$ rpki-client -vvf repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft File: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft (raw, json) Hash identifier: W1bIMjo1yNYWNWG7FFT0n+S7ynPUqzciV/qDga9co2o= Subject key identifier: BB:75:C0:72:12:4F:0C:0A:14:2F:0B:DF:40:F7:76:E5:E9:FB:33:1E Authority key identifier: F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 Certificate issuer: /CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Certificate serial: 20238FD227F8B955059497105111FAC10C134193 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft Manifest number: 0551 Signing time: Thu 26 Feb 2026 16:11:13 +0000 Manifest this update: Thu 26 Feb 2026 16:06:13 +0000 Manifest next update: Mon 02 Mar 2026 03:23:13 +0000 Files and hashes: 1: 3130332e3130362e3134352e302f32342d3234203d3e203538333639.roa (hash: /luPqRWa7rmModkmPq2AOhn1AxfZ3BxWQ7kt8Fx95y4=) 2: F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl (hash: hb5/lsddW9d5USs6DbPUQ28fX3KqUH/COhyeuFRiK5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Mar 2026 23:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:23:8f:d2:27:f8:b9:55:05:94:97:10:51:11:fa:c1:0c:13:41:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9B3A4FD209FB6DF8BDC168B15C872083A3495A2 Validity Not Before: Feb 26 16:06:13 2026 GMT Not After : Mar 2 03:23:13 2026 GMT Subject: CN=BB75C072124F0C0A142F0BDF40F776E5E9FB331E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:72:09:71:a4:ea:25:d1:6e:3f:c8:1e:e4: b3:3c:17:3a:75:4e:c0:ef:22:96:35:86:a3:1f:65: f9:2f:76:f9:17:63:c6:26:fa:eb:7a:2b:c9:52:1d: f4:68:70:3c:80:b2:86:f9:c7:7d:d1:ae:84:eb:a8: 79:66:c7:b4:eb:4d:46:89:52:73:f7:74:b9:fc:c8: d3:65:0b:48:2e:6a:38:ee:f7:1a:1f:a1:cb:70:fa: ed:8d:cb:67:aa:40:4f:0f:a0:ac:fe:3d:cd:7e:45: 0f:be:9e:c0:bb:84:aa:60:dc:af:aa:cb:b6:a4:c6: 2c:d3:70:3b:4b:c3:fe:f1:15:92:03:b6:62:c5:4e: 88:c5:a9:88:66:bf:7d:9e:09:7c:33:a2:d5:e1:88: 69:31:47:47:44:30:35:b7:78:0b:96:57:c9:85:6d: f2:16:f0:6b:50:26:3f:e7:0d:6e:83:f5:df:31:3e: 00:6c:77:8e:79:81:d0:ae:86:56:c2:9d:a2:b1:db: f6:c4:dc:83:2a:a6:36:23:14:4a:b0:0e:54:ab:75: 0c:3b:36:ee:03:cc:79:5c:94:9e:78:d9:ba:c5:14: 8b:b3:05:1e:56:17:02:88:4d:06:7b:a5:79:40:d0: 24:9d:53:1c:66:6e:8f:43:e3:bb:61:01:76:cc:0f: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:75:C0:72:12:4F:0C:0A:14:2F:0B:DF:40:F7:76:E5:E9:FB:33:1E X509v3 Authority Key Identifier: keyid:F9:B3:A4:FD:20:9F:B6:DF:8B:DC:16:8B:15:C8:72:08:3A:34:95:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11791b73-bb08-4a83-a197-b6360f1d47de/0/F9B3A4FD209FB6DF8BDC168B15C872083A3495A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f2:8c:b4:00:fb:92:dd:50:1d:d0:75:24:54:57:d7:5d:aa: 34:57:8f:59:f9:0e:85:7d:da:f2:22:e7:50:63:67:47:06:d3: f5:46:56:70:fa:3f:f0:bf:4b:07:a2:74:ec:00:53:c9:58:92: 2d:c3:d2:2c:31:f1:81:92:6f:93:bf:ec:77:b5:95:5c:eb:57: 20:65:37:20:4f:6c:e1:9b:3a:c5:a5:7e:9f:a7:f9:28:6d:4b: 40:e2:35:24:b8:87:5b:7c:17:75:f7:70:1e:11:78:98:a8:be: 6c:02:f8:a0:26:d2:e4:ac:3f:d9:9c:72:9c:38:69:2d:92:17: e6:cc:af:d7:51:59:60:71:91:02:7a:48:bc:3d:bc:fd:12:e7: 70:ea:9b:08:9e:3a:ef:b8:2c:30:02:3c:cf:a1:7b:d8:73:5f: 42:42:e3:cd:b7:35:78:ce:66:7d:a6:b8:05:47:b2:f3:49:00: f3:df:84:bc:07:1b:d0:c8:55:76:61:ba:35:03:29:1a:2b:91: 5f:87:df:4a:ec:f5:14:87:8f:8a:ec:51:04:c7:94:4a:6a:a4: 8d:72:70:10:98:b3:14:99:e5:73:d7:b2:bf:d8:ca:6f:4b:82: a5:9d:89:63:ed:32:e3:37:6d:9d:be:e5:dd:c8:21:1b:88:13: 5c:16:1f:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICOP0if4uVUFlJcQURH6wQwTQZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgz QTM0OTVBMjAeFw0yNjAyMjYxNjA2MTNaFw0yNjAzMDIwMzIzMTNaMDMxMTAvBgNV BAMTKEJCNzVDMDcyMTI0RjBDMEExNDJGMEJERjQwRjc3NkU1RTlGQjMzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gnIJcaTqJdFuP8ge5LM8Fzp1 TsDvIpY1hqMfZfkvdvkXY8Ym+ut6K8lSHfRocDyAsob5x33RroTrqHlmx7TrTUaJ UnP3dLn8yNNlC0guajju9xofoctw+u2Ny2eqQE8PoKz+Pc1+RQ++nsC7hKpg3K+q y7akxizTcDtLw/7xFZIDtmLFTojFqYhmv32eCXwzotXhiGkxR0dEMDW3eAuWV8mF bfIW8GtQJj/nDW6D9d8xPgBsd455gdCuhlbCnaKx2/bE3IMqpjYjFEqwDlSrdQw7 Nu4DzHlclJ542brFFIuzBR5WFwKITQZ7pXlA0CSdUxxmbo9D47thAXbMD/tBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3XAchJPDAoULwvfQPd25en7Mx4wHwYDVR0j BBgwFoAU+bOk/SCftt+L3BaLFchyCDo0laIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTc5MWI3My1iYjA4LTRhODMtYTE5Ny1iNjM2MGYxZDQ3ZGUvMC9GOUIzQTRGRDIw OUZCNkRGOEJEQzE2OEIxNUM4NzIwODNBMzQ5NUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcyMDgzQTM0 OTVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3OTFiNzMtYmIwOC00YTgzLWEx OTctYjYzNjBmMWQ0N2RlLzAvRjlCM0E0RkQyMDlGQjZERjhCREMxNjhCMTVDODcy MDgzQTM0OTVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXyjLQA+5LdUB3QdSRUV9ddqjRXj1n5DoV9 2vIi51BjZ0cG0/VGVnD6P/C/SweidOwAU8lYki3D0iwx8YGSb5O/7He1lVzrVyBl NyBPbOGbOsWlfp+n+ShtS0DiNSS4h1t8F3X3cB4ReJiovmwC+KAm0uSsP9mccpw4 aS2SF+bMr9dRWWBxkQJ6SLw9vP0S53DqmwieOu+4LDACPM+he9hzX0JC4823NXjO Zn2muAVHsvNJAPPfhLwHG9DIVXZhujUDKRorkV+H30rs9RSHj4rsUQTHlEpqpI1y cBCYsxSZ5XPXsr/Yym9LgqWdiWPtMuM3bZ2+5d3IIRuIE1wWH4c= -----END CERTIFICATE-----Generated at Fri Feb 27 03:27:51 2026 by rpki-client