$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: 3UAVZencMxkyimSL56Z0U7n4Jhzi5pS7R6PhRuNmAWs= Subject key identifier: 5E:B1:D4:E8:08:B8:AB:FC:51:FD:15:58:40:E8:C3:E0:A5:7F:07:54 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 49AB5307F1FF2E25AA0013D4DAA58FE4D0EF27D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 0224 Signing time: Tue 24 Mar 2026 22:40:54 +0000 Manifest this update: Tue 24 Mar 2026 22:35:54 +0000 Manifest next update: Sat 28 Mar 2026 00:46:54 +0000 Files and hashes: 1: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 3: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: IW5SgUhfmCbZ+mBiJDVtmRLcfzGse0ax2Cj+RRlIxvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ab:53:07:f1:ff:2e:25:aa:00:13:d4:da:a5:8f:e4:d0:ef:27:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Mar 24 22:35:54 2026 GMT Not After : Mar 28 00:46:54 2026 GMT Subject: CN=5EB1D4E808B8ABFC51FD155840E8C3E0A57F0754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0f:70:8d:f9:31:c7:03:03:38:62:af:42:9a: 56:fa:c1:1c:e2:ee:1d:bf:55:b0:f1:36:b5:07:72: 9c:8c:1d:72:c2:dd:8b:b1:97:08:00:5c:52:fb:41: 5f:a5:bf:3b:14:d8:0a:5a:44:b8:64:21:63:27:61: 45:33:61:cd:6a:0d:ce:b3:5c:6a:eb:d0:35:dd:1b: 1f:f9:a1:a4:55:9f:4b:72:3e:fa:7d:c0:45:8b:ad: 5e:2f:fd:a3:c3:81:d9:7e:a2:6c:05:80:65:8e:e1: 89:78:be:f5:42:a3:62:5f:1c:45:32:35:e9:67:59: cc:18:25:ab:ea:a8:82:c4:42:77:00:ae:d7:41:00: a9:d2:1c:fe:96:fc:8f:71:45:6c:c6:c6:1e:b2:c5: 5b:e7:38:9e:34:b7:62:cd:4e:b6:27:a3:36:70:31: 5e:78:3e:bf:ce:62:cb:e3:40:ab:cb:03:6d:4c:94: e6:a1:96:7d:ee:87:cf:92:47:e0:43:f1:71:4e:c2: 2a:53:2e:5f:d0:20:48:ff:97:ce:8f:f2:e6:56:50: ea:1d:d7:c8:6b:82:b8:92:60:75:b1:b1:02:91:d8: 9c:e2:19:9d:33:5b:91:08:3e:d0:bb:43:25:aa:22: 15:05:94:c0:43:92:63:6a:fa:61:f2:1f:df:5e:2d: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B1:D4:E8:08:B8:AB:FC:51:FD:15:58:40:E8:C3:E0:A5:7F:07:54 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:43:50:9c:15:48:69:30:21:46:7d:fd:ce:8c:48:d9:cb:5e: ee:ff:cb:43:d1:1a:a4:b5:34:61:94:2b:90:3b:84:ed:02:5b: 69:95:7f:c4:c6:bd:0c:26:1b:3f:77:2e:0f:a3:65:3f:e7:ac: 65:25:ef:b0:56:ef:e7:f5:c2:0e:35:25:47:be:e6:6b:31:38: 0c:73:b4:60:42:20:69:15:d3:98:37:9a:4c:9a:7b:36:a9:80: 78:a8:1a:56:c4:f3:33:c6:a2:a7:a7:fc:9b:c8:83:a4:fc:55: 9d:ae:ed:9e:13:2f:26:3e:37:bb:c7:3c:2f:6b:4b:d4:32:16: d8:95:c1:4b:40:62:c0:65:1d:e3:76:e9:8b:45:85:32:c6:aa: a3:4d:87:24:df:ae:ed:d6:8a:6f:07:50:58:5b:36:3f:cf:56: 25:17:22:ca:d2:41:f7:f8:11:82:6f:6d:04:9e:55:a1:9c:eb: 23:fd:c9:09:f8:46:d3:d4:42:2a:d6:71:67:88:9a:68:f6:aa: 2e:64:26:ef:09:98:61:96:0f:8f:64:9a:f8:c3:df:1b:ed:df: 01:52:1c:c2:06:8e:01:ac:10:60:43:b5:39:e6:3e:22:36:c9: 1b:08:0e:a5:84:10:f6:c1:a5:bc:d5:06:04:f7:02:71:e8:57: 1e:1c:88:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSatTB/H/LiWqABPU2qWP5NDvJ9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNjAzMjQyMjM1NTRaFw0yNjAzMjgwMDQ2NTRaMDMxMTAvBgNV BAMTKDVFQjFENEU4MDhCOEFCRkM1MUZEMTU1ODQwRThDM0UwQTU3RjA3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0D3CN+THHAwM4Yq9Cmlb6wRzi 7h2/VbDxNrUHcpyMHXLC3YuxlwgAXFL7QV+lvzsU2ApaRLhkIWMnYUUzYc1qDc6z XGrr0DXdGx/5oaRVn0tyPvp9wEWLrV4v/aPDgdl+omwFgGWO4Yl4vvVCo2JfHEUy NelnWcwYJavqqILEQncArtdBAKnSHP6W/I9xRWzGxh6yxVvnOJ40t2LNTrYnozZw MV54Pr/OYsvjQKvLA21MlOahln3uh8+SR+BD8XFOwipTLl/QIEj/l86P8uZWUOod 18hrgriSYHWxsQKR2JziGZ0zW5EIPtC7QyWqIhUFlMBDkmNq+mHyH99eLZu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXrHU6Ai4q/xR/RVYQOjD4KV/B1QwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANDUJwVSGkwIUZ9/c6MSNnLXu7/y0PRGqS1 NGGUK5A7hO0CW2mVf8TGvQwmGz93Lg+jZT/nrGUl77BW7+f1wg41JUe+5msxOAxz tGBCIGkV05g3mkyaezapgHioGlbE8zPGoqen/JvIg6T8VZ2u7Z4TLyY+N7vHPC9r S9QyFtiVwUtAYsBlHeN26YtFhTLGqqNNhyTfru3Wim8HUFhbNj/PViUXIsrSQff4 EYJvbQSeVaGc6yP9yQn4RtPUQirWcWeImmj2qi5kJu8JmGGWD49kmvjD3xvt3wFS HMIGjgGsEGBDtTnmPiI2yRsIDqWEEPbBpbzVBgT3AnHoVx4ciGg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:18:01 2026 by rpki-client