$ rpki-client -vvf repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft File: BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft (raw, json) Hash identifier: Yh+BxtmiolEHGm2YDJrYSsZ2P3D0OAR7j5V4iWpmhMk= Subject key identifier: 7C:3B:1F:DB:70:D7:0A:58:9E:6E:03:82:0F:4E:36:E9:93:79:5E:D3 Authority key identifier: BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB Certificate issuer: /CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Certificate serial: 64EA0BE21F4D0BC8633292FA0700BBBCFDF3324F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft Manifest number: D0 Signing time: Sun 01 Mar 2026 01:31:10 +0000 Manifest this update: Sun 01 Mar 2026 01:26:10 +0000 Manifest next update: Wed 04 Mar 2026 12:29:10 +0000 Files and hashes: 1: 3136302e32322e39332e302f32342d3234203d3e20313532383335.roa (hash: SeJIZiTXDjba/24vDFwUassgzTgVWzwJ94ejAOzdpPE=) 2: BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl (hash: rw6POcTjYpHW4e/g3S91pCmjyFx4tVLhfC/jqcTntvk=) 3: 3136302e32322e39322e302f32342d3234203d3e20313532383335.roa (hash: +o6+ngIFA4hU6bMKlAFkTNxS1BaRiBEB0UhCbvig7rE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ea:0b:e2:1f:4d:0b:c8:63:32:92:fa:07:00:bb:bc:fd:f3:32:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6731D05CD61815BC0A711C659F17313EF0F5EB Validity Not Before: Mar 1 01:26:10 2026 GMT Not After : Mar 4 12:29:10 2026 GMT Subject: CN=7C3B1FDB70D70A589E6E03820F4E36E993795ED3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:2b:d4:28:21:75:34:a3:25:40:dc:d0:f4: d6:4f:0c:b0:22:c1:ca:ea:84:82:6c:7d:d0:a5:e3: 59:d2:1b:44:b9:40:56:ad:d9:ea:04:93:00:bf:36: bf:d7:d9:ae:30:19:1a:ed:11:6a:fe:8f:0c:d9:11: 46:f5:dc:af:82:20:c9:30:3a:72:3f:4e:65:7a:83: df:2c:b0:6b:6f:cd:cc:1b:5f:f1:47:a7:6a:a4:95: 5f:a3:26:51:2f:ba:0b:d7:cf:60:cf:25:a8:de:39: 6d:7e:27:fa:c8:12:25:12:c7:57:c6:b5:4d:ed:a6: 8b:19:2c:5b:f9:6d:fd:06:f3:98:22:6f:a8:9c:ee: 66:68:85:5d:31:fa:dd:57:7b:11:13:a7:5d:8f:70: 69:b1:ba:5d:18:78:94:44:97:c6:65:7f:9e:80:1f: 87:da:99:e6:e2:d8:49:27:ec:c3:74:25:0c:53:46: 3b:2b:7d:cb:a1:a5:b3:c0:cb:4f:34:ab:ce:1a:e7: fe:d2:d4:3e:f4:d1:94:be:e8:d9:67:7b:ca:03:a0: d6:5b:26:78:6f:d3:dd:48:34:5d:51:31:e2:56:9a: 31:10:fd:18:e8:fe:13:3e:17:94:99:1f:59:97:ea: 89:cf:73:f9:22:65:ef:59:54:82:5c:1d:d4:90:5a: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:1F:DB:70:D7:0A:58:9E:6E:03:82:0F:4E:36:E9:93:79:5E:D3 X509v3 Authority Key Identifier: keyid:BD:67:31:D0:5C:D6:18:15:BC:0A:71:1C:65:9F:17:31:3E:F0:F5:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD6731D05CD61815BC0A711C659F17313EF0F5EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62d29b32-3a29-4a14-bc9b-c76a007ca032/0/BD6731D05CD61815BC0A711C659F17313EF0F5EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c3:17:55:39:9d:27:ed:91:69:10:38:91:88:f1:67:15:e0: f8:8f:e2:03:6d:0c:86:53:8d:23:00:cd:e5:10:eb:f1:1c:06: de:80:8b:7f:1c:ec:20:a9:6a:12:8d:45:8c:52:8d:3f:4b:7e: cd:e9:14:4c:7d:be:00:c6:0c:0c:88:36:a0:39:5d:20:8b:a2: 57:6c:a4:9c:ed:d2:a0:55:80:d9:b3:9d:6f:b2:fa:e8:d2:3d: ae:4a:bf:2d:a1:30:e0:2e:28:5b:1d:87:27:78:a3:4b:d4:84: 7e:8b:e4:3a:42:33:99:bd:9e:a8:08:ef:a4:66:04:e7:7b:10: a7:ec:08:ff:58:1f:50:f4:8d:9c:a7:64:5c:27:22:ff:59:b6: a4:25:cc:ab:1e:d2:72:fb:24:26:66:14:8d:78:88:7f:07:c0: 6f:65:29:8b:dd:92:a1:3d:06:9d:ce:49:a4:5a:2c:ca:a5:f0: 2e:1b:66:55:4f:8d:c3:40:bf:b0:28:26:82:fc:32:0e:a0:1d: 52:69:fe:e2:4d:61:f4:a4:bd:56:f3:67:82:0d:78:28:8a:3e: 39:fb:50:fc:14:65:4c:53:c8:20:69:e7:06:0e:76:83:d5:cd: 58:df:d9:4b:46:52:06:c5:3f:f4:f6:2f:ab:7a:2f:42:23:55: 39:c0:e2:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOoL4h9NC8hjMpL6BwC7vP3zMk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEz RUYwRjVFQjAeFw0yNjAzMDEwMTI2MTBaFw0yNjAzMDQxMjI5MTBaMDMxMTAvBgNV BAMTKDdDM0IxRkRCNzBENzBBNTg5RTZFMDM4MjBGNEUzNkU5OTM3OTVFRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUCvUKCF1NKMlQNzQ9NZPDLAi wcrqhIJsfdCl41nSG0S5QFat2eoEkwC/Nr/X2a4wGRrtEWr+jwzZEUb13K+CIMkw OnI/TmV6g98ssGtvzcwbX/FHp2qklV+jJlEvugvXz2DPJajeOW1+J/rIEiUSx1fG tU3tposZLFv5bf0G85gib6ic7mZohV0x+t1XexETp12PcGmxul0YeJREl8Zlf56A H4famebi2Ekn7MN0JQxTRjsrfcuhpbPAy080q84a5/7S1D700ZS+6Nlne8oDoNZb Jnhv091INF1RMeJWmjEQ/Rjo/hM+F5SZH1mX6onPc/kiZe9ZVIJcHdSQWkmHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfDsf23DXCliebgOCD0426ZN5XtMwHwYDVR0j BBgwFoAUvWcx0FzWGBW8CnEcZZ8XMT7w9eswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmQyOWIzMi0zYTI5LTRhMTQtYmM5Yi1jNzZhMDA3Y2EwMzIvMC9CRDY3MzFEMDVD RDYxODE1QkMwQTcxMUM2NTlGMTczMTNFRjBGNUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3MzEzRUYw RjVFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkMjliMzItM2EyOS00YTE0LWJj OWItYzc2YTAwN2NhMDMyLzAvQkQ2NzMxRDA1Q0Q2MTgxNUJDMEE3MTFDNjU5RjE3 MzEzRUYwRjVFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbDF1U5nSftkWkQOJGI8WcV4PiP4gNtDIZT jSMAzeUQ6/EcBt6Ai38c7CCpahKNRYxSjT9Lfs3pFEx9vgDGDAyINqA5XSCLolds pJzt0qBVgNmznW+y+ujSPa5Kvy2hMOAuKFsdhyd4o0vUhH6L5DpCM5m9nqgI76Rm BOd7EKfsCP9YH1D0jZynZFwnIv9ZtqQlzKse0nL7JCZmFI14iH8HwG9lKYvdkqE9 Bp3OSaRaLMql8C4bZlVPjcNAv7AoJoL8Mg6gHVJp/uJNYfSkvVbzZ4INeCiKPjn7 UPwUZUxTyCBp5wYOdoPVzVjf2UtGUgbFP/T2L6t6L0IjVTnA4v0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:09 2026 by rpki-client