$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: AXCtaGMDZJHaR1gBRHkwkNAU4lpglE1cma8xfL2j4hk= Subject key identifier: 7C:83:4A:E4:A2:74:9B:30:3D:B3:CC:AE:51:E8:1D:3F:FC:68:90:DC Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 0DFC9856B3514B508B328218705E25E824F4A15A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: 0126 Signing time: Thu 16 Apr 2026 18:41:12 +0000 Manifest this update: Thu 16 Apr 2026 18:36:12 +0000 Manifest next update: Mon 20 Apr 2026 02:19:12 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: nWJqlId24xPx0FHfGovoKEua0Ld3n8eElnHgtdaTJlQ=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fc:98:56:b3:51:4b:50:8b:32:82:18:70:5e:25:e8:24:f4:a1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Apr 16 18:36:12 2026 GMT Not After : Apr 20 02:19:12 2026 GMT Subject: CN=7C834AE4A2749B303DB3CCAE51E81D3FFC6890DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:30:03:6d:93:e6:63:ff:6f:bf:a2:8d:d9:b5: 54:34:26:87:55:d4:92:21:41:bb:f1:1f:c0:d1:8d: d1:f6:2d:4f:92:39:2c:d3:e9:bb:b4:60:57:5c:2b: 5e:b4:08:56:ff:61:bf:9b:54:20:7b:05:85:fa:67: 5a:4c:ea:4a:16:a7:7d:2d:75:1c:a6:4e:00:c7:30: 99:24:c4:b3:cf:b8:ef:f7:ef:7e:e2:96:37:60:57: 19:8f:ab:5e:94:51:ea:ac:5e:e3:18:03:3b:8a:ec: 53:ac:ed:3e:d7:3e:fd:3d:4d:ec:89:dd:dc:a6:2f: 6e:25:70:9b:16:6f:f1:ff:fc:7a:63:e1:5f:b2:67: 5e:14:61:e6:e2:4d:ba:8e:5f:7a:d2:da:04:1c:a0: d4:ee:3e:1d:b2:4b:8a:b0:91:c6:b9:67:70:1f:95: 31:c5:8d:09:38:58:ea:c3:70:91:88:3d:18:00:94: cc:bc:c0:39:2a:7d:03:0f:8c:da:e9:a6:5b:23:96: 4f:e4:ba:ee:3a:e5:88:c0:9b:cd:cf:7e:b8:38:50: 99:4f:25:fb:39:10:b6:0e:ee:63:be:e2:56:77:5f: 6f:5d:a0:32:2f:6a:31:48:0e:78:2d:9d:f7:a5:3d: 1f:07:ec:eb:a4:e3:9e:ef:55:e0:8f:44:1b:a0:db: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:83:4A:E4:A2:74:9B:30:3D:B3:CC:AE:51:E8:1D:3F:FC:68:90:DC X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:39:e1:e6:e6:26:cc:7e:73:08:1a:e2:af:86:9c:8e:80:5a: 1e:a7:d4:1f:83:7d:ab:22:a8:ca:ba:93:7f:11:fb:56:33:1e: 70:ae:46:ff:b1:26:d6:93:7e:f0:a7:99:94:b0:60:21:58:d5: f2:81:97:cd:49:1c:ee:80:fb:00:bd:47:60:f1:9a:ea:36:50: 93:1e:c8:28:1f:9e:8a:8b:7e:73:a9:2a:34:7f:91:2b:9b:3a: fd:40:00:08:77:47:57:04:a5:82:f9:63:b7:07:26:44:bd:c7: 6b:47:9c:f0:38:43:42:18:f7:f4:a9:3f:71:30:df:f9:7a:64: 1a:f5:6a:05:bc:21:68:63:d6:c8:79:b4:06:6a:0b:3f:d2:b7: 99:92:d1:d6:65:bf:27:29:dd:e1:fc:d9:68:27:f3:af:23:af: 80:61:2d:96:ca:79:30:d9:e4:24:e9:59:55:e0:aa:9f:3a:20: 91:1d:bc:e8:bf:12:a0:2e:e8:0f:85:d6:6c:4c:a0:0a:91:25: 25:e9:4d:4d:88:3a:a4:fa:d1:50:f5:7a:8c:18:45:a3:1e:29: 59:67:79:ad:6c:a3:94:f8:7f:6c:30:1d:fa:f0:64:dc:a2:74: fa:84:64:85:b9:86:93:19:e7:88:2b:91:43:f9:3e:c1:47:ea: 8c:f9:5a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfyYVrNRS1CLMoIYcF4l6CT0oVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNjA0MTYxODM2MTJaFw0yNjA0MjAwMjE5MTJaMDMxMTAvBgNV BAMTKDdDODM0QUU0QTI3NDlCMzAzREIzQ0NBRTUxRTgxRDNGRkM2ODkwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6MANtk+Zj/2+/oo3ZtVQ0JodV 1JIhQbvxH8DRjdH2LU+SOSzT6bu0YFdcK160CFb/Yb+bVCB7BYX6Z1pM6koWp30t dRymTgDHMJkkxLPPuO/3737iljdgVxmPq16UUeqsXuMYAzuK7FOs7T7XPv09TeyJ 3dymL24lcJsWb/H//Hpj4V+yZ14UYebiTbqOX3rS2gQcoNTuPh2yS4qwkca5Z3Af lTHFjQk4WOrDcJGIPRgAlMy8wDkqfQMPjNrpplsjlk/kuu465YjAm83Pfrg4UJlP Jfs5ELYO7mO+4lZ3X29doDIvajFIDngtnfelPR8H7Ouk457vVeCPRBug268ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfINK5KJ0mzA9s8yuUegdP/xokNwwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA54ebmJsx+cwga4q+GnI6AWh6n1B+Dfasi qMq6k38R+1YzHnCuRv+xJtaTfvCnmZSwYCFY1fKBl81JHO6A+wC9R2Dxmuo2UJMe yCgfnoqLfnOpKjR/kSubOv1AAAh3R1cEpYL5Y7cHJkS9x2tHnPA4Q0IY9/SpP3Ew 3/l6ZBr1agW8IWhj1sh5tAZqCz/St5mS0dZlvycp3eH82Wgn868jr4BhLZbKeTDZ 5CTpWVXgqp86IJEdvOi/EqAu6A+F1mxMoAqRJSXpTU2IOqT60VD1eowYRaMeKVln ea1so5T4f2wwHfrwZNyidPqEZIW5hpMZ54grkUP5PsFH6oz5Wo4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:29 2026 by rpki-client