$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: WpF67TMjamtxXb/9yCUeQhFn3ieadEaV/d9Sbr+xwEQ= Subject key identifier: CA:8A:EC:BD:7E:98:E0:29:27:B7:4D:66:86:DD:3C:C9:5F:8C:B8:69 Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 3CA70CCC9FEDB85DCD681FF92E24324FF7A00511 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 04B5 Signing time: Wed 25 Mar 2026 06:11:07 +0000 Manifest this update: Wed 25 Mar 2026 06:06:07 +0000 Manifest next update: Sat 28 Mar 2026 06:23:07 +0000 Files and hashes: 1: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: dzwHJ2uk8Ks7+7v0Iehr18+6l9tIKs7qVVpJ0fc4v4s=) 2: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: 2JYulwUxi2T/jzgAmBWLWpOPU3Z1C06NLPJ2YJd9h44=) 3: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: ZtfrmcdIDZFk5FXV0vrgffSS//LC3R042y4pGOoRFVw=) 4: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: gks4E4RAlqsYzpMbY7s86LphrkEHlbXfODEV9a6VKSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a7:0c:cc:9f:ed:b8:5d:cd:68:1f:f9:2e:24:32:4f:f7:a0:05:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Mar 25 06:06:07 2026 GMT Not After : Mar 28 06:23:07 2026 GMT Subject: CN=CA8AECBD7E98E02927B74D6686DD3CC95F8CB869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:00:09:49:32:2d:52:75:b5:18:e0:d1:9a: bd:84:43:ea:6f:1b:6d:b6:5e:b8:14:08:f7:a8:37: 61:07:08:9d:a9:00:71:69:fb:c5:23:86:b2:0a:3b: be:9e:c4:ff:50:10:3a:db:d0:5b:ca:80:7c:e4:5b: 22:85:14:88:50:06:9a:b5:b0:af:9b:6d:18:75:e9: 11:0f:06:60:76:b1:2d:ba:3b:a1:8a:af:b2:9c:58: 19:3d:db:b0:c1:f6:03:1d:d4:6d:a7:e7:0b:f9:0c: ad:ca:9f:ce:4b:94:6b:b5:a5:83:15:79:11:0b:42: 7a:c1:c6:a2:06:9b:c8:7c:4c:0e:32:62:21:42:50: 29:48:67:2c:c4:f6:25:e4:7a:e2:22:2a:5f:5d:94: 23:6a:4c:52:0b:6f:10:e0:15:02:7b:3b:f0:ee:c2: db:d3:63:3a:6e:34:a3:4b:72:6d:62:ca:50:35:1e: e2:ac:71:a1:7c:72:6d:69:38:f1:c5:ca:40:77:2f: 94:ad:7e:4d:7a:3b:af:9f:1e:4a:7d:d0:b1:1b:e0: d9:b0:59:ad:4e:42:de:6a:b3:8b:32:e2:dc:68:31: ba:a0:7c:f8:99:1f:32:16:93:f8:ee:ce:6f:97:14: a2:5e:bd:33:bc:76:3e:26:ad:12:6f:0c:e2:de:fb: 96:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8A:EC:BD:7E:98:E0:29:27:B7:4D:66:86:DD:3C:C9:5F:8C:B8:69 X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:11:7e:06:f3:3f:80:fb:f8:06:6b:3a:a0:48:94:0b:fd:af: 4a:b2:9c:97:09:50:20:e1:1a:2e:7f:a7:3c:1a:13:4f:2a:97: 17:90:3f:91:7c:f8:f1:bf:12:59:de:c8:6d:c3:d1:c7:0a:c0: 3e:ee:21:fd:68:81:e0:dc:a3:63:17:09:24:b2:3d:c7:39:3b: 61:96:20:bd:67:af:ab:30:71:5b:71:b2:0e:6e:b1:78:f8:a4: 9e:11:b2:66:9d:c7:ec:cb:c6:2e:7e:48:06:49:94:63:fa:77: 33:53:6f:56:3d:d5:db:a6:85:3f:a2:18:dc:97:60:58:30:46: 42:3d:84:88:0a:08:d0:78:b5:c3:c1:de:9c:8a:1c:1a:d2:e6: 97:c6:5e:37:dc:55:d1:db:28:cd:dd:4f:16:24:3a:00:c1:fe: 47:11:02:c4:4b:55:6d:17:f9:ca:a4:aa:bc:38:10:fc:d9:4f: 94:96:ac:fd:c6:79:32:fb:e2:71:d0:eb:a2:19:b5:73:93:30: 1e:cc:ee:1d:a4:e0:5a:cd:ea:c5:e4:4e:64:ec:a7:70:3a:c0: 59:42:51:81:e0:36:7b:02:58:af:9a:64:17:59:31:7c:a1:dc: 20:23:e7:b2:a4:1d:4c:2b:eb:d0:b0:72:5b:68:92:fd:36:5d: 17:19:25:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKcMzJ/tuF3NaB/5LiQyT/egBREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNjAzMjUwNjA2MDdaFw0yNjAzMjgwNjIzMDdaMDMxMTAvBgNV BAMTKENBOEFFQ0JEN0U5OEUwMjkyN0I3NEQ2Njg2REQzQ0M5NUY4Q0I4NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8aAAJSTItUnW1GODRmr2EQ+pv G222XrgUCPeoN2EHCJ2pAHFp+8UjhrIKO76exP9QEDrb0FvKgHzkWyKFFIhQBpq1 sK+bbRh16REPBmB2sS26O6GKr7KcWBk927DB9gMd1G2n5wv5DK3Kn85LlGu1pYMV eRELQnrBxqIGm8h8TA4yYiFCUClIZyzE9iXkeuIiKl9dlCNqTFILbxDgFQJ7O/Du wtvTYzpuNKNLcm1iylA1HuKscaF8cm1pOPHFykB3L5Stfk16O6+fHkp90LEb4Nmw Wa1OQt5qs4sy4txoMbqgfPiZHzIWk/juzm+XFKJevTO8dj4mrRJvDOLe+5ZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyorsvX6Y4Cknt01mht08yV+MuGkwHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMRfgbzP4D7+AZrOqBIlAv9r0qynJcJUCDh Gi5/pzwaE08qlxeQP5F8+PG/ElneyG3D0ccKwD7uIf1ogeDco2MXCSSyPcc5O2GW IL1nr6swcVtxsg5usXj4pJ4Rsmadx+zLxi5+SAZJlGP6dzNTb1Y91dumhT+iGNyX YFgwRkI9hIgKCNB4tcPB3pyKHBrS5pfGXjfcVdHbKM3dTxYkOgDB/kcRAsRLVW0X +cqkqrw4EPzZT5SWrP3GeTL74nHQ66IZtXOTMB7M7h2k4FrN6sXkTmTsp3A6wFlC UYHgNnsCWK+aZBdZMXyh3CAj57KkHUwr69Cwcltokv02XRcZJTk= -----END CERTIFICATE-----Generated at Thu Mar 26 06:29:05 2026 by rpki-client