$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: ZFupdfmZLMMt58svK4OBMVOqJ7dGfDTrxicXMJ3IRsw= Subject key identifier: 89:AE:EA:C4:8E:28:C8:71:5D:B0:34:83:3A:A5:5A:62:32:7F:85:D9 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 6C04AC6E9ABE81BEBF4F29D43989260BDC33DA73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 0359 Signing time: Wed 25 Mar 2026 03:52:05 +0000 Manifest this update: Wed 25 Mar 2026 03:47:05 +0000 Manifest next update: Sat 28 Mar 2026 03:53:05 +0000 Files and hashes: 1: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 2: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 3: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: zYvUApF/3D3/CY9L+CS0+avOIto44hsmED0MKCyZPpc=) 4: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) 5: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:04:ac:6e:9a:be:81:be:bf:4f:29:d4:39:89:26:0b:dc:33:da:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Mar 25 03:47:05 2026 GMT Not After : Mar 28 03:53:05 2026 GMT Subject: CN=89AEEAC48E28C8715DB034833AA55A62327F85D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:b7:67:73:ae:43:68:1f:b8:aa:a0:7f:d8: 13:eb:bf:63:5b:95:33:0f:aa:65:be:be:2c:06:47: d3:cd:e5:7b:cd:c5:36:01:aa:39:a1:95:20:de:50: 4d:95:c7:01:0e:b3:1e:f3:fe:20:af:0c:3c:e0:5a: e7:3a:06:97:fc:0d:33:b9:30:66:57:f2:cb:2d:63: 8b:66:ce:98:7f:44:a1:2f:b1:4e:72:fb:17:df:18: b7:dd:42:bb:33:cf:33:8c:00:88:99:c3:0b:2c:b5: 09:97:13:9a:30:9a:8a:aa:2b:bb:31:3d:59:cd:7c: 81:76:db:ab:23:73:9f:4d:23:c7:99:8c:47:3c:a5: 71:fa:61:76:02:de:93:89:8a:41:5d:f5:a4:76:ec: bb:d6:3d:49:29:01:3b:f4:5a:e5:85:0a:dd:ee:91: 0d:39:77:5f:a5:9e:1f:df:0a:8f:c3:5a:5d:30:71: 60:59:5f:6e:cf:0d:4c:2f:52:a2:8c:e0:80:0f:40: 0b:e5:b7:99:df:7e:f6:38:4d:9e:8e:00:46:7b:d1: a7:bc:6e:19:e8:c4:41:c6:b3:07:1b:a6:a0:4f:f6: 6b:85:b6:89:f7:30:7f:6e:58:c5:dd:58:cb:6b:78: 9f:ac:3b:55:28:87:7d:6e:43:1f:fe:67:84:45:79: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AE:EA:C4:8E:28:C8:71:5D:B0:34:83:3A:A5:5A:62:32:7F:85:D9 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8f:2a:20:71:48:62:3d:a7:fb:d2:37:d5:92:82:b7:ca:73: 9a:2e:a7:e7:c1:5d:d8:3d:a3:11:af:bd:9b:ed:25:3c:e7:d8: 7a:e9:8e:ec:3b:94:4a:13:6a:fb:b5:09:56:00:be:8f:99:22: 73:86:f6:be:7d:31:e6:ae:c9:d8:8e:c1:3a:7d:fd:61:6e:0d: 13:1d:65:7b:a4:32:4d:8d:0d:c4:34:dd:27:fd:af:12:21:85: e1:17:73:66:2e:03:ee:5e:07:ba:26:bf:38:f4:56:72:4b:ac: 43:37:9b:01:d8:99:46:08:01:16:de:af:b4:9a:ff:c5:73:4e: 88:46:8c:70:99:d4:98:c1:78:7a:0a:62:3e:22:f8:e4:a5:6c: 91:45:5d:e2:bc:24:59:6c:63:8b:90:e5:13:f0:b8:7e:66:c7: 9c:33:5f:db:80:ea:97:ee:59:45:63:a0:61:82:05:26:32:48: 92:5c:71:92:a2:f0:e2:0a:16:a0:a6:44:56:3e:42:cf:bb:28: 51:a8:59:7e:67:d4:e0:44:bb:72:14:7c:b1:3c:dd:8e:00:b2: 75:fb:ee:fe:b3:a3:80:d7:4b:d9:bb:3e:a9:84:8b:c9:b6:89: 06:d4:41:26:a4:6c:a9:ed:a7:24:71:d1:a3:13:e7:f4:30:24: ea:60:aa:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbASsbpq+gb6/TynUOYkmC9wz2nMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNjAzMjUwMzQ3MDVaFw0yNjAzMjgwMzUzMDVaMDMxMTAvBgNV BAMTKDg5QUVFQUM0OEUyOEM4NzE1REIwMzQ4MzNBQTU1QTYyMzI3Rjg1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAOLdnc65DaB+4qqB/2BPrv2Nb lTMPqmW+viwGR9PN5XvNxTYBqjmhlSDeUE2VxwEOsx7z/iCvDDzgWuc6Bpf8DTO5 MGZX8sstY4tmzph/RKEvsU5y+xffGLfdQrszzzOMAIiZwwsstQmXE5owmoqqK7sx PVnNfIF226sjc59NI8eZjEc8pXH6YXYC3pOJikFd9aR27LvWPUkpATv0WuWFCt3u kQ05d1+lnh/fCo/DWl0wcWBZX27PDUwvUqKM4IAPQAvlt5nffvY4TZ6OAEZ70ae8 bhnoxEHGswcbpqBP9muFton3MH9uWMXdWMtreJ+sO1Uoh31uQx/+Z4RFebwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUia7qxI4oyHFdsDSDOqVaYjJ/hdkwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOPKiBxSGI9p/vSN9WSgrfKc5oup+fBXdg9 oxGvvZvtJTzn2Hrpjuw7lEoTavu1CVYAvo+ZInOG9r59MeauydiOwTp9/WFuDRMd ZXukMk2NDcQ03Sf9rxIhheEXc2YuA+5eB7omvzj0VnJLrEM3mwHYmUYIARber7Sa /8VzTohGjHCZ1JjBeHoKYj4i+OSlbJFFXeK8JFlsY4uQ5RPwuH5mx5wzX9uA6pfu WUVjoGGCBSYySJJccZKi8OIKFqCmRFY+Qs+7KFGoWX5n1OBEu3IUfLE83Y4AsnX7 7v6zo4DXS9m7PqmEi8m2iQbUQSakbKntpyRx0aMT5/QwJOpgqmg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:55:51 2026 by rpki-client