$ rpki-client -vvf repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft File: BF00BBF622014234CC4A26C23F64AC5C143802B6.mft (raw, json) Hash identifier: WSBAS2fx2Yy6R+qEX3wRFFwc6h8bmhpv5kBr9+IQ8tA= Subject key identifier: 7E:42:F5:4F:7B:5F:01:C7:24:10:34:F2:C9:72:CE:73:71:45:32:9E Authority key identifier: BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 Certificate issuer: /CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Certificate serial: 5FC06F7CCF5A58C0DD94B95D3EA5822830E786E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft Manifest number: 0259 Signing time: Sun 01 Mar 2026 14:31:48 +0000 Manifest this update: Sun 01 Mar 2026 14:26:48 +0000 Manifest next update: Wed 04 Mar 2026 23:44:48 +0000 Files and hashes: 1: BF00BBF622014234CC4A26C23F64AC5C143802B6.crl (hash: 1cirx+thWfZOYZyTdlU8PXCDQGrS4CDEX4jj3HDjAoA=) 2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: /hhYO5wRSFrwibEJunDDF1qr8Z/wP92fyPsYfBATpiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c0:6f:7c:cf:5a:58:c0:dd:94:b9:5d:3e:a5:82:28:30:e7:86:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF00BBF622014234CC4A26C23F64AC5C143802B6 Validity Not Before: Mar 1 14:26:48 2026 GMT Not After : Mar 4 23:44:48 2026 GMT Subject: CN=7E42F54F7B5F01C7241034F2C972CE737145329E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:60:24:79:5f:eb:58:16:4d:3e:ae:db:49:56: ce:f9:12:8a:aa:cd:35:cd:c9:a1:60:35:ed:da:06: 8b:97:12:71:5e:97:02:4d:ac:bf:41:77:20:16:21: 87:c2:3b:de:1f:7a:ea:71:5f:58:19:89:6e:5c:8c: e6:77:44:24:6c:aa:83:7b:26:77:67:ca:11:9d:4f: 17:0b:09:d7:07:75:e2:61:3b:de:b9:46:4e:75:48: 2b:90:66:24:20:52:18:c7:38:77:9a:ba:2d:89:47: ae:50:36:32:4f:09:cb:82:b2:56:f0:11:59:4e:8d: 53:98:57:d0:8d:4a:85:1a:d5:67:ba:fc:cb:34:aa: 20:8e:d5:36:58:e5:12:50:49:db:a3:4e:c7:6d:90: 97:61:7c:aa:42:b4:20:63:43:be:fb:79:34:9f:02: ea:cb:43:10:b7:cc:c4:26:00:da:9e:a4:cb:ce:de: ca:d1:bb:01:19:dd:0c:76:9a:f9:91:35:5c:7f:2e: 31:79:65:6a:06:55:6b:47:38:eb:2d:42:05:4a:c3: b0:45:ba:fa:d7:53:61:c4:a3:31:cc:61:51:cb:82: 32:a9:69:ae:d2:16:79:10:43:78:67:aa:7d:2c:9d: d4:8f:5c:16:7b:90:5a:cd:56:83:5d:bc:fa:c2:5c: c4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:F5:4F:7B:5F:01:C7:24:10:34:F2:C9:72:CE:73:71:45:32:9E X509v3 Authority Key Identifier: keyid:BF:00:BB:F6:22:01:42:34:CC:4A:26:C2:3F:64:AC:5C:14:38:02:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF00BBF622014234CC4A26C23F64AC5C143802B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BF00BBF622014234CC4A26C23F64AC5C143802B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:23:e6:6e:ca:3c:a2:84:22:74:71:f4:f5:1b:08:5f:d5:ce: f4:74:0c:8f:99:12:c6:7d:00:09:9b:94:b3:21:fb:dd:bf:f6: 06:9b:bd:37:02:40:3c:04:60:63:b0:d6:d7:28:78:8d:2b:f8: bb:c1:bf:88:d8:7d:79:80:bf:a9:b2:1f:ff:3a:25:89:d0:5b: fe:42:5a:16:e2:4e:87:f3:8a:7c:54:63:37:dc:89:50:de:24: 0c:25:a9:e9:c5:76:1e:ce:0f:93:27:d4:b8:36:2a:da:d6:66: b7:fc:ea:f0:ff:c9:bc:36:e3:c9:a7:07:61:14:e7:e6:dd:7d: e8:92:b1:ac:d2:07:2b:7f:58:f9:f1:c4:35:14:e0:56:c4:31: 9b:32:2a:9c:1b:b4:5b:28:ea:38:a1:d7:f6:e5:a1:1a:ea:1a: 47:a9:20:2e:db:57:1e:fc:32:e5:c9:c6:26:fe:fa:17:2c:e1: 0b:79:fe:02:20:3f:9b:d4:f2:37:22:bf:3d:3c:ec:02:75:ba: 3b:9b:b0:e1:4a:17:77:f9:9b:63:23:1d:e6:0c:b4:7e:c5:a5: 06:0f:25:9a:11:d6:b9:7c:0a:a3:48:9e:a9:32:f8:04:c9:09: bb:47:40:1c:9c:67:d2:1d:20:1e:00:f3:b2:50:07:9f:63:85: 0c:75:96:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8BvfM9aWMDdlLldPqWCKDDnhuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMx NDM4MDJCNjAeFw0yNjAzMDExNDI2NDhaFw0yNjAzMDQyMzQ0NDhaMDMxMTAvBgNV BAMTKDdFNDJGNTRGN0I1RjAxQzcyNDEwMzRGMkM5NzJDRTczNzE0NTMyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYCR5X+tYFk0+rttJVs75Eoqq zTXNyaFgNe3aBouXEnFelwJNrL9BdyAWIYfCO94feupxX1gZiW5cjOZ3RCRsqoN7 JndnyhGdTxcLCdcHdeJhO965Rk51SCuQZiQgUhjHOHeaui2JR65QNjJPCcuCslbw EVlOjVOYV9CNSoUa1We6/Ms0qiCO1TZY5RJQSdujTsdtkJdhfKpCtCBjQ777eTSf AurLQxC3zMQmANqepMvO3srRuwEZ3Qx2mvmRNVx/LjF5ZWoGVWtHOOstQgVKw7BF uvrXU2HEozHMYVHLgjKpaa7SFnkQQ3hnqn0sndSPXBZ7kFrNVoNdvPrCXMSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkL1T3tfAcckEDTyyXLOc3FFMp4wHwYDVR0j BBgwFoAUvwC79iIBQjTMSibCP2SsXBQ4ArYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmNiYjZhZS0xMzhlLTRkMmItOTNmMS1lNmIyM2U2ZmU4ZmIvMC9CRjAwQkJGNjIy MDE0MjM0Q0M0QTI2QzIzRjY0QUM1QzE0MzgwMkI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFDNUMxNDM4 MDJCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkYwMEJCRjYyMjAxNDIzNENDNEEyNkMyM0Y2NEFD NUMxNDM4MDJCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoj5m7KPKKEInRx9PUbCF/VzvR0DI+ZEsZ9 AAmblLMh+92/9gabvTcCQDwEYGOw1tcoeI0r+LvBv4jYfXmAv6myH/86JYnQW/5C WhbiTofzinxUYzfciVDeJAwlqenFdh7OD5Mn1Lg2KtrWZrf86vD/ybw248mnB2EU 5+bdfeiSsazSByt/WPnxxDUU4FbEMZsyKpwbtFso6jih1/bloRrqGkepIC7bVx78 MuXJxib++hcs4Qt5/gIgP5vU8jcivz087AJ1ujubsOFKF3f5m2MjHeYMtH7FpQYP JZoR1rl8CqNInqky+ATJCbtHQBycZ9IdIB4A87JQB59jhQx1lsI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:10:01 2026 by rpki-client