:fa:fa:e7:b1:d5:b4:36:47:38:ff:a2:50:6b:18:85: c2:eb:6e:ad:2e:6d:5f:4b:f5:e6:bb:d4:e3:42:99:af:5b:92: b6:71:d8:c8:ce:38:5c:7d:7f:0e:3b:1b:8b:9b:ec:5d:d7:31: 79:ee:54:3a:2e:94:75:56:02:31:f8:2d:44:1b:bd:6e:28:b6: 08:e7:55:8e:0c:d8:dd:7b:b2:de:67:30:50:e1:fa:69:0c:4b: fc:5d:a8:91:fe:3d:1b:6f:e5:5c:fb:05:84:04:ca:f2:17:15: 95:5a:1c:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvemRfANKQawvqIonIZA3BV6EAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNjAzMDcwNTE1MDJaFw0yNjAzMTAxNjQ1MDJaMDMxMTAvBgNV BAMTKDMzQjlEMzI2RTMzQzk1RjdERkI0MzE3MkM0QTcwQjhDMDM1MzA4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFiU6ef2PmInAS0TjaEMOsmoBN P5kFt2Lcn8Hh/tjKA+jHZfZecOom1qBppNYsAT+ulaKC0ly0cdlzahmjNEUOja7h bm/9g2WID7EsFeP8pU+b21p+ZWkMZxqUpTVzBha85GMIcxPCyaZccjVpmCrnheGG +JRdaWxZe1871/yxYoqh8xiuAluWFuSMy9ZhU7BwkHa6UuLsZ3baUxn5drHVo4ZJ CbKFCcdFMivugTp2qZ8RMsjOPzb7YxLYNycBL87Fpo3N8njzTGbjv4XFTj7YvxSE BU6/Vx+L9whicCsGa6OUhLoY1yoTTINSFYAh63Oo94M+QDCp2DvqhTf415KnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7nTJuM8lffftDFyxKcLjANTCNMwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSubd12/3RpggbdHTJtDAyv0xJZrbR6jcSU +CbfL4m+WcS0QuwXl5x90BVWXQxTOd3LtFITDkCN0UPnifLQJ1iUM1yaPvqIAspH 3huz3AlHnJGtiFzHPTxWNivhNHpgVXxZ86jO1bSyIuZ0HDnamzzNWBp2dzjT1U56 0ltGqhCg5+jevVBy50gTk7RKguIwkmY/S/r657HVtDZHOP+iUGsYhcLrbq0ubV9L 9ea71ONCma9bkrZx2MjOOFx9fw47G4ub7F3XMXnuVDoulHVWAjH4LUQbvW4otgjn VY4M2N17st5nMFDh+mkMS/xdqJH+PRtv5Vz7BYQEyvIXFZVaHLM= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:29 2026 by rpki-client