$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: qEMe4VlV+hnbkCUkmwvXckrh1n3IW/3h6+59Wz3qdz4= Subject key identifier: D9:E3:7B:2C:D8:97:E9:B0:CD:99:CA:49:C0:A9:C2:9F:3F:25:B8:45 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 4A5E81D38ADA743697F9C02E209132785903689A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 025B Signing time: Sat 07 Mar 2026 19:21:38 +0000 Manifest this update: Sat 07 Mar 2026 19:16:38 +0000 Manifest next update: Tue 10 Mar 2026 21:26:38 +0000 Files and hashes: 1: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: ScBa0mlDL27pE9YfFxSjsT+4gosSRwKQsl9ux2ejp0M=) 2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 3: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: 48e011jsIhGivkdBp8Labkdz5aYvN7kU5niI+PWaloc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5e:81:d3:8a:da:74:36:97:f9:c0:2e:20:91:32:78:59:03:68:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Mar 7 19:16:38 2026 GMT Not After : Mar 10 21:26:38 2026 GMT Subject: CN=D9E37B2CD897E9B0CD99CA49C0A9C29F3F25B845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:f1:d5:ca:00:98:22:12:ab:1a:4e:6b:e3: 5b:cf:84:d1:cf:6c:69:a7:1c:25:73:b5:57:e1:67: 36:e7:a2:87:5b:9b:52:63:10:4f:88:53:cd:8e:81: 00:97:0a:89:02:98:31:f8:9d:b6:cb:f5:88:5b:12: d2:79:dc:ef:3e:03:1d:13:9a:d4:cc:96:cf:53:51: 9c:44:92:4e:ec:71:34:47:ff:fa:8d:60:80:91:41: 6a:48:7b:ca:8c:8a:52:93:62:92:6e:90:4c:b4:6c: 62:af:c1:a8:26:27:24:7a:d0:dc:30:b3:0e:4f:12: 87:48:16:9a:a1:6d:24:72:2c:20:d9:bd:2e:17:8d: 6d:87:d0:33:82:7e:d2:66:92:fa:09:ec:49:c4:f7: 10:2b:cd:29:67:3a:4c:b9:a8:34:2a:24:56:90:0d: c7:8b:ad:84:1c:dd:60:e9:25:97:35:c8:ce:0a:45: 98:a9:b9:f1:04:5c:d6:d3:a5:0e:88:c2:f8:97:54: 7a:0e:32:14:7a:36:52:3c:3b:cf:13:6f:04:c6:66: 7e:7b:d2:2c:c8:0e:6e:71:56:8f:23:ae:7f:82:21: 91:7d:72:29:3d:12:24:8f:7b:ef:95:24:c8:ab:cb: 5d:08:fd:cf:ab:56:f0:f5:ed:51:19:53:7a:89:66: 18:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E3:7B:2C:D8:97:E9:B0:CD:99:CA:49:C0:A9:C2:9F:3F:25:B8:45 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6f:17:f5:3f:dd:2e:34:a4:47:91:7c:2f:d0:64:13:f2:cb: 5e:c0:0a:b5:30:b5:10:e2:f9:55:c3:9b:ec:33:0f:ef:7c:c7: d6:ae:27:bf:14:10:e4:ea:6e:61:3d:be:2d:ac:7c:47:6f:ae: 8b:73:cb:59:6a:08:92:e1:84:d1:b5:a6:56:cf:3d:b1:71:cc: e7:16:20:4e:5f:2b:f5:b6:fa:5d:c0:3c:4c:fa:f0:42:2c:0e: 0c:8a:ea:06:3e:37:6a:d2:35:d1:36:e5:84:e9:f8:ca:4a:e1: c9:a9:02:c7:72:17:0c:7c:b3:23:ee:b4:2f:85:38:2c:31:3f: a5:18:2e:57:17:6a:28:f9:aa:f3:74:70:13:29:95:a0:07:6c: af:90:4b:63:d8:6b:eb:70:63:85:06:e7:c3:3a:60:07:a4:ff: 94:71:b2:bf:78:a9:82:a2:18:ac:93:79:aa:e0:5f:f9:2e:5e: 20:8a:2d:bb:f3:96:f6:f8:f0:72:6b:1e:e4:57:b6:3a:77:f0: e7:b4:56:c8:63:2f:55:5c:22:71:73:a3:20:71:ac:8c:22:de: a8:62:d6:a4:74:d7:a5:a8:d4:cf:ce:4a:20:fd:3a:3f:e1:f7: ae:0f:bf:2f:b6:14:20:3c:2d:01:6c:e7:97:dd:b3:02:ea:6b: b2:ac:dc:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSl6B04radDaX+cAuIJEyeFkDaJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNjAzMDcxOTE2MzhaFw0yNjAzMTAyMTI2MzhaMDMxMTAvBgNV BAMTKEQ5RTM3QjJDRDg5N0U5QjBDRDk5Q0E0OUMwQTlDMjlGM0YyNUI4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0fHVygCYIhKrGk5r41vPhNHP bGmnHCVztVfhZzbnoodbm1JjEE+IU82OgQCXCokCmDH4nbbL9YhbEtJ53O8+Ax0T mtTMls9TUZxEkk7scTRH//qNYICRQWpIe8qMilKTYpJukEy0bGKvwagmJyR60Nww sw5PEodIFpqhbSRyLCDZvS4XjW2H0DOCftJmkvoJ7EnE9xArzSlnOky5qDQqJFaQ DceLrYQc3WDpJZc1yM4KRZipufEEXNbTpQ6IwviXVHoOMhR6NlI8O88TbwTGZn57 0izIDm5xVo8jrn+CIZF9cik9EiSPe++VJMiry10I/c+rVvD17VEZU3qJZhhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2eN7LNiX6bDNmcpJwKnCnz8luEUwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJvF/U/3S40pEeRfC/QZBPyy17ACrUwtRDi +VXDm+wzD+98x9auJ78UEOTqbmE9vi2sfEdvrotzy1lqCJLhhNG1plbPPbFxzOcW IE5fK/W2+l3APEz68EIsDgyK6gY+N2rSNdE25YTp+MpK4cmpAsdyFwx8syPutC+F OCwxP6UYLlcXaij5qvN0cBMplaAHbK+QS2PYa+twY4UG58M6YAek/5Rxsr94qYKi GKyTeargX/kuXiCKLbvzlvb48HJrHuRXtjp38Oe0VshjL1VcInFzoyBxrIwi3qhi 1qR016Wo1M/OSiD9Oj/h964Pvy+2FCA8LQFs55fdswLqa7Ks3CM= -----END CERTIFICATE-----Generated at Sun Mar 8 00:35:26 2026 by rpki-client