$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: TFavWfBDMYoqgm+LQSj4DycWDhSPFdfoRSHiAbocOYQ= Subject key identifier: D8:B9:57:1C:B6:8B:F8:DC:E3:C9:4E:3F:2C:B3:7B:17:6F:33:DE:20 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 69B520FFC69F48443D11097FED82E40BE9774FCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: DB Signing time: Wed 25 Mar 2026 18:51:10 +0000 Manifest this update: Wed 25 Mar 2026 18:46:10 +0000 Manifest next update: Sun 29 Mar 2026 05:57:10 +0000 Files and hashes: 1: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=) 2: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: Ea3gPx3x4wk2BHtSRy0TX7MLk0gcNoFf0KBNJd/jY2U=) 3: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b5:20:ff:c6:9f:48:44:3d:11:09:7f:ed:82:e4:0b:e9:77:4f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Mar 25 18:46:10 2026 GMT Not After : Mar 29 05:57:10 2026 GMT Subject: CN=D8B9571CB68BF8DCE3C94E3F2CB37B176F33DE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:ce:08:44:15:53:94:fa:7b:99:13:01:56: 85:dd:47:86:95:61:da:0a:3d:c8:ec:8c:5b:7a:3d: 9a:ad:51:1f:3a:cf:b7:67:cd:3f:77:41:82:df:81: 43:cc:96:fb:fd:4e:c1:ed:67:fd:42:74:6f:0f:a8: 28:99:eb:ad:20:af:d4:bc:12:5f:87:66:17:5e:2e: 41:1a:8d:60:8a:ac:f3:70:17:df:ca:04:ac:19:93: fa:9d:ed:4c:95:f3:8e:44:0d:c7:28:54:b5:71:a2: 69:4e:a3:0c:6f:68:b4:f0:1e:81:75:e6:54:10:59: f7:21:29:64:02:6b:8b:20:7d:13:23:9f:d9:1d:f8: 77:b7:d6:de:5c:67:e3:07:e2:a0:54:58:92:ce:3f: a7:36:04:ab:01:9f:d4:01:86:d5:aa:d4:cc:27:8e: 22:1f:23:0d:a3:11:03:ac:c1:67:e0:cd:e9:0e:09: cc:7f:41:56:f5:61:2e:37:e8:e6:35:63:da:d3:73: c8:ed:79:c2:4a:63:ee:ee:f1:44:ac:9c:ac:c7:cd: a1:2f:b8:99:e7:c3:ed:61:05:18:1e:ed:fe:6d:0a: a4:3e:87:0d:f6:d6:90:f7:48:ab:e6:af:a3:e2:b3: 14:ed:a0:cc:b2:f3:23:8d:71:66:10:43:f9:d3:a2: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:57:1C:B6:8B:F8:DC:E3:C9:4E:3F:2C:B3:7B:17:6F:33:DE:20 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a8:7b:25:3f:95:6e:db:b5:1e:51:35:0f:10:5a:66:0a:c3: ea:9a:8c:56:32:f2:a0:38:f4:47:3e:9f:12:d7:99:39:11:0f: d4:e5:bf:85:1f:e4:a9:b6:ee:3c:7e:6c:f9:82:f2:f7:fa:3f: 60:17:92:a8:c9:99:55:2d:e7:50:ff:41:db:e0:24:28:f1:1d: b7:60:2f:e5:31:91:52:71:74:8b:9c:81:02:45:c2:c9:e0:f0: f9:0f:c4:29:dc:5f:4f:c4:24:44:c4:e6:f9:56:9e:aa:2d:ee: d7:08:e3:c0:36:e7:ad:6d:55:54:7d:77:c6:a9:d6:71:61:09: 23:63:a3:da:98:e1:88:e2:25:9b:6d:a7:cb:58:d3:cc:ea:26: 62:40:8e:1b:ee:af:58:33:e6:78:d6:1e:8b:61:b5:d9:bc:6b: 9a:20:29:50:36:04:f5:66:08:55:83:37:3d:17:f9:83:66:61: 4f:5c:63:6a:cf:f3:58:0d:ae:a0:94:f9:38:b2:ab:c5:19:9c: 50:6c:5c:45:76:b9:40:9c:d0:e8:a8:1d:32:ee:c5:66:1e:ac: d9:f5:42:02:96:35:87:d4:91:3a:02:61:8a:f7:34:e8:e0:e4: fc:4f:45:dc:68:75:0f:f1:96:d4:54:1f:0c:1f:af:89:ea:08: 37:1c:8a:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUabUg/8afSEQ9EQl/7YLkC+l3T88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNjAzMjUxODQ2MTBaFw0yNjAzMjkwNTU3MTBaMDMxMTAvBgNV BAMTKEQ4Qjk1NzFDQjY4QkY4RENFM0M5NEUzRjJDQjM3QjE3NkYzM0RFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFC84IRBVTlPp7mRMBVoXdR4aV YdoKPcjsjFt6PZqtUR86z7dnzT93QYLfgUPMlvv9TsHtZ/1CdG8PqCiZ660gr9S8 El+HZhdeLkEajWCKrPNwF9/KBKwZk/qd7UyV845EDccoVLVxomlOowxvaLTwHoF1 5lQQWfchKWQCa4sgfRMjn9kd+He31t5cZ+MH4qBUWJLOP6c2BKsBn9QBhtWq1Mwn jiIfIw2jEQOswWfgzekOCcx/QVb1YS436OY1Y9rTc8jtecJKY+7u8USsnKzHzaEv uJnnw+1hBRge7f5tCqQ+hw321pD3SKvmr6PisxTtoMyy8yONcWYQQ/nTopIVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LlXHLaL+NzjyU4/LLN7F28z3iAwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqoeyU/lW7btR5RNQ8QWmYKw+qajFYy8qA4 9Ec+nxLXmTkRD9Tlv4Uf5Km27jx+bPmC8vf6P2AXkqjJmVUt51D/QdvgJCjxHbdg L+UxkVJxdIucgQJFwsng8PkPxCncX0/EJETE5vlWnqot7tcI48A2561tVVR9d8ap 1nFhCSNjo9qY4YjiJZttp8tY08zqJmJAjhvur1gz5njWHothtdm8a5ogKVA2BPVm CFWDNz0X+YNmYU9cY2rP81gNrqCU+Tiyq8UZnFBsXEV2uUCc0OioHTLuxWYerNn1 QgKWNYfUkToCYYr3NOjg5PxPRdxodQ/xltRUHwwfr4nqCDcciqM= -----END CERTIFICATE-----Generated at Fri Mar 27 01:13:31 2026 by rpki-client