$ rpki-client -vvf repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft File: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft (raw, json) Hash identifier: DCbJLuk8pmKvHK28o/byyHwmnROyRc2XeioZZUtUFww= Subject key identifier: DE:B6:9A:BE:41:E8:13:F3:DA:FF:BF:EC:D4:EF:4D:5F:0F:72:10:33 Authority key identifier: B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 Certificate issuer: /CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Certificate serial: 3C23BC549D1651C07C8F0A74C7DB8E0EB1A289BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft Manifest number: 01F5 Signing time: Wed 15 Apr 2026 18:30:43 +0000 Manifest this update: Wed 15 Apr 2026 18:25:43 +0000 Manifest next update: Sun 19 Apr 2026 01:50:43 +0000 Files and hashes: 1: B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl (hash: xm11gPiQWu4+7wGTq0WndkuG+j138ape2IMvPxR37uY=) 2: 3130332e3138352e3139372e302f32342d3234203d3e20313333333535.roa (hash: RTSCZBlu6Dp5iZ9tqUQjdWds0uYS19fumhuWQjrAUY0=) 3: 3130332e3230392e3133312e302f32342d3234203d3e20313333333535.roa (hash: FYuBNptiifXDdz3r8ww5+PIUEMM0vizifHMr9sxc+Mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 01:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:23:bc:54:9d:16:51:c0:7c:8f:0a:74:c7:db:8e:0e:b1:a2:89:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7 Validity Not Before: Apr 15 18:25:43 2026 GMT Not After : Apr 19 01:50:43 2026 GMT Subject: CN=DEB69ABE41E813F3DAFFBFECD4EF4D5F0F721033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1a:b8:00:62:18:45:0c:10:91:9b:43:6a:92: 07:13:67:da:bf:2f:ae:a4:95:83:a4:f2:fa:eb:61: 37:d7:09:6b:55:af:19:98:ae:9c:57:c4:ce:d3:89: 40:64:ea:a8:56:20:32:29:fb:5a:e2:ee:83:4a:77: f6:58:bb:2c:75:da:0c:74:b7:fc:a5:f7:cf:22:35: 9e:c4:30:e2:76:61:0d:78:37:c7:c4:45:12:dd:ef: da:af:8e:f2:ea:b2:0e:ee:f8:9a:29:4f:03:dd:aa: 7f:52:b8:50:fc:9f:f4:71:fc:1e:f5:3a:3d:63:49: 0d:c3:79:21:75:95:89:53:dc:f1:a5:12:b7:9c:3d: 47:2e:02:92:db:89:44:e5:94:89:07:fb:3d:2a:80: 60:53:de:f7:e5:e8:58:62:40:2e:51:c6:55:5e:06: d3:eb:44:a6:69:45:95:0e:9e:ea:4d:7a:29:ee:53: 72:3d:02:5b:2f:5e:cd:0b:3c:cb:2a:aa:e6:29:4b: 0f:a9:d7:8f:96:7f:1a:ed:43:b0:94:a0:9e:99:9c: ef:22:d5:4a:85:15:64:8f:66:86:cb:f0:49:27:89: 47:25:ae:45:74:81:8f:00:b9:17:86:50:cb:cf:21: dd:45:5c:c0:ac:ff:90:50:a6:64:5a:2d:73:a8:3a: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B6:9A:BE:41:E8:13:F3:DA:FF:BF:EC:D4:EF:4D:5F:0F:72:10:33 X509v3 Authority Key Identifier: keyid:B9:BE:B6:0C:D6:22:4D:41:F3:33:A0:7E:18:20:F0:AF:3A:81:FF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1f87f5a-f6f9-468d-895e-314487f5e25e/0/B9BEB60CD6224D41F333A07E1820F0AF3A81FFF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ac:fa:fa:71:8f:e8:f2:0f:4a:a4:eb:c8:c8:0c:57:9b:44: 5c:c8:f9:1c:d1:f4:37:a3:ee:55:3c:97:7d:24:23:ab:09:3e: ab:ab:01:27:9a:6c:2c:2c:27:47:27:99:67:2b:57:5f:e3:01: 6d:42:0b:8a:0d:3a:61:3d:df:21:af:0e:41:8f:9c:c6:d2:e3: c9:cc:ee:47:b1:ed:4a:b1:65:a0:0d:78:c4:2e:06:b0:57:01: 37:e2:af:f5:0e:72:d6:16:2b:fb:d3:a5:a0:ae:cb:c2:4c:e3: a9:2a:47:7c:00:c1:4e:2b:d0:39:58:6b:a4:16:d7:07:9c:3d: 99:8f:a4:e7:b6:d2:e1:2a:f1:37:ea:27:18:06:78:6e:97:be: 54:3b:7f:27:4d:21:4c:12:73:39:29:2c:b4:2e:28:b2:ec:18: 89:ee:63:7a:c2:3d:bc:a6:5c:f5:61:97:35:9a:82:a4:51:a4: 0f:f7:d5:21:5d:08:a8:85:45:af:87:1c:f0:8c:34:6b:72:8a: 75:8b:4e:4e:1e:45:a1:2d:e9:e7:41:25:33:cf:71:55:86:e5: c2:b7:f6:80:d0:08:92:07:3a:4b:95:15:09:b6:9b:97:50:e4: 58:81:f3:98:c8:d7:ee:b1:79:48:d1:15:79:57:da:60:f7:c9: 4c:f1:b0:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCO8VJ0WUcB8jwp0x9uODrGiibwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYz QTgxRkZGNzAeFw0yNjA0MTUxODI1NDNaFw0yNjA0MTkwMTUwNDNaMDMxMTAvBgNV BAMTKERFQjY5QUJFNDFFODEzRjNEQUZGQkZFQ0Q0RUY0RDVGMEY3MjEwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGrgAYhhFDBCRm0NqkgcTZ9q/ L66klYOk8vrrYTfXCWtVrxmYrpxXxM7TiUBk6qhWIDIp+1ri7oNKd/ZYuyx12gx0 t/yl988iNZ7EMOJ2YQ14N8fERRLd79qvjvLqsg7u+JopTwPdqn9SuFD8n/Rx/B71 Oj1jSQ3DeSF1lYlT3PGlErecPUcuApLbiUTllIkH+z0qgGBT3vfl6FhiQC5RxlVe BtPrRKZpRZUOnupNeinuU3I9AlsvXs0LPMsqquYpSw+p14+WfxrtQ7CUoJ6ZnO8i 1UqFFWSPZobL8EkniUclrkV0gY8AuReGUMvPId1FXMCs/5BQpmRaLXOoOgiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3raavkHoE/Pa/7/s1O9NXw9yEDMwHwYDVR0j BBgwFoAUub62DNYiTUHzM6B+GCDwrzqB//cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWY4N2Y1YS1mNmY5LTQ2OGQtODk1ZS0zMTQ0ODdmNWUyNWUvMC9COUJFQjYwQ0Q2 MjI0RDQxRjMzM0EwN0UxODIwRjBBRjNBODFGRkY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYwQUYzQTgx RkZGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFmODdmNWEtZjZmOS00NjhkLTg5 NWUtMzE0NDg3ZjVlMjVlLzAvQjlCRUI2MENENjIyNEQ0MUYzMzNBMDdFMTgyMEYw QUYzQTgxRkZGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqs+vpxj+jyD0qk68jIDFebRFzI+RzR9Dej 7lU8l30kI6sJPqurASeabCwsJ0cnmWcrV1/jAW1CC4oNOmE93yGvDkGPnMbS48nM 7kex7UqxZaANeMQuBrBXATfir/UOctYWK/vTpaCuy8JM46kqR3wAwU4r0DlYa6QW 1wecPZmPpOe20uEq8TfqJxgGeG6XvlQ7fydNIUwSczkpLLQuKLLsGInuY3rCPbym XPVhlzWagqRRpA/31SFdCKiFRa+HHPCMNGtyinWLTk4eRaEt6edBJTPPcVWG5cK3 9oDQCJIHOkuVFQm2m5dQ5FiB85jI1+6xeUjRFXlX2mD3yUzxsJA= -----END CERTIFICATE-----Generated at Fri Apr 17 22:45:10 2026 by rpki-client