$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: h+RuOtLBP7oG8DWhtuDAdEiswYNr05nlBs2yej7yV8g= Subject key identifier: 6A:3B:3C:F0:F1:50:C2:D1:80:53:2C:79:6C:46:09:1C:F5:50:26:B8 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 4C45F92AF7D17D50DE86A9E85DE9172B30B460F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: 012B Signing time: Tue 24 Mar 2026 11:41:21 +0000 Manifest this update: Tue 24 Mar 2026 11:36:21 +0000 Manifest next update: Fri 27 Mar 2026 15:56:21 +0000 Files and hashes: 1: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: jlYbbKMN/EqaAiepIzklJW9i6qrXaWKZhsNbGWb2YpU=) 2: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) 4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:56:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:45:f9:2a:f7:d1:7d:50:de:86:a9:e8:5d:e9:17:2b:30:b4:60:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Mar 24 11:36:21 2026 GMT Not After : Mar 27 15:56:21 2026 GMT Subject: CN=6A3B3CF0F150C2D180532C796C46091CF55026B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:23:78:53:28:1d:da:46:da:2f:ae:3e:c9: 09:67:ce:41:0f:b4:05:40:bf:ef:1f:ba:73:ea:d0: c2:40:ed:11:a8:56:2e:c5:de:d7:b1:6c:a6:db:1c: 07:ca:8f:84:a3:ce:f3:02:2c:35:06:96:cc:21:5d: 52:3c:c6:f0:d0:bd:f5:93:2d:a3:83:35:5a:2f:dc: 67:62:f2:cd:24:80:25:7e:31:6f:f1:67:f8:a0:84: 0c:00:8e:b3:e7:4f:1f:d4:2b:c9:16:14:64:2e:aa: a1:0b:bf:99:d5:5d:5e:73:5e:b4:04:48:ea:f8:b6: 33:a6:da:ba:da:a7:fb:93:3a:b8:19:35:79:a2:56: 73:73:57:b1:7d:9e:bf:42:3b:77:f3:69:08:56:66: 1b:cb:e8:b9:95:64:c7:e1:1e:ba:03:11:93:58:cd: b3:ff:06:45:7a:68:16:ca:1c:91:00:1b:54:a6:36: 48:19:cb:8d:ac:9f:fa:ad:59:67:2a:dc:4e:62:49: 3e:f6:4b:43:96:5b:49:e2:ad:56:d2:47:74:d6:67: 93:fb:44:e0:51:25:c0:24:7e:af:68:b6:16:c1:9f: 8f:c7:d7:3b:ef:e7:f2:8a:95:6d:97:9e:82:1c:16: 8e:c6:02:0d:6a:54:5f:fe:c0:a9:7b:df:96:e5:1a: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3B:3C:F0:F1:50:C2:D1:80:53:2C:79:6C:46:09:1C:F5:50:26:B8 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bd:23:96:43:fb:16:79:40:50:b1:38:7b:ae:a5:39:e8:4a: eb:0f:2e:38:4c:c9:94:fd:da:24:f2:ab:85:01:82:a6:57:4f: e9:1d:50:07:59:a5:c7:db:3d:53:57:c5:eb:f3:cd:fb:4c:08: e5:02:da:de:3e:21:0e:05:e0:c8:3e:47:5a:ed:6d:e2:e7:8f: 9c:9a:12:ad:2d:ed:01:04:0c:c9:ea:df:5a:0e:18:2f:bd:3d: 78:9d:f4:52:5e:25:74:2a:3c:03:30:41:a7:09:8d:a2:8a:06: ef:19:3d:42:c0:59:8c:93:5c:4a:49:47:fc:b8:40:aa:40:2b: b0:5f:fa:31:0f:84:75:92:e1:99:4c:ab:27:48:d7:82:1e:06: f1:d4:7b:26:23:bc:ad:f3:98:8e:1a:90:c4:b8:38:be:19:0e: 65:bf:4a:54:7e:f8:58:d4:ec:4d:23:a5:c7:69:40:14:39:fa: a4:2d:df:69:f5:eb:ba:21:07:51:17:a8:c5:23:38:ea:36:4c: f6:ee:fc:2b:78:d9:e7:ea:b3:39:37:a4:f5:e2:70:1a:46:e2: 1c:05:69:7e:e8:25:5a:4a:4b:66:95:46:01:00:f0:d4:1e:a0: 04:46:26:6d:15:bd:29:3f:43:2a:1a:86:f1:7d:75:68:cc:06: 54:b8:84:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEX5KvfRfVDehqnoXekXKzC0YPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNjAzMjQxMTM2MjFaFw0yNjAzMjcxNTU2MjFaMDMxMTAvBgNV BAMTKDZBM0IzQ0YwRjE1MEMyRDE4MDUzMkM3OTZDNDYwOTFDRjU1MDI2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfSN4Uygd2kbaL64+yQlnzkEP tAVAv+8funPq0MJA7RGoVi7F3texbKbbHAfKj4SjzvMCLDUGlswhXVI8xvDQvfWT LaODNVov3Gdi8s0kgCV+MW/xZ/ighAwAjrPnTx/UK8kWFGQuqqELv5nVXV5zXrQE SOr4tjOm2rrap/uTOrgZNXmiVnNzV7F9nr9CO3fzaQhWZhvL6LmVZMfhHroDEZNY zbP/BkV6aBbKHJEAG1SmNkgZy42sn/qtWWcq3E5iST72S0OWW0nirVbSR3TWZ5P7 ROBRJcAkfq9othbBn4/H1zvv5/KKlW2XnoIcFo7GAg1qVF/+wKl735blGoCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajs88PFQwtGAUyx5bEYJHPVQJrgwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABq9I5ZD+xZ5QFCxOHuupTnoSusPLjhMyZT9 2iTyq4UBgqZXT+kdUAdZpcfbPVNXxevzzftMCOUC2t4+IQ4F4Mg+R1rtbeLnj5ya Eq0t7QEEDMnq31oOGC+9PXid9FJeJXQqPAMwQacJjaKKBu8ZPULAWYyTXEpJR/y4 QKpAK7Bf+jEPhHWS4ZlMqydI14IeBvHUeyYjvK3zmI4akMS4OL4ZDmW/SlR++FjU 7E0jpcdpQBQ5+qQt32n167ohB1EXqMUjOOo2TPbu/Ct42efqszk3pPXicBpG4hwF aX7oJVpKS2aVRgEA8NQeoARGJm0VvSk/QyoahvF9dWjMBlS4hEE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:44:21 2026 by rpki-client