$ rpki-client -vvf repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft File: BD6194D3C25B637B15DAEB654B288A451054ABE0.mft (raw, json) Hash identifier: QLMhSsMpCwGvLt64hsBNsTkg3Tv7dBoa6BxEexW/z6k= Subject key identifier: 16:51:08:24:80:7A:65:83:B1:2B:DA:53:CA:6B:B5:95:73:23:84:3C Authority key identifier: BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 Certificate issuer: /CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Certificate serial: 02A3174EECB49F01E292D2EC8495FC5DAA130C5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft Manifest number: 01FF Signing time: Thu 26 Mar 2026 14:21:23 +0000 Manifest this update: Thu 26 Mar 2026 14:16:23 +0000 Manifest next update: Sun 29 Mar 2026 18:26:23 +0000 Files and hashes: 1: 3130332e37392e3133302e302f32342d3234203d3e20313430343433.roa (hash: BlB54vUebVCTB7wA7qoqMH+xgyxkQDhZWNMRec/AbvE=) 2: 3130332e37392e3133302e302f32332d3233203d3e20313430343433.roa (hash: RNdh1+r+BNYLHAu4V1jupY7hG6iYrh06nO6HbqG1vXI=) 3: BD6194D3C25B637B15DAEB654B288A451054ABE0.crl (hash: 5ALvL6oV+LmZz1znU1xfiiHzXfQxhVY0d6mY9bW1Gak=) 4: 3130332e37392e3133312e302f32342d3234203d3e20313430343433.roa (hash: 10mUGoiah4HNNhQPC/xIeaHPveRue0pYK34O0LI+OcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 18:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a3:17:4e:ec:b4:9f:01:e2:92:d2:ec:84:95:fc:5d:aa:13:0c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6194D3C25B637B15DAEB654B288A451054ABE0 Validity Not Before: Mar 26 14:16:23 2026 GMT Not After : Mar 29 18:26:23 2026 GMT Subject: CN=16510824807A6583B12BDA53CA6BB5957323843C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:5d:ba:c6:71:43:3f:f6:3b:04:6b:15:f4: d8:a3:47:ee:b9:d0:3f:fe:95:f6:23:2e:08:82:f7: cf:99:0e:f9:42:06:88:e5:82:50:14:07:08:3b:71: f6:38:e5:94:1c:9a:fa:c6:b3:75:8f:18:ad:17:f7: 18:a5:65:77:9d:84:ec:5a:34:9f:d1:ca:b2:26:69: ec:0f:ea:be:0f:e1:ee:15:c5:13:d7:8a:bf:b3:52: 88:a9:df:71:a7:f4:bf:b9:2b:46:e5:49:b8:18:fc: 42:d9:1b:31:d2:1f:db:d4:bf:8b:5f:f7:85:d9:1d: f4:af:bc:ec:ab:b3:c6:d7:f1:43:f4:fc:4e:be:ba: 16:6f:18:fe:5e:e1:72:ed:1f:58:d2:7f:65:0e:1a: 0d:a4:3e:9d:3d:78:ea:5e:24:28:f6:df:8b:9c:c9: 3a:c7:70:42:41:7b:95:f5:a7:ab:84:08:a5:b3:5e: f1:27:12:31:b3:7f:94:48:e4:78:ee:6b:0e:cf:e4: 8f:6d:fa:97:a0:e4:e9:8f:f7:27:bb:dc:3e:e3:88: e8:4f:e0:e1:64:16:fa:ee:4b:11:e5:35:90:d5:0a: 33:67:c3:d6:c8:03:6a:4d:d1:47:e3:c5:a1:2d:fc: 15:5a:65:13:44:a5:d2:2a:6a:48:f0:f3:2b:60:33: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:51:08:24:80:7A:65:83:B1:2B:DA:53:CA:6B:B5:95:73:23:84:3C X509v3 Authority Key Identifier: keyid:BD:61:94:D3:C2:5B:63:7B:15:DA:EB:65:4B:28:8A:45:10:54:AB:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD6194D3C25B637B15DAEB654B288A451054ABE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae24907-a6f2-4a55-aa6f-18c7db143fe8/0/BD6194D3C25B637B15DAEB654B288A451054ABE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:95:4c:91:20:1c:a2:5c:61:44:69:ea:2b:f7:26:4f:4d:1b: 5e:9a:cb:ba:74:26:5f:a4:88:fb:ac:01:f1:fc:8e:da:5a:ba: 67:3a:0e:b3:d2:58:13:a7:32:39:56:f7:1a:e8:61:50:ec:f3: 4f:45:a2:a9:14:22:ed:42:dd:81:ce:6c:df:51:22:8d:b5:7c: bd:f3:33:c4:b5:7a:55:01:a3:47:31:22:d6:18:32:cc:22:1b: 1a:e3:c2:1c:e2:e0:61:ca:51:8f:ff:6d:1c:62:ec:2c:9f:b4: a2:ef:47:1d:83:ad:c8:1f:6d:e8:c4:58:e2:b3:ea:52:b9:b8: 85:62:da:b5:ad:11:44:7f:2c:3b:b4:32:3e:03:ac:58:a4:e5: a5:af:44:21:33:f9:6f:22:da:12:ab:33:0a:c5:f2:f1:d7:55: ec:8b:b9:77:72:8f:8e:2f:32:4b:da:06:e6:ca:96:a6:2d:a3: 8f:69:77:d8:da:17:58:04:9b:52:f5:80:f3:fb:13:56:5c:e7: cd:2c:39:a7:8e:3a:b4:1b:67:ad:fd:58:2e:e7:4d:ad:86:1b: 07:ba:49:18:07:d1:5d:b5:ae:96:0e:1c:cc:ea:a9:34:74:1b: 77:1c:a4:4d:e4:6f:b5:16:94:f3:aa:9f:54:be:a9:d9:2f:61: 93:03:b1:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqMXTuy0nwHiktLshJX8XaoTDF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUx MDU0QUJFMDAeFw0yNjAzMjYxNDE2MjNaFw0yNjAzMjkxODI2MjNaMDMxMTAvBgNV BAMTKDE2NTEwODI0ODA3QTY1ODNCMTJCREE1M0NBNkJCNTk1NzMyMzg0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvP126xnFDP/Y7BGsV9NijR+65 0D/+lfYjLgiC98+ZDvlCBojlglAUBwg7cfY45ZQcmvrGs3WPGK0X9xilZXedhOxa NJ/RyrImaewP6r4P4e4VxRPXir+zUoip33Gn9L+5K0blSbgY/ELZGzHSH9vUv4tf 94XZHfSvvOyrs8bX8UP0/E6+uhZvGP5e4XLtH1jSf2UOGg2kPp09eOpeJCj234uc yTrHcEJBe5X1p6uECKWzXvEnEjGzf5RI5Hjuaw7P5I9t+peg5OmP9ye73D7jiOhP 4OFkFvruSxHlNZDVCjNnw9bIA2pN0UfjxaEt/BVaZRNEpdIqakjw8ytgM1fDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFlEIJIB6ZYOxK9pTymu1lXMjhDwwHwYDVR0j BBgwFoAUvWGU08JbY3sV2utlSyiKRRBUq+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWUyNDkwNy1hNmYyLTRhNTUtYWE2Zi0xOGM3ZGIxNDNmZTgvMC9CRDYxOTREM0My NUI2MzdCMTVEQUVCNjU0QjI4OEE0NTEwNTRBQkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhBNDUxMDU0 QUJFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlMjQ5MDctYTZmMi00YTU1LWFh NmYtMThjN2RiMTQzZmU4LzAvQkQ2MTk0RDNDMjVCNjM3QjE1REFFQjY1NEIyODhB NDUxMDU0QUJFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiVTJEgHKJcYURp6iv3Jk9NG16ay7p0Jl+k iPusAfH8jtpaumc6DrPSWBOnMjlW9xroYVDs809FoqkUIu1C3YHObN9RIo21fL3z M8S1elUBo0cxItYYMswiGxrjwhzi4GHKUY//bRxi7CyftKLvRx2DrcgfbejEWOKz 6lK5uIVi2rWtEUR/LDu0Mj4DrFik5aWvRCEz+W8i2hKrMwrF8vHXVeyLuXdyj44v MkvaBubKlqYto49pd9jaF1gEm1L1gPP7E1Zc580sOaeOOrQbZ639WC7nTa2GGwe6 SRgH0V21rpYOHMzqqTR0G3ccpE3kb7UWlPOqn1S+qdkvYZMDsRU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:01:59 2026 by rpki-client