$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: 56lPa2eW7PrlsQyMEdgQ70T0xRIX8POkzCo43GF+FTM= Subject key identifier: D9:77:4A:2B:92:97:AB:34:53:B9:A8:A9:0D:01:BA:61:6D:99:B7:04 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 54AB0CE87B7486C683481B635FC497179AAED955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 0219 Signing time: Sat 28 Feb 2026 21:50:50 +0000 Manifest this update: Sat 28 Feb 2026 21:45:50 +0000 Manifest next update: Wed 04 Mar 2026 01:37:50 +0000 Files and hashes: 1: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: 7e/rU5C4K3wZBUSFhcN0skp0sOOxioMVYXmpb8VshTo=) 2: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: knELQbaTEPHuXbMghBcUKz4fGE1lGdQ7WaV2RTog838=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: 8d+23ta1YltwoezbqxP6Mlaw6mLGoxMCRijjIiVbtCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ab:0c:e8:7b:74:86:c6:83:48:1b:63:5f:c4:97:17:9a:ae:d9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Feb 28 21:45:50 2026 GMT Not After : Mar 4 01:37:50 2026 GMT Subject: CN=D9774A2B9297AB3453B9A8A90D01BA616D99B704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:19:46:e7:34:b4:1e:ed:a7:df:16:4b:d0: 75:68:38:ce:41:27:9e:bb:bd:f7:90:2a:14:64:94: ea:23:cd:8b:47:fa:65:0b:1d:8a:d4:37:86:c4:12: 73:bf:59:19:db:62:c1:b9:53:a9:83:a7:31:08:d8: 91:95:e9:c7:05:5e:1e:0c:66:02:be:4a:3e:9b:e2: cb:bd:4b:fb:72:85:e3:8b:64:54:f6:4e:20:0d:b5: 75:0a:8f:d2:73:93:a5:78:a9:0b:a2:38:88:3d:ed: ab:57:eb:61:ff:83:4a:bc:77:e6:fa:8b:df:eb:ed: 02:e6:b6:7f:2d:b5:7c:54:e1:59:89:88:bf:f7:c6: 87:83:57:12:87:a9:92:70:d5:68:59:78:ca:d8:c5: 33:e8:ef:31:f7:59:1a:0e:e1:bb:9c:bd:c2:79:ab: 16:01:bd:f8:52:f0:31:6f:cc:71:7e:33:4c:62:df: ed:a4:4b:e0:27:38:5a:fb:ad:eb:6e:61:f7:dd:8c: a7:a9:e4:c6:ca:92:54:a9:b6:37:61:5d:f4:86:20: 69:80:32:25:a0:4f:fc:2b:2c:b9:b2:ad:8c:39:87: 6d:90:12:f7:9c:be:1a:e6:be:0f:44:f5:fb:24:41: 7b:90:04:a0:c5:76:c5:77:15:08:a4:c5:40:a4:04: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:4A:2B:92:97:AB:34:53:B9:A8:A9:0D:01:BA:61:6D:99:B7:04 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:70:22:9f:d2:11:01:0f:75:16:c9:36:81:fd:98:73:20:ce: 89:13:80:de:81:38:ed:66:d1:41:de:40:0f:ab:1f:c5:fc:83: d9:39:cb:07:1a:5a:08:cb:a2:a1:99:05:97:e8:6b:1f:99:34: d3:da:37:dd:21:fe:30:f8:7e:00:2a:89:eb:c2:43:1d:03:b3: 32:92:f8:86:03:4c:11:a0:26:d2:9b:83:3d:c4:cb:78:b6:ce: 75:9b:a6:db:cf:2a:30:ed:12:dd:1c:3a:a5:b4:79:d8:34:66: 75:a4:d1:cd:1c:c0:1c:0a:fd:5a:eb:93:de:53:1c:8e:6e:30: 97:54:16:52:d7:5e:6a:a4:d8:a4:16:60:14:6e:b7:7c:55:b3: 63:0b:d1:4c:31:3c:e1:0f:bb:07:80:f6:d7:f9:93:80:55:e7: ef:09:a0:69:39:fe:18:6e:8b:fa:8b:2d:14:27:48:a7:36:9a: 06:a7:1f:89:5e:f0:f0:71:dc:42:e0:62:9d:bf:cb:f3:89:99: 74:71:b7:e6:79:4a:ca:be:ac:a8:70:29:58:d4:f8:d4:12:63: c5:52:66:eb:53:90:3c:22:50:14:42:f7:d7:51:30:cd:c1:dd: ce:6f:c6:fa:84:89:7c:3a:d3:8c:0c:57:44:d6:b2:c8:27:d4: 05:af:4e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKsM6Ht0hsaDSBtjX8SXF5qu2VUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNjAyMjgyMTQ1NTBaFw0yNjAzMDQwMTM3NTBaMDMxMTAvBgNV BAMTKEQ5Nzc0QTJCOTI5N0FCMzQ1M0I5QThBOTBEMDFCQTYxNkQ5OUI3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXBlG5zS0Hu2n3xZL0HVoOM5B J567vfeQKhRklOojzYtH+mULHYrUN4bEEnO/WRnbYsG5U6mDpzEI2JGV6ccFXh4M ZgK+Sj6b4su9S/tyheOLZFT2TiANtXUKj9Jzk6V4qQuiOIg97atX62H/g0q8d+b6 i9/r7QLmtn8ttXxU4VmJiL/3xoeDVxKHqZJw1WhZeMrYxTPo7zH3WRoO4bucvcJ5 qxYBvfhS8DFvzHF+M0xi3+2kS+AnOFr7retuYffdjKep5MbKklSptjdhXfSGIGmA MiWgT/wrLLmyrYw5h22QEvecvhrmvg9E9fskQXuQBKDFdsV3FQikxUCkBOe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XdKK5KXqzRTuaipDQG6YW2ZtwQwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtwIp/SEQEPdRbJNoH9mHMgzokTgN6BOO1m 0UHeQA+rH8X8g9k5ywcaWgjLoqGZBZfoax+ZNNPaN90h/jD4fgAqievCQx0DszKS +IYDTBGgJtKbgz3Ey3i2znWbptvPKjDtEt0cOqW0edg0ZnWk0c0cwBwK/Vrrk95T HI5uMJdUFlLXXmqk2KQWYBRut3xVs2ML0UwxPOEPuweA9tf5k4BV5+8JoGk5/hhu i/qLLRQnSKc2mganH4le8PBx3ELgYp2/y/OJmXRxt+Z5Ssq+rKhwKVjU+NQSY8VS ZutTkDwiUBRC99dRMM3B3c5vxvqEiXw604wMV0TWssgn1AWvTvk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:54 2026 by rpki-client