$ rpki-client -vvf repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft (raw, json) Hash identifier: U8dBDEOLLMMsdmtAAMcl+tt6eS6NfEA4KZKffiCU/IE= Subject key identifier: 26:BE:A5:32:76:EF:7B:DC:7D:AC:0F:FD:0C:13:CD:22:E2:06:62:51 Authority key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Certificate issuer: /CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Certificate serial: 566CCEB6C3BF74E68E04DE846D2A032D75AF7B45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft Manifest number: 055D Signing time: Thu 26 Mar 2026 03:51:33 +0000 Manifest this update: Thu 26 Mar 2026 03:46:33 +0000 Manifest next update: Sun 29 Mar 2026 03:59:33 +0000 Files and hashes: 1: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl (hash: k2LlwD9FALsjsSjRGsL4YZcUTIv/BspRyYZlRgzixGw=) 2: 3130332e34312e3234372e302f32342d3234203d3e20313333383032.roa (hash: 8V1al14v0fXTXIGlVH1c93VdIS9Ve5+tbHSMrRhqr58=) 3: 323030313a6466343a366330303a3a2f34382d3438203d3e20313333383032.roa (hash: 6j5m2VjCwkXGfQzXHijMICktkY7XqIoC3rD1yeh02OI=) 4: 3130332e3134312e36312e302f32342d3234203d3e20313333383032.roa (hash: sgxUrcQvRnNHbIUuVwSUcdBBcs11g4RjDxY5LVoPdt0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6c:ce:b6:c3:bf:74:e6:8e:04:de:84:6d:2a:03:2d:75:af:7b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Validity Not Before: Mar 26 03:46:33 2026 GMT Not After : Mar 29 03:59:33 2026 GMT Subject: CN=26BEA53276EF7BDC7DAC0FFD0C13CD22E2066251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ea:fa:74:3c:aa:2f:64:08:c8:fa:7e:47:25: 5d:56:fc:05:47:d5:4f:0e:55:ec:36:5d:01:47:07: d0:b7:d5:e4:0a:04:21:cc:36:6c:19:d7:a1:f1:7c: 81:2c:b8:c6:e3:13:b1:a9:cb:a0:1f:43:d3:ff:98: 3f:b0:6b:81:f2:68:f6:de:b9:f6:c9:e4:89:fa:16: d2:96:f3:58:ce:b0:cf:9c:4b:b2:65:35:16:38:39: d9:50:fc:68:8a:71:62:a2:e9:43:fa:4e:83:c7:22: d8:09:4a:39:b5:2b:6f:21:5a:09:85:6f:32:74:b1: 6f:d6:f3:c8:99:0d:ff:6a:0f:65:44:65:b0:d1:30: 99:b4:52:57:da:e6:44:c8:9d:27:98:ed:54:9f:10: 0d:e5:00:b4:34:8d:d7:7f:37:64:e1:25:ce:26:91: b5:0e:35:74:e5:88:58:8a:c8:c5:06:f8:92:94:b7: 79:6c:ee:4d:ea:ef:5e:c5:a8:f9:0f:9a:4c:e5:db: 9e:37:47:e7:4e:d9:7c:83:44:7c:b5:ba:39:5b:6b: 36:e4:a4:19:f7:10:77:3a:19:ea:64:54:87:68:9d: d4:be:86:6b:31:56:ab:9d:07:ae:1d:4a:88:2c:f4: 00:94:b8:da:5c:0b:23:5e:c0:7f:63:0f:cb:6d:77: 84:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BE:A5:32:76:EF:7B:DC:7D:AC:0F:FD:0C:13:CD:22:E2:06:62:51 X509v3 Authority Key Identifier: keyid:BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:57:6e:de:7f:02:d6:25:97:dd:7b:ca:2e:4a:96:da:8f:cd: 37:0c:11:4f:0e:a0:56:cc:2b:4f:41:8a:12:6e:b4:41:da:25: 5f:55:63:37:90:1d:ed:1d:22:c2:c2:52:fd:9b:c7:3e:9b:16: 6e:a3:55:a1:7a:2f:77:0f:e4:23:3e:7a:ba:3d:49:14:18:e0: ed:82:66:d6:41:ed:0e:7f:eb:bd:f2:5c:c3:45:f0:9c:8d:f2: e1:89:30:b1:4c:c2:a4:36:40:e9:f2:51:5f:4e:23:95:04:9d: 2e:d3:f7:cd:b8:7b:cf:c5:7d:ea:ed:ad:43:13:d3:79:76:1a: dd:87:2c:81:a8:72:24:17:79:2a:9f:ce:61:bd:f9:8f:82:07: 57:90:f1:68:f0:ca:3f:5b:58:a3:d9:b3:0b:1c:dc:a8:0b:09: 4a:7b:4f:44:0b:51:bf:6b:42:de:ae:d2:67:81:4e:19:1e:4e: 9e:eb:9e:94:e6:8c:8f:03:d2:c6:f9:0d:db:da:75:7c:4d:b3: cb:5a:de:c2:5e:c3:ef:cf:84:ad:2f:83:36:6d:23:ab:ef:db: fd:8a:21:c2:5b:70:7e:7e:11:eb:5d:cb:0c:f0:26:c9:39:f6: e8:6f:09:d8:5e:b9:71:b3:c1:c3:e6:db:5e:ed:cb:e2:73:fd: 5b:46:97:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVmzOtsO/dOaOBN6EbSoDLXWve0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYw NDc4OTkwRDAeFw0yNjAzMjYwMzQ2MzNaFw0yNjAzMjkwMzU5MzNaMDMxMTAvBgNV BAMTKDI2QkVBNTMyNzZFRjdCREM3REFDMEZGRDBDMTNDRDIyRTIwNjYyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6vp0PKovZAjI+n5HJV1W/AVH 1U8OVew2XQFHB9C31eQKBCHMNmwZ16HxfIEsuMbjE7Gpy6AfQ9P/mD+wa4HyaPbe ufbJ5In6FtKW81jOsM+cS7JlNRY4OdlQ/GiKcWKi6UP6ToPHItgJSjm1K28hWgmF bzJ0sW/W88iZDf9qD2VEZbDRMJm0Ulfa5kTInSeY7VSfEA3lALQ0jdd/N2ThJc4m kbUONXTliFiKyMUG+JKUt3ls7k3q717FqPkPmkzl2543R+dO2XyDRHy1ujlbazbk pBn3EHc6GepkVIdondS+hmsxVqudB64dSogs9ACUuNpcCyNewH9jD8ttd4SpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJr6lMnbve9x9rA/9DBPNIuIGYlEwHwYDVR0j BBgwFoAUvYzeb+Pfn6Htps6kYvd+9gR4mQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMC9CRDhDREU2RkUz REY5RkExRURBNkNFQTQ2MkY3N0VGNjA0Nzg5OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdFRjYwNDc4 OTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU5Y2ZkMDQtNjlkMC00ZDRjLThk MDktMmQyMjEzODQyYzJjLzAvQkQ4Q0RFNkZFM0RGOUZBMUVEQTZDRUE0NjJGNzdF RjYwNDc4OTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtXbt5/AtYll917yi5KltqPzTcMEU8OoFbM K09BihJutEHaJV9VYzeQHe0dIsLCUv2bxz6bFm6jVaF6L3cP5CM+ero9SRQY4O2C ZtZB7Q5/673yXMNF8JyN8uGJMLFMwqQ2QOnyUV9OI5UEnS7T9824e8/FfertrUMT 03l2Gt2HLIGociQXeSqfzmG9+Y+CB1eQ8Wjwyj9bWKPZswsc3KgLCUp7T0QLUb9r Qt6u0meBThkeTp7rnpTmjI8D0sb5DdvadXxNs8ta3sJew+/PhK0vgzZtI6vv2/2K IcJbcH5+EetdywzwJsk59uhvCdheuXGzwcPm217ty+Jz/VtGl9I= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:30 2026 by rpki-client