$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: evIhvEv7GECwF9lxybOOtQ0dSlStRV8zVYpuzcSmnc4= Subject key identifier: 61:DE:22:2E:BA:15:6E:86:D1:E6:0E:7E:A5:2A:87:5E:20:CC:64:F5 Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 051D02A783DCD0013D3B8722F4AB44E5BC81CD36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 021B Signing time: Mon 02 Mar 2026 06:31:02 +0000 Manifest this update: Mon 02 Mar 2026 06:26:02 +0000 Manifest next update: Thu 05 Mar 2026 14:37:02 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: K0RwdypeFcuNfnmxRH6h0mkgfiOcsrRY4xbTLMUEuGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1d:02:a7:83:dc:d0:01:3d:3b:87:22:f4:ab:44:e5:bc:81:cd:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Mar 2 06:26:02 2026 GMT Not After : Mar 5 14:37:02 2026 GMT Subject: CN=61DE222EBA156E86D1E60E7EA52A875E20CC64F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:25:c4:0b:51:9c:84:45:df:01:41:be:4f: 69:40:e0:d7:86:fe:f9:f9:66:6b:50:6e:38:57:ed: ac:ac:72:1a:03:36:b5:55:11:23:81:a1:c6:85:ad: 0e:e9:69:48:02:3c:10:e2:56:6c:2a:5b:c4:4a:45: 5f:4c:8a:c1:7f:d6:0a:12:92:a4:db:6b:8f:1b:f8: ec:39:03:b0:90:69:19:51:1d:a0:01:a6:42:5d:ab: aa:71:67:d8:5d:c1:bc:23:ab:79:12:0f:c1:ae:e7: 68:d7:ad:1f:bd:4f:08:1b:4b:75:46:9f:26:d0:80: f9:6c:99:21:f1:bb:29:c5:74:33:7b:19:c9:96:fa: 7e:20:d1:bc:9d:e0:f5:86:c2:83:fc:b7:58:95:a8: 99:bf:61:b1:d7:7e:d9:b7:38:a6:48:ab:36:29:68: 46:a7:e4:05:fd:f9:ad:7a:1d:91:e8:90:e0:d3:74: 4e:78:73:82:e0:fe:52:e9:ff:fd:4e:76:62:94:b1: dd:bc:a9:ff:ef:e8:c7:19:f1:26:fa:41:b4:99:17: 28:45:72:4b:8e:8a:a1:2a:0b:df:e1:78:9e:a0:62: 96:a9:ce:25:c1:4a:43:7d:32:bb:9e:93:45:1e:d1: a7:74:cd:c0:17:04:28:87:ce:12:1c:32:4f:19:f3: 42:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DE:22:2E:BA:15:6E:86:D1:E6:0E:7E:A5:2A:87:5E:20:CC:64:F5 X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c0:d6:e9:bc:ff:b1:58:4d:74:99:91:d9:4d:d5:d4:31:b1: 08:9f:df:43:2c:7c:1c:e8:2f:97:f2:5e:a0:49:1b:6a:50:2e: cc:92:79:45:82:13:7e:40:e9:e6:04:eb:d5:12:a6:18:41:eb: 56:12:ed:83:78:bc:12:ba:c2:8f:3b:9d:e6:11:66:07:37:d8: 26:70:21:34:5b:bd:a3:0c:00:46:f1:42:41:d7:4f:d9:7d:81: 80:3a:cf:f4:b6:ca:43:19:ea:10:7c:f9:81:52:fd:78:d6:89: 3c:65:2e:98:7a:67:17:77:6d:64:5e:71:3f:cf:12:e4:9d:b2: 9a:01:61:0e:d1:a8:ad:1d:c6:b7:73:44:24:85:52:d1:0b:08: 5d:e4:78:84:73:06:b7:66:02:83:10:29:24:b9:c1:1c:96:8f: f3:1e:bb:47:30:a6:71:bb:dd:68:1e:3b:cd:23:e0:97:fe:dc: cf:1c:20:a7:d7:dc:2d:79:b3:dd:71:39:d0:79:25:79:78:c8: b7:8a:09:11:1c:48:ae:dd:8c:68:37:e0:e9:2e:1d:f7:de:de: 00:23:ae:0b:c9:86:ac:1c:f2:06:14:a4:d5:69:60:78:54:52: 85:ee:3f:fd:89:6c:c6:bf:41:09:50:13:35:a5:7f:f1:64:b3: c2:b8:ba:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBR0Cp4Pc0AE9O4ci9KtE5byBzTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNjAzMDIwNjI2MDJaFw0yNjAzMDUxNDM3MDJaMDMxMTAvBgNV BAMTKDYxREUyMjJFQkExNTZFODZEMUU2MEU3RUE1MkE4NzVFMjBDQzY0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBiXEC1GchEXfAUG+T2lA4NeG /vn5ZmtQbjhX7ayschoDNrVVESOBocaFrQ7paUgCPBDiVmwqW8RKRV9MisF/1goS kqTba48b+Ow5A7CQaRlRHaABpkJdq6pxZ9hdwbwjq3kSD8Gu52jXrR+9TwgbS3VG nybQgPlsmSHxuynFdDN7GcmW+n4g0byd4PWGwoP8t1iVqJm/YbHXftm3OKZIqzYp aEan5AX9+a16HZHokODTdE54c4Lg/lLp//1OdmKUsd28qf/v6McZ8Sb6QbSZFyhF ckuOiqEqC9/heJ6gYpapziXBSkN9Mruek0Ue0ad0zcAXBCiHzhIcMk8Z80KPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYd4iLroVbobR5g5+pSqHXiDMZPUwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7A1um8/7FYTXSZkdlN1dQxsQif30MsfBzo L5fyXqBJG2pQLsySeUWCE35A6eYE69USphhB61YS7YN4vBK6wo87neYRZgc32CZw ITRbvaMMAEbxQkHXT9l9gYA6z/S2ykMZ6hB8+YFS/XjWiTxlLph6Zxd3bWRecT/P EuSdspoBYQ7RqK0dxrdzRCSFUtELCF3keIRzBrdmAoMQKSS5wRyWj/Meu0cwpnG7 3WgeO80j4Jf+3M8cIKfX3C15s91xOdB5JXl4yLeKCREcSK7djGg34OkuHffe3gAj rgvJhqwc8gYUpNVpYHhUUoXuP/2JbMa/QQlQEzWlf/Fks8K4ulg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:01 2026 by rpki-client