$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: VUGabYo26IqpUsot8bSB1PHyDRV4uPoTdrsNa5VSJrM= Subject key identifier: CE:BF:D7:77:BE:71:AA:DD:92:F8:6B:42:B8:61:FE:BA:56:FD:52:84 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 4EB7C5C7B81934B5D69647B50DD06879AA22EC34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 011D Signing time: Thu 26 Mar 2026 18:02:39 +0000 Manifest this update: Thu 26 Mar 2026 17:57:39 +0000 Manifest next update: Mon 30 Mar 2026 04:14:39 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: 6rAgb7dKCrbBrO21zTHwiRvbbgKIk3G6rCTSvkfa13c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b7:c5:c7:b8:19:34:b5:d6:96:47:b5:0d:d0:68:79:aa:22:ec:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Mar 26 17:57:39 2026 GMT Not After : Mar 30 04:14:39 2026 GMT Subject: CN=CEBFD777BE71AADD92F86B42B861FEBA56FD5284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:a6:f9:11:67:bd:6b:9b:44:85:bc:37:a3: 79:d6:da:71:ce:27:22:85:56:c9:56:8e:e9:7d:66: a3:1b:3d:18:98:93:4a:d9:17:65:36:7e:2e:ad:09: 47:1e:73:32:f6:63:23:53:1a:28:65:62:3b:3e:70: 47:2c:c7:43:a1:eb:4d:29:9b:6d:a7:48:b8:b8:71: 1a:e3:2b:62:0f:b2:27:2a:7d:6d:9c:d1:ab:4a:18: 30:08:e8:60:79:06:59:ed:95:d1:96:dc:be:5f:57: 49:ec:da:29:26:b0:87:e0:4f:1f:5d:f0:a9:89:de: 72:49:7f:c1:8c:49:5f:d3:e3:59:4e:2d:aa:7e:19: e4:8d:a5:ba:8f:de:ec:38:d6:18:c0:05:47:19:94: 9c:8a:4a:7f:d6:e3:03:56:33:23:da:73:95:33:97: 9d:cb:59:40:61:8e:1a:fa:82:8e:92:f0:ed:a0:0a: 61:24:af:97:4d:12:06:95:9b:b3:ae:30:71:05:35: 9b:47:ee:dc:47:70:dd:93:59:8c:5b:ef:b5:49:2b: 12:47:d9:aa:76:1f:cf:97:7b:a8:8b:96:eb:23:57: e7:e0:64:3b:36:af:3e:94:07:e9:a4:4a:f8:91:b4: b0:6a:5f:45:0d:4b:c0:cf:a1:2e:67:5a:f3:71:44: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BF:D7:77:BE:71:AA:DD:92:F8:6B:42:B8:61:FE:BA:56:FD:52:84 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:e1:17:cd:20:d4:fd:2b:7c:ce:4c:7c:cf:0a:22:b9:f5:f2: 02:9b:7e:5d:50:6d:fe:16:81:be:41:9d:2d:b1:34:97:ef:7e: 06:d7:42:de:a7:6f:d0:21:3c:f7:ef:7e:2a:b5:1c:ba:e4:27: c8:be:8e:c0:b8:93:bb:21:4b:db:08:f6:36:97:aa:7f:9a:4a: 03:fe:9c:49:69:2a:20:1c:02:65:a2:85:44:fd:4d:91:f7:a7: 6e:05:77:1a:9b:6a:2e:59:9c:2c:a5:c4:ba:25:e9:4f:f1:12: d0:ba:62:9c:50:bc:95:27:6d:dc:b7:54:96:b2:25:28:45:59: 76:d4:8c:68:48:70:da:bc:81:94:62:ca:aa:e8:12:fc:66:de: ce:5b:ce:b1:f4:f2:3c:aa:97:82:e6:ce:5f:7e:72:16:92:31: 47:12:5f:66:05:85:bf:74:5a:f0:c3:f7:d2:38:41:58:11:01: 9d:6c:d9:d4:19:4c:c9:39:10:c8:92:91:0a:3f:32:c6:2d:56: a0:33:61:61:42:ab:db:28:c5:1d:bc:d3:bd:d9:4e:f1:80:4a: 13:a7:60:b5:31:2b:c9:33:fc:99:20:fd:83:6f:04:00:59:9e: 4f:1e:40:e3:62:09:a4:b3:8b:d9:7a:52:b4:6b:00:50:26:6c: b6:01:20:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrfFx7gZNLXWlke1DdBoeaoi7DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNjAzMjYxNzU3MzlaFw0yNjAzMzAwNDE0MzlaMDMxMTAvBgNV BAMTKENFQkZENzc3QkU3MUFBREQ5MkY4NkI0MkI4NjFGRUJBNTZGRDUyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Hqb5EWe9a5tEhbw3o3nW2nHO JyKFVslWjul9ZqMbPRiYk0rZF2U2fi6tCUceczL2YyNTGihlYjs+cEcsx0Oh600p m22nSLi4cRrjK2IPsicqfW2c0atKGDAI6GB5BlntldGW3L5fV0ns2ikmsIfgTx9d 8KmJ3nJJf8GMSV/T41lOLap+GeSNpbqP3uw41hjABUcZlJyKSn/W4wNWMyPac5Uz l53LWUBhjhr6go6S8O2gCmEkr5dNEgaVm7OuMHEFNZtH7txHcN2TWYxb77VJKxJH 2ap2H8+Xe6iLlusjV+fgZDs2rz6UB+mkSviRtLBqX0UNS8DPoS5nWvNxRIbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzr/Xd75xqt2S+GtCuGH+ulb9UoQwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANHhF80g1P0rfM5MfM8KIrn18gKbfl1Qbf4W gb5BnS2xNJfvfgbXQt6nb9AhPPfvfiq1HLrkJ8i+jsC4k7shS9sI9jaXqn+aSgP+ nElpKiAcAmWihUT9TZH3p24Fdxqbai5ZnCylxLol6U/xEtC6YpxQvJUnbdy3VJay JShFWXbUjGhIcNq8gZRiyqroEvxm3s5bzrH08jyql4Lmzl9+chaSMUcSX2YFhb90 WvDD99I4QVgRAZ1s2dQZTMk5EMiSkQo/MsYtVqAzYWFCq9soxR28073ZTvGAShOn YLUxK8kz/Jkg/YNvBABZnk8eQONiCaSzi9l6UrRrAFAmbLYBIM8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:14:45 2026 by rpki-client