$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft (raw, json) Hash identifier: vi7NaLW6NREuXXnxNFSJGd3JB/Eqo6rPVFVWG5ZsfIQ= Subject key identifier: 48:A3:08:CB:A5:C4:8C:BC:08:C5:43:09:DD:60:B7:0C:DB:11:3F:03 Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Certificate issuer: /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Certificate serial: 2A17715A16C80DE37DFE83933DC80CB99012433A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft Manifest number: 0542 Signing time: Wed 25 Mar 2026 09:42:28 +0000 Manifest this update: Wed 25 Mar 2026 09:37:28 +0000 Manifest next update: Sat 28 Mar 2026 10:18:28 +0000 Files and hashes: 1: 3130332e3134362e3230322e302f32332d3234203d3e20313336303532.roa (hash: 3qk3I2sPJGrqwIZSGGvefDpSgj0jalLHjTWubW6XWCI=) 2: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl (hash: ZLxgZpAmCopyXeM/B5GFrxduN5C6O1Ewr2fc1x8BK3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:17:71:5a:16:c8:0d:e3:7d:fe:83:93:3d:c8:0c:b9:90:12:43:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Validity Not Before: Mar 25 09:37:28 2026 GMT Not After : Mar 28 10:18:28 2026 GMT Subject: CN=48A308CBA5C48CBC08C54309DD60B70CDB113F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:ac:6c:5e:0a:8d:2a:ce:25:c3:30:67:ad: ea:78:78:64:6b:0b:b4:fc:80:55:c7:4c:27:d8:99: ec:90:53:50:64:b4:d2:6f:1a:ad:8a:f0:28:24:42: b1:82:b0:55:29:3d:85:32:e2:d2:e2:69:37:44:61: 95:b2:84:3e:c7:84:c8:5a:4c:7d:7f:0e:6c:01:fc: d8:b6:c9:98:ee:f5:4b:f6:95:33:c3:ad:13:c9:25: 7c:c9:1e:cb:b4:e9:cb:98:58:d6:0a:cb:d5:9b:e3: 0e:fa:3a:b6:77:34:5c:2d:23:7c:16:04:66:68:37: 97:fe:ec:ec:b3:59:33:26:90:9e:44:e4:d2:0b:33: 8b:d4:31:b7:85:65:f6:13:c0:69:3e:da:ee:ba:64: 95:d3:d6:fc:d4:73:17:f5:7e:3a:12:6d:df:c1:a0: e7:04:e2:eb:d4:f8:25:13:c7:01:96:f2:e3:d1:0b: d5:33:c4:7d:03:67:e3:a7:9b:8c:45:0c:80:5d:94: 94:fc:58:c7:7c:06:84:6c:af:04:df:7f:76:e4:9a: c7:8f:db:95:4c:52:e1:99:ff:95:73:b6:12:5f:6f: 46:30:38:f7:de:33:80:11:cd:5e:83:9f:df:5b:9a: 4a:62:1a:6e:c3:75:6c:36:0f:f4:f1:25:38:9e:0a: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A3:08:CB:A5:C4:8C:BC:08:C5:43:09:DD:60:B7:0C:DB:11:3F:03 X509v3 Authority Key Identifier: keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:75:7b:e3:fb:93:11:29:a1:22:16:8b:f5:e8:2c:85:69:c6: 16:5e:50:db:3c:2e:55:82:45:9a:94:d8:53:ca:17:3c:f3:e2: b0:7d:45:57:b3:3f:02:cb:cb:c0:11:1c:a0:db:5a:77:61:d6: 95:0d:08:eb:98:6e:85:b1:33:6b:ab:c2:31:d4:35:e7:52:7c: 5a:c5:4d:39:d5:05:84:7e:ca:c9:aa:93:3d:d4:80:70:e7:79: b7:d7:83:8c:20:1d:61:cd:9a:81:d5:a9:a2:0a:a3:67:d8:4b: e2:0d:24:58:23:50:bf:40:6d:4b:e4:e3:a6:14:5d:a4:7f:dc: 69:21:7f:80:f1:38:b2:5a:4d:d8:48:14:33:7e:e4:f6:a9:53: 52:35:8d:9d:a8:30:7b:21:3c:8a:53:05:dc:89:03:9c:b6:81: 39:47:49:e7:3d:ee:5a:1d:25:c5:d5:74:bb:dd:4b:d3:63:20: ba:d5:c7:bb:41:d3:81:2a:83:63:2f:76:66:6c:00:21:24:e5: 83:02:36:c8:02:e2:14:4d:fc:80:9d:af:93:2b:0f:ef:c5:9f: 94:57:1e:18:b6:8c:66:f8:52:a5:96:3b:69:fa:61:a1:88:50: 7a:af:93:37:60:f8:b4:8c:b2:27:c3:b2:b2:02:2a:ec:2a:d3: dd:4a:24:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhdxWhbIDeN9/oOTPcgMuZASQzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy NEIxRDk4MTAeFw0yNjAzMjUwOTM3MjhaFw0yNjAzMjgxMDE4MjhaMDMxMTAvBgNV BAMTKDQ4QTMwOENCQTVDNDhDQkMwOEM1NDMwOURENjBCNzBDREIxMTNGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVKxsXgqNKs4lwzBnrep4eGRr C7T8gFXHTCfYmeyQU1BktNJvGq2K8CgkQrGCsFUpPYUy4tLiaTdEYZWyhD7HhMha TH1/DmwB/Ni2yZju9Uv2lTPDrRPJJXzJHsu06cuYWNYKy9Wb4w76OrZ3NFwtI3wW BGZoN5f+7OyzWTMmkJ5E5NILM4vUMbeFZfYTwGk+2u66ZJXT1vzUcxf1fjoSbd/B oOcE4uvU+CUTxwGW8uPRC9UzxH0DZ+Onm4xFDIBdlJT8WMd8BoRsrwTff3bkmseP 25VMUuGZ/5VzthJfb0YwOPfeM4ARzV6Dn99bmkpiGm7DdWw2D/TxJTieCv+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKMIy6XEjLwIxUMJ3WC3DNsRPwMwHwYDVR0j BBgwFoAUu2nxPSztxfNIzqHBu/bh3CSx2YEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC9CQjY5RjEzRDJD RURDNUYzNDhDRUExQzFCQkY2RTFEQzI0QjFEOTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMyNEIx RDk4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx REMyNEIxRDk4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd1e+P7kxEpoSIWi/XoLIVpxhZeUNs8LlWC RZqU2FPKFzzz4rB9RVezPwLLy8ARHKDbWndh1pUNCOuYboWxM2urwjHUNedSfFrF TTnVBYR+ysmqkz3UgHDnebfXg4wgHWHNmoHVqaIKo2fYS+INJFgjUL9AbUvk46YU XaR/3Gkhf4DxOLJaTdhIFDN+5PapU1I1jZ2oMHshPIpTBdyJA5y2gTlHSec97lod JcXVdLvdS9NjILrVx7tB04Eqg2MvdmZsACEk5YMCNsgC4hRN/ICdr5MrD+/Fn5RX Hhi2jGb4UqWWO2n6YaGIUHqvkzdg+LSMsifDsrICKuwq091KJE0= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:31 2026 by rpki-client