$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: WqMDp8gKJxpHTGDLnSRTJaIQDiqFtTHWI3Z51f7RWlg= Subject key identifier: E1:64:D4:D3:27:28:EE:53:31:07:8C:92:B4:3E:28:48:50:F0:CA:C7 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 5C27EE92587FD804B142A3DFFB320E56FE20EADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01E1 Signing time: Sun 01 Mar 2026 05:22:05 +0000 Manifest this update: Sun 01 Mar 2026 05:17:05 +0000 Manifest next update: Wed 04 Mar 2026 14:11:05 +0000 Files and hashes: 1: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: RTSCZBlu6Dp5iZ9tqUQjdWds0uYS19fumhuWQjrAUY0=) 2: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: FYuBNptiifXDdz3r8ww5+PIUEMM0vizifHMr9sxc+Mk=) 3: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: m8P/DcMRSOy1CrtvveVGiF2HUTRcWrQKg1uOmEavzLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:27:ee:92:58:7f:d8:04:b1:42:a3:df:fb:32:0e:56:fe:20:ea:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Mar 1 05:17:05 2026 GMT Not After : Mar 4 14:11:05 2026 GMT Subject: CN=E164D4D32728EE5331078C92B43E284850F0CAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:8f:62:ed:04:be:50:b4:90:78:93:32:8f: df:df:be:85:ba:23:bd:f9:13:1f:51:ec:bc:a9:42: e3:0b:4b:c8:f6:91:1c:65:4b:41:d4:b1:01:16:a3: a6:14:a1:e1:76:24:f9:3a:7e:f5:d8:25:7c:3a:27: 43:8d:31:e6:c5:b7:f4:f8:28:52:5f:b1:14:54:b8: 5d:da:6a:06:e9:3f:b9:f2:d5:a6:1b:ad:dd:1b:ef: c3:10:49:3a:ea:84:ef:88:b4:fb:67:64:84:0b:22: d9:f9:95:0a:6b:7e:4f:c1:c8:65:1a:ab:b8:83:e5: f6:ac:de:39:05:e5:66:30:20:e0:e0:fb:bd:76:b8: 04:e0:42:a5:9f:b5:d4:0d:df:62:3c:35:61:1c:6c: 75:1f:39:50:56:91:5e:da:93:ed:60:31:6c:02:6f: 62:c5:60:b2:5c:12:25:20:70:54:91:cc:5e:c2:49: e9:49:7a:45:63:6f:1c:3f:9e:e1:bb:c7:d1:dd:f8: 5c:25:f8:1f:14:e5:a8:4e:63:db:28:27:3d:7c:f6: 25:82:2a:49:43:e6:c9:73:11:da:ea:c6:04:d8:6e: 00:9c:e0:be:5f:5a:d3:84:5b:0c:d5:06:0b:5e:8c: 70:46:33:50:00:25:be:2f:a8:ad:ca:10:2c:0f:e1: 22:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:64:D4:D3:27:28:EE:53:31:07:8C:92:B4:3E:28:48:50:F0:CA:C7 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:23:d6:9c:67:9b:5a:2e:fc:d3:46:f6:2b:b8:7a:e6:f3:61: 9e:90:6d:04:fe:78:35:a6:5f:84:c8:89:96:c2:cf:3a:74:57: 2a:2a:43:d4:99:bf:f1:c0:cb:6e:59:88:79:9a:c1:fa:f2:1d: ff:ee:6f:6e:bf:44:a7:f9:5c:a0:d9:28:f8:4e:2e:a9:a7:1d: b7:1b:9d:c9:8a:50:63:b2:91:70:dc:c1:99:33:ff:07:db:8c: 3a:35:05:3d:3d:1e:f6:89:97:41:66:5b:91:71:08:bf:64:0a: 04:3a:de:a9:9a:b8:6d:eb:12:44:ad:12:2f:57:0e:97:46:27: c1:e5:92:cb:07:59:0f:52:c1:b1:b6:0d:a5:6a:06:3e:0f:ed: 88:a7:d7:c6:e4:e2:9d:8c:af:9c:82:9e:49:66:47:d1:61:ad: 96:a3:4f:85:f0:ad:5b:72:1f:36:47:9f:f9:19:f5:ff:12:43: da:a6:c8:cd:6e:cb:07:3b:c7:87:59:b5:71:8a:5b:d0:f8:62: 75:39:8f:0d:0d:03:46:c3:7e:bc:3d:86:91:0c:14:6e:74:2a: 89:8b:ec:06:59:c8:26:90:e9:ca:d8:58:be:74:52:29:14:32: c4:ad:bd:21:d9:3f:f5:25:fe:a3:29:ab:81:1d:52:fd:c7:d5: 31:a3:1f:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCfuklh/2ASxQqPf+zIOVv4g6towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNjAzMDEwNTE3MDVaFw0yNjAzMDQxNDExMDVaMDMxMTAvBgNV BAMTKEUxNjRENEQzMjcyOEVFNTMzMTA3OEM5MkI0M0UyODQ4NTBGMENBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXvo9i7QS+ULSQeJMyj9/fvoW6 I735Ex9R7LypQuMLS8j2kRxlS0HUsQEWo6YUoeF2JPk6fvXYJXw6J0ONMebFt/T4 KFJfsRRUuF3aagbpP7ny1aYbrd0b78MQSTrqhO+ItPtnZIQLItn5lQprfk/ByGUa q7iD5fas3jkF5WYwIODg+712uATgQqWftdQN32I8NWEcbHUfOVBWkV7ak+1gMWwC b2LFYLJcEiUgcFSRzF7CSelJekVjbxw/nuG7x9Hd+Fwl+B8U5ahOY9soJz189iWC KklD5slzEdrqxgTYbgCc4L5fWtOEWwzVBgtejHBGM1AAJb4vqK3KECwP4SKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4WTU0yco7lMxB4yStD4oSFDwyscwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIj1pxnm1ou/NNG9iu4eubzYZ6QbQT+eDWm X4TIiZbCzzp0VyoqQ9SZv/HAy25ZiHmawfryHf/ub26/RKf5XKDZKPhOLqmnHbcb ncmKUGOykXDcwZkz/wfbjDo1BT09HvaJl0FmW5FxCL9kCgQ63qmauG3rEkStEi9X DpdGJ8HlkssHWQ9SwbG2DaVqBj4P7Yin18bk4p2Mr5yCnklmR9FhrZajT4XwrVty HzZHn/kZ9f8SQ9qmyM1uywc7x4dZtXGKW9D4YnU5jw0NA0bDfrw9hpEMFG50KomL 7AZZyCaQ6crYWL50UikUMsStvSHZP/Ul/qMpq4EdUv3H1TGjHwU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:38:29 2026 by rpki-client