$ rpki-client -vvf repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft File: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft (raw, json) Hash identifier: 2AdYQgLk3uayKvlBeqsSW99ZtelRgpUfsnIl5wbAXQo= Subject key identifier: 5F:EF:51:C5:80:FD:BE:94:CF:40:57:A6:30:06:F9:32:D3:C1:43:D1 Authority key identifier: BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B Certificate issuer: /CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Certificate serial: 7EF3C36E80EE35DBA93B1F3AE91A921C15DAD1E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft Manifest number: 0262 Signing time: Mon 06 Apr 2026 07:04:37 +0000 Manifest this update: Mon 06 Apr 2026 06:59:37 +0000 Manifest next update: Thu 09 Apr 2026 13:59:37 +0000 Files and hashes: 1: BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl (hash: xZKsiXYdtNQVMEb5KbeOH6jo0BUSJnuNCYuht4AU/9k=) 2: 3130332e3133352e3135322e302f32322d3234203d3e203338333230.roa (hash: 81Yavjh0tBgqOD2LG93B99P1R7pxlNeQ3paJ3IfaK4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Apr 2026 13:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f3:c3:6e:80:ee:35:db:a9:3b:1f:3a:e9:1a:92:1c:15:da:d1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B Validity Not Before: Apr 6 06:59:37 2026 GMT Not After : Apr 9 13:59:37 2026 GMT Subject: CN=5FEF51C580FDBE94CF4057A63006F932D3C143D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ec:62:1c:e8:5e:83:8a:a7:63:b2:2f:c8:2a: 22:ba:e0:22:74:42:7d:d4:26:2f:08:b6:91:86:3d: 32:42:b6:5a:75:85:e9:6a:00:5a:39:e1:72:72:6a: 67:27:ca:2f:ad:81:d5:94:1f:4c:8e:22:93:af:4b: cc:40:e7:ca:ce:39:a7:e1:93:3b:f1:3e:28:38:6b: 79:7c:3d:5f:51:be:c5:a8:6f:14:63:01:d3:08:ac: 76:de:a5:db:e8:b3:4a:23:db:81:96:27:a4:e8:fd: 39:22:14:25:89:90:df:0c:b3:39:5e:cd:1d:d7:4e: 89:57:78:5d:db:1b:af:34:06:73:d3:6a:0d:82:76: c9:89:c0:70:ca:4e:aa:cc:f0:83:98:56:54:d0:4b: 38:06:88:45:75:b3:19:5d:68:5c:58:0e:a6:ff:10: 03:38:dd:05:ca:41:46:bf:9f:46:d1:75:e3:37:18: 4f:46:5e:10:bb:9c:29:de:e8:95:c0:26:2e:90:03: 29:52:5b:37:c7:fb:b7:3f:96:68:8a:7e:58:8f:8f: 57:ec:86:af:2e:fd:22:a0:24:74:c7:07:1c:11:c6: 70:85:d5:e1:2f:76:e2:81:6b:73:a5:96:e2:41:29: c5:31:b9:ed:78:6a:a9:4a:f7:07:0d:b2:ad:82:4e: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EF:51:C5:80:FD:BE:94:CF:40:57:A6:30:06:F9:32:D3:C1:43:D1 X509v3 Authority Key Identifier: keyid:BB:8E:14:FC:AD:3A:F2:EF:30:A8:F5:69:63:39:D6:F7:DF:5D:73:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da4ef71-f0e0-4252-8160-505321fa5089/0/BB8E14FCAD3AF2EF30A8F5696339D6F7DF5D735B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:97:32:a6:98:b3:22:87:0d:b8:38:b2:62:36:ed:67:4c:9f: 55:10:6e:1f:5e:27:d7:3b:a0:0a:77:87:43:ab:60:28:51:ba: 47:51:52:80:7f:ab:89:fd:8d:e4:93:fb:47:82:f0:03:3b:c0: fc:95:43:89:de:b9:95:12:0d:b3:ab:16:4f:52:6e:4d:ac:1a: 6d:5a:35:0c:a3:b7:ec:49:b4:2f:bf:00:42:6a:f5:3a:dd:09: ac:c4:9b:e0:76:a9:5f:f2:2d:81:7d:d8:cd:3a:20:2f:f2:43: fa:e4:c7:55:a9:94:dc:4f:84:dd:f4:5c:3b:91:64:99:bd:37: aa:81:7f:a2:d1:bb:a1:a8:93:43:f1:a4:02:e2:0a:39:9a:ab: 1b:4c:05:6c:3b:aa:9f:d5:17:ad:64:cf:f6:f0:37:78:9a:03: 55:dc:58:0c:15:04:bf:d8:08:97:75:4c:be:ff:bd:f7:a7:9e: 74:2d:af:e8:6c:7a:af:c8:4d:86:c2:84:93:b5:7d:40:5c:08: cb:8e:d4:49:e3:7c:ea:c6:6a:16:0f:b4:3a:6d:17:fa:a0:da: 0f:1b:57:ca:a7:31:58:d2:16:13:83:9d:c4:15:58:85:45:c5: 24:ed:fb:cc:da:12:fe:1b:46:ef:86:45:3d:27:ba:6c:e8:8a: 5d:65:24:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvPDboDuNdupOx866RqSHBXa0ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdE RjVENzM1QjAeFw0yNjA0MDYwNjU5MzdaFw0yNjA0MDkxMzU5MzdaMDMxMTAvBgNV BAMTKDVGRUY1MUM1ODBGREJFOTRDRjQwNTdBNjMwMDZGOTMyRDNDMTQzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg7GIc6F6Diqdjsi/IKiK64CJ0 Qn3UJi8ItpGGPTJCtlp1helqAFo54XJyamcnyi+tgdWUH0yOIpOvS8xA58rOOafh kzvxPig4a3l8PV9RvsWobxRjAdMIrHbepdvos0oj24GWJ6To/TkiFCWJkN8Mszle zR3XTolXeF3bG680BnPTag2CdsmJwHDKTqrM8IOYVlTQSzgGiEV1sxldaFxYDqb/ EAM43QXKQUa/n0bRdeM3GE9GXhC7nCne6JXAJi6QAylSWzfH+7c/lmiKfliPj1fs hq8u/SKgJHTHBxwRxnCF1eEvduKBa3OlluJBKcUxue14aqlK9wcNsq2CTrNTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+9RxYD9vpTPQFemMAb5MtPBQ9EwHwYDVR0j BBgwFoAUu44U/K068u8wqPVpYznW999dc1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGE0ZWY3MS1mMGUwLTQyNTItODE2MC01MDUzMjFmYTUwODkvMC9CQjhFMTRGQ0FE M0FGMkVGMzBBOEY1Njk2MzM5RDZGN0RGNUQ3MzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2RjdERjVE NzM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhNGVmNzEtZjBlMC00MjUyLTgx NjAtNTA1MzIxZmE1MDg5LzAvQkI4RTE0RkNBRDNBRjJFRjMwQThGNTY5NjMzOUQ2 RjdERjVENzM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaXMqaYsyKHDbg4smI27WdMn1UQbh9eJ9c7 oAp3h0OrYChRukdRUoB/q4n9jeST+0eC8AM7wPyVQ4neuZUSDbOrFk9Sbk2sGm1a NQyjt+xJtC+/AEJq9TrdCazEm+B2qV/yLYF92M06IC/yQ/rkx1WplNxPhN30XDuR ZJm9N6qBf6LRu6Gok0PxpALiCjmaqxtMBWw7qp/VF61kz/bwN3iaA1XcWAwVBL/Y CJd1TL7/vfennnQtr+hseq/ITYbChJO1fUBcCMuO1EnjfOrGahYPtDptF/qg2g8b V8qnMVjSFhODncQVWIVFxSTt+8zaEv4bRu+GRT0numzoil1lJBE= -----END CERTIFICATE-----Generated at Mon Apr 6 14:54:47 2026 by rpki-client