$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: EcQ3ttxknnnI68auvrUVAMekOIGLma8KZe8J8rrATns= Subject key identifier: C4:A6:B2:E4:1D:79:8A:08:44:D1:A7:38:CD:97:82:1C:44:7B:94:DB Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 23038AFAB10241ED3DD72C5ABB5DC6F09231A92E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 012A Signing time: Tue 24 Mar 2026 22:20:42 +0000 Manifest this update: Tue 24 Mar 2026 22:15:42 +0000 Manifest next update: Sat 28 Mar 2026 02:45:42 +0000 Files and hashes: 1: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 2: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: /9FhXddYYUbsADGMvr1lBR8cRg8xjcX8l2ko2TDExaI=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:03:8a:fa:b1:02:41:ed:3d:d7:2c:5a:bb:5d:c6:f0:92:31:a9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Mar 24 22:15:42 2026 GMT Not After : Mar 28 02:45:42 2026 GMT Subject: CN=C4A6B2E41D798A0844D1A738CD97821C447B94DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:47:17:31:dc:37:b3:b2:9e:a9:92:7a:b9: 46:99:10:ef:14:c2:32:04:ad:6f:f6:6c:ad:12:74: 92:bc:ab:86:e4:cb:b4:a9:5d:7a:e4:64:0b:78:cf: 84:c4:77:a5:bc:64:51:f2:6b:c9:17:2e:4f:37:83: c7:ec:b2:21:f2:6b:06:4a:72:59:c3:81:38:5a:55: ad:05:79:38:7d:bb:40:72:28:1f:cc:44:a0:f4:f6: c0:01:8b:26:07:5c:cb:9a:43:4e:d9:de:54:24:8a: 52:c8:8e:75:b3:f1:fc:57:7a:bd:4f:6d:e5:15:9a: 29:e3:ef:ea:4f:28:16:08:4c:c0:7f:a2:1b:28:1c: 40:2c:60:d2:8a:63:b5:c5:e0:ca:33:50:29:f4:9f: c0:4c:2e:79:04:5c:76:d1:0c:c5:c0:06:1e:59:c0: 17:a3:6d:c7:92:38:71:ec:bc:c2:d4:5b:d5:50:9e: e7:b1:3c:12:d9:01:25:26:f2:52:59:e4:48:fa:83: b6:ed:39:a9:3d:06:11:a8:d2:cc:5c:9b:94:c4:0e: 5b:f1:9b:5c:50:dd:bd:61:c2:8a:50:b0:00:6a:76: 15:52:ee:7a:f1:54:69:30:86:2c:71:c3:64:35:dd: 05:22:ae:06:a7:ce:56:70:19:8b:b6:d7:3d:b7:87: 30:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:B2:E4:1D:79:8A:08:44:D1:A7:38:CD:97:82:1C:44:7B:94:DB X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:80:8a:34:86:6d:ed:c2:3a:b4:e1:31:3a:5b:15:1e:23:92: b3:a9:7e:18:38:3b:ac:f1:64:94:29:12:9a:9e:53:05:cb:85: e9:cf:68:e0:40:e2:82:81:06:32:bd:af:90:55:bb:f1:70:65: 27:e4:af:90:5f:b7:3a:9f:26:98:15:8c:8a:23:a0:8f:9f:24: a7:ba:6f:c7:86:5a:b7:66:6c:54:11:14:f1:4d:9c:9a:9d:b8: 69:fe:8d:e5:ac:8d:9b:5c:d3:d7:d1:58:a9:e3:ad:28:67:bf: 5c:7c:ec:aa:10:5e:c6:5c:bb:01:1d:38:4e:81:7a:9a:fc:37: 35:8b:62:4e:64:5d:a3:11:5b:9c:8b:a5:3d:fb:71:a3:6f:8b: 51:26:f1:68:34:d6:c9:25:74:e3:7f:35:af:76:68:74:40:d8: 6a:2f:00:d4:19:66:a7:64:4f:ff:eb:ea:52:5c:69:f3:85:20: ce:e2:54:c9:e7:12:2c:ae:cd:ec:c3:f6:dd:60:04:95:7c:e7: c3:c0:3c:20:38:d2:7a:40:cc:60:71:d9:a0:93:0c:8a:26:30: 59:41:a2:18:db:29:76:48:99:31:7c:f5:ec:5c:8a:0a:8d:12: 63:5a:83:e1:9f:42:d5:27:13:20:89:39:67:ab:a1:fd:51:86: a4:4c:93:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwOK+rECQe091yxau13G8JIxqS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNjAzMjQyMjE1NDJaFw0yNjAzMjgwMjQ1NDJaMDMxMTAvBgNV BAMTKEM0QTZCMkU0MUQ3OThBMDg0NEQxQTczOENEOTc4MjFDNDQ3Qjk0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiW0cXMdw3s7KeqZJ6uUaZEO8U wjIErW/2bK0SdJK8q4bky7SpXXrkZAt4z4TEd6W8ZFHya8kXLk83g8fssiHyawZK clnDgThaVa0FeTh9u0ByKB/MRKD09sABiyYHXMuaQ07Z3lQkilLIjnWz8fxXer1P beUVminj7+pPKBYITMB/ohsoHEAsYNKKY7XF4MozUCn0n8BMLnkEXHbRDMXABh5Z wBejbceSOHHsvMLUW9VQnuexPBLZASUm8lJZ5Ej6g7btOak9BhGo0sxcm5TEDlvx m1xQ3b1hwopQsABqdhVS7nrxVGkwhixxw2Q13QUirganzlZwGYu21z23hzDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxKay5B15ighE0ac4zZeCHER7lNswHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKAijSGbe3COrThMTpbFR4jkrOpfhg4O6zx ZJQpEpqeUwXLhenPaOBA4oKBBjK9r5BVu/FwZSfkr5BftzqfJpgVjIojoI+fJKe6 b8eGWrdmbFQRFPFNnJqduGn+jeWsjZtc09fRWKnjrShnv1x87KoQXsZcuwEdOE6B epr8NzWLYk5kXaMRW5yLpT37caNvi1Em8Wg01skldON/Na92aHRA2GovANQZZqdk T//r6lJcafOFIM7iVMnnEiyuzezD9t1gBJV858PAPCA40npAzGBx2aCTDIomMFlB ohjbKXZImTF89excigqNEmNag+GfQtUnEyCJOWerof1RhqRMk8I= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:30 2026 by rpki-client