$ rpki-client -vvf repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft File: B9A55DD123C2F224C4E245856905F78F2F354D92.mft (raw, json) Hash identifier: RJbRPxb1oob2qXxNdI6IKm/Z1LZLQCUsM4CJWqC2Nnk= Subject key identifier: F3:99:A5:12:9B:B8:D4:33:DE:8E:DE:C3:32:FE:A9:DD:91:DD:56:2A Authority key identifier: B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 Certificate issuer: /CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Certificate serial: 41C3B4F43F1DC9F2873A8CBAFC34E1534A178BD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft Manifest number: 013A Signing time: Sun 19 Apr 2026 06:21:09 +0000 Manifest this update: Sun 19 Apr 2026 06:16:09 +0000 Manifest next update: Wed 22 Apr 2026 10:30:09 +0000 Files and hashes: 1: 3135372e31302e39372e302f32342d3234203d3e203538383231.roa (hash: Wx2OjPLLf/p+4FpTc/iFj9ib95oosG62DmEcDyqUABQ=) 2: B9A55DD123C2F224C4E245856905F78F2F354D92.crl (hash: p2hCOqVhOG1N9x9BuNVCUY9D7v7dmgvOXZlBiUlGSD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:30:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c3:b4:f4:3f:1d:c9:f2:87:3a:8c:ba:fc:34:e1:53:4a:17:8b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9A55DD123C2F224C4E245856905F78F2F354D92 Validity Not Before: Apr 19 06:16:09 2026 GMT Not After : Apr 22 10:30:09 2026 GMT Subject: CN=F399A5129BB8D433DE8EDEC332FEA9DD91DD562A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:53:00:7b:ae:19:f0:dd:d9:33:26:9f:81: 9a:ba:fe:ed:65:f6:c8:7d:36:f2:ef:28:2a:43:36: c9:8d:7a:79:ab:4e:c0:df:9b:18:13:e2:11:c1:54: 47:2c:69:02:cb:7d:eb:ed:b0:74:ed:76:f3:f5:27: d0:68:90:4b:f3:61:32:b3:b9:b0:9e:97:fc:4f:dd: a6:be:50:e6:fa:fe:4a:9a:9c:1e:79:92:ff:42:65: ee:03:81:ff:21:ad:a7:a7:a7:4f:38:6b:81:9a:70: c0:a5:fa:c8:e7:63:4b:c2:f3:d6:ca:10:f8:46:7e: d8:fc:a6:d5:12:5a:58:fe:2e:03:bf:f0:a8:ea:2c: 35:52:59:e5:9b:89:24:cb:f0:f2:83:bd:d2:65:86: 0d:7b:8f:f8:54:c5:8a:db:3d:8e:57:30:f7:56:45: 7e:62:45:1e:ef:98:9c:bb:91:ef:96:0c:c6:b3:ed: f8:1e:94:88:88:1b:e2:94:21:49:2b:fe:fd:24:e2: ac:de:02:ad:41:a0:6e:fa:8b:b2:16:a1:5d:a9:b9: c8:89:47:c1:e0:ba:91:60:b0:18:38:e9:6e:03:da: 56:79:e9:58:e9:b6:42:ff:c2:24:c5:18:37:fc:3e: b3:3b:f0:4e:1a:86:0c:94:84:b6:bb:fb:ce:fa:35: 43:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:99:A5:12:9B:B8:D4:33:DE:8E:DE:C3:32:FE:A9:DD:91:DD:56:2A X509v3 Authority Key Identifier: keyid:B9:A5:5D:D1:23:C2:F2:24:C4:E2:45:85:69:05:F7:8F:2F:35:4D:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B9A55DD123C2F224C4E245856905F78F2F354D92.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f2f64ca-fa54-499e-bc33-4862dca794f7/0/B9A55DD123C2F224C4E245856905F78F2F354D92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:e9:17:24:7f:45:51:5e:21:94:9b:ab:bd:66:81:a9:5c:3b: 45:b5:fe:0e:11:8f:22:84:b5:b5:c4:c2:39:13:d9:6f:6f:9b: 25:c5:8c:3c:11:7b:cf:5c:1c:10:db:22:4e:d5:8a:89:f6:30: 6e:59:3c:9e:35:28:cf:8e:92:af:10:c5:b9:aa:42:d5:59:fa: 93:c7:13:11:8b:5a:ff:ba:df:a2:88:b2:8e:15:3b:79:db:1e: 3b:f7:72:67:ca:98:cc:d2:fd:4c:50:60:6c:12:16:1f:42:d5: 28:b1:8f:2e:3c:97:af:95:8b:0f:9a:e9:14:1c:3a:18:61:5c: 67:5a:51:84:45:d1:da:41:a1:99:8e:39:f9:a8:46:13:91:89: 21:73:42:98:d6:2f:4e:02:c9:94:70:c3:5b:60:44:e5:5a:fb: 18:65:a9:34:4e:e5:95:f4:db:f0:a6:44:f8:5e:14:83:46:14: 7c:33:c8:ee:3b:74:8e:a2:18:a5:30:54:38:da:24:92:d4:be: 7e:16:85:64:1f:49:ff:41:b1:f3:e2:c9:96:cd:5c:c9:bb:ea: 17:30:d5:2c:10:ae:b6:88:71:36:ec:7a:9f:58:0f:d6:89:4e: b9:3e:aa:27:38:5f:4c:15:8e:3b:54:3d:3a:08:14:74:fa:04: 55:b6:88:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQcO09D8dyfKHOoy6/DThU0oXi9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYy RjM1NEQ5MjAeFw0yNjA0MTkwNjE2MDlaFw0yNjA0MjIxMDMwMDlaMDMxMTAvBgNV BAMTKEYzOTlBNTEyOUJCOEQ0MzNERThFREVDMzMyRkVBOUREOTFERDU2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7b1MAe64Z8N3ZMyafgZq6/u1l 9sh9NvLvKCpDNsmNenmrTsDfmxgT4hHBVEcsaQLLfevtsHTtdvP1J9BokEvzYTKz ubCel/xP3aa+UOb6/kqanB55kv9CZe4Dgf8hraenp084a4GacMCl+sjnY0vC89bK EPhGftj8ptUSWlj+LgO/8KjqLDVSWeWbiSTL8PKDvdJlhg17j/hUxYrbPY5XMPdW RX5iRR7vmJy7ke+WDMaz7fgelIiIG+KUIUkr/v0k4qzeAq1BoG76i7IWoV2puciJ R8HgupFgsBg46W4D2lZ56VjptkL/wiTFGDf8PrM78E4ahgyUhLa7+876NUMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85mlEpu41DPejt7DMv6p3ZHdViowHwYDVR0j BBgwFoAUuaVd0SPC8iTE4kWFaQX3jy81TZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjJmNjRjYS1mYTU0LTQ5OWUtYmMzMy00ODYyZGNhNzk0ZjcvMC9COUE1NUREMTIz QzJGMjI0QzRFMjQ1ODU2OTA1Rjc4RjJGMzU0RDkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3OEYyRjM1 NEQ5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyZjY0Y2EtZmE1NC00OTllLWJj MzMtNDg2MmRjYTc5NGY3LzAvQjlBNTVERDEyM0MyRjIyNEM0RTI0NTg1NjkwNUY3 OEYyRjM1NEQ5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrpFyR/RVFeIZSbq71mgalcO0W1/g4RjyKE tbXEwjkT2W9vmyXFjDwRe89cHBDbIk7Vion2MG5ZPJ41KM+Okq8QxbmqQtVZ+pPH ExGLWv+636KIso4VO3nbHjv3cmfKmMzS/UxQYGwSFh9C1Sixjy48l6+Viw+a6RQc OhhhXGdaUYRF0dpBoZmOOfmoRhORiSFzQpjWL04CyZRww1tgROVa+xhlqTRO5ZX0 2/CmRPheFINGFHwzyO47dI6iGKUwVDjaJJLUvn4WhWQfSf9BsfPiyZbNXMm76hcw 1SwQrraIcTbsep9YD9aJTrk+qic4X0wVjjtUPToIFHT6BFW2iLQ= -----END CERTIFICATE-----Generated at Mon Apr 20 09:39:20 2026 by rpki-client