$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft File: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft (raw, json) Hash identifier: /RS74dcL1MHyChGsTGKOtfdZ5stN4dBv7hq+78glKwQ= Subject key identifier: 39:C1:B7:DB:A4:74:A3:57:9A:64:DB:5A:5C:8D:B4:51:63:0D:F7:C5 Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E Certificate issuer: /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Certificate serial: 1120F77B844528D3D6DB76E88C966C9D7E0D96D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft Manifest number: 03A2 Signing time: Sat 28 Feb 2026 21:51:52 +0000 Manifest this update: Sat 28 Feb 2026 21:46:52 +0000 Manifest next update: Wed 04 Mar 2026 05:10:52 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: tqvVTypyRWoQ+BQk8RvmARihIc7baY47ONVcGpdS5No=) 2: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: fj/lt2lCYjvk1PSbkoRTgwJqQIbOPA+L+ew0qDsvTdY=) 3: BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl (hash: OnKCWVnr4AIKFHmoxns2XaFftVZVtOsokG3NB7mOIz4=) 4: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: W++QyUnZGXcmnX3ztvQWtHhQHoQNTCnCPKCpApkxJ6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:20:f7:7b:84:45:28:d3:d6:db:76:e8:8c:96:6c:9d:7e:0d:96:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E Validity Not Before: Feb 28 21:46:52 2026 GMT Not After : Mar 4 05:10:52 2026 GMT Subject: CN=39C1B7DBA474A3579A64DB5A5C8DB451630DF7C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:ef:aa:33:f5:26:5f:6f:30:a0:2a:6c:05: 6d:65:23:ff:b6:1e:77:aa:f5:cf:c5:ea:9c:68:81: 3c:84:10:04:9a:62:9d:07:31:71:73:65:bd:9e:a0: 16:5f:4a:89:a6:d2:63:5f:39:83:44:28:7b:1d:c5: 74:96:d8:2a:94:56:2c:31:14:12:30:d8:75:e7:a0: e5:dc:75:d4:0c:c9:dc:0c:83:82:f1:2b:e7:1a:d4: 15:82:45:cd:64:97:62:5e:d3:fe:15:3c:93:d2:2d: b8:8e:f0:36:6a:d9:16:f2:ce:b9:bd:5e:ce:05:22: 1e:7a:63:64:f1:6c:33:fd:a2:b8:f1:59:f6:ca:b2: 0e:e6:cb:f5:44:4b:65:45:1a:51:b6:32:a4:8d:41: 10:c3:c7:88:b2:fa:2f:a7:48:c4:8e:63:47:68:2a: 1c:4e:41:8f:b2:12:9e:5f:c4:5d:01:90:70:cd:97: e2:7c:a2:18:44:2d:3a:1d:21:5a:ee:60:80:4a:47: 89:0e:6c:b5:8f:d7:d0:90:55:ee:6e:bc:24:09:5c: df:9e:93:bf:51:76:ef:fb:8d:9a:2a:36:6c:8b:cf: 4a:e1:ad:70:39:ba:5b:e3:47:20:7b:8a:ad:e6:3b: 40:3e:44:d9:40:1b:ca:8f:f8:06:d8:40:e1:79:0e: cf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C1:B7:DB:A4:74:A3:57:9A:64:DB:5A:5C:8D:B4:51:63:0D:F7:C5 X509v3 Authority Key Identifier: keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:28:7b:f8:8c:bd:56:53:ba:40:e2:8d:56:56:4e:76:e4:7a: d7:2a:9b:2b:68:63:5f:a6:5c:68:2f:21:65:1b:16:67:50:b0: e8:f8:7b:b0:c3:d1:c6:f5:36:36:3d:1c:9c:44:e2:19:e5:fe: ee:3c:1b:60:47:e4:c8:a4:83:72:bc:a9:29:47:46:ba:31:86: 1c:e9:73:74:72:ef:fc:76:44:7b:ca:73:cb:bc:7d:00:89:ef: 80:6b:9b:ef:be:cb:ec:6b:36:da:18:eb:72:ac:62:ca:e3:7c: f6:f2:3b:a0:4b:e7:45:26:d8:82:b6:7a:b7:35:3c:46:e9:cc: 05:55:53:b4:4c:5d:15:19:31:8d:32:15:b1:1b:8c:e9:c0:a3: 4f:97:29:f5:3d:bf:07:9c:70:32:28:49:4b:d0:25:7d:7e:64: 2c:fa:a3:82:fa:27:28:81:1a:1d:62:83:5d:3b:aa:41:71:40: ff:e1:6f:0a:2f:7a:18:30:af:1b:fa:59:4a:1b:60:dc:9e:e1: 23:c6:8d:c2:2b:41:32:53:6f:23:f5:87:19:3a:d0:10:98:29: b9:24:a1:4d:8d:53:9f:c1:67:55:73:71:49:73:36:2e:71:d9: fe:45:ee:15:25:21:08:a8:00:64:d2:af:01:a1:cb:b4:ee:a4: 79:b5:51:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESD3e4RFKNPW23bojJZsnX4NltIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5 NDREREIxRTAeFw0yNjAyMjgyMTQ2NTJaFw0yNjAzMDQwNTEwNTJaMDMxMTAvBgNV BAMTKDM5QzFCN0RCQTQ3NEEzNTc5QTY0REI1QTVDOERCNDUxNjMwREY3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWae+qM/UmX28woCpsBW1lI/+2 Hneq9c/F6pxogTyEEASaYp0HMXFzZb2eoBZfSomm0mNfOYNEKHsdxXSW2CqUViwx FBIw2HXnoOXcddQMydwMg4LxK+ca1BWCRc1kl2Je0/4VPJPSLbiO8DZq2Rbyzrm9 Xs4FIh56Y2TxbDP9orjxWfbKsg7my/VES2VFGlG2MqSNQRDDx4iy+i+nSMSOY0do KhxOQY+yEp5fxF0BkHDNl+J8ohhELTodIVruYIBKR4kObLWP19CQVe5uvCQJXN+e k79Rdu/7jZoqNmyLz0rhrXA5ulvjRyB7iq3mO0A+RNlAG8qP+AbYQOF5Ds9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOcG326R0o1eaZNtaXI20UWMN98UwHwYDVR0j BBgwFoAUvZ0fongvZqXSJHzPdvmHM5RN2x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDlkYzVlYi0zMjYwLTQyOGEtYTZjMC1kYzBmNjM2YjMzMDcvMC9CRDlEMUZBMjc4 MkY2NkE1RDIyNDdDQ0Y3NkY5ODczMzk0NEREQjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3MzM5NDRE REIxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvQkQ5RDFGQTI3ODJGNjZBNUQyMjQ3Q0NGNzZGOTg3 MzM5NDREREIxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwoe/iMvVZTukDijVZWTnbketcqmytoY1+m XGgvIWUbFmdQsOj4e7DD0cb1NjY9HJxE4hnl/u48G2BH5Mikg3K8qSlHRroxhhzp c3Ry7/x2RHvKc8u8fQCJ74Brm+++y+xrNtoY63KsYsrjfPbyO6BL50Um2IK2erc1 PEbpzAVVU7RMXRUZMY0yFbEbjOnAo0+XKfU9vweccDIoSUvQJX1+ZCz6o4L6JyiB Gh1ig107qkFxQP/hbwovehgwrxv6WUobYNye4SPGjcIrQTJTbyP1hxk60BCYKbkk oU2NU5/BZ1VzcUlzNi5x2f5F7hUlIQioAGTSrwGhy7TupHm1UWM= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:37 2026 by rpki-client