$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: vFQf1jvF6R2gu6v990p0Z0ExT7RZg8A+UG3jzTb+eLE= Subject key identifier: 01:E2:7F:35:99:94:4B:CB:94:75:77:5B:54:59:23:29:87:F5:FF:89 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 464054A936C570BF61F289835D340E1F78A35B6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 0560 Signing time: Wed 25 Mar 2026 19:50:56 +0000 Manifest this update: Wed 25 Mar 2026 19:45:56 +0000 Manifest next update: Sun 29 Mar 2026 00:29:56 +0000 Files and hashes: 1: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 2: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=) 3: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 4: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=) 5: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 6: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: dyJgViJPiOa5LiGjVYPKebYhr2aWF3MlHTmErpK9MKA=) 7: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 8: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 9: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:40:54:a9:36:c5:70:bf:61:f2:89:83:5d:34:0e:1f:78:a3:5b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Mar 25 19:45:56 2026 GMT Not After : Mar 29 00:29:56 2026 GMT Subject: CN=01E27F3599944BCB9475775B5459232987F5FF89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:de:c2:28:f7:8f:0e:cd:8d:97:88:59:ac: 3d:48:c0:99:90:fb:fd:f5:56:68:3a:34:0c:9f:5b: 5d:f2:bc:ed:5a:19:5b:74:f1:2e:30:1a:aa:2d:b8: 93:f9:57:5f:29:fd:37:35:7c:1c:d3:73:74:05:68: af:93:66:14:be:4d:59:91:94:05:e8:2c:e0:fa:ae: 4b:f8:24:d1:50:bb:57:ab:a0:95:6f:2f:58:a0:d7: 6a:11:88:83:10:59:fe:28:26:8f:bd:17:a7:c9:f2: 2b:f6:24:5a:8f:c0:c9:4a:d6:20:64:ab:59:91:c0: 96:5b:e0:c0:9b:62:d5:09:df:b6:e4:6f:52:a4:2a: 0c:64:d1:53:cd:32:9e:30:47:0c:0c:b2:38:95:4b: 01:d6:1c:f0:95:01:33:b6:c7:14:3a:de:c3:c8:ed: 8d:d2:bd:0a:fe:b3:b3:25:31:f1:3b:f0:95:8f:ed: 63:6e:4d:ef:e4:7b:2d:09:f1:02:de:0d:f4:59:1d: a8:32:cb:8d:fa:c1:5e:16:5a:70:35:53:c7:46:87: b1:5e:25:be:24:d3:0c:81:b2:c2:0f:3e:02:79:fe: 98:27:a3:04:e8:10:d6:4f:bf:a5:59:89:f6:db:ec: 35:53:53:8e:5b:f4:8f:23:cf:55:61:ec:8d:4f:35: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E2:7F:35:99:94:4B:CB:94:75:77:5B:54:59:23:29:87:F5:FF:89 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ec:ef:f9:70:ab:9b:4c:87:82:90:a1:7d:14:0e:fd:4a:f2: 09:73:ce:c1:fa:79:6d:69:68:b9:5b:e8:63:9e:14:05:b5:bd: 22:b0:2b:8b:61:59:85:3f:ca:10:c0:f1:91:55:3a:74:1c:ea: f4:1e:9c:b9:ed:76:05:0b:a5:65:bd:1c:f4:45:ae:ab:e9:e8: 0f:d7:38:0c:0d:b6:b7:ac:71:4f:44:30:cf:8a:c8:c5:72:5f: af:26:f6:b8:0c:3b:e0:68:15:a2:34:65:8f:32:74:19:7b:b9: d0:ce:fb:1e:11:01:ec:b2:3c:88:37:39:85:fd:f3:51:32:27: 5b:1d:cb:20:bc:33:32:e0:12:3b:80:a1:63:35:31:2c:47:5e: 02:39:40:ba:65:aa:1f:da:6b:92:e5:a8:57:3d:f9:53:32:4d: cf:a9:83:73:45:24:54:ca:24:95:b5:7b:4c:5a:51:77:d7:8c: 0f:bc:26:a2:c2:01:1a:b8:e0:c8:73:96:02:58:4e:f2:4a:95: d3:ba:8b:2c:6d:4d:80:4a:66:77:4d:1f:28:c0:ef:b7:52:a6: 82:87:ef:98:bb:73:c4:f3:5c:51:60:2b:d1:bb:6a:47:be:84: 4f:fc:e0:94:c6:dd:e1:17:29:fd:a6:41:9c:26:01:73:9d:24: 34:16:e7:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURkBUqTbFcL9h8omDXTQOH3ijW2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNjAzMjUxOTQ1NTZaFw0yNjAzMjkwMDI5NTZaMDMxMTAvBgNV BAMTKDAxRTI3RjM1OTk5NDRCQ0I5NDc1Nzc1QjU0NTkyMzI5ODdGNUZGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvd7CKPePDs2Nl4hZrD1IwJmQ +/31Vmg6NAyfW13yvO1aGVt08S4wGqotuJP5V18p/Tc1fBzTc3QFaK+TZhS+TVmR lAXoLOD6rkv4JNFQu1eroJVvL1ig12oRiIMQWf4oJo+9F6fJ8iv2JFqPwMlK1iBk q1mRwJZb4MCbYtUJ37bkb1KkKgxk0VPNMp4wRwwMsjiVSwHWHPCVATO2xxQ63sPI 7Y3SvQr+s7MlMfE78JWP7WNuTe/key0J8QLeDfRZHagyy436wV4WWnA1U8dGh7Fe Jb4k0wyBssIPPgJ5/pgnowToENZPv6VZifbb7DVTU45b9I8jz1Vh7I1PNSIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAeJ/NZmUS8uUdXdbVFkjKYf1/4kwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfs7/lwq5tMh4KQoX0UDv1K8glzzsH6eW1p aLlb6GOeFAW1vSKwK4thWYU/yhDA8ZFVOnQc6vQenLntdgULpWW9HPRFrqvp6A/X OAwNtrescU9EMM+KyMVyX68m9rgMO+BoFaI0ZY8ydBl7udDO+x4RAeyyPIg3OYX9 81EyJ1sdyyC8MzLgEjuAoWM1MSxHXgI5QLplqh/aa5LlqFc9+VMyTc+pg3NFJFTK JJW1e0xaUXfXjA+8JqLCARq44MhzlgJYTvJKldO6iyxtTYBKZndNHyjA77dSpoKH 75i7c8TzXFFgK9G7ake+hE/84JTG3eEXKf2mQZwmAXOdJDQW5zU= -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:32 2026 by rpki-client