$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: 4vNb0KnjniGJq2VSQut5hYzpOxWQsj5muMBFGcZdZR0= Subject key identifier: F8:3A:3C:4B:B9:95:85:5B:9C:88:F4:6A:AB:13:84:37:62:94:8A:39 Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 636233F12B3EA889C0CF9F42FBE1AD040DFB0B27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 04AB Signing time: Mon 02 Mar 2026 03:31:05 +0000 Manifest this update: Mon 02 Mar 2026 03:26:05 +0000 Manifest next update: Thu 05 Mar 2026 10:44:05 +0000 Files and hashes: 1: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: gks4E4RAlqsYzpMbY7s86LphrkEHlbXfODEV9a6VKSU=) 2: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: EStwuTTpPs0Ni0XcFXRVSMqUEEfSh5ZTs7h5lArahkU=) 3: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: ZtfrmcdIDZFk5FXV0vrgffSS//LC3R042y4pGOoRFVw=) 4: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: 2JYulwUxi2T/jzgAmBWLWpOPU3Z1C06NLPJ2YJd9h44=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:62:33:f1:2b:3e:a8:89:c0:cf:9f:42:fb:e1:ad:04:0d:fb:0b:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Mar 2 03:26:05 2026 GMT Not After : Mar 5 10:44:05 2026 GMT Subject: CN=F83A3C4BB995855B9C88F46AAB13843762948A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:1f:3d:a3:f7:fd:80:7f:d0:77:2b:24:39: a0:df:4c:5f:5b:01:08:b2:f3:d4:01:51:10:05:1b: 99:80:3b:a3:3e:80:60:ee:fe:72:4e:01:27:ea:37: c9:ed:cf:58:02:9c:ed:93:ae:c7:5a:52:29:0c:cd: 9d:0a:5a:40:ed:e9:54:aa:6e:de:99:16:4c:29:b0: 32:d8:0b:1c:68:e9:34:9c:a8:8f:0d:04:2e:5a:ef: 1d:97:21:7a:ad:65:ff:9e:8f:ef:aa:b6:c8:67:10: 78:1a:d4:28:95:32:18:e0:f7:1c:e6:16:3c:72:4d: 6f:df:26:0c:40:30:d2:17:a1:e6:24:f4:3d:6d:6d: 6d:e8:fe:08:3c:7f:09:6a:1f:64:64:b2:ba:a7:1e: e6:f5:d4:c6:f0:ba:d9:e8:48:49:4f:61:82:bf:5e: 21:9e:86:ff:35:5a:28:be:4d:04:74:2d:84:32:de: 7c:53:09:21:ec:3f:92:5d:65:73:f7:fc:c8:42:7d: d6:1a:0f:be:d9:4c:c4:57:7e:30:a3:06:02:19:80: f9:81:59:3c:fa:34:10:de:22:d0:b7:82:16:ae:dc: c1:0d:78:e3:1b:e0:fa:dc:ce:ae:a8:e7:81:54:61: 7e:e4:78:f8:d3:fb:a5:5d:e2:fb:b2:51:4e:e5:37: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:3C:4B:B9:95:85:5B:9C:88:F4:6A:AB:13:84:37:62:94:8A:39 X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:91:49:2e:05:84:f4:7b:1e:8e:1e:50:b4:f9:91:03:95:a2: e4:86:24:63:50:8e:7a:a7:5f:6f:2f:dd:8f:54:44:c8:92:aa: a3:12:a6:be:1d:62:44:2f:df:f6:6a:88:e5:0e:5e:b0:eb:17: b2:57:fd:44:2a:ff:6e:09:4f:6e:c7:01:1b:89:9f:d0:f3:7e: c0:e9:4f:5c:f9:d9:2f:80:9f:09:f2:fb:21:ad:4e:a1:e1:c0: 4b:5e:cf:8e:f8:8b:19:69:c0:95:7c:f8:45:9b:55:43:88:ea: 9e:13:ad:b9:cf:74:0b:92:16:77:ed:2c:45:3d:01:fe:bd:92: eb:9d:86:a3:51:b8:ff:15:a4:85:4b:8e:6e:34:04:a9:ab:97: 7a:f9:b6:2d:ab:f9:bd:74:5b:dd:e6:0f:a0:f9:5c:fb:c5:80: a5:71:a3:5d:2f:1b:18:7e:3e:3d:8a:0a:97:6e:66:3f:f3:39: 86:20:fc:47:97:a3:92:e4:aa:80:b0:cb:ad:25:12:7d:de:d7: 0f:7f:ab:73:f7:a9:da:4f:a7:8b:32:73:9b:21:4f:b1:e5:f3: 8d:16:7c:ed:cc:29:8d:f9:b8:ef:5d:7a:95:03:48:39:56:1d: e9:ba:1a:87:84:44:21:30:61:9c:74:b3:69:b3:15:df:d7:1d: 5b:03:89:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2Iz8Ss+qInAz59C++GtBA37CycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNjAzMDIwMzI2MDVaFw0yNjAzMDUxMDQ0MDVaMDMxMTAvBgNV BAMTKEY4M0EzQzRCQjk5NTg1NUI5Qzg4RjQ2QUFCMTM4NDM3NjI5NDhBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5B89o/f9gH/QdyskOaDfTF9b AQiy89QBURAFG5mAO6M+gGDu/nJOASfqN8ntz1gCnO2TrsdaUikMzZ0KWkDt6VSq bt6ZFkwpsDLYCxxo6TScqI8NBC5a7x2XIXqtZf+ej++qtshnEHga1CiVMhjg9xzm FjxyTW/fJgxAMNIXoeYk9D1tbW3o/gg8fwlqH2RksrqnHub11MbwutnoSElPYYK/ XiGehv81Wii+TQR0LYQy3nxTCSHsP5JdZXP3/MhCfdYaD77ZTMRXfjCjBgIZgPmB WTz6NBDeItC3ghau3MENeOMb4Prczq6o54FUYX7kePjT+6Vd4vuyUU7lNz8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Do8S7mVhVuciPRqqxOEN2KUijkwHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyRSS4FhPR7Ho4eULT5kQOVouSGJGNQjnqn X28v3Y9URMiSqqMSpr4dYkQv3/ZqiOUOXrDrF7JX/UQq/24JT27HARuJn9DzfsDp T1z52S+Anwny+yGtTqHhwEtez474ixlpwJV8+EWbVUOI6p4TrbnPdAuSFnftLEU9 Af69kuudhqNRuP8VpIVLjm40BKmrl3r5ti2r+b10W93mD6D5XPvFgKVxo10vGxh+ Pj2KCpduZj/zOYYg/EeXo5LkqoCwy60lEn3e1w9/q3P3qdpPp4syc5shT7Hl840W fO3MKY35uO9depUDSDlWHem6GoeERCEwYZx0s2mzFd/XHVsDiUE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:35 2026 by rpki-client