$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: MLeFrOPpDtnE/wyxUhZpm00XnQBLxxfWkLT6LOnEhAk= Subject key identifier: 67:18:6A:41:CB:B1:17:8B:D7:E4:6B:58:EE:DD:5A:E2:62:B3:65:61 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 444839FEAC5F0A5B8218832DC5F272637CCD23CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 0124 Signing time: Sat 28 Feb 2026 23:51:06 +0000 Manifest this update: Sat 28 Feb 2026 23:46:06 +0000 Manifest next update: Wed 04 Mar 2026 08:22:06 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: z57pXAOsAKkvmFXW5JsjrS4jBFZVEn2V/EWRRA0cZ+s=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: UPR5y8V0jVDX7lorT6sk4sYb0YCh+EKPNMakCdOkBwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:48:39:fe:ac:5f:0a:5b:82:18:83:2d:c5:f2:72:63:7c:cd:23:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Feb 28 23:46:06 2026 GMT Not After : Mar 4 08:22:06 2026 GMT Subject: CN=67186A41CBB1178BD7E46B58EEDD5AE262B36561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:03:91:73:76:05:01:9a:38:7b:84:eb:7d:2b: ae:92:59:69:e4:c7:0b:a8:3c:90:74:48:6c:2d:b3: 28:c6:df:f8:d9:f1:3c:8d:9d:18:92:05:b2:f6:1e: a9:1c:24:08:5f:03:0d:f4:2c:8d:31:4b:1f:26:e8: 31:6f:2a:80:3e:dc:6c:48:8e:27:0f:43:4b:28:02: 2c:ca:03:97:66:28:bc:8b:eb:90:65:d4:10:82:66: f9:a9:30:a9:ab:d2:ed:14:ba:25:3e:04:a2:24:29: 44:48:b8:34:a5:74:27:fe:28:35:fe:24:50:d8:2d: f7:21:46:94:3b:28:50:5a:42:bc:5b:99:80:a9:94: bb:c4:ba:6d:e0:d9:ee:40:96:b2:4c:69:5a:1e:cf: 97:98:66:bd:28:8c:b4:12:9a:f4:a9:3c:9c:9c:e9: 08:c7:e0:18:8a:4c:e8:1e:26:d0:0e:e3:fc:a9:66: 35:d3:c6:dd:99:28:68:2e:d5:8c:15:27:52:6e:7f: 81:2a:ec:f2:b5:dc:92:2c:d2:27:67:f0:fc:0d:a1: 7e:7a:ff:49:ab:e9:60:83:82:34:5b:81:72:50:83: 48:db:69:9b:01:54:bb:c0:1e:f7:bb:1b:16:7e:59: c9:48:5c:45:8e:48:77:63:1d:a6:91:8e:0c:74:83: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:18:6A:41:CB:B1:17:8B:D7:E4:6B:58:EE:DD:5A:E2:62:B3:65:61 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c8:f7:11:e9:71:2c:4a:09:f3:27:28:b0:5d:a3:68:31:de: 1e:13:19:a7:cf:c4:c4:53:cb:4d:b5:34:66:e2:70:2b:56:53: f4:95:1d:1d:bd:09:4c:82:34:55:c4:7a:04:ad:93:c0:1e:76: b7:5d:99:e5:95:88:b5:73:8d:9f:6d:a6:e4:c6:b6:ee:66:ac: fa:cd:b2:19:ec:0c:b1:6b:99:94:8f:0c:6f:75:fd:a8:01:39: 3c:ab:4c:bd:c5:7e:28:74:ba:24:e3:e0:9b:86:09:b7:17:d4: 1b:4f:5d:ca:f3:2a:17:d2:27:b7:3f:22:61:7b:b5:16:07:da: 65:cd:5d:40:23:4f:92:a4:6a:bf:eb:98:0e:be:d6:31:05:50: 71:31:de:6c:8e:b2:5f:2e:c7:05:a8:9e:b4:4c:1b:a1:84:6c: d2:04:c9:62:85:b1:0b:12:80:b0:e3:5c:e6:81:5b:27:ea:98: 37:24:04:84:61:dc:87:c1:45:a9:b9:b0:7a:0e:39:a4:25:9e: 6a:94:cb:b1:48:ca:40:cb:76:08:43:da:11:66:17:54:a9:43: ba:a9:94:88:22:b6:c8:fc:0f:10:63:04:3b:64:37:6f:22:a9: ce:9f:0b:be:44:71:b0:75:b4:18:37:1d:f8:75:4d:a3:ce:20: 9b:6a:da:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREg5/qxfCluCGIMtxfJyY3zNI80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNjAyMjgyMzQ2MDZaFw0yNjAzMDQwODIyMDZaMDMxMTAvBgNV BAMTKDY3MTg2QTQxQ0JCMTE3OEJEN0U0NkI1OEVFREQ1QUUyNjJCMzY1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSA5FzdgUBmjh7hOt9K66SWWnk xwuoPJB0SGwtsyjG3/jZ8TyNnRiSBbL2HqkcJAhfAw30LI0xSx8m6DFvKoA+3GxI jicPQ0soAizKA5dmKLyL65Bl1BCCZvmpMKmr0u0UuiU+BKIkKURIuDSldCf+KDX+ JFDYLfchRpQ7KFBaQrxbmYCplLvEum3g2e5AlrJMaVoez5eYZr0ojLQSmvSpPJyc 6QjH4BiKTOgeJtAO4/ypZjXTxt2ZKGgu1YwVJ1Juf4Eq7PK13JIs0idn8PwNoX56 /0mr6WCDgjRbgXJQg0jbaZsBVLvAHve7GxZ+WclIXEWOSHdjHaaRjgx0gwtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxhqQcuxF4vX5GtY7t1a4mKzZWEwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLI9xHpcSxKCfMnKLBdo2gx3h4TGafPxMRT y021NGbicCtWU/SVHR29CUyCNFXEegStk8AedrddmeWViLVzjZ9tpuTGtu5mrPrN shnsDLFrmZSPDG91/agBOTyrTL3Ffih0uiTj4JuGCbcX1BtPXcrzKhfSJ7c/ImF7 tRYH2mXNXUAjT5Kkar/rmA6+1jEFUHEx3myOsl8uxwWonrRMG6GEbNIEyWKFsQsS gLDjXOaBWyfqmDckBIRh3IfBRam5sHoOOaQlnmqUy7FIykDLdghD2hFmF1SpQ7qp lIgitsj8DxBjBDtkN28iqc6fC75EcbB1tBg3Hfh1TaPOIJtq2sA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:39 2026 by rpki-client