$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: sY0FapLZR4S7qHnYxOrl+HuIIpcGqhKqgayofW5doiU= Subject key identifier: 3B:91:67:13:52:A9:CB:73:D3:9B:F5:F4:17:88:4D:78:75:AD:14:08 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 7A4F921C37715FB9E34EBC89DCE5A56375118D9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 025D Signing time: Wed 25 Mar 2026 23:22:17 +0000 Manifest this update: Wed 25 Mar 2026 23:17:17 +0000 Manifest next update: Sun 29 Mar 2026 10:55:17 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: 81Yavjh0tBgqOD2LG93B99P1R7pxlNeQ3paJ3IfaK4o=) 2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: rLWlyhjlEutYzFFOTXmNaJ4gG1nQErugTyA4lBmU1ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4f:92:1c:37:71:5f:b9:e3:4e:bc:89:dc:e5:a5:63:75:11:8d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Mar 25 23:17:17 2026 GMT Not After : Mar 29 10:55:17 2026 GMT Subject: CN=3B91671352A9CB73D39BF5F417884D7875AD1408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:31:f0:7c:8e:b3:9b:5d:b3:60:37:f2:30: d3:b0:a6:40:53:36:92:61:57:2a:73:2a:94:19:ad: 7e:cf:4b:05:ec:8f:21:31:84:ce:3d:72:e5:6d:bf: 92:36:4b:62:a2:51:2a:b3:e8:ae:28:86:a4:ff:bd: 4a:d5:c9:d1:76:8e:df:2c:a3:7e:9a:67:c3:13:e5: c1:2c:a4:57:ec:0c:02:4a:ed:d3:b7:8e:b7:60:7d: 11:a3:14:d0:bc:2b:7d:44:ae:df:00:6d:c2:d9:4a: 87:b0:b1:32:eb:89:f5:ca:b4:aa:3d:eb:4f:5b:89: 8b:37:6e:df:33:54:b9:fb:ac:12:aa:82:aa:1c:6c: 26:e6:4e:1c:a8:d9:d5:05:20:85:b0:90:28:49:ed: 83:bf:7b:26:c1:f0:7b:c3:12:ae:32:86:88:0e:d0: dc:78:69:7d:bb:16:1e:9c:ad:52:af:64:43:7c:c0: 51:bb:08:52:45:4c:8d:d9:62:ca:00:01:27:64:e6: 9d:f5:b2:18:d5:fa:45:55:c9:14:a4:53:90:52:c6: da:a0:73:d8:30:de:7d:37:d5:19:39:27:d6:58:39: 7f:19:e4:c4:aa:97:09:74:a8:74:e4:6d:11:15:69: bd:4f:f9:eb:89:16:ce:44:8d:9d:60:e5:9b:be:8c: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:91:67:13:52:A9:CB:73:D3:9B:F5:F4:17:88:4D:78:75:AD:14:08 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:35:91:b9:10:99:a3:08:6c:da:61:35:46:f4:33:b0:fa:4b: df:20:35:ac:7c:ac:03:af:38:12:9e:9d:10:a2:d9:68:c0:75: 65:07:4d:db:92:c1:14:79:94:f8:05:ee:ee:c0:46:b4:5e:03: 9e:bc:52:30:68:ae:96:8c:f3:79:fa:9e:16:21:66:2e:99:a0: e5:1a:2f:23:fa:dc:32:b2:6c:7f:88:2c:13:b7:63:59:c5:3f: c1:7d:d6:a4:9f:1a:f8:ca:0c:38:54:38:7e:80:2a:d2:20:bf: 8a:01:80:b7:5d:eb:a8:ee:21:f6:39:36:71:8b:b0:fa:14:d5: 4d:9d:fe:99:2c:d1:97:f3:0e:4e:0f:32:50:0d:16:83:af:f6: 87:9c:e4:da:3d:80:a8:b5:1d:ca:16:30:84:0b:31:64:93:70: 07:6f:55:0e:15:18:82:d0:46:42:1e:22:ee:1b:65:66:cb:b7: 51:e5:9e:b1:d6:96:c7:12:41:60:b3:9f:2c:ef:dc:ae:45:ab: ff:d7:69:e5:52:32:bc:93:c2:ee:5c:98:3b:5a:8b:a0:f2:f8: 06:07:b2:9d:d5:b4:bb:26:a1:5b:7b:38:bf:e4:30:c1:46:95: 92:48:c1:5c:a0:af:ec:d2:62:49:8d:44:fc:91:8a:16:9b:cb: d5:9d:54:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUek+SHDdxX7njTryJ3OWlY3URjZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNjAzMjUyMzE3MTdaFw0yNjAzMjkxMDU1MTdaMDMxMTAvBgNV BAMTKDNCOTE2NzEzNTJBOUNCNzNEMzlCRjVGNDE3ODg0RDc4NzVBRDE0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzDHwfI6zm12zYDfyMNOwpkBT NpJhVypzKpQZrX7PSwXsjyExhM49cuVtv5I2S2KiUSqz6K4ohqT/vUrVydF2jt8s o36aZ8MT5cEspFfsDAJK7dO3jrdgfRGjFNC8K31Ert8AbcLZSoewsTLrifXKtKo9 609biYs3bt8zVLn7rBKqgqocbCbmThyo2dUFIIWwkChJ7YO/eybB8HvDEq4yhogO 0Nx4aX27Fh6crVKvZEN8wFG7CFJFTI3ZYsoAASdk5p31shjV+kVVyRSkU5BSxtqg c9gw3n031Rk5J9ZYOX8Z5MSqlwl0qHTkbREVab1P+euJFs5EjZ1g5Zu+jDyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5FnE1Kpy3PTm/X0F4hNeHWtFAgwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL81kbkQmaMIbNphNUb0M7D6S98gNax8rAOv OBKenRCi2WjAdWUHTduSwRR5lPgF7u7ARrReA568UjBorpaM83n6nhYhZi6ZoOUa LyP63DKybH+ILBO3Y1nFP8F91qSfGvjKDDhUOH6AKtIgv4oBgLdd66juIfY5NnGL sPoU1U2d/pks0ZfzDk4PMlANFoOv9oec5No9gKi1HcoWMIQLMWSTcAdvVQ4VGILQ RkIeIu4bZWbLt1HlnrHWlscSQWCznyzv3K5Fq//XaeVSMryTwu5cmDtai6Dy+AYH sp3VtLsmoVt7OL/kMMFGlZJIwVygr+zSYkmNRPyRihaby9WdVGA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:04 2026 by rpki-client