$ rpki-client -vvf repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.mft (raw, json) Hash identifier: 78de/lX6ntIKLbcAYVnxtQRthBJpijT44z21FabAzKs= Subject key identifier: 97:D7:2D:25:2F:AE:5A:B4:07:A4:38:1A:E0:DD:DF:19:13:20:F7:98 Authority key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Certificate issuer: /CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Certificate serial: 093D44D07C6A1CC0C8898E8E20AAD2D7F2F5EB1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft Manifest number: 0122 Signing time: Fri 06 Mar 2026 19:30:42 +0000 Manifest this update: Fri 06 Mar 2026 19:25:42 +0000 Manifest next update: Tue 10 Mar 2026 06:29:42 +0000 Files and hashes: 1: 3136302e31392e3134372e302f32342d3234203d3e20313532373735.roa (hash: wpy96Czy5F/nzDP8R5DbJxynZ45/sg3wvq9eZTmuQ4k=) 2: 3136302e31392e3134362e302f32342d3234203d3e20313532373735.roa (hash: KqfiAsqedp1jTN5MJJRXQeZ9izmOQOboRC1ur5qsBHw=) 3: 1391AB90F1BF56A92FBDF7B8F48207992410775E.crl (hash: rAjg86kVvNwRSKwWsNpik9rge8xApEWFQui0iA9rfzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3d:44:d0:7c:6a:1c:c0:c8:89:8e:8e:20:aa:d2:d7:f2:f5:eb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Validity Not Before: Mar 6 19:25:42 2026 GMT Not After : Mar 10 06:29:42 2026 GMT Subject: CN=97D72D252FAE5AB407A4381AE0DDDF191320F798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:46:af:7c:4b:32:82:18:88:d3:da:4c:93:9c: fc:03:fa:1d:2c:92:d4:54:52:9e:2f:b7:49:52:81: 94:cf:65:e8:26:0e:68:1c:10:ad:08:b8:8e:b7:75: 4c:c7:86:30:45:10:72:b4:a2:5b:35:ec:72:0c:65: 3a:30:d2:59:f9:84:cc:4a:88:69:32:ff:ff:df:42: f2:a7:f7:07:87:46:53:e8:1c:05:b4:64:8d:a8:37: 0b:4b:69:ab:32:9e:08:56:3c:ca:75:bd:9a:0f:52: da:42:51:b5:9a:44:3c:bc:bf:34:c4:76:9b:73:a8: 32:74:3f:79:1e:20:11:93:c9:97:27:a6:70:5e:7e: 60:39:4d:8d:07:43:b8:37:71:51:16:68:ca:57:c7: 2e:a9:7d:fe:aa:ca:c5:14:b3:bf:3d:21:70:db:31: 4c:f6:35:db:05:6d:7d:41:02:bd:dd:1e:c1:bc:85: b8:3f:80:aa:22:c1:9d:39:28:1d:bc:27:c3:53:bf: f9:0e:7d:a7:fa:b7:45:22:7b:95:52:b0:52:4b:9f: f2:46:b0:ab:29:7a:11:64:9a:e1:6b:15:ec:b2:71: 8e:7f:a0:66:f7:65:fb:e0:c5:f6:a8:10:85:7d:8f: 8b:e4:f1:0e:51:20:1e:74:37:56:59:44:d4:99:b1: 40:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D7:2D:25:2F:AE:5A:B4:07:A4:38:1A:E0:DD:DF:19:13:20:F7:98 X509v3 Authority Key Identifier: keyid:13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:62:ad:b9:eb:a4:b6:be:05:8f:88:58:56:83:2f:bc:5d:ce: 70:12:70:a8:45:09:bb:09:ab:69:20:d2:c4:90:d5:e0:ec:15: 01:14:49:f9:d5:af:17:f2:e5:39:3c:5a:37:5f:2d:4b:a9:d0: 9c:b1:d2:50:4b:61:fe:fc:bd:cc:bd:98:ad:e6:ae:b4:b5:19: b7:51:23:5c:6d:4f:f2:6c:67:4a:12:cb:dd:74:98:d0:dd:85: 7f:f7:4c:3e:39:f7:b3:30:6b:a2:31:87:72:65:44:2c:a0:89: 98:53:f1:23:4c:b0:92:8d:97:46:8e:f0:3d:a0:81:4f:f2:cd: b2:d9:6e:16:32:90:95:e3:40:3f:45:e1:ed:56:94:ac:4d:31: 6b:d3:1b:c7:82:d2:a1:07:96:3e:1b:6b:d8:0c:a8:6b:f8:22: a0:4e:20:6f:f9:a6:fe:2b:64:9c:c4:d0:fb:5d:95:cb:4f:63: db:80:79:c8:49:1d:ea:00:0e:f8:67:d1:e9:11:93:5f:38:9b: cc:76:ff:b9:82:2c:f7:be:07:28:04:98:f7:9c:49:6a:fb:9c: 41:76:4f:b8:34:94:d4:63:ee:89:73:2f:b7:d8:15:76:34:8f: 57:61:3d:26:0a:39:f1:dc:c6:20:3b:14:2d:4f:44:60:00:c0: 42:84:9a:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCT1E0HxqHMDIiY6OIKrS1/L16xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTky NDEwNzc1RTAeFw0yNjAzMDYxOTI1NDJaFw0yNjAzMTAwNjI5NDJaMDMxMTAvBgNV BAMTKDk3RDcyRDI1MkZBRTVBQjQwN0E0MzgxQUUwRERERjE5MTMyMEY3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmRq98SzKCGIjT2kyTnPwD+h0s ktRUUp4vt0lSgZTPZegmDmgcEK0IuI63dUzHhjBFEHK0ols17HIMZTow0ln5hMxK iGky///fQvKn9weHRlPoHAW0ZI2oNwtLaasynghWPMp1vZoPUtpCUbWaRDy8vzTE dptzqDJ0P3keIBGTyZcnpnBefmA5TY0HQ7g3cVEWaMpXxy6pff6qysUUs789IXDb MUz2NdsFbX1BAr3dHsG8hbg/gKoiwZ05KB28J8NTv/kOfaf6t0Uie5VSsFJLn/JG sKspehFkmuFrFeyycY5/oGb3ZfvgxfaoEIV9j4vk8Q5RIB50N1ZZRNSZsUCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl9ctJS+uWrQHpDga4N3fGRMg95gwHwYDVR0j BBgwFoAUE5GrkPG/Vqkvvfe49IIHmSQQd14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMC8xMzkxQUI5MEYx QkY1NkE5MkZCREY3QjhGNDgyMDc5OTI0MTA3NzVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3OTkyNDEw Nzc1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjliOWJkMzgtMmVmYS00ZDRjLWE5 NTYtNDI0OTJhM2U2MDAwLzAvMTM5MUFCOTBGMUJGNTZBOTJGQkRGN0I4RjQ4MjA3 OTkyNDEwNzc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVirbnrpLa+BY+IWFaDL7xdznAScKhFCbsJ q2kg0sSQ1eDsFQEUSfnVrxfy5Tk8WjdfLUup0Jyx0lBLYf78vcy9mK3mrrS1GbdR I1xtT/JsZ0oSy910mNDdhX/3TD4597Mwa6Ixh3JlRCygiZhT8SNMsJKNl0aO8D2g gU/yzbLZbhYykJXjQD9F4e1WlKxNMWvTG8eC0qEHlj4ba9gMqGv4IqBOIG/5pv4r ZJzE0PtdlctPY9uAechJHeoADvhn0ekRk184m8x2/7mCLPe+BygEmPecSWr7nEF2 T7g0lNRj7olzL7fYFXY0j1dhPSYKOfHcxiA7FC1PRGAAwEKEmoA= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:03 2026 by rpki-client