$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: i3rIuJUpQ/tmXNACB/o1ppu5xLqWhIJFYgbR3wDMuwY= Subject key identifier: 3B:04:EE:57:7C:23:A2:FC:35:D3:06:A1:41:43:F6:88:D3:6D:14:22 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 27A48C6F16276189D33EEC978F33A819DD5C2AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 21:30:54 +0000 Manifest this update: Sun 01 Mar 2026 21:25:54 +0000 Manifest next update: Wed 04 Mar 2026 22:54:54 +0000 Files and hashes: 1: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) 2: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 3: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=) 4: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 5: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 6: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 7: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=) 8: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 9: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: nLKSGo5igosC5qwnj+m+w3OLoKjjw64grOHuuwLSFyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a4:8c:6f:16:27:61:89:d3:3e:ec:97:8f:33:a8:19:dd:5c:2a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Mar 1 21:25:54 2026 GMT Not After : Mar 4 22:54:54 2026 GMT Subject: CN=3B04EE577C23A2FC35D306A14143F688D36D1422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d1:97:10:57:ed:22:5e:9c:46:50:6e:87:f3: 14:44:a9:ac:39:1d:06:33:ec:02:75:78:c6:c6:f8: 01:12:aa:3c:53:63:5b:2c:c7:ba:6d:e3:02:48:a5: c8:a5:66:8b:ca:50:55:7a:4c:43:2e:25:e5:2b:da: cf:a8:c4:d0:6d:e9:93:04:91:d4:48:0a:cb:1f:ce: 54:ee:32:f0:9b:6e:e2:79:7d:6e:83:00:b6:a9:15: c0:05:40:ad:85:18:31:21:0c:18:8d:b2:be:af:d1: 49:b4:16:2c:8b:52:5d:62:3d:d4:ee:b9:02:b9:39: 44:ca:c0:4e:dc:47:2c:e9:18:ec:fc:d6:fd:e2:bc: 7c:89:83:c5:53:0b:b4:db:20:fe:6f:b8:88:1f:8c: f1:8b:26:d3:47:c8:ad:d8:0c:dc:c0:80:a8:27:18: cf:14:b6:c9:51:f8:07:53:00:33:16:d5:d5:ad:0c: 56:8b:33:55:de:d4:6d:db:43:12:6d:e4:e4:19:2d: 47:f0:22:dd:47:dc:0f:02:e6:de:d7:1d:22:e9:26: cb:89:15:78:fc:29:cd:7a:81:58:68:41:88:c3:03: 89:fe:60:35:80:80:a9:d0:67:4d:f4:5e:bd:94:e0: f1:7e:de:a3:a5:19:c1:f1:bb:54:60:77:23:ab:de: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:04:EE:57:7C:23:A2:FC:35:D3:06:A1:41:43:F6:88:D3:6D:14:22 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:ee:70:e4:0c:55:8e:b9:7a:51:89:42:21:90:73:3c:4f: f5:1d:0d:25:b1:77:dc:5e:ef:e1:40:c3:a1:0a:1d:48:94:59: fe:b7:1f:7f:f6:b4:ac:c2:df:ef:66:a6:e7:26:49:b4:3e:7c: e1:31:0f:9e:d4:c6:ae:13:04:77:49:0f:58:82:0f:52:1b:7c: 46:d0:a0:4f:65:f5:5d:ee:b5:75:50:b2:c6:d2:99:6b:7a:55: 03:5c:b4:5b:78:f6:c4:9b:b4:7b:a4:f5:c2:a1:dd:2b:d5:cc: c1:ae:96:0f:b1:a5:3a:03:ae:31:4c:7e:a7:b3:b6:cc:ab:be: d4:86:b4:4a:b5:f6:91:c4:cb:cc:5a:6a:5a:aa:f3:d4:66:f6: 92:ed:16:1e:3e:ca:c1:e1:3a:e3:99:a7:3f:88:b0:ed:b4:90: 55:b6:6a:e5:8a:23:13:76:89:73:d0:23:d4:18:f9:2c:f1:7d: f0:aa:07:39:30:18:25:76:01:a0:81:33:d2:e5:25:aa:70:b8: 09:16:c3:81:70:3c:fa:c0:8c:27:fb:5c:cb:d5:e3:34:36:d0: d3:c6:6a:da:6f:f2:f8:2f:d8:ea:ca:ba:bb:50:eb:56:c5:4b: 77:3c:aa:0f:1d:8f:6d:c8:e3:c3:61:7f:78:f5:b0:00:45:16: fa:b3:49:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6SMbxYnYYnTPuyXjzOoGd1cKvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNjAzMDEyMTI1NTRaFw0yNjAzMDQyMjU0NTRaMDMxMTAvBgNV BAMTKDNCMDRFRTU3N0MyM0EyRkMzNUQzMDZBMTQxNDNGNjg4RDM2RDE0MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00ZcQV+0iXpxGUG6H8xREqaw5 HQYz7AJ1eMbG+AESqjxTY1ssx7pt4wJIpcilZovKUFV6TEMuJeUr2s+oxNBt6ZME kdRICssfzlTuMvCbbuJ5fW6DALapFcAFQK2FGDEhDBiNsr6v0Um0FiyLUl1iPdTu uQK5OUTKwE7cRyzpGOz81v3ivHyJg8VTC7TbIP5vuIgfjPGLJtNHyK3YDNzAgKgn GM8UtslR+AdTADMW1dWtDFaLM1Xe1G3bQxJt5OQZLUfwIt1H3A8C5t7XHSLpJsuJ FXj8Kc16gVhoQYjDA4n+YDWAgKnQZ030Xr2U4PF+3qOlGcHxu1RgdyOr3pvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwTuV3wjovw10wahQUP2iNNtFCIwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlT7nDkDFWOuXpRiUIhkHM8T/UdDSWxd9xe 7+FAw6EKHUiUWf63H3/2tKzC3+9mpucmSbQ+fOExD57Uxq4TBHdJD1iCD1IbfEbQ oE9l9V3utXVQssbSmWt6VQNctFt49sSbtHuk9cKh3SvVzMGulg+xpToDrjFMfqez tsyrvtSGtEq19pHEy8xaalqq89Rm9pLtFh4+ysHhOuOZpz+IsO20kFW2auWKIxN2 iXPQI9QY+SzxffCqBzkwGCV2AaCBM9LlJapwuAkWw4FwPPrAjCf7XMvV4zQ20NPG atpv8vgv2OrKurtQ61bFS3c8qg8dj23I48Nhf3j1sABFFvqzSRQ= -----END CERTIFICATE-----Generated at Mon Mar 2 15:39:05 2026 by rpki-client