$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: rVXQ0237DW4tKFWHO/KHIeNq7XfSc+DjYn4GXApLCVg= Subject key identifier: EB:02:BE:F6:6B:E5:B7:40:F7:EF:14:C3:61:89:1D:CC:24:34:A0:0F Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 2C49880FE4CC18AA1ED857C61D9C2EC0EBB00251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 02AC Signing time: Wed 25 Mar 2026 19:51:36 +0000 Manifest this update: Wed 25 Mar 2026 19:46:36 +0000 Manifest next update: Sun 29 Mar 2026 00:02:36 +0000 Files and hashes: 1: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: 1xdZn8jAku+ldyndHvOC4+vy4omOoY8OFlLfIFPlSWM=) 2: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=) 3: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=) 4: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) 5: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:49:88:0f:e4:cc:18:aa:1e:d8:57:c6:1d:9c:2e:c0:eb:b0:02:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Mar 25 19:46:36 2026 GMT Not After : Mar 29 00:02:36 2026 GMT Subject: CN=EB02BEF66BE5B740F7EF14C361891DCC2434A00F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:1f:58:8a:4a:71:d3:a6:fe:1f:33:56:19: 09:2a:58:92:5e:3c:a4:f4:30:0f:e2:f1:4e:2e:59: 1b:5a:92:37:49:3f:9f:3d:50:f9:33:01:4c:00:9d: 91:83:0a:be:39:04:00:a1:95:22:aa:eb:9c:d2:fc: 0a:ea:0a:b1:29:96:1b:c1:9b:1b:0f:48:d1:c6:4c: a9:76:30:68:c8:11:85:b0:90:1e:d7:c2:64:42:fc: 81:55:f8:39:e6:3e:7f:e7:bb:2a:61:ce:58:fd:e4: da:81:0b:eb:6a:2c:65:fb:80:d0:dc:7f:23:d2:a3: 53:a7:96:9f:70:d4:2b:22:72:e6:3f:14:00:43:ca: 03:fe:e4:c9:85:1d:e5:da:ce:75:93:c9:68:6d:5c: 78:43:08:e5:a2:17:f6:98:ca:8a:33:89:f4:d0:bc: b4:c7:47:1e:55:e8:41:7d:5d:18:ce:77:94:ce:5a: 38:47:fa:ec:5e:e2:f4:1b:35:6a:78:93:5d:bf:49: b2:a5:fe:74:6c:79:c8:8e:48:ae:6b:05:7f:8d:1a: ff:79:17:13:67:a6:23:39:4a:6a:f0:20:25:fa:76: 29:c3:69:12:c7:a2:12:fb:31:35:f4:27:84:02:c3: 88:3b:5d:e2:7c:db:7b:bc:55:1a:51:15:fa:4d:ac: 09:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:BE:F6:6B:E5:B7:40:F7:EF:14:C3:61:89:1D:CC:24:34:A0:0F X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c6:d1:d9:ef:7f:db:88:e4:fe:71:ca:6d:27:26:7c:d7:4c: 95:3c:bb:19:d7:19:5f:b7:ca:ef:f0:e4:70:85:05:61:d6:70: 91:e0:79:70:88:a2:3f:d8:13:ac:0d:16:d5:93:12:62:67:ae: 02:49:97:3d:12:50:13:30:63:ec:ff:14:7e:20:4a:c0:36:0f: 9d:ed:ed:84:c0:19:a0:14:4a:c6:81:4d:c6:82:a5:24:ee:be: 3e:9f:26:7b:8c:e0:d0:17:07:20:2f:4f:46:ba:6b:3e:8d:24: 69:5a:34:94:43:21:49:bd:7e:a1:c0:25:16:b1:f1:1e:e2:42: 62:9c:8f:bd:6d:8d:17:2c:86:97:6b:01:85:3b:b8:dd:b3:ba: 0a:54:fa:3b:a7:bf:a9:db:eb:6b:73:b2:42:f9:01:31:b2:69: 5b:02:14:b3:b7:c7:64:8f:b3:d3:75:1c:12:c1:85:50:2d:8f: d9:0c:6e:88:01:82:95:7d:b9:f9:6a:d3:e7:bb:49:6b:78:71: 92:0e:45:b1:0d:40:18:cd:89:da:0e:87:8c:0c:3f:6e:d8:00: 31:da:b8:71:58:3b:76:fc:e4:7a:a8:88:ce:5d:f7:a3:bd:a3: e4:27:44:92:47:fa:ff:2a:2d:bf:a3:54:80:ca:03:67:46:b4: 0e:91:0f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEmID+TMGKoe2FfGHZwuwOuwAlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNjAzMjUxOTQ2MzZaFw0yNjAzMjkwMDAyMzZaMDMxMTAvBgNV BAMTKEVCMDJCRUY2NkJFNUI3NDBGN0VGMTRDMzYxODkxRENDMjQzNEEwMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZB9Yikpx06b+HzNWGQkqWJJe PKT0MA/i8U4uWRtakjdJP589UPkzAUwAnZGDCr45BAChlSKq65zS/ArqCrEplhvB mxsPSNHGTKl2MGjIEYWwkB7XwmRC/IFV+DnmPn/nuyphzlj95NqBC+tqLGX7gNDc fyPSo1Onlp9w1CsicuY/FABDygP+5MmFHeXaznWTyWhtXHhDCOWiF/aYyoozifTQ vLTHRx5V6EF9XRjOd5TOWjhH+uxe4vQbNWp4k12/SbKl/nRseciOSK5rBX+NGv95 FxNnpiM5SmrwICX6dinDaRLHohL7MTX0J4QCw4g7XeJ823u8VRpRFfpNrAm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6wK+9mvlt0D37xTDYYkdzCQ0oA8wHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbG0dnvf9uI5P5xym0nJnzXTJU8uxnXGV+3 yu/w5HCFBWHWcJHgeXCIoj/YE6wNFtWTEmJnrgJJlz0SUBMwY+z/FH4gSsA2D53t 7YTAGaAUSsaBTcaCpSTuvj6fJnuM4NAXByAvT0a6az6NJGlaNJRDIUm9fqHAJRax 8R7iQmKcj71tjRcshpdrAYU7uN2zugpU+junv6nb62tzskL5ATGyaVsCFLO3x2SP s9N1HBLBhVAtj9kMbogBgpV9uflq0+e7SWt4cZIORbENQBjNidoOh4wMP27YADHa uHFYO3b85HqoiM5d96O9o+QnRJJH+v8qLb+jVIDKA2dGtA6RD3g= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:10 2026 by rpki-client