$ rpki-client -vvf repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft File: BDB1195D404F153801E5124B65F15BD6EA02C52F.mft (raw, json) Hash identifier: NMF7NrmUDB/4oU9viAvj6Qk6IMLB2oloVqDAzEJkjoc= Subject key identifier: 5A:EB:F8:85:0B:FA:26:BE:49:D5:6A:62:06:5C:43:62:7E:EE:61:00 Authority key identifier: BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F Certificate issuer: /CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Certificate serial: 382E12490FACF64C001322CE034DE188DCB2E77F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft Manifest number: 022F Signing time: Fri 17 Apr 2026 04:03:27 +0000 Manifest this update: Fri 17 Apr 2026 03:58:27 +0000 Manifest next update: Mon 20 Apr 2026 06:00:27 +0000 Files and hashes: 1: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: cGjzafbbb72w1POax7yQ6JIcTIYB2qV5UJbi5oDbNwM=) 2: BDB1195D404F153801E5124B65F15BD6EA02C52F.crl (hash: 0R/cf5Qk3T9huhj2eyuuxs56IWLbbT/4h4jTrbKgn2A=) 3: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: K+lMNOPbaTPtC+BN5yt1i5n+83ok12jHIPg+zvMK6vA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2e:12:49:0f:ac:f6:4c:00:13:22:ce:03:4d:e1:88:dc:b2:e7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDB1195D404F153801E5124B65F15BD6EA02C52F Validity Not Before: Apr 17 03:58:27 2026 GMT Not After : Apr 20 06:00:27 2026 GMT Subject: CN=5AEBF8850BFA26BE49D56A62065C43627EEE6100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:56:7a:ae:8f:f2:a2:6f:7c:b2:47:69:ef: a7:01:97:c4:7d:00:fe:65:5f:6b:cd:2a:b3:3e:3f: a3:9a:e9:bb:23:1e:9a:25:8f:ff:42:44:6e:b6:d5: 57:cb:0b:f3:fa:f0:e7:9b:8f:e9:a9:db:a5:d5:52: 7d:02:56:12:60:78:84:3d:68:4a:dd:ce:54:a9:66: be:ab:d2:e9:05:e7:33:15:57:0a:39:66:b8:10:0c: 1c:96:13:22:2c:2d:1c:6a:7c:a9:75:bc:8d:b7:96: 24:a4:4c:eb:34:03:b9:c2:2b:88:a9:59:4f:09:ca: c2:98:de:c1:f2:47:67:fb:0f:2c:94:ce:94:3e:65: e9:99:16:80:c7:25:54:94:2c:d7:b2:f3:b1:21:a7: a7:91:4a:17:0e:55:60:d6:ff:4a:7f:ea:6a:fd:e8: 7a:27:4f:42:07:c9:2f:15:54:2f:e5:7c:de:7f:69: b3:48:e9:73:15:6b:a5:09:a4:54:cf:00:2a:a2:03: d6:96:bf:94:56:87:8a:13:d2:f7:c4:99:5d:15:9d: 2e:49:ac:73:09:a1:6f:d6:62:4d:fc:4b:d4:28:4f: 94:d5:d2:9a:59:df:c1:ae:f1:82:30:f8:45:07:28: b2:ad:ab:e9:40:fa:e7:e0:89:cd:9d:6a:38:ad:e4: ab:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EB:F8:85:0B:FA:26:BE:49:D5:6A:62:06:5C:43:62:7E:EE:61:00 X509v3 Authority Key Identifier: keyid:BD:B1:19:5D:40:4F:15:38:01:E5:12:4B:65:F1:5B:D6:EA:02:C5:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BDB1195D404F153801E5124B65F15BD6EA02C52F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/BDB1195D404F153801E5124B65F15BD6EA02C52F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:52:2f:ce:fe:eb:ad:65:0b:19:a4:e8:bf:fa:b0:7e:d5:ef: 47:dc:c4:61:c0:47:85:3c:77:4f:2a:ca:7f:e7:53:c7:62:39: fe:68:01:b8:ff:8f:03:49:81:04:98:64:59:be:01:83:ea:ba: f6:c5:5f:b8:2f:87:73:f2:cc:6f:86:f9:cd:f2:ec:d8:49:10: 3a:c2:d4:78:e0:bc:f5:a5:db:48:f9:e3:e4:1c:13:e0:90:6a: ae:cf:90:3c:7c:21:92:9e:96:af:42:5c:b6:93:f9:c8:aa:4d: 43:61:2e:e3:79:e1:3e:be:3a:0d:af:be:94:0f:ec:86:b8:b9: 8c:24:3c:8b:58:02:e2:b1:c1:9d:1c:ea:6f:c7:3d:d6:29:47: 10:e0:59:39:09:5d:c9:85:65:48:0d:cf:db:6a:8b:c1:19:a5: 3b:0d:28:97:37:5d:d5:ae:20:53:e5:86:af:0a:16:0d:04:31: fd:8a:5c:da:aa:bc:7d:d4:6a:7a:e8:82:9b:be:02:7b:f8:e4: eb:ec:1a:50:17:49:42:68:e3:bd:3d:b1:b9:29:25:a8:bf:a5: d1:53:96:d9:d0:7b:3f:30:e9:cd:7c:0b:fc:ff:ca:76:eb:e4: e8:a0:04:c7:fd:60:25:cf:6d:99:8f:2c:99:c6:82:43:ac:97: ac:64:53:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOC4SSQ+s9kwAEyLOA03hiNyy538wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZF QTAyQzUyRjAeFw0yNjA0MTcwMzU4MjdaFw0yNjA0MjAwNjAwMjdaMDMxMTAvBgNV BAMTKDVBRUJGODg1MEJGQTI2QkU0OUQ1NkE2MjA2NUM0MzYyN0VFRTYxMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVXlZ6ro/yom98skdp76cBl8R9 AP5lX2vNKrM+P6Oa6bsjHpolj/9CRG621VfLC/P68Oebj+mp26XVUn0CVhJgeIQ9 aErdzlSpZr6r0ukF5zMVVwo5ZrgQDByWEyIsLRxqfKl1vI23liSkTOs0A7nCK4ip WU8JysKY3sHyR2f7DyyUzpQ+ZemZFoDHJVSULNey87Ehp6eRShcOVWDW/0p/6mr9 6HonT0IHyS8VVC/lfN5/abNI6XMVa6UJpFTPACqiA9aWv5RWh4oT0vfEmV0VnS5J rHMJoW/WYk38S9QoT5TV0ppZ38Gu8YIw+EUHKLKtq+lA+ufgic2dajit5KuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuv4hQv6Jr5J1WpiBlxDYn7uYQAwHwYDVR0j BBgwFoAUvbEZXUBPFTgB5RJLZfFb1uoCxS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmY3NTAyMS04MzY4LTQ0ODEtOTI2OS01OTgwZDZmNzI5NWUvMC9CREIxMTk1RDQw NEYxNTM4MDFFNTEyNEI2NUYxNUJENkVBMDJDNTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVCRDZFQTAy QzUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvQkRCMTE5NUQ0MDRGMTUzODAxRTUxMjRCNjVGMTVC RDZFQTAyQzUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhSL87+661lCxmk6L/6sH7V70fcxGHAR4U8 d08qyn/nU8diOf5oAbj/jwNJgQSYZFm+AYPquvbFX7gvh3PyzG+G+c3y7NhJEDrC 1HjgvPWl20j54+QcE+CQaq7PkDx8IZKelq9CXLaT+ciqTUNhLuN54T6+Og2vvpQP 7Ia4uYwkPItYAuKxwZ0c6m/HPdYpRxDgWTkJXcmFZUgNz9tqi8EZpTsNKJc3XdWu IFPlhq8KFg0EMf2KXNqqvH3Uanrogpu+Anv45OvsGlAXSUJo4709sbkpJai/pdFT ltnQez8w6c18C/z/ynbr5OigBMf9YCXPbZmPLJnGgkOsl6xkUwg= -----END CERTIFICATE-----Generated at Sat Apr 18 00:41:35 2026 by rpki-client