$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: 3hgNWrqM6i31DVvDMBp8ddPLr25g6Jfqxzkq9SQVEuQ= Subject key identifier: B2:CF:26:05:9D:28:48:6E:27:AF:5E:8F:DC:DF:E5:9D:98:74:B6:A4 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 1F3818373C29268650003EE494FBAC9B688FF2D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 0112 Signing time: Mon 02 Mar 2026 12:01:10 +0000 Manifest this update: Mon 02 Mar 2026 11:56:10 +0000 Manifest next update: Thu 05 Mar 2026 19:08:10 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: bUgQUPmf9lKBWhVzfAb6Do14tVYOri80e4Ta2GKreuA=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:38:18:37:3c:29:26:86:50:00:3e:e4:94:fb:ac:9b:68:8f:f2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Mar 2 11:56:10 2026 GMT Not After : Mar 5 19:08:10 2026 GMT Subject: CN=B2CF26059D28486E27AF5E8FDCDFE59D9874B6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:a6:e2:cb:2b:ff:aa:16:cf:0e:f4:86:d9: 4c:fe:62:3c:58:47:a8:41:d0:64:2b:d8:62:0a:ea: 56:38:46:b1:b0:7f:be:12:7c:39:30:82:ee:6d:f0: 37:93:3e:75:13:56:11:55:c8:64:fe:2d:46:3a:4e: f5:4a:7f:ba:0a:49:2d:ee:1f:d3:f7:c4:31:7d:7d: e1:4a:d6:56:bd:4e:93:bb:fb:a7:d2:0f:0e:9a:5f: 0c:e0:95:52:12:c9:b0:cd:1f:0f:d1:f7:62:b9:0d: 67:be:20:a9:67:d1:58:c7:7e:18:c3:39:b3:88:0c: 7a:60:1f:b5:84:ee:55:57:c0:49:87:37:28:1f:08: 7a:92:7f:39:a9:06:19:d4:f6:21:fa:07:69:22:59: 22:7e:d2:56:27:6d:f6:7c:b8:50:26:8d:a1:e9:c1: b1:9e:60:6d:ed:f3:cf:90:8d:71:35:89:6b:ba:4e: d5:b3:47:ac:53:47:4e:a9:b7:8c:36:e8:85:f8:83: fb:ad:f4:8c:30:d7:11:da:ff:d1:d2:87:b1:16:98: f6:da:08:8c:cf:32:da:97:c2:cc:8b:19:35:67:c0: b9:f2:4e:20:1f:86:96:57:ea:08:03:e8:8d:18:cb: 90:90:9e:8f:b3:6a:dc:b9:9f:4f:28:7b:f8:62:be: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CF:26:05:9D:28:48:6E:27:AF:5E:8F:DC:DF:E5:9D:98:74:B6:A4 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:7e:b7:a6:5a:00:68:8b:4e:42:7e:b7:f2:b9:fc:df:3d:2d: aa:7d:5e:84:7e:40:20:14:b6:6d:0e:ec:d8:2c:97:fb:78:79: 91:98:77:ed:fc:40:7f:f0:6e:5a:ec:1f:eb:78:93:f6:0b:4b: fe:ec:92:e1:e5:39:7f:f3:fe:cf:61:20:f3:be:05:47:8c:af: 20:28:64:96:fa:a2:a8:89:8a:19:12:3a:66:0d:67:08:ad:fd: 37:e1:d6:81:f0:04:7d:0e:3d:9c:03:61:d6:85:06:ff:df:7d: c4:d2:6f:96:37:04:3e:b7:9f:74:c8:c3:86:70:1c:e2:3f:72: 69:fd:e3:5c:bd:3f:f5:8d:15:d6:06:f9:5d:ff:dd:1e:5a:32: 4d:ce:b5:03:20:a8:1b:dd:e6:d2:f4:90:76:4f:ae:9a:0b:3a: ba:2a:d3:77:db:a0:d6:4e:d9:f8:b7:a6:3c:08:f0:e5:e8:ac: b9:c4:18:29:ec:71:66:0c:29:44:e0:2f:97:3f:18:50:b4:e8: da:e8:69:51:b9:14:72:36:10:35:94:42:5e:a2:86:a0:5f:2a: 20:55:b8:b4:f4:d0:86:6b:73:88:b0:a1:cb:40:36:20:da:e5: 48:66:50:3b:5c:69:42:df:ab:7a:7b:57:d8:29:e7:b5:b8:4a: 8d:bc:c5:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzgYNzwpJoZQAD7klPusm2iP8tIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNjAzMDIxMTU2MTBaFw0yNjAzMDUxOTA4MTBaMDMxMTAvBgNV BAMTKEIyQ0YyNjA1OUQyODQ4NkUyN0FGNUU4RkRDREZFNTlEOTg3NEI2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRcabiyyv/qhbPDvSG2Uz+YjxY R6hB0GQr2GIK6lY4RrGwf74SfDkwgu5t8DeTPnUTVhFVyGT+LUY6TvVKf7oKSS3u H9P3xDF9feFK1la9TpO7+6fSDw6aXwzglVISybDNHw/R92K5DWe+IKln0VjHfhjD ObOIDHpgH7WE7lVXwEmHNygfCHqSfzmpBhnU9iH6B2kiWSJ+0lYnbfZ8uFAmjaHp wbGeYG3t88+QjXE1iWu6TtWzR6xTR06pt4w26IX4g/ut9Iww1xHa/9HSh7EWmPba CIzPMtqXwsyLGTVnwLnyTiAfhpZX6ggD6I0Yy5CQno+zaty5n08oe/hivqPFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUss8mBZ0oSG4nr16P3N/lnZh0tqQwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANh+t6ZaAGiLTkJ+t/K5/N89Lap9XoR+QCAU tm0O7Ngsl/t4eZGYd+38QH/wblrsH+t4k/YLS/7skuHlOX/z/s9hIPO+BUeMryAo ZJb6oqiJihkSOmYNZwit/Tfh1oHwBH0OPZwDYdaFBv/ffcTSb5Y3BD63n3TIw4Zw HOI/cmn941y9P/WNFdYG+V3/3R5aMk3OtQMgqBvd5tL0kHZPrpoLOroq03fboNZO 2fi3pjwI8OXorLnEGCnscWYMKUTgL5c/GFC06NroaVG5FHI2EDWUQl6ihqBfKiBV uLT00IZrc4iwoctANiDa5UhmUDtcaULfq3p7V9gp57W4So28xZg= -----END CERTIFICATE-----Generated at Mon Mar 2 22:48:25 2026 by rpki-client