$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: NrPmWoiuIZthaLbLZzP8vd6VsjZovFUhA8SqjNIyVEI= Subject key identifier: 84:28:3B:7A:06:B9:E3:88:C9:74:72:DB:6E:4C:1F:C7:DD:91:79:16 Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 6E485403A3EF018DE8BFB50E62026FC762EC240E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 0139 Signing time: Fri 17 Apr 2026 02:31:07 +0000 Manifest this update: Fri 17 Apr 2026 02:26:07 +0000 Manifest next update: Mon 20 Apr 2026 06:15:07 +0000 Files and hashes: 1: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: y1y9PN1NgjXd22Z2Q4H7o5V2QTIchcoZg5yag83VIh8=) 2: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: Wx2OjPLLf/p+4FpTc/iFj9ib95oosG62DmEcDyqUABQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:48:54:03:a3:ef:01:8d:e8:bf:b5:0e:62:02:6f:c7:62:ec:24:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Apr 17 02:26:07 2026 GMT Not After : Apr 20 06:15:07 2026 GMT Subject: CN=84283B7A06B9E388C97472DB6E4C1FC7DD917916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:18:b5:ee:14:d3:69:fb:9a:5d:9a:b2:d3: ee:80:0a:ec:df:68:d7:0d:b1:d7:f1:f3:cd:c8:f4: f2:8a:8d:a2:91:ef:e9:9a:78:48:ce:78:d3:53:cd: 7a:48:8e:c4:f3:69:56:d7:9a:53:34:f4:65:16:37: 63:cb:b9:b4:e1:5f:ec:af:ba:07:a2:25:79:8d:f0: 91:39:c0:bc:a6:7b:fe:3f:fa:ec:2a:5f:8c:ee:84: 63:09:e7:aa:6e:4b:b3:ee:9e:45:d1:27:4b:31:4f: 6b:03:dd:85:ce:24:7c:f2:a6:55:de:28:8a:b1:1c: 38:c6:48:04:77:54:92:27:fb:31:71:60:d9:ea:ea: d9:98:2c:09:45:ce:95:ac:c9:64:8c:bb:4a:cd:df: 49:b8:83:f6:6d:ea:59:25:33:ac:f2:1f:3c:6a:ec: 58:26:d5:6d:78:ea:ff:b6:35:09:de:07:d4:ec:64: e3:61:c8:5f:14:d7:ba:22:ea:b0:ae:66:7b:cf:00: 73:97:3e:f1:c5:ea:93:dd:c8:e8:16:99:ff:ed:cc: f1:7c:9d:f4:f5:a1:e2:7f:81:53:1e:a7:a5:9c:8b: 65:7d:ff:82:53:10:f8:c2:7f:65:88:2d:d6:b7:eb: 60:7e:ec:80:c8:9f:a1:e4:11:72:c2:9b:8a:f8:8c: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:28:3B:7A:06:B9:E3:88:C9:74:72:DB:6E:4C:1F:C7:DD:91:79:16 X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ee:72:19:24:fd:b5:43:8e:29:2e:e6:d3:8f:aa:be:b3:4b: 2c:4c:f4:e6:91:91:83:aa:95:09:31:d0:d8:27:bc:81:ce:37: 1d:c6:b3:d7:df:2d:eb:e0:53:00:57:d9:cf:95:7c:9a:93:f1: ef:1e:df:f5:f0:10:98:3c:eb:ef:0e:70:0e:c2:d3:2b:38:81: 93:b0:ef:9d:4f:be:62:e5:ff:2f:4a:e4:5d:f0:93:88:93:ea: ba:89:98:fc:f1:19:b3:f6:08:6a:21:37:34:b9:cd:b6:78:6c: d4:fe:47:02:4e:58:fc:dc:2c:4a:e3:d8:8e:13:be:7b:55:ea: d9:99:d2:df:45:e0:31:d1:9b:7b:a8:f9:ca:3e:a4:55:fa:f5: 1f:f6:2f:9d:8d:20:ff:3f:6b:51:2e:26:a0:fc:13:1c:7c:63: 46:a4:d1:f4:9a:c9:82:bc:92:d9:2d:20:c9:79:b9:34:bf:9e: 11:70:e6:80:9f:50:16:a4:78:6c:62:3e:8c:a7:20:85:04:9e: f3:c2:d7:39:55:68:5f:1d:67:70:fa:42:44:97:6b:52:cd:db: 62:17:1c:9c:2e:02:bb:78:e7:c0:a6:74:90:5c:8c:eb:5a:a7: d0:fa:3e:7b:08:74:25:a0:f1:41:5a:df:b5:60:53:8a:5e:4f: e0:48:8f:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbkhUA6PvAY3ov7UOYgJvx2LsJA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNjA0MTcwMjI2MDdaFw0yNjA0MjAwNjE1MDdaMDMxMTAvBgNV BAMTKDg0MjgzQjdBMDZCOUUzODhDOTc0NzJEQjZFNEMxRkM3REQ5MTc5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDhi17hTTafuaXZqy0+6ACuzf aNcNsdfx883I9PKKjaKR7+maeEjOeNNTzXpIjsTzaVbXmlM09GUWN2PLubThX+yv ugeiJXmN8JE5wLyme/4/+uwqX4zuhGMJ56puS7PunkXRJ0sxT2sD3YXOJHzyplXe KIqxHDjGSAR3VJIn+zFxYNnq6tmYLAlFzpWsyWSMu0rN30m4g/Zt6lklM6zyHzxq 7Fgm1W146v+2NQneB9TsZONhyF8U17oi6rCuZnvPAHOXPvHF6pPdyOgWmf/tzPF8 nfT1oeJ/gVMep6Wci2V9/4JTEPjCf2WILda362B+7IDIn6HkEXLCm4r4jCjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhCg7ega544jJdHLbbkwfx92ReRYwHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbuchkk/bVDjiku5tOPqr6zSyxM9OaRkYOq lQkx0NgnvIHONx3Gs9ffLevgUwBX2c+VfJqT8e8e3/XwEJg86+8OcA7C0ys4gZOw 751PvmLl/y9K5F3wk4iT6rqJmPzxGbP2CGohNzS5zbZ4bNT+RwJOWPzcLErj2I4T vntV6tmZ0t9F4DHRm3uo+co+pFX69R/2L52NIP8/a1EuJqD8Exx8Y0ak0fSayYK8 ktktIMl5uTS/nhFw5oCfUBakeGxiPoynIIUEnvPC1zlVaF8dZ3D6QkSXa1LN22IX HJwuArt458CmdJBcjOtap9D6PnsIdCWg8UFa37VgU4peT+BIj8w= -----END CERTIFICATE-----Generated at Fri Apr 17 11:12:41 2026 by rpki-client