$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: h03Z32pcUzA47geJ89wqixkUJtFdyWtepTTpjyvxpto= Subject key identifier: 87:F5:41:12:2B:63:6B:AC:7D:E8:AE:DC:AB:5D:4B:D4:57:71:A3:31 Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 759CA2D69FC04811A7A98E84F98A9B7C08FA8D82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 0264 Signing time: Thu 26 Mar 2026 06:11:50 +0000 Manifest this update: Thu 26 Mar 2026 06:06:50 +0000 Manifest next update: Sun 29 Mar 2026 13:41:50 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: VJL9KeDerIzVKUdRVsQD4EqmA/+WAY+83Tr9rvd7sMw=) 2: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: mIKBKqs9klO31iYRCa+uojKfZbTx4ks4WWLDn1AoOaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9c:a2:d6:9f:c0:48:11:a7:a9:8e:84:f9:8a:9b:7c:08:fa:8d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Mar 26 06:06:50 2026 GMT Not After : Mar 29 13:41:50 2026 GMT Subject: CN=87F541122B636BAC7DE8AEDCAB5D4BD45771A331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:84:58:02:48:2e:14:fe:1b:c6:5f:41:96: cc:f7:c3:c2:2b:7c:9e:56:71:7c:fb:cc:e3:c8:58: 5f:5e:cf:69:14:ea:b0:db:20:ec:c1:21:bf:72:1c: e5:67:ac:2e:bf:af:fe:7c:2c:cc:f9:60:12:f8:7b: 5c:63:7d:ba:e8:20:ab:40:3d:60:d3:79:51:2a:cf: 00:0e:63:88:a0:d3:a3:9a:92:c6:3a:2d:a5:67:19: 53:19:1e:a6:2c:57:e5:9a:3e:c2:f4:0d:43:2f:df: 79:de:ed:82:31:e1:0d:c6:f3:28:7c:39:a9:f8:45: 42:e8:ba:26:3c:fc:a9:21:57:f4:4b:ac:0b:e3:bb: 9d:af:f6:4c:f1:44:f3:d9:3c:93:04:15:13:54:6e: c2:1e:da:46:ad:5b:da:2d:e5:c4:fa:ee:b9:1e:73: 9a:bd:ec:54:93:db:a2:84:2a:04:57:66:6b:c4:eb: 06:ab:0c:0f:3b:42:20:77:fc:4d:ec:34:7c:23:75: ac:97:5b:79:34:a2:60:52:19:d6:54:39:3f:80:79: 4a:44:3e:06:b0:ae:62:fb:e8:80:ff:f3:16:59:b2: 09:f6:21:fe:be:01:47:57:ee:e7:f6:fd:90:90:f7: 19:07:ae:ca:68:ae:63:a1:bd:93:8f:9f:29:54:cd: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F5:41:12:2B:63:6B:AC:7D:E8:AE:DC:AB:5D:4B:D4:57:71:A3:31 X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f2:58:41:61:77:10:da:f8:33:9f:ce:53:78:63:bf:ec:1e: b0:6f:eb:6b:33:fa:74:c4:48:fb:7b:1a:44:57:83:4f:c6:22: 46:b1:b1:59:13:36:66:d9:cb:53:6c:48:72:1d:8b:38:28:04: e2:30:c8:5a:78:3c:d5:07:36:00:00:7b:11:bf:b3:c5:2b:ba: 74:07:84:73:1f:e2:cb:6c:c9:8c:a5:77:39:db:9e:36:82:2a: 7f:ee:eb:a3:5d:0a:3f:d4:67:bb:3e:e1:10:38:2e:db:6f:85: 91:ec:d2:02:e3:d8:18:df:e7:50:0e:fa:0d:f5:c8:ba:b6:0e: 06:29:01:93:2c:bd:ed:63:2a:df:6e:5d:3f:d6:6f:ad:92:ad: a2:cc:72:8a:eb:c5:fd:c0:6d:a3:e3:63:4e:51:b4:19:18:95: a6:c7:96:e4:15:56:1d:f9:09:fe:03:ca:e4:6f:97:db:de:51: 22:53:d2:ca:0f:6c:04:7c:94:90:94:e4:45:5c:86:8c:c1:5c: 57:23:8f:c5:fe:f5:cc:a3:d5:91:53:84:2f:8f:55:8c:66:4d: af:f8:73:6f:a1:84:74:64:5c:af:ba:9e:2b:19:17:be:e9:48: 9b:6e:80:3b:fd:6d:dc:06:d4:6e:20:39:a9:b0:d8:8a:9c:4a: 84:9d:5e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZyi1p/ASBGnqY6E+YqbfAj6jYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNjAzMjYwNjA2NTBaFw0yNjAzMjkxMzQxNTBaMDMxMTAvBgNV BAMTKDg3RjU0MTEyMkI2MzZCQUM3REU4QUVEQ0FCNUQ0QkQ0NTc3MUEzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCM4RYAkguFP4bxl9Blsz3w8Ir fJ5WcXz7zOPIWF9ez2kU6rDbIOzBIb9yHOVnrC6/r/58LMz5YBL4e1xjfbroIKtA PWDTeVEqzwAOY4ig06OaksY6LaVnGVMZHqYsV+WaPsL0DUMv33ne7YIx4Q3G8yh8 Oan4RULouiY8/KkhV/RLrAvju52v9kzxRPPZPJMEFRNUbsIe2katW9ot5cT67rke c5q97FST26KEKgRXZmvE6warDA87QiB3/E3sNHwjdayXW3k0omBSGdZUOT+AeUpE PgawrmL76ID/8xZZsgn2If6+AUdX7uf2/ZCQ9xkHrspormOhvZOPnylUzeV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh/VBEitja6x96K7cq11L1FdxozEwHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJryWEFhdxDa+DOfzlN4Y7/sHrBv62sz+nTE SPt7GkRXg0/GIkaxsVkTNmbZy1NsSHIdizgoBOIwyFp4PNUHNgAAexG/s8UrunQH hHMf4stsyYyldznbnjaCKn/u66NdCj/UZ7s+4RA4LttvhZHs0gLj2Bjf51AO+g31 yLq2DgYpAZMsve1jKt9uXT/Wb62SraLMcorrxf3AbaPjY05RtBkYlabHluQVVh35 Cf4DyuRvl9veUSJT0soPbAR8lJCU5EVchozBXFcjj8X+9cyj1ZFThC+PVYxmTa/4 c2+hhHRkXK+6nisZF77pSJtugDv9bdwG1G4gOamw2IqcSoSdXgM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:58 2026 by rpki-client