$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: q5vaBoV6pajTF2SmPLZms+NVg16PmRaCxh6m+TIQTWg= Subject key identifier: D5:C4:2C:B3:F9:FF:48:50:50:93:3C:A6:29:70:70:7B:C2:4D:B5:A9 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 067D4C617189022F1241EF44D1E8CFF4F595F9F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 0225 Signing time: Tue 24 Mar 2026 17:01:02 +0000 Manifest this update: Tue 24 Mar 2026 16:56:02 +0000 Manifest next update: Fri 27 Mar 2026 23:47:02 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: k8yY5Jjamo5/IHYLi6ypISbAdcCm3chaqSI7AdtjOLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7d:4c:61:71:89:02:2f:12:41:ef:44:d1:e8:cf:f4:f5:95:f9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Mar 24 16:56:02 2026 GMT Not After : Mar 27 23:47:02 2026 GMT Subject: CN=D5C42CB3F9FF485050933CA62970707BC24DB5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:87:96:82:51:0f:ba:29:74:d2:f0:89:56: 04:b4:5e:f5:28:da:ca:97:85:eb:49:18:d2:4e:57: 6b:f8:c7:8e:de:c8:bf:3c:d7:1e:90:95:90:96:06: 70:a4:3b:0a:19:7d:10:08:b4:67:42:2f:a4:54:d8: e0:05:53:99:3a:6c:59:8b:e9:59:78:81:14:6f:68: a6:8f:5f:25:1f:01:45:78:25:dd:e8:81:d2:a5:82: 53:7b:43:00:e3:61:dc:27:07:94:a0:ff:7e:17:62: 85:c4:e9:1f:26:a1:b2:ce:7d:44:a4:e8:42:af:83: c6:e8:f5:5b:9d:67:8d:fd:68:b5:b2:ed:30:ea:3a: 68:40:f2:c3:75:07:63:72:1f:14:b1:73:99:a2:63: 68:ba:2a:62:36:ff:18:9f:5f:17:de:04:79:cd:0a: 6c:c7:7c:c5:55:2b:87:14:a4:18:32:0e:80:4f:90: 19:2c:bb:63:5a:2a:70:88:74:70:d6:24:90:35:21: 3a:45:eb:ed:e5:f5:3c:b5:d4:84:ce:17:4c:e6:33: dd:bb:34:1a:f1:2f:fc:86:87:b7:7b:f9:60:f4:8d: 0d:33:66:79:65:da:c7:c2:44:4a:3c:1d:6b:4d:81: 28:89:6c:81:f3:04:11:1b:72:28:37:73:4f:ca:e7: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C4:2C:B3:F9:FF:48:50:50:93:3C:A6:29:70:70:7B:C2:4D:B5:A9 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:38:af:05:63:c2:ff:15:53:e8:dc:bb:d1:b2:f4:04:9e:17: 6a:1d:c6:1c:f5:16:0a:25:46:94:ff:ec:ce:04:f7:2f:87:3b: 22:1e:9d:49:9e:f2:4f:bf:96:0c:5f:6e:74:ca:5b:5d:86:5b: 79:e3:a9:f4:63:d3:06:56:33:95:f9:38:8b:b6:f0:17:99:5f: 4f:8e:75:a3:d5:1a:27:9f:3d:26:ab:72:7e:4f:5c:cd:cc:5f: 56:d0:b2:0b:f6:3c:8b:84:0e:ee:cf:84:dd:91:37:c2:e1:30: 87:a9:ad:98:04:23:d8:ac:c0:a3:ea:07:98:fe:66:3a:c6:97: d7:e4:23:44:1a:b3:32:e5:1a:fe:be:5d:2e:e1:2a:f0:bc:11: 23:ee:1a:a6:2d:c3:e6:c2:25:37:c9:63:18:c1:dd:fb:8c:28: 0b:aa:96:ed:47:ed:c6:b3:95:51:2a:1f:c4:d6:b9:50:e7:42: e8:a0:a7:c7:34:43:58:ad:9b:e5:96:c5:ec:94:e4:47:97:33: 34:bd:57:ce:10:26:7d:99:74:bd:b5:3e:52:53:b6:6e:58:7a: 09:4b:3a:cd:9e:56:73:ec:88:0b:41:2c:b6:fa:80:96:46:6c: a4:24:07:d8:2b:82:6e:72:59:26:bd:d1:fa:d9:5b:18:f4:86: e0:c8:09:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn1MYXGJAi8SQe9E0ejP9PWV+fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNjAzMjQxNjU2MDJaFw0yNjAzMjcyMzQ3MDJaMDMxMTAvBgNV BAMTKEQ1QzQyQ0IzRjlGRjQ4NTA1MDkzM0NBNjI5NzA3MDdCQzI0REI1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6RIeWglEPuil00vCJVgS0XvUo 2sqXhetJGNJOV2v4x47eyL881x6QlZCWBnCkOwoZfRAItGdCL6RU2OAFU5k6bFmL 6Vl4gRRvaKaPXyUfAUV4Jd3ogdKlglN7QwDjYdwnB5Sg/34XYoXE6R8mobLOfUSk 6EKvg8bo9VudZ439aLWy7TDqOmhA8sN1B2NyHxSxc5miY2i6KmI2/xifXxfeBHnN CmzHfMVVK4cUpBgyDoBPkBksu2NaKnCIdHDWJJA1ITpF6+3l9Ty11ITOF0zmM927 NBrxL/yGh7d7+WD0jQ0zZnll2sfCREo8HWtNgSiJbIHzBBEbcig3c0/K59nFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cQss/n/SFBQkzymKXBwe8JNtakwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ44rwVjwv8VU+jcu9Gy9ASeF2odxhz1Fgol RpT/7M4E9y+HOyIenUme8k+/lgxfbnTKW12GW3njqfRj0wZWM5X5OIu28BeZX0+O daPVGiefPSarcn5PXM3MX1bQsgv2PIuEDu7PhN2RN8LhMIeprZgEI9iswKPqB5j+ ZjrGl9fkI0QaszLlGv6+XS7hKvC8ESPuGqYtw+bCJTfJYxjB3fuMKAuqlu1H7caz lVEqH8TWuVDnQuigp8c0Q1itm+WWxeyU5EeXMzS9V84QJn2ZdL21PlJTtm5YeglL Os2eVnPsiAtBLLb6gJZGbKQkB9grgm5yWSa90frZWxj0huDICRs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:50:25 2026 by rpki-client