$ rpki-client -vvf repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft File: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft (raw, json) Hash identifier: xePWO19EJMusAWrIgc7pS0LbikeDODRHzLvuGUOqDpM= Subject key identifier: EE:21:33:DA:75:12:66:99:D6:CC:A8:75:AC:72:10:03:B7:A2:8B:BB Authority key identifier: BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 Certificate issuer: /CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Certificate serial: 633C550BACA4DE51EA0EAF0CF19207D9E800395F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft Manifest number: 0364 Signing time: Sun 19 Apr 2026 04:42:07 +0000 Manifest this update: Sun 19 Apr 2026 04:37:07 +0000 Manifest next update: Wed 22 Apr 2026 05:07:07 +0000 Files and hashes: 1: BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl (hash: QNfdMRabUb2T3/Xb/+0sQ+hGBC7O+8Dl5+KH2ggSA4w=) 2: 3130332e3231302e3131392e302f32342d3234203d3e203634303234.roa (hash: Ytr8LGrcIz/5Ip4kUA/P8vtfeNKUZXIGazNVZyLvVDY=) 3: 3130332e3231302e3131372e302f32342d3234203d3e203634303234.roa (hash: rvryrNsii8p5FWEuXQ/ZA1z3QEXlw8MezShqHde9HFo=) 4: 3130332e3231302e3131362e302f32342d3234203d3e203634303234.roa (hash: yMj7uFI234xCcazZ5UUXhaecBl1WVAuun+atXN8IBlQ=) 5: 3130332e3231302e3131382e302f32342d3234203d3e203634303234.roa (hash: tavtmJbAGyPVyKNkS1yIlicvomGLqf7gKFQGKl+8wbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3c:55:0b:ac:a4:de:51:ea:0e:af:0c:f1:92:07:d9:e8:00:39:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFE0F552446CE5C263D85414C72E8DD74CBC5EE9 Validity Not Before: Apr 19 04:37:07 2026 GMT Not After : Apr 22 05:07:07 2026 GMT Subject: CN=EE2133DA75126699D6CCA875AC721003B7A28BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:b2:7c:13:b8:39:a1:64:e8:cc:8d:ab:94: 71:22:49:a1:a0:fc:89:be:3a:2e:79:0e:42:36:98: 96:36:a1:81:6d:32:12:ff:e7:8e:3b:3e:fc:c3:44: a6:42:e9:6f:bf:dd:4c:8f:5d:42:38:0c:74:7b:93: 10:fd:d6:f0:a6:59:77:2d:43:59:79:c2:34:16:17: ff:73:63:f0:f8:16:71:20:2b:65:b0:81:fc:32:aa: 5f:5e:c0:be:dc:8f:37:56:62:ce:05:5d:16:1c:11: 9d:58:4d:bd:0b:9d:e3:a9:d8:38:ff:57:1c:08:44: d4:05:f4:28:d5:85:cc:a7:ef:f7:6b:bd:c4:77:c1: 8a:2c:a0:1e:54:91:12:6f:d8:d5:34:39:d2:c7:56: 8d:a6:fd:4e:e9:38:84:bc:98:50:69:34:63:b8:b2: a2:29:b0:05:3f:26:07:a1:66:df:0b:c0:48:b0:57: fd:fc:16:c0:fd:08:58:e5:3e:6f:34:cc:ac:8f:87: ac:1f:6b:8b:83:0b:34:84:e2:a5:14:f7:2b:b2:ef: c9:9e:64:a3:32:1a:04:b1:15:52:b5:e9:93:16:9f: cc:d9:ac:3a:2a:f5:37:3f:af:ba:a2:16:3b:ba:08: ef:a5:d4:84:5f:28:9c:93:6e:ea:27:12:f5:7e:fe: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:33:DA:75:12:66:99:D6:CC:A8:75:AC:72:10:03:B7:A2:8B:BB X509v3 Authority Key Identifier: keyid:BF:E0:F5:52:44:6C:E5:C2:63:D8:54:14:C7:2E:8D:D7:4C:BC:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1fd351e-2bd7-4191-9106-53f875016f0e/0/BFE0F552446CE5C263D85414C72E8DD74CBC5EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:c6:13:fc:6c:72:88:aa:fe:a9:73:49:e1:4f:1b:75:78:c2: 82:ff:80:93:d7:a3:13:43:17:bd:59:00:e5:bb:56:55:af:a6: af:57:ba:09:93:d2:62:bc:d6:b0:7a:d7:f2:7d:31:1c:a4:12: cb:39:d7:6e:06:f8:6a:8c:d2:97:d9:4b:9f:ab:19:88:c1:29: b1:9c:56:10:d1:27:86:2c:f2:4d:42:d6:d3:07:d8:8f:ff:4b: b9:0a:be:41:fd:06:92:af:a8:1e:51:ed:d6:3c:41:38:ef:1c: 52:0d:b7:ce:99:d7:93:a3:0e:7d:06:29:f1:29:be:7e:9d:b6: b6:c2:9e:1d:c8:bc:b4:49:e9:38:94:39:c3:82:94:df:48:c7: a5:dd:bf:98:9b:a6:7d:1a:f6:53:c2:9b:03:cf:40:6d:e3:b0: d6:ab:8a:05:12:86:c6:31:fe:a9:34:d5:e1:d4:31:57:f0:77: 17:76:88:ae:34:d2:85:f1:72:28:a6:7c:d8:46:d9:3c:cb:2f: 85:fe:56:59:81:c3:2d:ab:11:0d:61:77:e1:19:ca:ea:ea:5b: 4b:7f:39:5d:52:e8:49:0a:24:c0:4d:90:32:0e:50:81:01:f5: ca:90:b6:74:10:62:f1:6e:9c:a8:fe:cd:f7:d0:cf:44:7c:5a: 64:4f:28:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzxVC6yk3lHqDq8M8ZIH2egAOV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0 Q0JDNUVFOTAeFw0yNjA0MTkwNDM3MDdaFw0yNjA0MjIwNTA3MDdaMDMxMTAvBgNV BAMTKEVFMjEzM0RBNzUxMjY2OTlENkNDQTg3NUFDNzIxMDAzQjdBMjhCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9CrJ8E7g5oWTozI2rlHEiSaGg /Im+Oi55DkI2mJY2oYFtMhL/5447PvzDRKZC6W+/3UyPXUI4DHR7kxD91vCmWXct Q1l5wjQWF/9zY/D4FnEgK2Wwgfwyql9ewL7cjzdWYs4FXRYcEZ1YTb0LneOp2Dj/ VxwIRNQF9CjVhcyn7/drvcR3wYosoB5UkRJv2NU0OdLHVo2m/U7pOIS8mFBpNGO4 sqIpsAU/JgehZt8LwEiwV/38FsD9CFjlPm80zKyPh6wfa4uDCzSE4qUU9yuy78me ZKMyGgSxFVK16ZMWn8zZrDoq9Tc/r7qiFju6CO+l1IRfKJyTbuonEvV+/uUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7iEz2nUSZpnWzKh1rHIQA7eii7swHwYDVR0j BBgwFoAUv+D1UkRs5cJj2FQUxy6N10y8XukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWZkMzUxZS0yYmQ3LTQxOTEtOTEwNi01M2Y4NzUwMTZmMGUvMC9CRkUwRjU1MjQ0 NkNFNUMyNjNEODU0MTRDNzJFOERENzRDQkM1RUU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThERDc0Q0JD NUVFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmZDM1MWUtMmJkNy00MTkxLTkx MDYtNTNmODc1MDE2ZjBlLzAvQkZFMEY1NTI0NDZDRTVDMjYzRDg1NDE0QzcyRThE RDc0Q0JDNUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbGE/xscoiq/qlzSeFPG3V4woL/gJPXoxND F71ZAOW7VlWvpq9XugmT0mK81rB61/J9MRykEss5124G+GqM0pfZS5+rGYjBKbGc VhDRJ4Ys8k1C1tMH2I//S7kKvkH9BpKvqB5R7dY8QTjvHFINt86Z15OjDn0GKfEp vn6dtrbCnh3IvLRJ6TiUOcOClN9Ix6Xdv5ibpn0a9lPCmwPPQG3jsNarigUShsYx /qk01eHUMVfwdxd2iK400oXxciimfNhG2TzLL4X+VlmBwy2rEQ1hd+EZyurqW0t/ OV1S6EkKJMBNkDIOUIEB9cqQtnQQYvFunKj+zffQz0R8WmRPKLc= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:15 2026 by rpki-client