$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: FdAIxIw/I1gfT4FVrYSym4fA8o69h6x9VTPlp8rCw6Q= Subject key identifier: C6:66:40:61:52:B9:05:C6:BA:07:D2:6B:C0:05:B0:E0:96:1D:7D:08 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 2C96C6B3BF65734D387B0BE8D447FB7BD343A7B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 0120 Signing time: Mon 02 Mar 2026 08:10:41 +0000 Manifest this update: Mon 02 Mar 2026 08:05:41 +0000 Manifest next update: Thu 05 Mar 2026 17:38:41 +0000 Files and hashes: 1: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 2: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: r8OCWT5ndYUiSP7WkqDjPqtaYhzt59SLY8ir9GQWV4g=) 3: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:c6:b3:bf:65:73:4d:38:7b:0b:e8:d4:47:fb:7b:d3:43:a7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Mar 2 08:05:41 2026 GMT Not After : Mar 5 17:38:41 2026 GMT Subject: CN=C666406152B905C6BA07D26BC005B0E0961D7D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:cf:d3:0e:0c:79:7b:b3:fd:30:b2:a7:13: ef:07:4f:f0:d6:f7:28:bf:83:55:15:1d:6b:c9:fd: 50:13:84:f5:c1:70:ad:1c:99:49:51:a1:b8:9e:5f: c2:68:67:cf:f6:4d:db:b5:a8:46:4b:23:b8:41:c9: 18:d4:22:f7:dd:5e:a0:ba:e5:ff:f7:95:f3:cc:29: 57:b5:3f:d5:fa:58:42:9d:3c:a6:f0:a0:55:0b:14: 04:9a:9b:f8:e8:a6:19:9a:ad:40:f1:c4:33:4e:0c: dc:2f:c7:d1:a8:d0:6b:6f:c0:dc:fe:05:47:62:8c: 71:36:57:1d:88:c4:4b:45:5f:b3:65:08:e0:9c:d1: 3a:14:c8:4b:91:a0:b4:55:b1:56:73:5a:e9:0f:34: f0:f0:66:a9:b4:05:f8:42:a0:17:1d:0d:98:a7:b0: 2c:15:3b:fd:58:55:61:68:51:96:e4:3c:c0:4f:df: f4:19:a6:3a:27:37:80:d8:e5:97:f4:b1:73:a4:e7: ca:fd:aa:de:0a:dc:1b:bf:5a:ca:f1:df:ca:76:84: 7e:a8:9d:c0:44:8b:e6:73:04:61:a3:18:e9:68:e8: 89:f4:68:f6:dc:b4:ed:da:e0:45:fb:84:26:9e:d0: 55:09:c1:da:51:91:30:22:3f:e5:aa:2a:b5:c5:d3: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:66:40:61:52:B9:05:C6:BA:07:D2:6B:C0:05:B0:E0:96:1D:7D:08 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:98:9a:dd:2a:20:20:3b:ff:fe:77:0d:b6:17:51:b0:6e:cb: 57:18:9b:75:4c:74:62:36:3d:82:db:f1:d7:4e:f7:c2:c3:03: 87:f8:ef:0c:b2:e2:82:67:f8:2a:00:6a:78:d4:ef:75:cd:68: 59:f9:9f:c0:af:30:25:a9:7f:53:2d:fd:59:c3:26:de:4b:37: 4c:02:8c:48:bd:b8:0e:25:3c:d7:c7:16:89:b5:54:8f:1c:06: fc:43:d6:4f:5f:52:9e:e5:00:94:94:8d:6c:e2:f6:43:7b:68: 8a:2a:32:24:87:a9:ea:67:35:92:b4:58:11:56:2e:2a:90:f7: 0d:e3:d1:3e:c6:ab:8a:dd:25:e5:14:c8:f5:71:9d:58:bb:55: c8:b6:fe:02:80:08:d7:75:db:d1:34:e4:fb:26:2b:86:34:cb: dc:01:c9:d3:b3:ab:ee:f9:1e:90:66:a5:36:bc:82:0e:d1:2b: 77:de:2d:c3:8a:12:e9:3b:bc:4c:d2:f3:c8:03:1d:92:e0:f5: 75:6a:3b:8e:1e:8a:1e:83:9b:41:56:fb:89:d1:0b:4f:77:0d: 62:af:0f:2f:a2:90:52:30:f8:21:31:bb:29:93:dd:22:ee:94: 05:27:12:6e:4a:6c:80:ff:f1:36:b1:f5:20:61:c5:4e:93:74: 64:df:fa:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJbGs79lc004ewvo1Ef7e9NDp7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNjAzMDIwODA1NDFaFw0yNjAzMDUxNzM4NDFaMDMxMTAvBgNV BAMTKEM2NjY0MDYxNTJCOTA1QzZCQTA3RDI2QkMwMDVCMEUwOTYxRDdEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Ts/TDgx5e7P9MLKnE+8HT/DW 9yi/g1UVHWvJ/VAThPXBcK0cmUlRobieX8JoZ8/2Tdu1qEZLI7hByRjUIvfdXqC6 5f/3lfPMKVe1P9X6WEKdPKbwoFULFASam/jophmarUDxxDNODNwvx9Go0GtvwNz+ BUdijHE2Vx2IxEtFX7NlCOCc0ToUyEuRoLRVsVZzWukPNPDwZqm0BfhCoBcdDZin sCwVO/1YVWFoUZbkPMBP3/QZpjonN4DY5Zf0sXOk58r9qt4K3Bu/Wsrx38p2hH6o ncBEi+ZzBGGjGOlo6In0aPbctO3a4EX7hCae0FUJwdpRkTAiP+WqKrXF090DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmZAYVK5Bca6B9JrwAWw4JYdfQgwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6Ymt0qICA7//53DbYXUbBuy1cYm3VMdGI2 PYLb8ddO98LDA4f47wyy4oJn+CoAanjU73XNaFn5n8CvMCWpf1Mt/VnDJt5LN0wC jEi9uA4lPNfHFom1VI8cBvxD1k9fUp7lAJSUjWzi9kN7aIoqMiSHqepnNZK0WBFW LiqQ9w3j0T7Gq4rdJeUUyPVxnVi7Vci2/gKACNd129E05PsmK4Y0y9wBydOzq+75 HpBmpTa8gg7RK3feLcOKEuk7vEzS88gDHZLg9XVqO44eih6Dm0FW+4nRC093DWKv Dy+ikFIw+CExuymT3SLulAUnEm5KbID/8Tax9SBhxU6TdGTf+kM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:19:47 2026 by rpki-client