$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: wTfrMLFbmt/GvF+30Qhc/dZ9K0jEWwr8IsqOKjLzovE= Subject key identifier: 9B:F7:3D:8C:81:A8:F7:E1:07:50:A8:FC:62:ED:73:A7:59:A7:86:93 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 1490A8294FF2B1EDA00FF94ACB65620C9EB3707C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 0263 Signing time: Wed 25 Mar 2026 03:01:38 +0000 Manifest this update: Wed 25 Mar 2026 02:56:38 +0000 Manifest next update: Sat 28 Mar 2026 14:49:38 +0000 Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: e8eIFrn/eUH5duTImnVIIrZAb8UtgLMsSB2c7nTYPik=) 2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 3: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: quOt1H9+N5AJhfP9QDz5U05UuT+82trF6ZQzJRS8U9o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:90:a8:29:4f:f2:b1:ed:a0:0f:f9:4a:cb:65:62:0c:9e:b3:70:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Mar 25 02:56:38 2026 GMT Not After : Mar 28 14:49:38 2026 GMT Subject: CN=9BF73D8C81A8F7E10750A8FC62ED73A759A78693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0d:1a:85:26:32:1a:1d:c7:cc:c1:13:1c:12: 88:8d:2b:22:2b:ce:4f:89:c2:8b:e7:28:bf:3a:f3: d3:fe:45:b2:7e:07:1b:a9:64:d7:98:45:6f:ac:41: d9:94:37:97:08:71:fc:d4:d6:fd:da:a5:17:14:fa: 50:89:50:1c:4c:9e:9b:89:51:8a:3e:b6:0a:51:18: 28:5d:69:be:9b:82:ca:83:20:cc:4b:df:d5:e7:e9: ce:bc:da:da:c5:c9:f9:a0:bf:bc:0d:f6:61:89:24: dc:cd:1f:f6:d5:62:9f:39:33:30:d3:76:0a:36:5a: 9f:a6:f6:f7:3d:74:9d:a0:b3:a1:c7:cf:c1:28:c5: 25:6b:07:e8:84:d0:fc:d9:e3:00:1c:eb:f7:a7:43: 1f:08:28:e7:de:d5:24:72:a7:9c:aa:7d:8d:3e:fa: 57:2a:76:c7:fb:d0:8d:5c:20:c1:99:e9:43:fc:ba: 29:3b:39:c2:dd:8a:b3:cb:40:26:72:53:12:65:51: f8:e0:fc:cd:d7:ce:1e:f8:fd:26:da:8b:e9:09:b1: 05:0c:5a:87:f8:b3:45:de:2f:e0:36:35:9f:11:da: 53:16:5b:c9:4d:1b:25:d2:6d:3d:a1:e9:0d:21:c5: 98:32:4d:d7:b5:5c:2a:2e:f3:40:2f:c8:3e:8f:a8: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F7:3D:8C:81:A8:F7:E1:07:50:A8:FC:62:ED:73:A7:59:A7:86:93 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ca:22:8a:d6:4f:d6:fe:4e:4c:e8:f1:e5:c7:d2:1b:24:5d: ba:78:1f:8f:8d:50:99:62:85:3b:c9:37:99:73:2c:70:c4:76: 30:07:04:e6:3e:a3:6c:c4:75:99:28:da:bf:c0:26:ce:96:f8: b9:d4:51:b0:ca:68:35:ff:4e:6e:f6:eb:a8:d8:6c:ca:07:5d: 43:f8:81:85:22:c5:02:75:03:a2:32:9f:70:c0:a6:44:71:4f: ad:ed:13:1d:0d:fb:93:7e:02:1c:be:0b:63:03:42:0b:46:44: 35:f0:ad:cf:da:7e:49:11:42:53:d6:44:2b:85:9a:62:45:32: 16:27:ba:98:a5:ca:36:37:1c:8f:16:f2:d5:d8:3b:27:15:aa: 16:01:72:4c:3e:aa:5e:b3:94:5f:5d:b8:2e:f6:cc:b9:c3:42: ee:0a:0d:2f:ea:05:c8:e1:75:1e:c5:f7:16:f6:36:18:f8:a0: 95:44:b5:ab:31:c8:f3:e8:2b:59:fe:b1:de:da:9d:5e:82:75: f6:a6:7b:f6:a6:74:46:4f:79:55:63:cc:e3:81:a6:ce:04:32: e2:02:e4:74:8e:d9:ee:a8:0e:7a:ee:f7:a1:a3:b3:d2:e8:3a: 3d:d2:0a:90:d1:f2:37:77:c7:c5:7f:42:c1:38:dd:cb:5d:a5: 07:a1:33:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJCoKU/yse2gD/lKy2ViDJ6zcHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNjAzMjUwMjU2MzhaFw0yNjAzMjgxNDQ5MzhaMDMxMTAvBgNV BAMTKDlCRjczRDhDODFBOEY3RTEwNzUwQThGQzYyRUQ3M0E3NTlBNzg2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9DRqFJjIaHcfMwRMcEoiNKyIr zk+JwovnKL8689P+RbJ+BxupZNeYRW+sQdmUN5cIcfzU1v3apRcU+lCJUBxMnpuJ UYo+tgpRGChdab6bgsqDIMxL39Xn6c682trFyfmgv7wN9mGJJNzNH/bVYp85MzDT dgo2Wp+m9vc9dJ2gs6HHz8EoxSVrB+iE0PzZ4wAc6/enQx8IKOfe1SRyp5yqfY0+ +lcqdsf70I1cIMGZ6UP8uik7OcLdirPLQCZyUxJlUfjg/M3Xzh74/Sbai+kJsQUM Wof4s0XeL+A2NZ8R2lMWW8lNGyXSbT2h6Q0hxZgyTde1XCou80AvyD6PqFifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm/c9jIGo9+EHUKj8Yu1zp1mnhpMwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvKIorWT9b+Tkzo8eXH0hskXbp4H4+NUJli hTvJN5lzLHDEdjAHBOY+o2zEdZko2r/AJs6W+LnUUbDKaDX/Tm7266jYbMoHXUP4 gYUixQJ1A6Iyn3DApkRxT63tEx0N+5N+Ahy+C2MDQgtGRDXwrc/afkkRQlPWRCuF mmJFMhYnupilyjY3HI8W8tXYOycVqhYBckw+ql6zlF9duC72zLnDQu4KDS/qBcjh dR7F9xb2Nhj4oJVEtasxyPPoK1n+sd7anV6Cdfame/amdEZPeVVjzOOBps4EMuIC 5HSO2e6oDnru96Gjs9LoOj3SCpDR8jd3x8V/QsE43ctdpQehM7U= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:56 2026 by rpki-client