$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: FgOaXXByIx17tmrxRj+/n8zmZhzpt4bqq2AjVTdG8/Q= Subject key identifier: 33:DF:4D:A5:CB:E8:F6:9B:AE:F3:DA:49:A7:9C:8E:38:13:47:B1:B0 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 5A90599DE97BCEC5C97E4D4503A698F8FCB6D989 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0251 Signing time: Sun 01 Mar 2026 08:52:13 +0000 Manifest this update: Sun 01 Mar 2026 08:47:13 +0000 Manifest next update: Wed 04 Mar 2026 16:08:13 +0000 Files and hashes: 1: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: YAXBiP1Tn35BvKpuF6xhlnff/qb6fyDlzJRGhETAkV8=) 2: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: n5TytNMJNueSpsDWhI0DosAozPy6RC239f9lA8an4sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:90:59:9d:e9:7b:ce:c5:c9:7e:4d:45:03:a6:98:f8:fc:b6:d9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Mar 1 08:47:13 2026 GMT Not After : Mar 4 16:08:13 2026 GMT Subject: CN=33DF4DA5CBE8F69BAEF3DA49A79C8E381347B1B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:cf:f1:b8:b0:4b:54:72:45:fb:c8:cb:a6: 06:1a:27:96:c5:3c:69:8f:01:cb:32:20:20:45:ce: 53:e9:22:f5:1e:0d:7d:00:48:d8:c0:5a:18:12:40: e1:df:1b:d0:fe:e8:30:2d:df:89:bd:71:85:ec:03: 7b:96:78:f1:d9:b3:1a:62:c9:67:cf:85:ce:26:85: 72:c2:40:c2:f0:cf:d5:61:8b:89:5c:7f:65:bd:16: ee:91:a0:16:23:84:c1:d2:3c:09:78:39:ff:53:55: 27:e8:f5:9b:47:48:8c:52:eb:19:4c:bb:30:a8:ab: 7e:f5:8e:55:4a:43:66:2d:dd:61:91:29:4f:9e:42: a5:b4:f4:8f:bd:d7:0a:80:59:75:f5:9e:b8:d1:f0: a9:50:8c:2c:ce:0c:80:12:ad:f2:a3:4e:bb:b9:56: 4b:f6:e3:c3:b8:06:9b:af:fa:fb:ed:cb:27:15:ea: 3b:e8:cb:22:5b:09:93:5c:ba:5f:3d:b1:7a:07:8e: 10:49:3a:45:07:b0:8d:ea:af:f7:c4:d8:f9:19:3f: 98:63:d1:b3:46:5d:6c:f1:69:b9:33:7c:de:b8:38: c1:69:c2:bc:30:fa:47:71:20:09:fa:7c:44:33:42: f3:b2:ee:ee:8e:60:59:c1:9f:cf:be:ec:5e:44:94: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DF:4D:A5:CB:E8:F6:9B:AE:F3:DA:49:A7:9C:8E:38:13:47:B1:B0 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0f:23:8d:ae:59:99:80:af:cb:65:d0:98:f1:4b:e4:a8:14: 92:77:a0:77:ff:ff:e1:79:b6:73:8b:05:ae:18:aa:dd:41:65: c4:ca:6c:36:a6:ce:26:5f:ac:1a:c1:a2:0a:1e:24:42:70:15: 40:52:94:41:97:8e:ee:2f:6d:93:17:3e:41:32:eb:ed:1d:fa: 32:79:43:be:25:04:2f:31:e0:78:14:bf:8b:35:84:15:d0:59: e0:7a:eb:56:44:41:fd:1c:c3:70:bc:48:30:f1:8c:02:8c:d5: ef:a2:eb:8a:d8:f1:1f:d4:93:5e:76:71:a0:ea:60:21:e3:4f: 08:53:74:a1:c6:42:39:21:db:04:50:70:4a:12:b2:ab:a9:5a: dc:05:f1:10:4f:e4:3c:1d:8d:c8:6b:46:71:09:e4:bb:6b:d6: ec:fb:07:7d:d0:dc:b6:39:bd:71:61:25:9d:2c:18:65:a0:1c: c2:66:0a:8a:0d:03:7c:27:17:07:9c:14:b0:d8:e7:15:93:94: 33:11:60:e2:21:f7:c8:84:59:17:70:87:5f:86:89:01:54:10: 78:d7:d1:8b:0c:38:0d:4b:9c:8a:e4:87:ed:07:02:cb:fb:de: 21:e8:d2:42:e2:67:e3:1e:d2:4f:e7:4a:8d:de:95:31:51:6f: 2a:fa:78:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpBZnel7zsXJfk1FA6aY+Py22YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNjAzMDEwODQ3MTNaFw0yNjAzMDQxNjA4MTNaMDMxMTAvBgNV BAMTKDMzREY0REE1Q0JFOEY2OUJBRUYzREE0OUE3OUM4RTM4MTM0N0IxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOc/xuLBLVHJF+8jLpgYaJ5bF PGmPAcsyICBFzlPpIvUeDX0ASNjAWhgSQOHfG9D+6DAt34m9cYXsA3uWePHZsxpi yWfPhc4mhXLCQMLwz9Vhi4lcf2W9Fu6RoBYjhMHSPAl4Of9TVSfo9ZtHSIxS6xlM uzCoq371jlVKQ2Yt3WGRKU+eQqW09I+91wqAWXX1nrjR8KlQjCzODIASrfKjTru5 Vkv248O4Bpuv+vvtyycV6jvoyyJbCZNcul89sXoHjhBJOkUHsI3qr/fE2PkZP5hj 0bNGXWzxabkzfN64OMFpwrww+kdxIAn6fEQzQvOy7u6OYFnBn8++7F5ElP0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM99Npcvo9puu89pJp5yOOBNHsbAwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgPI42uWZmAr8tl0JjxS+SoFJJ3oHf//+F5 tnOLBa4Yqt1BZcTKbDamziZfrBrBogoeJEJwFUBSlEGXju4vbZMXPkEy6+0d+jJ5 Q74lBC8x4HgUv4s1hBXQWeB661ZEQf0cw3C8SDDxjAKM1e+i64rY8R/Uk152caDq YCHjTwhTdKHGQjkh2wRQcEoSsqupWtwF8RBP5DwdjchrRnEJ5Ltr1uz7B33Q3LY5 vXFhJZ0sGGWgHMJmCooNA3wnFwecFLDY5xWTlDMRYOIh98iEWRdwh1+GiQFUEHjX 0YsMOA1LnIrkh+0HAsv73iHo0kLiZ+Me0k/nSo3elTFRbyr6eCs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:11 2026 by rpki-client