$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft File: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft (raw, json) Hash identifier: iJubE/Ee3Ra838ktqLFwgp063g7K58q7tTqFikVUmN8= Subject key identifier: 43:00:39:B9:7E:6B:6D:3C:D7:D8:95:42:66:B0:FE:A1:F1:D8:C1:56 Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 Certificate issuer: /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Certificate serial: 73FCAC4D45973A926DE699F29E23993875500B9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft Manifest number: 02A1 Signing time: Sun 01 Mar 2026 06:51:34 +0000 Manifest this update: Sun 01 Mar 2026 06:46:34 +0000 Manifest next update: Wed 04 Mar 2026 12:47:34 +0000 Files and hashes: 1: 3130332e3130352e3139352e302f32342d3234203d3e20313336383738.roa (hash: O8lklXAV7vvG+v+hANkUO5KIwzG98mC/eIBJJgrAC6Y=) 2: BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl (hash: OaZDtsAIz+2AuSvAcpgwwENFeO7WnNEWb0nAJbbkGbc=) 3: 3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (hash: sGPkr82UUN2m0p5Z6EeIkVlWIj/RwlmetOwmRgGSsB8=) 4: 3130332e3130352e3139322e302f32342d3234203d3e20313336383738.roa (hash: w0xMtSXTcSCSqsp69YKeThLLGPMrf9e1AjwvZ9mn/V0=) 5: 3130332e3130352e3139332e302f32342d3234203d3e20313337333136.roa (hash: TXKlB2hfqxWA+jXF08t3ciFtbxDo9W/xPDl1rsz8aDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fc:ac:4d:45:97:3a:92:6d:e6:99:f2:9e:23:99:38:75:50:0b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1 Validity Not Before: Mar 1 06:46:34 2026 GMT Not After : Mar 4 12:47:34 2026 GMT Subject: CN=430039B97E6B6D3CD7D8954266B0FEA1F1D8C156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:0e:17:3e:96:60:d1:b9:f9:75:70:ed:49: 21:e9:b0:28:3c:76:b9:00:0f:80:18:bf:b0:58:88: 15:9f:e6:04:a8:d6:b0:6f:10:8f:42:dc:cd:51:4f: 52:42:42:f8:2e:f3:d1:e1:e3:67:b3:c8:aa:28:a1: 38:4e:05:ba:71:43:45:99:f8:9f:71:cb:cd:aa:cf: df:07:50:ad:e9:7d:b0:39:6f:f0:c4:83:99:df:52: cb:c8:0a:7f:05:92:4f:1d:55:4f:2a:2c:55:7a:4a: 88:89:33:7e:40:de:b4:ee:7c:d5:80:87:c8:67:48: 53:ef:8b:d1:21:6a:f0:23:dc:dd:4e:fd:87:ba:a4: d2:d4:7b:df:ae:8d:4c:54:b4:01:cf:6a:cd:59:e6: 99:65:b7:b0:df:4e:42:b2:b6:e4:cd:d3:3f:6d:e4: df:d3:38:e4:87:23:b3:ab:ea:de:48:bb:2d:9c:1e: 20:e3:3b:77:90:59:be:70:eb:c2:68:e4:72:25:a7: 40:fc:f6:7f:d1:bc:7d:17:07:0f:03:89:6d:cb:28: a6:54:5c:87:42:7a:d4:76:6d:fe:ea:54:a9:ab:43: 6f:b1:46:b7:ee:3d:0e:63:c9:a3:9f:19:58:0f:b7: 43:46:ad:6b:d0:6d:d0:54:30:d4:28:7a:33:ec:2d: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:39:B9:7E:6B:6D:3C:D7:D8:95:42:66:B0:FE:A1:F1:D8:C1:56 X509v3 Authority Key Identifier: keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:34:da:b9:b7:b8:86:4f:14:aa:88:52:00:aa:7c:c9:f2:31: 70:ab:ca:b4:3b:a3:b5:26:7e:5b:ea:d6:73:62:5e:4e:dc:f4: 76:e3:40:03:fc:7f:bf:28:e4:d1:90:a2:67:92:16:63:24:a7: 69:de:00:d1:70:0f:58:f7:19:dd:b5:3c:6d:ec:0d:df:77:9c: 60:0a:a7:c0:7a:b0:35:0f:e2:ce:f7:69:6e:0d:92:fc:7a:c0: b6:90:21:37:ee:77:ae:92:14:af:eb:58:ec:da:90:dd:b9:e7: 10:51:4d:70:02:39:17:e5:a9:bb:59:f7:08:f4:9a:3e:e2:03: 06:14:1c:56:3c:00:3b:22:5d:13:aa:6a:a6:c4:0e:c8:68:25: 7c:ef:3c:e9:b2:8b:78:7f:c1:70:97:7c:c3:c0:ee:b7:31:0c: 5a:32:39:e1:a9:37:95:bc:ff:6b:22:6e:ee:ad:f9:38:97:23: f2:fc:48:eb:43:4d:30:38:3c:9c:a2:ac:66:97:6d:76:9c:4a: d8:bf:b3:80:01:8a:1e:12:a9:7e:7e:56:8e:11:b0:dc:8d:aa: 71:a1:22:68:77:87:31:3c:fe:63:f7:df:b9:91:61:14:af:f6: fd:e4:33:d8:2e:60:ba:12:b9:49:66:4f:c4:58:7e:eb:d8:ec: 1a:7f:71:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/ysTUWXOpJt5pnyniOZOHVQC50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0 NzQyNDRCMTAeFw0yNjAzMDEwNjQ2MzRaFw0yNjAzMDQxMjQ3MzRaMDMxMTAvBgNV BAMTKDQzMDAzOUI5N0U2QjZEM0NEN0Q4OTU0MjY2QjBGRUExRjFEOEMxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJw4XPpZg0bn5dXDtSSHpsCg8 drkAD4AYv7BYiBWf5gSo1rBvEI9C3M1RT1JCQvgu89Hh42ezyKoooThOBbpxQ0WZ +J9xy82qz98HUK3pfbA5b/DEg5nfUsvICn8Fkk8dVU8qLFV6SoiJM35A3rTufNWA h8hnSFPvi9EhavAj3N1O/Ye6pNLUe9+ujUxUtAHPas1Z5pllt7DfTkKytuTN0z9t 5N/TOOSHI7Or6t5Iuy2cHiDjO3eQWb5w68Jo5HIlp0D89n/RvH0XBw8DiW3LKKZU XIdCetR2bf7qVKmrQ2+xRrfuPQ5jyaOfGVgPt0NGrWvQbdBUMNQoejPsLZ6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQwA5uX5rbTzX2JVCZrD+ofHYwVYwHwYDVR0j BBgwFoAUvV1Gtb/nLyqhGIqQlrEOAUdCRLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTI0ZmE5YS1lNWYzLTQyNjUtOWUxZC04NGU0NTM1OTYxZDAvMC9CRDVENDZCNUJG RTcyRjJBQTExODhBOTA5NkIxMEUwMTQ3NDI0NEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBFMDE0NzQy NDRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkyNGZhOWEtZTVmMy00MjY1LTll MWQtODRlNDUzNTk2MWQwLzAvQkQ1RDQ2QjVCRkU3MkYyQUExMTg4QTkwOTZCMTBF MDE0NzQyNDRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg02rm3uIZPFKqIUgCqfMnyMXCryrQ7o7Um flvq1nNiXk7c9HbjQAP8f78o5NGQomeSFmMkp2neANFwD1j3Gd21PG3sDd93nGAK p8B6sDUP4s73aW4Nkvx6wLaQITfud66SFK/rWOzakN255xBRTXACORflqbtZ9wj0 mj7iAwYUHFY8ADsiXROqaqbEDshoJXzvPOmyi3h/wXCXfMPA7rcxDFoyOeGpN5W8 /2sibu6t+TiXI/L8SOtDTTA4PJyirGaXbXacSti/s4ABih4SqX5+Vo4RsNyNqnGh Imh3hzE8/mP337mRYRSv9v3kM9guYLoSuUlmT8RYfuvY7Bp/cWw= -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:51 2026 by rpki-client