$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: ea6CGANsAOnrJu1IK2LLzPikYJ/PQZzfMH3348m48T0= Subject key identifier: D4:E5:A9:8C:8A:96:0F:C1:59:97:B5:FC:B1:1C:8D:09:44:97:68:C8 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 068F10B4427294A645E7BC4A6F27BC3B35E523DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: 0121 Signing time: Mon 02 Mar 2026 01:41:17 +0000 Manifest this update: Mon 02 Mar 2026 01:36:17 +0000 Manifest next update: Thu 05 Mar 2026 07:29:17 +0000 Files and hashes: 1: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: XKy6CNdovByI0LTbPgSlUd/kdGZtHLIW2nL6tcukx1U=) 2: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: Z2FYRByoR87CHEnziWjFnKQyuENb6OACYT6R1ULlqwE=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Gr1mlE+rzWEpOTNh6WPoTj4w/1KCxiBabRIKttXDzDg=) 4: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: t349gF8xh8M32UG8Ruer+VIkvNUKNNfdFe/xLjKGLjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8f:10:b4:42:72:94:a6:45:e7:bc:4a:6f:27:bc:3b:35:e5:23:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Mar 2 01:36:17 2026 GMT Not After : Mar 5 07:29:17 2026 GMT Subject: CN=D4E5A98C8A960FC15997B5FCB11C8D09449768C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:71:a9:ef:52:28:08:a1:0b:79:52:e1:b6: 5a:98:e3:62:8f:08:6a:b5:a1:7c:fd:cd:8a:1e:67: ea:1c:96:63:97:5d:b7:4f:7b:f0:4a:36:40:dd:f2: d1:5c:8c:df:1f:dc:56:1d:e7:f8:c4:71:f9:78:79: c9:b4:ed:4a:87:f4:1d:91:09:0c:f7:d1:b4:80:53: e5:b3:55:a2:68:40:10:40:67:55:10:c7:53:7f:b1: 63:06:55:bf:73:09:e1:b9:bd:ef:c7:a0:73:50:70: 92:f1:a9:d0:ea:74:77:97:d2:4a:bd:03:d9:75:30: 87:51:27:bb:a7:79:86:f7:36:d1:7e:da:7e:45:58: 7b:19:3a:58:13:19:c6:a1:d5:ed:7b:2c:48:86:be: b7:8b:65:f9:08:a4:b3:51:12:4f:90:52:08:16:27: 1d:19:1d:2a:54:08:79:84:13:b3:2b:a4:05:e5:64: b5:18:fb:b1:91:a0:3d:f4:0f:33:40:9a:bf:34:ec: 3d:b4:bb:be:09:01:3f:f9:a6:a5:08:c0:e9:7a:d6: 6c:bf:6b:69:d3:50:29:bc:b8:d1:99:3e:75:d8:7b: c0:c3:6c:e2:32:20:63:00:b4:d9:b6:92:53:7f:5a: 96:2f:49:1a:3b:78:63:fc:c2:54:45:30:d6:90:02: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E5:A9:8C:8A:96:0F:C1:59:97:B5:FC:B1:1C:8D:09:44:97:68:C8 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:af:43:48:94:28:04:04:90:6c:00:3e:a3:b6:34:69:b4:b9: 04:d5:22:65:1e:18:6e:69:6d:b4:d4:e3:d1:36:b9:da:71:ee: 33:e7:b5:f8:37:8f:f8:eb:72:ac:bd:2e:88:8d:ad:69:91:71: a7:9a:72:d8:4c:d2:0c:43:37:30:15:b4:60:a6:3f:43:b3:af: 48:3f:03:05:8d:f6:cc:77:5b:5d:c2:d3:cb:bf:9f:3f:12:b3: 49:ad:f5:74:9f:bb:45:84:67:3e:15:d5:cf:e4:cb:8d:b8:de: 05:9d:70:1a:ab:1f:14:28:38:d8:08:7d:99:cb:15:6c:f4:6f: 6a:02:ee:4a:bd:2a:8c:0d:e2:d8:d9:ff:dd:0e:f1:42:87:f6: db:6a:87:56:32:56:4c:46:e2:cc:b3:f2:bd:21:2a:df:d0:06: 6a:6d:31:52:fe:f0:7b:38:c3:8a:78:6e:65:1c:13:73:eb:6a: 79:66:56:d2:a7:89:04:46:4c:f0:15:b9:99:93:e8:4a:17:72: 8a:10:7a:70:56:95:61:17:68:f3:b8:f2:37:53:e6:41:8a:7b: d7:f0:38:ab:da:a3:a3:39:d1:f2:c7:00:96:0f:64:5e:4c:b1: a7:e9:c9:25:03:9f:29:30:58:d2:70:91:03:87:70:4f:a5:59: ba:97:a5:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBo8QtEJylKZF57xKbye8OzXlI9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNjAzMDIwMTM2MTdaFw0yNjAzMDUwNzI5MTdaMDMxMTAvBgNV BAMTKEQ0RTVBOThDOEE5NjBGQzE1OTk3QjVGQ0IxMUM4RDA5NDQ5NzY4QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9c3Gp71IoCKELeVLhtlqY42KP CGq1oXz9zYoeZ+oclmOXXbdPe/BKNkDd8tFcjN8f3FYd5/jEcfl4ecm07UqH9B2R CQz30bSAU+WzVaJoQBBAZ1UQx1N/sWMGVb9zCeG5ve/HoHNQcJLxqdDqdHeX0kq9 A9l1MIdRJ7uneYb3NtF+2n5FWHsZOlgTGcah1e17LEiGvreLZfkIpLNREk+QUggW Jx0ZHSpUCHmEE7MrpAXlZLUY+7GRoD30DzNAmr807D20u74JAT/5pqUIwOl61my/ a2nTUCm8uNGZPnXYe8DDbOIyIGMAtNm2klN/WpYvSRo7eGP8wlRFMNaQAifPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1OWpjIqWD8FZl7X8sRyNCUSXaMgwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKevQ0iUKAQEkGwAPqO2NGm0uQTVImUeGG5p bbTU49E2udpx7jPntfg3j/jrcqy9LoiNrWmRcaeacthM0gxDNzAVtGCmP0Ozr0g/ AwWN9sx3W13C08u/nz8Ss0mt9XSfu0WEZz4V1c/ky4243gWdcBqrHxQoONgIfZnL FWz0b2oC7kq9KowN4tjZ/90O8UKH9ttqh1YyVkxG4syz8r0hKt/QBmptMVL+8Hs4 w4p4bmUcE3PranlmVtKniQRGTPAVuZmT6EoXcooQenBWlWEXaPO48jdT5kGKe9fw OKvao6M50fLHAJYPZF5MsafpySUDnykwWNJwkQOHcE+lWbqXpc8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:50:32 2026 by rpki-client