$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: cfh+ndcdMcgee7ZYFM88G/+PeL+A9M/8IkpWEz0t+wA= Subject key identifier: C7:FA:7F:B2:BE:2D:29:0C:2B:FA:34:4E:86:6B:90:49:CC:93:B4:29 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 2E7DBDC084870DC29E39E45099702C79263269FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 0243 Signing time: Sat 28 Feb 2026 01:21:34 +0000 Manifest this update: Sat 28 Feb 2026 01:16:34 +0000 Manifest next update: Tue 03 Mar 2026 09:12:34 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: B8L1t9m5sjECUen38eZe5iMqp2KV3b+wnNtwV9XP9Jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:7d:bd:c0:84:87:0d:c2:9e:39:e4:50:99:70:2c:79:26:32:69:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Feb 28 01:16:34 2026 GMT Not After : Mar 3 09:12:34 2026 GMT Subject: CN=C7FA7FB2BE2D290C2BFA344E866B9049CC93B429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:84:67:7e:21:0a:36:c6:7e:88:5b:8c:f9: c8:ed:23:ad:99:b5:a8:3f:ea:22:bf:0b:06:7f:89: 1c:85:a6:3b:62:ad:77:05:ff:1f:65:54:20:7d:0d: c9:fd:f6:b7:f7:0f:cb:b0:59:97:75:2b:3c:20:41: e9:66:b1:0c:97:f3:a5:0c:5e:f2:f3:6b:97:71:02: 96:65:43:65:11:e5:34:ba:55:b6:9b:56:90:14:76: bc:a7:10:be:cf:a1:4c:ec:90:7d:df:97:2f:2a:86: d2:2d:74:40:45:3b:b4:73:79:87:5d:83:fb:95:fb: e8:20:70:f0:f2:da:3b:8c:7e:76:e4:b5:09:57:b5: 86:a0:b7:85:63:86:b7:65:0c:b4:9e:6e:97:a5:7a: 0b:24:22:99:26:dd:c9:4b:af:be:90:ac:dc:33:64: 94:bd:9c:2a:d7:3b:a8:c2:0c:0e:80:23:07:25:49: dd:c4:47:fb:8d:b0:3a:84:fc:2c:7b:5c:95:b2:da: 36:88:7b:47:6f:f3:ec:29:43:c7:b4:1f:a4:3e:0a: 6b:b3:ca:6d:96:94:9a:7f:c1:15:ab:d1:1d:cf:d0: 23:c2:ee:32:ee:14:50:73:2e:c0:a3:e3:00:e5:2b: 75:28:8d:57:08:ee:3a:70:f1:80:2e:c0:af:cc:a8: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FA:7F:B2:BE:2D:29:0C:2B:FA:34:4E:86:6B:90:49:CC:93:B4:29 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:a0:d1:01:a9:90:00:25:b4:32:4f:68:1e:7f:ac:42:6c: 07:43:74:f8:11:ea:b2:7a:26:b3:04:35:83:3f:9d:cf:f3:61: 26:69:c7:68:f9:8f:6b:14:29:b2:41:f2:d2:3d:cb:ba:d2:48: 8a:5f:31:16:f4:47:bc:47:a1:ee:52:74:08:d1:54:4e:f8:2a: fd:d6:47:0f:e3:a2:12:6d:dd:91:05:53:f8:91:b1:ee:2c:52: 14:53:2f:df:3e:87:aa:13:c6:08:e1:7a:af:2e:88:16:b6:5c: 16:2a:47:dd:93:d5:71:aa:3d:0a:f4:d7:fd:f9:eb:50:cd:46: 6a:d0:22:00:0f:b1:a0:fe:2a:f1:9f:31:50:6d:84:34:0c:33: 3f:89:07:25:21:39:3c:83:20:b8:f9:c5:39:c8:4c:7c:00:d6: e1:1f:43:53:38:35:54:11:cb:94:47:92:59:f6:30:38:e0:51: cd:77:d1:47:12:ac:72:51:1d:d3:e0:7d:01:ad:30:20:81:1c: 88:31:9c:8d:ee:51:f9:bd:04:92:75:05:11:07:14:56:82:d1: 0b:7b:e8:0c:a0:3b:76:2f:3d:45:f7:dd:38:90:5a:0e:69:e1: dc:46:84:ad:57:43:4b:90:a0:8e:0e:c1:ad:36:ea:5f:87:a3: b7:a1:99:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULn29wISHDcKeOeRQmXAseSYyafwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNjAyMjgwMTE2MzRaFw0yNjAzMDMwOTEyMzRaMDMxMTAvBgNV BAMTKEM3RkE3RkIyQkUyRDI5MEMyQkZBMzQ0RTg2NkI5MDQ5Q0M5M0I0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGeIRnfiEKNsZ+iFuM+cjtI62Z tag/6iK/CwZ/iRyFpjtirXcF/x9lVCB9Dcn99rf3D8uwWZd1KzwgQelmsQyX86UM XvLza5dxApZlQ2UR5TS6VbabVpAUdrynEL7PoUzskH3fly8qhtItdEBFO7RzeYdd g/uV++ggcPDy2juMfnbktQlXtYagt4VjhrdlDLSebpelegskIpkm3clLr76QrNwz ZJS9nCrXO6jCDA6AIwclSd3ER/uNsDqE/Cx7XJWy2jaIe0dv8+wpQ8e0H6Q+Cmuz ym2WlJp/wRWr0R3P0CPC7jLuFFBzLsCj4wDlK3UojVcI7jpw8YAuwK/MqHr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/p/sr4tKQwr+jROhmuQScyTtCkwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkXoNEBqZAAJbQyT2gef6xCbAdDdPgR6rJ6 JrMENYM/nc/zYSZpx2j5j2sUKbJB8tI9y7rSSIpfMRb0R7xHoe5SdAjRVE74Kv3W Rw/johJt3ZEFU/iRse4sUhRTL98+h6oTxgjheq8uiBa2XBYqR92T1XGqPQr01/35 61DNRmrQIgAPsaD+KvGfMVBthDQMMz+JByUhOTyDILj5xTnITHwA1uEfQ1M4NVQR y5RHkln2MDjgUc130UcSrHJRHdPgfQGtMCCBHIgxnI3uUfm9BJJ1BREHFFaC0Qt7 6AygO3YvPUX33TiQWg5p4dxGhK1XQ0uQoI4Owa026l+Ho7ehmak= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:08 2026 by rpki-client