$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: ucnZj3ZhxPKk8CKtP3aERraIDyZBUK3z/l/qFa7wcOM= Subject key identifier: A0:D8:6A:81:C2:83:D8:54:4F:0B:E1:FD:87:30:FF:07:06:69:54:45 Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 7C9219409A579353FF4D1EBDDCFECE8806D35378 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 034E Signing time: Sat 28 Feb 2026 17:42:06 +0000 Manifest this update: Sat 28 Feb 2026 17:37:06 +0000 Manifest next update: Wed 04 Mar 2026 00:17:06 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: uEP1zEhjsTZrXyj5yxjw4tpuIvBAZUCEb1Vnu0lGGbw=) 2: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 4: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:92:19:40:9a:57:93:53:ff:4d:1e:bd:dc:fe:ce:88:06:d3:53:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Feb 28 17:37:06 2026 GMT Not After : Mar 4 00:17:06 2026 GMT Subject: CN=A0D86A81C283D8544F0BE1FD8730FF0706695445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:30:f0:1e:7b:af:aa:d4:8d:cc:04:7d:60:d9: 9a:ab:98:9e:51:47:8e:eb:9b:d5:ea:04:9e:b7:b8: 9b:7f:ac:82:60:67:19:2a:86:8d:71:c3:6d:8c:86: 22:23:90:9c:4f:47:98:ac:c8:5c:0d:21:7f:c0:c6: 6d:82:2a:fc:53:4e:4d:a4:4a:d3:73:8a:33:c9:b2: b7:ca:21:ff:8a:e0:32:65:3e:35:91:6e:8c:29:0f: 87:61:0d:3a:26:ae:1c:f6:bb:37:f8:c4:4c:96:29: b1:fe:fc:4c:1c:50:97:49:e5:29:0a:d9:ba:73:77: cf:07:3b:e8:a0:6d:cd:59:9c:6f:d5:53:95:6d:57: 2d:c4:c8:6b:75:85:f3:93:dc:f1:72:30:7c:b2:18: ab:9c:39:51:03:6d:6d:1e:ce:36:9a:b4:25:bd:1e: 86:ad:89:19:bf:0c:74:df:c1:95:4c:9c:02:fa:75: bf:b9:39:0f:7d:f1:1b:c1:b4:a8:c8:06:92:03:ac: 3f:89:0b:25:4b:c4:2a:77:e7:c4:4a:f9:9b:d5:c5: 1f:6b:d8:a9:de:ba:5e:6d:61:c6:64:0d:11:03:f4: 08:10:3b:87:a6:a1:27:07:8c:e4:ad:04:e3:0c:04: c3:03:d0:f2:55:7d:8e:17:9b:97:6d:e2:fa:98:61: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D8:6A:81:C2:83:D8:54:4F:0B:E1:FD:87:30:FF:07:06:69:54:45 X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f3:5d:22:3e:bb:3f:e3:31:46:49:a8:17:50:f5:fa:9a:c1: 09:b1:bf:8a:65:a3:81:30:60:8d:90:f7:2c:7b:31:8c:f4:5d: 11:eb:d2:78:66:8f:05:7b:70:07:59:c4:69:7e:59:0e:7b:f2: d3:f5:27:0d:c5:68:78:38:0a:d3:41:e9:d6:b8:fa:71:b4:e1: 06:95:f3:37:3d:40:a6:2e:cc:2d:d0:3e:f8:9d:78:49:5a:26: 47:6c:3b:aa:4c:40:d6:18:4a:58:3f:7a:28:67:03:16:c3:9a: d9:0a:5e:63:db:1d:a2:95:2a:38:22:9f:b7:53:34:ab:fa:a1: 89:d1:68:3c:2f:0c:64:74:09:7c:36:04:c8:a2:21:dc:71:54: 1a:c4:9b:17:2f:b3:9c:fd:3f:b1:0a:80:f7:0e:03:fc:04:19: aa:26:31:e7:b5:7c:08:a1:b8:74:6e:cb:84:7c:08:45:6f:ca: d1:32:2b:b7:75:97:5a:f5:30:a4:47:c1:80:01:f9:8f:93:56: 6b:42:a5:76:53:5e:9b:ab:ac:da:06:9b:34:35:a5:e9:d9:9d: 0e:c4:a9:ac:50:07:bf:67:62:c3:cd:0e:8b:58:1c:38:21:67: 83:0b:9a:5a:5d:b8:ee:1e:12:e5:c5:40:ad:09:27:23:04:49: c9:04:ba:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJIZQJpXk1P/TR693P7OiAbTU3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNjAyMjgxNzM3MDZaFw0yNjAzMDQwMDE3MDZaMDMxMTAvBgNV BAMTKEEwRDg2QTgxQzI4M0Q4NTQ0RjBCRTFGRDg3MzBGRjA3MDY2OTU0NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMPAee6+q1I3MBH1g2ZqrmJ5R R47rm9XqBJ63uJt/rIJgZxkqho1xw22MhiIjkJxPR5isyFwNIX/Axm2CKvxTTk2k StNzijPJsrfKIf+K4DJlPjWRbowpD4dhDTomrhz2uzf4xEyWKbH+/EwcUJdJ5SkK 2bpzd88HO+igbc1ZnG/VU5VtVy3EyGt1hfOT3PFyMHyyGKucOVEDbW0ezjaatCW9 HoatiRm/DHTfwZVMnAL6db+5OQ998RvBtKjIBpIDrD+JCyVLxCp358RK+ZvVxR9r 2Kneul5tYcZkDRED9AgQO4emoScHjOStBOMMBMMD0PJVfY4Xm5dt4vqYYQpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNhqgcKD2FRPC+H9hzD/BwZpVEUwHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7zXSI+uz/jMUZJqBdQ9fqawQmxv4plo4Ew YI2Q9yx7MYz0XRHr0nhmjwV7cAdZxGl+WQ578tP1Jw3FaHg4CtNB6da4+nG04QaV 8zc9QKYuzC3QPvideElaJkdsO6pMQNYYSlg/eihnAxbDmtkKXmPbHaKVKjgin7dT NKv6oYnRaDwvDGR0CXw2BMiiIdxxVBrEmxcvs5z9P7EKgPcOA/wEGaomMee1fAih uHRuy4R8CEVvytEyK7d1l1r1MKRHwYAB+Y+TVmtCpXZTXpurrNoGmzQ1penZnQ7E qaxQB79nYsPNDotYHDghZ4MLmlpduO4eEuXFQK0JJyMESckEuso= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:34 2026 by rpki-client