$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: WotPceyk2VRsYHO4ARcUB7WPklJbfCC8jTYUFupnX4k= Subject key identifier: B0:15:20:77:59:90:3A:B8:0F:63:F9:37:5F:81:E5:7F:E8:50:3D:A5 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 5F99774AC74276849C65D620125FDED95FEB4C8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 012E Signing time: Tue 24 Mar 2026 05:31:07 +0000 Manifest this update: Tue 24 Mar 2026 05:26:07 +0000 Manifest next update: Fri 27 Mar 2026 11:37:07 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: BzLQJWr2dafyLvufua9PCfLLP+nPMfQeOF96MLhLH4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:99:77:4a:c7:42:76:84:9c:65:d6:20:12:5f:de:d9:5f:eb:4c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Mar 24 05:26:07 2026 GMT Not After : Mar 27 11:37:07 2026 GMT Subject: CN=B015207759903AB80F63F9375F81E57FE8503DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:52:69:05:82:a9:7b:0c:ce:1d:2b:a3:51: b9:15:4d:e1:8c:7a:52:36:05:bc:f8:bb:1b:59:e7: dd:d4:ff:ad:c2:48:ab:cb:92:15:bd:84:8f:07:97: 4d:1f:c0:3d:b1:05:9d:82:a5:be:d1:80:93:91:78: a3:80:e9:47:e0:37:aa:16:7f:27:fd:aa:93:12:20: 8c:52:0b:84:e1:20:47:1a:34:6f:73:df:67:0f:ce: 45:a2:ae:de:c6:b8:dd:cc:52:53:55:e9:3b:d8:2e: c4:74:c0:b1:d9:aa:89:de:93:22:35:f7:24:1e:35: 94:bf:a5:bc:f2:2e:21:be:5a:ae:cb:b1:f4:4b:7d: 2a:0d:21:eb:49:32:47:7b:ea:08:b9:26:32:62:fc: 6f:88:94:f7:78:03:f3:6c:5d:ca:5c:e4:d1:bd:7d: cc:70:91:95:3c:71:89:6d:26:a0:ef:ff:b5:37:73: 7b:ba:d4:e5:ec:30:24:d7:7b:00:38:e3:d9:1c:bc: fb:7b:48:af:41:92:5a:77:8a:85:5b:f1:00:a1:8a: c2:a8:97:b6:32:7f:82:f8:98:c9:c4:ed:01:2d:5b: 64:cc:64:e2:03:18:89:40:34:43:70:4a:06:68:67: ce:c4:85:48:74:71:e6:84:90:67:d0:c3:46:2c:05: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:20:77:59:90:3A:B8:0F:63:F9:37:5F:81:E5:7F:E8:50:3D:A5 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:b9:41:f3:c8:58:55:04:7a:ab:2d:33:38:a1:c3:f8:2a: a8:e4:75:1f:fc:f1:25:6f:83:94:c8:c6:16:3b:82:7e:1f:ad: 24:db:e6:01:6c:46:5a:70:51:3e:ef:a4:66:e9:21:e6:48:0a: de:de:7d:39:fe:e9:74:fb:f4:43:26:97:79:e5:89:69:59:73: 9f:0d:95:f7:5c:b5:e6:e6:e8:e1:ab:19:30:49:f0:4b:c0:a0: 3e:a5:a6:bd:f4:35:c1:af:83:1a:f7:e0:33:fd:cc:1f:a5:19: a6:05:79:ff:24:90:9a:bb:e6:b9:ae:9d:95:fa:38:a9:a8:3e: 51:9b:27:7a:c0:39:1e:e4:54:84:49:f2:2f:f4:57:a5:9d:2b: dd:56:b2:e1:fc:5f:54:77:f0:8e:c5:84:1a:6c:a2:de:2c:db: bf:9b:6a:e5:be:23:cb:0b:f5:37:c2:cd:8b:a9:19:08:59:49: cf:43:4b:8c:39:eb:e2:de:24:22:ec:73:ad:9f:90:b5:64:2a: af:72:0e:9d:c8:91:7b:1a:55:3d:dd:3b:d4:3c:bd:0b:b8:ff: 19:0f:54:da:fb:81:10:c0:50:47:ce:47:4a:96:cb:3f:8c:46: b8:55:bf:3c:5d:4d:5a:4f:67:f3:69:08:b9:67:c4:95:2b:8a: 1d:18:25:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5l3SsdCdoScZdYgEl/e2V/rTI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNjAzMjQwNTI2MDdaFw0yNjAzMjcxMTM3MDdaMDMxMTAvBgNV BAMTKEIwMTUyMDc3NTk5MDNBQjgwRjYzRjkzNzVGODFFNTdGRTg1MDNEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSlJpBYKpewzOHSujUbkVTeGM elI2Bbz4uxtZ593U/63CSKvLkhW9hI8Hl00fwD2xBZ2Cpb7RgJOReKOA6UfgN6oW fyf9qpMSIIxSC4ThIEcaNG9z32cPzkWirt7GuN3MUlNV6TvYLsR0wLHZqonekyI1 9yQeNZS/pbzyLiG+Wq7LsfRLfSoNIetJMkd76gi5JjJi/G+IlPd4A/NsXcpc5NG9 fcxwkZU8cYltJqDv/7U3c3u61OXsMCTXewA449kcvPt7SK9Bklp3ioVb8QChisKo l7Yyf4L4mMnE7QEtW2TMZOIDGIlANENwSgZoZ87EhUh0ceaEkGfQw0YsBZK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBUgd1mQOrgPY/k3X4Hlf+hQPaUwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABNuUHzyFhVBHqrLTM4ocP4KqjkdR/88SVv g5TIxhY7gn4frSTb5gFsRlpwUT7vpGbpIeZICt7efTn+6XT79EMml3nliWlZc58N lfdctebm6OGrGTBJ8EvAoD6lpr30NcGvgxr34DP9zB+lGaYFef8kkJq75rmunZX6 OKmoPlGbJ3rAOR7kVIRJ8i/0V6WdK91WsuH8X1R38I7FhBpsot4s27+bauW+I8sL 9TfCzYupGQhZSc9DS4w56+LeJCLsc62fkLVkKq9yDp3IkXsaVT3dO9Q8vQu4/xkP VNr7gRDAUEfOR0qWyz+MRrhVvzxdTVpPZ/NpCLlnxJUrih0YJc8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:15 2026 by rpki-client