$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft File: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft (raw, json) Hash identifier: wbVBzi8Osrc4HZiMVJlCwTqGE+y9MYI0zATlzDM7P2k= Subject key identifier: 08:EB:87:95:79:05:6B:A1:CB:E4:F6:55:C7:6D:B4:5D:42:5F:89:B4 Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 Certificate issuer: /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Certificate serial: 42D9846EC0E88F8EB8C13FCFB55E05C9A0310E91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft Manifest number: 0260 Signing time: Tue 24 Mar 2026 04:10:43 +0000 Manifest this update: Tue 24 Mar 2026 04:05:43 +0000 Manifest next update: Fri 27 Mar 2026 12:54:43 +0000 Files and hashes: 1: BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl (hash: WtIC0A2bH6LvGEkE6EF9CDqWkJSVmqW6ntpigBfSSDw=) 2: 3130332e37332e3139322e302f32342d3234203d3e20313439393434.roa (hash: LVuNMl2lzuE51i8nEKXhRfSEsY/B7W9GqMKzmWH4/x8=) 3: 3130332e37332e3139332e302f32342d3234203d3e20313439393434.roa (hash: 0uJHSCFsdwdZP1NKhkt1f+yFu68JksGMAuDEtBg71VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d9:84:6e:c0:e8:8f:8e:b8:c1:3f:cf:b5:5e:05:c9:a0:31:0e:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8 Validity Not Before: Mar 24 04:05:43 2026 GMT Not After : Mar 27 12:54:43 2026 GMT Subject: CN=08EB879579056BA1CBE4F655C76DB45D425F89B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:2a:06:4f:0e:5e:08:8a:7e:e6:1e:16:21: 81:dc:a1:0f:34:38:26:b1:97:4a:e2:e8:13:41:fe: 16:bb:1a:4b:dc:ab:06:38:d8:ba:ae:01:03:26:4b: 63:e7:82:58:7f:e6:39:c6:26:8f:71:f9:dc:91:a8: e8:cc:3e:bf:01:db:31:3d:1f:88:8e:59:64:6e:1a: 65:b1:c2:ee:da:2d:31:aa:71:f2:b7:22:76:46:4f: b8:99:08:d1:95:bb:8d:5f:e5:99:50:b9:b1:8b:a4: 62:08:f0:85:32:88:9b:c1:b4:81:93:68:cd:69:18: 3f:18:16:79:9a:e2:f1:79:1c:7f:e0:27:88:cc:42: 23:cb:5f:65:45:7e:7b:eb:59:cd:5b:ec:8a:91:5a: bd:e2:4a:9e:1b:fd:30:40:a3:3b:1c:bc:a4:3a:55: 3f:ff:01:05:10:47:41:53:da:a6:7e:5b:51:b2:c3: 5f:b6:3c:2c:67:07:90:36:e2:e0:81:74:60:c3:92: e0:13:8b:17:61:af:53:5e:33:82:73:31:4b:47:f3: b7:7f:ee:56:e1:4f:3c:62:0a:02:bb:5e:09:98:ea: 4a:ae:88:98:46:36:bd:7c:15:53:5a:5d:72:4e:de: 32:8c:e5:ae:17:d6:8c:a6:fc:13:97:1a:49:47:9e: 96:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:87:95:79:05:6B:A1:CB:E4:F6:55:C7:6D:B4:5D:42:5F:89:B4 X509v3 Authority Key Identifier: keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:94:f3:72:e0:15:97:45:58:54:f6:84:77:ee:e7:9c:58:78: 1c:15:b6:d6:a3:9f:32:54:aa:26:81:d8:c4:79:c8:31:90:b5: 8c:3f:99:46:42:9e:16:4f:2a:70:6c:cd:2b:85:7f:4f:14:14: 03:72:36:f8:b5:a5:20:23:57:ec:e4:28:cd:d1:bf:7e:aa:b1: c9:10:cd:d5:29:f1:5b:38:99:90:c2:48:ee:6f:4e:55:bb:ac: f0:4d:af:ba:1a:5b:5b:d0:db:bf:d6:1a:46:94:45:11:77:28: 73:18:36:e9:ae:48:c9:b0:6a:84:00:4e:d5:02:e5:3d:41:4e: 7b:9b:54:bd:1e:93:f6:dd:80:ae:2a:51:dd:00:74:a0:25:56: ec:b9:ad:e2:a0:df:e9:2c:c3:f4:77:03:65:53:4d:92:5c:b8: fc:87:fa:f2:0a:43:dc:29:9a:6c:35:3c:b9:92:71:87:5c:1e: fa:ec:3c:a6:44:34:d1:b4:2f:19:6d:fc:30:86:28:df:dd:a1: ca:92:07:7e:b4:0e:a9:3b:f0:25:5b:53:b7:62:84:7d:47:aa: 35:77:96:8e:53:f4:8b:18:de:9c:9c:9b:e4:b9:56:da:d1:9f: cd:f7:65:4f:f0:e1:fe:87:6c:71:87:db:6c:84:4b:a3:42:07: 3c:c6:04:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQtmEbsDoj464wT/PtV4FyaAxDpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNF RDhDRDNCODAeFw0yNjAzMjQwNDA1NDNaFw0yNjAzMjcxMjU0NDNaMDMxMTAvBgNV BAMTKDA4RUI4Nzk1NzkwNTZCQTFDQkU0RjY1NUM3NkRCNDVENDI1Rjg5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzioGTw5eCIp+5h4WIYHcoQ80 OCaxl0ri6BNB/ha7GkvcqwY42LquAQMmS2Pnglh/5jnGJo9x+dyRqOjMPr8B2zE9 H4iOWWRuGmWxwu7aLTGqcfK3InZGT7iZCNGVu41f5ZlQubGLpGII8IUyiJvBtIGT aM1pGD8YFnma4vF5HH/gJ4jMQiPLX2VFfnvrWc1b7IqRWr3iSp4b/TBAozscvKQ6 VT//AQUQR0FT2qZ+W1Gyw1+2PCxnB5A24uCBdGDDkuATixdhr1NeM4JzMUtH87d/ 7lbhTzxiCgK7XgmY6kquiJhGNr18FVNaXXJO3jKM5a4X1oym/BOXGklHnpbnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCOuHlXkFa6HL5PZVx220XUJfibQwHwYDVR0j BBgwFoAUvIvVSFybAdF28/qo84Hl7O2M07gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzQxODAxMy0xNjc5LTQ5NmItODBmNi0yZDA1Y2M1YmU3MmYvMC9CQzhCRDU0ODVD OUIwMUQxNzZGM0ZBQThGMzgxRTVFQ0VEOENEM0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1RUNFRDhD RDNCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc0MTgwMTMtMTY3OS00OTZiLTgw ZjYtMmQwNWNjNWJlNzJmLzAvQkM4QkQ1NDg1QzlCMDFEMTc2RjNGQUE4RjM4MUU1 RUNFRDhDRDNCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKU83LgFZdFWFT2hHfu55xYeBwVttajnzJU qiaB2MR5yDGQtYw/mUZCnhZPKnBszSuFf08UFANyNvi1pSAjV+zkKM3Rv36qsckQ zdUp8Vs4mZDCSO5vTlW7rPBNr7oaW1vQ27/WGkaURRF3KHMYNumuSMmwaoQATtUC 5T1BTnubVL0ek/bdgK4qUd0AdKAlVuy5reKg3+ksw/R3A2VTTZJcuPyH+vIKQ9wp mmw1PLmScYdcHvrsPKZENNG0Lxlt/DCGKN/docqSB360Dqk78CVbU7dihH1HqjV3 lo5T9IsY3pycm+S5VtrRn833ZU/w4f6HbHGH22yES6NCBzzGBBQ= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:39 2026 by rpki-client