$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft File: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json) Hash identifier: XrY6msW09dAILDNPRxbAHyBwg2B5ARvZaYZ6ON9G1Mw= Subject key identifier: 4F:1B:A8:C7:CD:F8:62:3D:BB:77:9E:33:7A:64:93:03:44:81:EC:D4 Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B Certificate issuer: /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Certificate serial: 2AB76BEB276BB757EA8E6932AC60413DA057B84B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft Manifest number: 056C Signing time: Wed 25 Mar 2026 13:42:42 +0000 Manifest this update: Wed 25 Mar 2026 13:37:42 +0000 Manifest next update: Sat 28 Mar 2026 13:51:42 +0000 Files and hashes: 1: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=) 2: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=) 3: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=) 4: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=) 5: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=) 6: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=) 7: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: CCe0T8Gx0KjzwVvQs/a5IbKzh3f+v3K/CbYqlxzHCMY=) 8: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=) 9: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=) 10: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b7:6b:eb:27:6b:b7:57:ea:8e:69:32:ac:60:41:3d:a0:57:b8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Validity Not Before: Mar 25 13:37:42 2026 GMT Not After : Mar 28 13:51:42 2026 GMT Subject: CN=4F1BA8C7CDF8623DBB779E337A6493034481ECD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fd:88:55:96:d4:a7:07:56:f6:ce:95:31:43: 00:e5:09:c3:b1:9c:c9:5f:88:11:3b:be:ed:a1:ab: fa:49:5b:66:f0:77:4f:95:20:43:a3:0f:11:de:e7: 16:d9:18:bb:9d:7d:e4:53:33:20:d4:d9:47:c4:78: 9f:74:52:d4:bd:1b:66:90:96:5e:26:5f:d0:0d:8e: cd:05:26:06:a2:84:f9:d0:84:bf:b9:ca:a8:a9:b4: 98:23:cb:96:17:65:75:73:ed:52:3c:1b:e5:03:71: 98:20:ff:dc:44:f6:2c:c9:1a:56:9b:02:f0:f5:13: 92:93:18:d3:a8:e1:83:12:07:3f:f3:c6:e1:47:b2: 9c:bc:91:1b:7c:d6:88:20:44:cd:74:30:e8:50:3c: 90:47:63:42:17:b1:64:83:a5:3b:d0:b4:5b:7d:7a: f0:07:f8:79:7b:11:b8:ac:d7:aa:47:d4:07:8c:a4: 3b:a3:5d:58:c6:b4:7b:cf:0c:1b:c3:0c:d8:09:43: 91:93:7a:14:9a:d6:96:5c:17:8a:6c:ce:8b:66:0a: 28:b8:09:4f:d4:1b:95:72:5e:de:fc:f1:88:6e:29: 31:87:02:b4:6b:4c:c4:70:3b:3a:2b:22:4d:7d:81: 50:2e:61:16:5e:ee:e0:30:b3:ee:c3:1e:91:1f:14: 0a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1B:A8:C7:CD:F8:62:3D:BB:77:9E:33:7A:64:93:03:44:81:EC:D4 X509v3 Authority Key Identifier: keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:eb:77:b6:52:50:9f:d5:a0:64:63:73:62:6f:2b:a7:64:cc: a1:88:99:cd:df:fb:c9:13:cd:28:46:4f:6d:6f:03:ac:37:d1: 9a:d6:30:99:ff:77:6b:a1:80:10:5c:c2:d0:1d:01:c5:14:92: 52:17:89:65:bd:81:5b:f8:16:d7:99:97:82:94:32:e3:53:1f: 38:cc:66:92:db:ec:8f:b3:f5:53:6f:d9:83:f4:a6:40:3d:23: 99:f5:e9:fa:fe:8b:0a:68:bb:f4:e5:2a:a6:6c:f5:74:16:2a: eb:0c:bd:9d:ff:16:da:69:87:81:5a:53:1a:8f:06:86:92:d2: c2:56:23:e0:f9:eb:68:f2:04:dc:7b:df:dc:3c:96:87:34:90: 3a:bd:1f:79:e1:f2:d6:6f:48:62:dd:9c:76:15:40:89:45:d0: ef:66:75:01:b8:76:34:1a:4b:5c:b3:96:e0:2e:97:44:54:c7: 20:45:14:01:3a:2f:17:be:88:d2:71:05:27:6b:bd:09:94:08: 46:a0:5d:b2:0e:5e:c2:2e:ba:f1:c8:54:49:1f:72:39:a5:20: d3:7d:6b:ba:49:7a:c8:03:82:be:79:39:f7:2b:80:7a:08:a5: 22:03:1b:53:bb:cd:09:03:92:2e:bd:b9:78:a6:da:04:a7:37: eb:f4:6a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrdr6ydrt1fqjmkyrGBBPaBXuEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB RkU4QUEyQjAeFw0yNjAzMjUxMzM3NDJaFw0yNjAzMjgxMzUxNDJaMDMxMTAvBgNV BAMTKDRGMUJBOEM3Q0RGODYyM0RCQjc3OUUzMzdBNjQ5MzAzNDQ4MUVDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/YhVltSnB1b2zpUxQwDlCcOx nMlfiBE7vu2hq/pJW2bwd0+VIEOjDxHe5xbZGLudfeRTMyDU2UfEeJ90UtS9G2aQ ll4mX9ANjs0FJgaihPnQhL+5yqiptJgjy5YXZXVz7VI8G+UDcZgg/9xE9izJGlab AvD1E5KTGNOo4YMSBz/zxuFHspy8kRt81oggRM10MOhQPJBHY0IXsWSDpTvQtFt9 evAH+Hl7Ebis16pH1AeMpDujXVjGtHvPDBvDDNgJQ5GTehSa1pZcF4pszotmCii4 CU/UG5VyXt788YhuKTGHArRrTMRwOzorIk19gVAuYRZe7uAws+7DHpEfFAozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxuox834Yj27d54zemSTA0SB7NQwHwYDVR0j BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4 QUEyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0 MjAtYTcxMWFjMjQzNTE5LzAvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNG OTJBRkU4QUEyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbrd7ZSUJ/VoGRjc2JvK6dkzKGImc3f+8kT zShGT21vA6w30ZrWMJn/d2uhgBBcwtAdAcUUklIXiWW9gVv4FteZl4KUMuNTHzjM ZpLb7I+z9VNv2YP0pkA9I5n16fr+iwpou/TlKqZs9XQWKusMvZ3/Ftpph4FaUxqP BoaS0sJWI+D562jyBNx739w8loc0kDq9H3nh8tZvSGLdnHYVQIlF0O9mdQG4djQa S1yzluAul0RUxyBFFAE6Lxe+iNJxBSdrvQmUCEagXbIOXsIuuvHIVEkfcjmlINN9 a7pJesgDgr55OfcrgHoIpSIDG1O7zQkDki69uXim2gSnN+v0aik= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:15 2026 by rpki-client