$ rpki-client -vvf repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft File: BD685C24FF8F432543C3E583484044A44E53067B.mft (raw, json) Hash identifier: JecMXg9zhyqRVvupJ3kwzK2BpC8H/GBpkP4pX3kinM8= Subject key identifier: 34:47:64:FB:03:39:0A:F8:19:43:80:A6:73:23:9F:42:DE:47:66:6D Authority key identifier: BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B Certificate issuer: /CN=BD685C24FF8F432543C3E583484044A44E53067B Certificate serial: 6E76E0D505AEA0C5220968BC81BA6A2D68BDB51C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 07:31:23 +0000 Manifest this update: Sun 01 Mar 2026 07:26:23 +0000 Manifest next update: Wed 04 Mar 2026 09:15:23 +0000 Files and hashes: 1: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: dhpkhk04ab2tWVnfTiYy7HAwnFkFS5/nKq6B26Ta2Ao=) 2: BD685C24FF8F432543C3E583484044A44E53067B.crl (hash: 6KDnC4dLkNG2UrcuWEujSvUdDcc0CwmE0HO7KQCRJGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:76:e0:d5:05:ae:a0:c5:22:09:68:bc:81:ba:6a:2d:68:bd:b5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD685C24FF8F432543C3E583484044A44E53067B Validity Not Before: Mar 1 07:26:23 2026 GMT Not After : Mar 4 09:15:23 2026 GMT Subject: CN=344764FB03390AF8194380A673239F42DE47666D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:2f:d1:62:1d:91:f8:9c:21:23:db:54:79: ea:fc:b1:9f:de:cd:e9:99:a6:a5:b8:9c:17:45:17: 39:6b:68:6e:22:ea:51:b1:e2:a7:9c:06:3a:ea:56: 1b:d5:95:9b:76:27:25:cd:4e:c2:fb:46:0e:44:2b: 10:1f:56:38:60:f8:e8:0b:b8:37:ee:e3:a5:75:0d: da:2d:d0:01:1b:2a:22:ea:59:60:7b:86:6a:ed:20: cd:13:c6:11:23:21:8f:3e:32:09:02:56:14:f5:c2: be:a4:cd:25:a6:19:4e:22:75:fb:57:6c:7a:18:58: fb:43:5f:16:f9:90:28:0f:ec:99:d8:63:d7:99:ef: ff:d7:d1:c9:31:a7:b9:87:23:46:ed:f9:6b:7f:d7: 16:9f:66:b3:81:52:fc:fe:8e:5d:e5:f0:8f:05:24: 5d:4a:2f:1f:9b:9d:f1:6b:0b:2a:be:5c:16:f1:bc: 2d:ef:da:d1:ad:32:ed:60:b5:4a:4d:f1:97:e3:52: 60:de:7f:60:a3:d4:8c:dd:34:7e:01:e4:d9:16:dc: f9:43:05:fa:86:86:f2:3d:aa:04:ad:66:6d:74:bd: a0:7a:f7:cb:87:8e:dd:7b:b9:29:53:46:71:5c:ec: 78:f0:56:06:ad:86:cc:97:df:6b:69:7f:9b:bc:b0: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:47:64:FB:03:39:0A:F8:19:43:80:A6:73:23:9F:42:DE:47:66:6D X509v3 Authority Key Identifier: keyid:BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:1c:c6:e5:b2:23:dc:45:af:2b:9b:d3:03:3d:4f:cf:bf:15: c3:ab:82:12:7f:08:2c:5b:00:3c:f4:19:7e:e3:5c:a7:9c:6e: 30:c5:2c:37:d9:ab:8c:01:ac:b4:16:8d:9f:85:2a:f2:5b:fc: 78:28:95:3b:ae:73:69:f7:1b:d3:0b:c6:d8:85:2e:d0:05:d2: b2:7e:93:bf:b3:75:b5:28:38:ee:53:8b:2f:da:e9:2b:5a:78: 11:a3:c0:60:48:92:a2:fe:0d:a2:69:42:3f:96:c3:f9:d1:00: 18:06:c9:45:e7:fc:eb:9e:35:0c:0a:5b:a2:2f:ce:59:ac:7f: d3:a8:9b:b8:4e:64:de:15:ef:50:a9:08:9d:c3:27:87:03:50: 94:3f:cc:b3:99:fd:07:d6:30:b8:22:45:be:81:e0:13:4c:74: bd:6a:70:03:50:ac:de:9f:51:66:ee:d5:d8:bb:b9:78:07:9e: 47:ec:4d:84:02:74:4b:46:73:34:2e:62:d4:10:cd:7d:9d:b6: 62:14:1b:2a:01:4e:38:3d:66:26:3d:5f:f1:d8:30:99:f9:4d: 2f:ed:1b:2a:78:a7:ec:19:76:54:92:c1:cf:4c:d2:1c:a6:b5: 60:c1:57:de:14:0a:94:0f:a9:74:69:e0:3d:11:6a:d6:30:6f: ce:8b:93:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnbg1QWuoMUiCWi8gbpqLWi9tRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0 RTUzMDY3QjAeFw0yNjAzMDEwNzI2MjNaFw0yNjAzMDQwOTE1MjNaMDMxMTAvBgNV BAMTKDM0NDc2NEZCMDMzOTBBRjgxOTQzODBBNjczMjM5RjQyREU0NzY2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsS/RYh2R+JwhI9tUeer8sZ/e zemZpqW4nBdFFzlraG4i6lGx4qecBjrqVhvVlZt2JyXNTsL7Rg5EKxAfVjhg+OgL uDfu46V1Ddot0AEbKiLqWWB7hmrtIM0TxhEjIY8+MgkCVhT1wr6kzSWmGU4idftX bHoYWPtDXxb5kCgP7JnYY9eZ7//X0ckxp7mHI0bt+Wt/1xafZrOBUvz+jl3l8I8F JF1KLx+bnfFrCyq+XBbxvC3v2tGtMu1gtUpN8ZfjUmDef2Cj1IzdNH4B5NkW3PlD BfqGhvI9qgStZm10vaB698uHjt17uSlTRnFc7HjwVgathsyX32tpf5u8sBbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNEdk+wM5CvgZQ4CmcyOfQt5HZm0wHwYDVR0j BBgwFoAUvWhcJP+PQyVDw+WDSEBEpE5TBnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGJmODY0MS1iZjcwLTRlM2YtOTg3MS1lZTI2YTMzZGIzYTIvMC9CRDY4NUMyNEZG OEY0MzI1NDNDM0U1ODM0ODQwNDRBNDRFNTMwNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0RTUz MDY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0 QTQ0RTUzMDY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQcxuWyI9xFryub0wM9T8+/FcOrghJ/CCxb ADz0GX7jXKecbjDFLDfZq4wBrLQWjZ+FKvJb/HgolTuuc2n3G9MLxtiFLtAF0rJ+ k7+zdbUoOO5Tiy/a6StaeBGjwGBIkqL+DaJpQj+Ww/nRABgGyUXn/OueNQwKW6Iv zlmsf9Oom7hOZN4V71CpCJ3DJ4cDUJQ/zLOZ/QfWMLgiRb6B4BNMdL1qcANQrN6f UWbu1di7uXgHnkfsTYQCdEtGczQuYtQQzX2dtmIUGyoBTjg9ZiY9X/HYMJn5TS/t Gyp4p+wZdlSSwc9M0hymtWDBV94UCpQPqXRp4D0RatYwb86Lk28= -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:31 2026 by rpki-client