$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: BjYFvyfoJkOpX0E5zR+rau6HQnBLwip1rfqspW9OZpU= Subject key identifier: AC:BE:47:93:A5:53:46:D3:DE:84:F7:E5:50:7C:34:BF:E8:87:16:41 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 45B5E8843CB05D5F7B4846AF8EB110618A51D0E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01EB Signing time: Tue 24 Mar 2026 07:30:44 +0000 Manifest this update: Tue 24 Mar 2026 07:25:44 +0000 Manifest next update: Fri 27 Mar 2026 17:40:44 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: RTSCZBlu6Dp5iZ9tqUQjdWds0uYS19fumhuWQjrAUY0=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: FYuBNptiifXDdz3r8ww5+PIUEMM0vizifHMr9sxc+Mk=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: 1+zLfQPnTLpOG+XAnm2clu0qWicBuscS/z76/uq7034=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b5:e8:84:3c:b0:5d:5f:7b:48:46:af:8e:b1:10:61:8a:51:d0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Mar 24 07:25:44 2026 GMT Not After : Mar 27 17:40:44 2026 GMT Subject: CN=ACBE4793A55346D3DE84F7E5507C34BFE8871641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f7:43:b0:e2:37:5f:55:58:e6:73:e0:36:b4: 7b:c1:13:8a:af:0e:a5:05:c6:1a:1a:f1:59:7f:a9: 41:e8:a4:d8:fa:b8:bf:79:48:cd:3b:14:48:0c:57: b0:24:a1:27:84:c6:92:dc:fe:ad:53:33:11:d1:c3: 68:8d:5b:bc:f5:aa:39:4d:92:7c:d0:3a:39:91:60: 84:f1:93:62:6e:3c:ed:37:14:81:b8:a5:fb:1d:92: 8d:6e:89:fd:73:5d:d2:7e:03:98:a0:07:43:76:f1: bd:c8:69:64:6f:36:3d:28:5d:d7:73:51:0c:b3:88: 0e:28:c2:b5:6c:f1:6d:77:4c:bf:72:bd:40:84:a8: 27:50:b3:af:c3:f6:e7:e6:82:68:4d:2f:39:90:65: 25:9a:3d:8f:66:bb:5d:8e:82:c1:26:a9:19:39:d1: 0f:09:14:75:13:9b:d2:b3:bc:94:2f:5f:95:d6:9a: 78:54:ec:da:13:07:8e:6f:c0:e0:07:10:60:23:a0: c1:8a:29:02:45:ee:03:e9:f1:6a:1b:53:6a:d6:e8: 19:d7:a3:ce:5e:a7:e8:c6:12:63:72:f5:b2:83:3b: 27:c5:33:53:d4:88:40:a0:f9:ce:b8:cb:10:f1:49: 07:6a:ab:8a:38:02:15:6a:52:c7:58:b1:40:b8:5b: f5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BE:47:93:A5:53:46:D3:DE:84:F7:E5:50:7C:34:BF:E8:87:16:41 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:60:04:4b:81:52:2e:8c:5c:db:dc:fc:d3:cd:54:ac:5a:2d: 2d:7e:a7:f9:78:93:23:84:d9:a4:6f:86:47:ac:60:8a:44:6b: 98:84:a1:4d:df:0d:88:46:72:24:90:38:7b:17:3d:4c:38:49: 9f:88:ad:3d:7d:a5:d1:91:88:3a:30:6b:61:81:dc:d5:92:c3: a6:44:8e:97:bd:d5:8c:cf:7b:9b:d8:03:49:98:d1:34:34:b7: c7:a6:fa:f6:f0:39:e6:86:07:de:ee:2e:c8:88:92:57:ef:fd: 84:d1:ed:1e:e6:ed:d5:32:0b:82:d8:92:6a:07:d7:f7:f6:35: 48:4b:6d:b4:45:fc:78:fb:a9:41:66:6e:5e:dd:f1:fc:c8:60: 4a:68:05:93:36:d6:7e:14:36:53:bb:76:38:7e:b7:75:0c:d1: 61:51:74:5f:dc:5a:5f:c7:a3:a6:af:83:16:cd:25:c2:58:1e: 92:3d:63:79:a5:e9:d3:76:12:3a:41:f8:dd:4b:84:1b:c7:33: 83:47:36:3e:33:9d:d7:d9:3f:6b:74:23:bf:9e:fc:25:92:d8: d7:06:24:56:6c:1b:04:b6:41:b7:e0:50:e0:2b:2b:47:fa:95: e3:b6:58:5e:66:b7:ce:7c:8d:3f:fd:f4:14:66:81:85:b8:b7: 2c:3b:4b:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbXohDywXV97SEavjrEQYYpR0OYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNjAzMjQwNzI1NDRaFw0yNjAzMjcxNzQwNDRaMDMxMTAvBgNV BAMTKEFDQkU0NzkzQTU1MzQ2RDNERTg0RjdFNTUwN0MzNEJGRTg4NzE2NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt90Ow4jdfVVjmc+A2tHvBE4qv DqUFxhoa8Vl/qUHopNj6uL95SM07FEgMV7AkoSeExpLc/q1TMxHRw2iNW7z1qjlN knzQOjmRYITxk2JuPO03FIG4pfsdko1uif1zXdJ+A5igB0N28b3IaWRvNj0oXddz UQyziA4owrVs8W13TL9yvUCEqCdQs6/D9ufmgmhNLzmQZSWaPY9mu12OgsEmqRk5 0Q8JFHUTm9KzvJQvX5XWmnhU7NoTB45vwOAHEGAjoMGKKQJF7gPp8WobU2rW6BnX o85ep+jGEmNy9bKDOyfFM1PUiECg+c64yxDxSQdqq4o4AhVqUsdYsUC4W/UFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrL5Hk6VTRtPehPflUHw0v+iHFkEwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFgBEuBUi6MXNvc/NPNVKxaLS1+p/l4kyOE 2aRvhkesYIpEa5iEoU3fDYhGciSQOHsXPUw4SZ+IrT19pdGRiDowa2GB3NWSw6ZE jpe91YzPe5vYA0mY0TQ0t8em+vbwOeaGB97uLsiIklfv/YTR7R7m7dUyC4LYkmoH 1/f2NUhLbbRF/Hj7qUFmbl7d8fzIYEpoBZM21n4UNlO7djh+t3UM0WFRdF/cWl/H o6avgxbNJcJYHpI9Y3ml6dN2EjpB+N1LhBvHM4NHNj4zndfZP2t0I7+e/CWS2NcG JFZsGwS2QbfgUOArK0f6leO2WF5mt858jT/99BRmgYW4tyw7S+U= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:34 2026 by rpki-client