$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: DJyvGd2seU3F6xbahJtX234WJ4DJTdF05dOeFlYrW5g= Subject key identifier: 5C:87:42:BF:05:0B:4C:58:AD:53:47:14:27:18:98:F8:D0:C3:39:4C Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 5B9AFCFE870AA9503FEBDCCB3402A048418590E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 0290 Signing time: Sat 28 Feb 2026 16:42:34 +0000 Manifest this update: Sat 28 Feb 2026 16:37:34 +0000 Manifest next update: Wed 04 Mar 2026 00:29:34 +0000 Files and hashes: 1: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: Gugqm0yRolqKYvxq/K2ViMzvjtFTaE0e3Een0FCqjmM=) 2: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: UnglZoBVP+l2hAxzoGbqmzfsJvv/Xe0z5CKmhsW/FLo=) 3: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: hum6PwDa+tJlyU75JQFBXd7LlyucqEnCFxIhwk7g/uE=) 4: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: 8qmJTm3w/YB+pPXRr4kfQMyCGfmyB46RphMFNG6KdwM=) 5: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: yqDA1Gh+nI24zoKtqUazyok0UGXURA+Nlb1kM1EqJCo=) 6: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: 1UJAHonWaadwHYuLef8BFUV8SSyJkucgr+FB5CesNHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9a:fc:fe:87:0a:a9:50:3f:eb:dc:cb:34:02:a0:48:41:85:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Feb 28 16:37:34 2026 GMT Not After : Mar 4 00:29:34 2026 GMT Subject: CN=5C8742BF050B4C58AD534714271898F8D0C3394C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:75:6d:a8:ae:d5:ae:81:2e:b2:82:73:86: 28:f0:4b:f0:b9:c2:f7:c0:60:13:7e:a1:37:54:da: 82:5b:cd:2d:d2:1f:f0:42:73:49:39:1c:af:50:cb: 80:08:25:0c:61:91:3f:e6:eb:81:01:bf:8b:4b:ca: ad:04:1c:07:af:48:ee:8f:12:d9:dc:62:b8:74:ba: d7:31:7d:e4:8a:02:4c:99:28:58:43:fb:00:c6:aa: db:ba:f9:1b:d1:2a:09:3a:84:b6:e4:bb:bb:a2:f8: 82:aa:a0:28:52:6c:b5:59:f3:44:81:e6:d4:05:d9: 15:44:ce:3d:7e:ea:24:47:19:9f:24:a4:3a:9d:67: 48:45:36:a7:7e:d1:f0:e1:90:86:9c:4f:0f:66:60: cd:fc:75:ae:e2:60:93:2b:a9:2c:1c:04:1b:5b:3c: 9b:f6:95:cf:36:83:63:39:a6:d1:d3:bf:01:d1:1a: 37:f1:6d:19:b9:59:91:e6:08:1a:09:e2:b4:5d:21: 94:16:46:59:21:b9:dc:5b:3c:62:9c:cb:6b:ec:1b: fa:fb:44:80:f4:c6:25:df:fe:06:3b:74:70:de:c2: 1b:e2:b3:4e:e5:a7:d4:77:2b:a3:af:9f:15:88:c8: 77:f2:f1:98:b8:37:0b:21:0e:2a:60:af:cd:7e:62: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:87:42:BF:05:0B:4C:58:AD:53:47:14:27:18:98:F8:D0:C3:39:4C X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b5:b0:9e:da:53:a6:7a:75:ea:7b:ab:93:27:e9:47:14:6a: 54:d0:15:da:24:db:92:53:af:89:bb:4f:d1:5a:31:74:3e:77: 9b:d1:8e:07:85:81:e4:a5:d7:2f:fa:fe:ba:f0:fc:db:f5:43: 12:ed:67:9b:4f:75:96:46:d1:fc:00:35:f9:6f:6b:f5:aa:62: dc:a9:30:bf:67:33:2c:b2:aa:ec:14:8a:33:64:8c:83:68:bf: b5:9b:49:4e:c9:90:8a:ce:94:f5:66:a9:19:8b:3e:b1:bf:2b: ec:68:37:93:4c:71:3f:f6:9e:3c:38:05:73:c4:a5:3f:9c:20: 4d:30:35:07:6f:41:e0:43:ef:b9:3b:78:a0:b9:80:6b:73:50: 04:2f:20:1c:22:17:2f:db:80:6b:23:29:35:aa:5a:95:fe:20: 4d:0d:a8:b2:03:c7:0a:b4:ec:36:fc:02:8e:f2:d1:77:de:2e: eb:9a:1b:20:38:27:00:47:dc:b5:66:d1:f5:64:da:68:3e:37: 21:ca:7e:e6:9a:c0:db:73:e9:3a:1b:00:12:50:a1:11:cb:c2: de:3a:de:e9:80:39:ff:16:71:41:f8:63:c4:32:22:02:77:0c: 47:79:14:c8:d6:8e:45:b2:a4:e1:ed:f8:39:88:31:16:28:8c: 22:7a:06:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5r8/ocKqVA/69zLNAKgSEGFkOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNjAyMjgxNjM3MzRaFw0yNjAzMDQwMDI5MzRaMDMxMTAvBgNV BAMTKDVDODc0MkJGMDUwQjRDNThBRDUzNDcxNDI3MTg5OEY4RDBDMzM5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1XVtqK7VroEusoJzhijwS/C5 wvfAYBN+oTdU2oJbzS3SH/BCc0k5HK9Qy4AIJQxhkT/m64EBv4tLyq0EHAevSO6P EtncYrh0utcxfeSKAkyZKFhD+wDGqtu6+RvRKgk6hLbku7ui+IKqoChSbLVZ80SB 5tQF2RVEzj1+6iRHGZ8kpDqdZ0hFNqd+0fDhkIacTw9mYM38da7iYJMrqSwcBBtb PJv2lc82g2M5ptHTvwHRGjfxbRm5WZHmCBoJ4rRdIZQWRlkhudxbPGKcy2vsG/r7 RID0xiXf/gY7dHDewhvis07lp9R3K6OvnxWIyHfy8Zi4NwshDipgr81+Yg8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXIdCvwULTFitU0cUJxiY+NDDOUwwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEq1sJ7aU6Z6dep7q5Mn6UcUalTQFdok25JT r4m7T9FaMXQ+d5vRjgeFgeSl1y/6/rrw/Nv1QxLtZ5tPdZZG0fwANflva/WqYtyp ML9nMyyyquwUijNkjINov7WbSU7JkIrOlPVmqRmLPrG/K+xoN5NMcT/2njw4BXPE pT+cIE0wNQdvQeBD77k7eKC5gGtzUAQvIBwiFy/bgGsjKTWqWpX+IE0NqLIDxwq0 7Db8Ao7y0XfeLuuaGyA4JwBH3LVm0fVk2mg+NyHKfuaawNtz6TobABJQoRHLwt46 3umAOf8WcUH4Y8QyIgJ3DEd5FMjWjkWypOHt+DmIMRYojCJ6Bic= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:54 2026 by rpki-client