$ rpki-client -vvf repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft File: BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft (raw, json) Hash identifier: wGW8jxg/KQVmC3rcGCnIWSZNGDyP2cj10YAW1ZuUUxA= Subject key identifier: 4D:FA:2E:52:DF:55:66:9D:96:0C:04:C3:29:74:44:40:97:64:31:D0 Authority key identifier: BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 Certificate issuer: /CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Certificate serial: 111ADF9B5B9D1CE500EAEF8207930EBAA31B2093 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft Manifest number: 055D Signing time: Mon 02 Mar 2026 05:01:30 +0000 Manifest this update: Mon 02 Mar 2026 04:56:30 +0000 Manifest next update: Thu 05 Mar 2026 11:06:30 +0000 Files and hashes: 1: 3130332e3135352e3131372e302f32342d3234203d3e20313431303536.roa (hash: IzocfQbAm6re271rkdggFPq3VGCEGAEeE3AdaJEm7ps=) 2: 323430363a366434303a656165613a3a2f34382d3438203d3e20313431303536.roa (hash: 2/e1df75ZuB0mlztIUau/nvIcUBCoLK27iXCpZBorYA=) 3: 3130332e3135352e3131362e302f32332d3233203d3e20313431303536.roa (hash: 8j0jRsDzFx9gAhfck8T4zhTfxl09chfxnR3KSNz+QGw=) 4: 323430363a366434303a313431303a3a2f34382d3438203d3e20313431303536.roa (hash: T+xAmOcrpikrQh6BNR+E6JFDb4uNhHPoQy2Ve9WHYks=) 5: 323430363a366434303a3a2f33322d3332203d3e20313431303536.roa (hash: gB/Q187la6gm8qsp2Yv6/zuENtxXbTAl8b+QHinNe0w=) 6: 323430363a366434303a3131363a3a2f34382d3438203d3e20313431303536.roa (hash: ifILYerUDcpRe223pMC/3xtPqhg84IovzTQC0ym+UNg=) 7: 3130332e3135352e3131362e302f32342d3234203d3e20313431303536.roa (hash: JGFlFhH6nweNzgQ11TLkyB/qqq3QQSYaNP8bQViVV64=) 8: BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl (hash: LQD7PQaAGrf6TgjYSBzlEfOFa7TSNnM0BCCBIHwh40g=) 9: 323430363a366434303a3131373a3a2f34382d3438203d3e20313431303536.roa (hash: lE9s+BoEY5gwrvlaGT630nudod/SJ6QnowFtOuZG/F8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1a:df:9b:5b:9d:1c:e5:00:ea:ef:82:07:93:0e:ba:a3:1b:20:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA31953B92C5FC452EDA87B90CBD98E207FA337 Validity Not Before: Mar 2 04:56:30 2026 GMT Not After : Mar 5 11:06:30 2026 GMT Subject: CN=4DFA2E52DF55669D960C04C329744440976431D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e4:3b:74:de:ac:b3:50:3d:ea:32:42:e7:7b: a2:ab:cb:8e:4d:97:d1:95:d3:db:2c:3d:cc:d6:2b: c4:d9:a9:f0:fb:7d:c8:56:f3:05:3a:08:62:79:17: bc:ed:b4:5f:dd:8e:d6:b8:43:71:36:8d:fd:06:75: 8b:4c:50:f5:f1:73:07:b5:f6:b2:55:45:ea:c4:96: 18:f6:fb:fe:3d:ea:24:bd:82:0f:0a:5e:0c:4b:4e: 2c:db:82:1d:49:bb:48:b2:ec:8b:8c:94:e4:a8:0e: da:40:f5:f5:4c:d3:7c:87:3c:13:f7:1e:a4:13:49: d0:ed:c6:45:53:3a:11:4a:60:a4:28:4d:6f:8a:be: 61:97:d1:35:96:85:15:bc:72:91:36:4f:c9:76:cd: 13:cb:60:65:ee:7e:ac:32:be:64:8a:cd:43:8f:00: 7e:a4:bd:d0:3a:92:70:19:fb:98:83:90:98:6b:84: b3:a4:47:ff:40:5c:6c:ad:e2:16:b1:ba:02:00:b8: e0:de:20:64:8a:0f:b2:31:ad:af:c3:e6:b1:e1:47: c5:f7:76:7d:40:dd:a3:8c:24:37:cb:57:9b:4a:ba: 8a:95:8f:9f:cc:aa:f6:f0:a5:b7:47:7c:7e:c6:49: db:1f:9c:d2:47:dd:72:8b:dd:19:7f:2c:0f:68:e7: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FA:2E:52:DF:55:66:9D:96:0C:04:C3:29:74:44:40:97:64:31:D0 X509v3 Authority Key Identifier: keyid:BC:A3:19:53:B9:2C:5F:C4:52:ED:A8:7B:90:CB:D9:8E:20:7F:A3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCA31953B92C5FC452EDA87B90CBD98E207FA337.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e2c4815-b2da-4c20-bc31-503adf49b490/0/BCA31953B92C5FC452EDA87B90CBD98E207FA337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fd:f4:a8:0a:47:46:a9:63:d0:d6:68:80:83:83:1b:00:fd: 35:b8:22:59:ba:10:26:f7:e2:41:58:cc:84:af:27:3d:78:2b: 0c:61:94:3d:bc:dd:78:51:ec:28:98:c9:e1:35:8f:b6:8b:9e: c0:1c:a2:cd:93:c1:52:ca:3b:a1:52:ae:9c:78:da:53:7c:59: 7e:64:52:88:04:72:56:a5:8f:01:27:9c:6c:17:fa:54:1c:97: 72:41:43:27:54:14:3e:d5:70:1e:7b:e1:32:5f:9a:4f:0d:9c: d2:de:7b:52:35:01:e7:f2:01:73:cb:b4:6c:33:fd:3f:12:0e: 69:ce:e6:74:e2:55:fb:37:f3:51:77:7e:8d:79:00:25:a4:34: be:0e:ec:be:05:05:e0:7c:d9:a1:76:57:b8:8c:38:6e:de:be: 17:f8:6b:8d:02:24:24:b0:89:db:5b:09:b4:94:dd:d5:fe:37: 17:f5:ab:fd:10:ff:87:eb:d2:e8:1a:73:68:ee:41:9d:32:66: e5:7b:b2:4a:62:9d:5c:2e:d7:70:b3:70:4c:6f:bf:6a:55:a9: cd:5b:8e:78:ee:9f:86:ac:f0:64:03:2d:0c:37:3f:7d:ea:0d: ee:bd:21:3f:9c:9a:9c:fd:84:f6:3d:36:1a:42:4f:ae:3f:48: 92:85:ff:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERrfm1udHOUA6u+CB5MOuqMbIJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUy MDdGQTMzNzAeFw0yNjAzMDIwNDU2MzBaFw0yNjAzMDUxMTA2MzBaMDMxMTAvBgNV BAMTKDRERkEyRTUyREY1NTY2OUQ5NjBDMDRDMzI5NzQ0NDQwOTc2NDMxRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD05Dt03qyzUD3qMkLne6Kry45N l9GV09ssPczWK8TZqfD7fchW8wU6CGJ5F7zttF/djta4Q3E2jf0GdYtMUPXxcwe1 9rJVRerElhj2+/496iS9gg8KXgxLTizbgh1Ju0iy7IuMlOSoDtpA9fVM03yHPBP3 HqQTSdDtxkVTOhFKYKQoTW+KvmGX0TWWhRW8cpE2T8l2zRPLYGXufqwyvmSKzUOP AH6kvdA6knAZ+5iDkJhrhLOkR/9AXGyt4haxugIAuODeIGSKD7Ixra/D5rHhR8X3 dn1A3aOMJDfLV5tKuoqVj5/MqvbwpbdHfH7GSdsfnNJH3XKL3Rl/LA9o5wP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTfouUt9VZp2WDATDKXREQJdkMdAwHwYDVR0j BBgwFoAUvKMZU7ksX8RS7ah7kMvZjiB/ozcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTJjNDgxNS1iMmRhLTRjMjAtYmMzMS01MDNhZGY0OWI0OTAvMC9CQ0EzMTk1M0I5 MkM1RkM0NTJFREE4N0I5MENCRDk4RTIwN0ZBMzM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5OEUyMDdG QTMzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UyYzQ4MTUtYjJkYS00YzIwLWJj MzEtNTAzYWRmNDliNDkwLzAvQkNBMzE5NTNCOTJDNUZDNDUyRURBODdCOTBDQkQ5 OEUyMDdGQTMzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv99KgKR0apY9DWaICDgxsA/TW4Ilm6ECb3 4kFYzISvJz14KwxhlD283XhR7CiYyeE1j7aLnsAcos2TwVLKO6FSrpx42lN8WX5k UogEclaljwEnnGwX+lQcl3JBQydUFD7VcB574TJfmk8NnNLee1I1AefyAXPLtGwz /T8SDmnO5nTiVfs381F3fo15ACWkNL4O7L4FBeB82aF2V7iMOG7evhf4a40CJCSw idtbCbSU3dX+Nxf1q/0Q/4fr0ugac2juQZ0yZuV7skpinVwu13CzcExvv2pVqc1b jnjun4as8GQDLQw3P33qDe69IT+cmpz9hPY9NhpCT64/SJKF/7g= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:39 2026 by rpki-client