$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft File: BD809D8A065DB595DC069383736A1A9C4A96B267.mft (raw, json) Hash identifier: 1aI9sejvW3MQOBpCCqt3taFe3yC7sD4vrzMRy3yqXVQ= Subject key identifier: CD:2B:0C:15:33:7C:06:B5:26:84:B3:FD:CC:DC:A0:31:68:08:E2:F8 Authority key identifier: BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 Certificate issuer: /CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Certificate serial: 542745F3EF34F516458540B4E8FE4447B4379567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft Manifest number: 056D Signing time: Wed 22 Apr 2026 07:02:22 +0000 Manifest this update: Wed 22 Apr 2026 06:57:22 +0000 Manifest next update: Sat 25 Apr 2026 17:11:22 +0000 Files and hashes: 1: 34352e3132372e3133332e302f32342d3234203d3e203538343737.roa (hash: m1RDFs81kJe7cLkzIuvESdF6lsbsj7FMYtNBuW0nGcE=) 2: 3130332e35362e3230372e302f32342d3234203d3e203538343737.roa (hash: +FaWxeyMSXTm1A2YbWkKpjjxd9ODF5R6bPfmYjsvC3c=) 3: 3130332e35362e3230352e302f32342d3234203d3e203538343737.roa (hash: Y6tvd+1XtHiukr4Lnc++EG2e4/MBcfeHFg9Xd0kGFMg=) 4: 3130332e35362e3230342e302f32342d3234203d3e203538343737.roa (hash: E6oSwKyWxejOo/v5HHitngqUwJ84vi0WR9s9o+kQ4qc=) 5: 34352e3132372e3133322e302f32342d3234203d3e203538343737.roa (hash: 6P/MnisWmadZujdf0MdzBBem1MXVl8xw/vKYXqNcxoU=) 6: 34352e3132372e3133352e302f32342d3234203d3e20313335333630.roa (hash: lOPyN4jlxJmDfUm1Z5usitGLtQdiU+flslurwWQqLwM=) 7: 34352e3132372e3133342e302f32342d3234203d3e203538343737.roa (hash: mAHS4RhjFlyuuj4wSTCANOzW1BtppaUwbd4+LpgqV3A=) 8: 3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (hash: ctlL63La/nA2o80IyG4Gn5yERO9Svxh3VS6Tj8PS2Bk=) 9: BD809D8A065DB595DC069383736A1A9C4A96B267.crl (hash: vC2jQnU4RcwElqphWZzAfz9RZI1VRypv38RG8TpptpM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 16:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:27:45:f3:ef:34:f5:16:45:85:40:b4:e8:fe:44:47:b4:37:95:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD809D8A065DB595DC069383736A1A9C4A96B267 Validity Not Before: Apr 22 06:57:22 2026 GMT Not After : Apr 25 17:11:22 2026 GMT Subject: CN=CD2B0C15337C06B52684B3FDCCDCA0316808E2F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:85:a9:7f:f0:bb:46:34:3c:99:59:df:4e: d5:af:4c:e2:70:5c:4a:73:af:08:b5:5b:dd:dd:0f: 40:16:98:d6:66:23:f6:3c:e8:bc:2d:1d:94:ca:9d: ed:32:e1:e6:b8:93:f8:45:ae:3d:8d:60:e7:27:e1: fe:82:51:cc:28:6e:fe:f8:81:99:77:c3:ae:f3:f6: 39:40:ec:1a:d3:4f:65:f2:12:55:88:3e:24:82:10: 04:7a:a0:97:29:a4:48:a1:de:c1:a4:9d:8f:d5:3f: bc:61:a3:4f:79:0d:c5:ae:a6:99:56:f5:02:8a:88: 46:29:f9:ab:8e:e0:c7:f3:55:4f:ea:37:28:14:15: 9f:f1:55:10:e2:dc:eb:68:84:44:45:d2:45:05:59: fc:e5:f8:38:dc:f2:20:93:fb:50:b1:ae:7d:95:e0: c7:b5:ae:11:49:5a:6b:fa:17:0c:b5:c9:ce:95:db: eb:7a:fd:22:80:a2:41:12:72:9c:65:6a:fb:57:0f: 74:f0:bf:cd:6f:90:59:62:38:34:36:27:50:28:0f: d0:9f:b7:a0:23:35:80:95:a7:a1:8c:1d:b8:1a:64: ec:7e:96:f0:4e:68:90:c7:f8:b5:7a:72:34:21:f4: 90:a4:bf:b8:59:53:8a:77:cf:e6:f0:12:ab:01:8d: ed:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2B:0C:15:33:7C:06:B5:26:84:B3:FD:CC:DC:A0:31:68:08:E2:F8 X509v3 Authority Key Identifier: keyid:BD:80:9D:8A:06:5D:B5:95:DC:06:93:83:73:6A:1A:9C:4A:96:B2:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD809D8A065DB595DC069383736A1A9C4A96B267.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/BD809D8A065DB595DC069383736A1A9C4A96B267.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:7c:b3:2b:00:dd:66:ed:5e:4f:a1:d0:eb:b6:49:4d:05:82: 62:0e:67:d1:64:4b:80:b1:26:a5:f2:a4:c2:04:01:c7:e3:27: 37:ab:c7:6c:72:e8:b0:86:a9:b1:48:8b:ad:f3:80:90:1d:2f: a3:95:c2:4e:32:05:5b:c4:78:43:cd:51:82:86:d1:b7:e2:f5: c4:cd:66:0d:06:c5:fd:79:d8:af:a0:aa:dc:f5:2c:1b:22:f2: f6:4f:f8:b6:32:85:4f:b8:f4:37:d9:4e:70:bb:eb:dc:38:12: fc:db:29:13:59:00:e0:e1:56:8f:1d:a8:bc:82:af:c0:a1:bd: ec:de:d6:ce:fc:62:03:8c:79:24:ec:92:54:39:93:15:5d:ed: aa:26:49:ec:08:2c:db:80:b3:74:70:ca:50:33:92:d5:d0:2e: 77:b5:0b:d6:58:9f:23:d5:45:15:54:f5:c3:15:10:fd:ce:34: fa:8c:ff:e8:88:21:9c:49:24:e2:d2:a3:1a:2b:9a:5b:25:4c: 0e:69:cf:01:53:4e:73:39:38:30:a8:66:d9:92:39:41:7c:db: d6:a4:82:93:ce:30:5e:5a:70:bc:66:b4:ae:12:c6:d6:4e:d0: bf:bc:55:6d:cd:08:a6:38:3e:af:a7:bf:19:6a:ed:d3:51:3d: 16:fd:96:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCdF8+809RZFhUC06P5ER7Q3lWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0 QTk2QjI2NzAeFw0yNjA0MjIwNjU3MjJaFw0yNjA0MjUxNzExMjJaMDMxMTAvBgNV BAMTKENEMkIwQzE1MzM3QzA2QjUyNjg0QjNGRENDRENBMDMxNjgwOEUyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPIWpf/C7RjQ8mVnfTtWvTOJw XEpzrwi1W93dD0AWmNZmI/Y86LwtHZTKne0y4ea4k/hFrj2NYOcn4f6CUcwobv74 gZl3w67z9jlA7BrTT2XyElWIPiSCEAR6oJcppEih3sGknY/VP7xho095DcWupplW 9QKKiEYp+auO4MfzVU/qNygUFZ/xVRDi3OtohERF0kUFWfzl+Djc8iCT+1Cxrn2V 4Me1rhFJWmv6Fwy1yc6V2+t6/SKAokEScpxlavtXD3Twv81vkFliODQ2J1AoD9Cf t6AjNYCVp6GMHbgaZOx+lvBOaJDH+LV6cjQh9JCkv7hZU4p3z+bwEqsBje0DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzSsMFTN8BrUmhLP9zNygMWgI4vgwHwYDVR0j BBgwFoAUvYCdigZdtZXcBpODc2oanEqWsmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2Y4ZjU1Yy05ZTM1LTRjZTItODkwZi0wZGUzZTI0MDQ2MTEvMC9CRDgwOUQ4QTA2 NURCNTk1REMwNjkzODM3MzZBMUE5QzRBOTZCMjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFBOUM0QTk2 QjI2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmOGY1NWMtOWUzNS00Y2UyLTg5 MGYtMGRlM2UyNDA0NjExLzAvQkQ4MDlEOEEwNjVEQjU5NURDMDY5MzgzNzM2QTFB OUM0QTk2QjI2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV8sysA3WbtXk+h0Ou2SU0FgmIOZ9FkS4Cx JqXypMIEAcfjJzerx2xy6LCGqbFIi63zgJAdL6OVwk4yBVvEeEPNUYKG0bfi9cTN Zg0Gxf152K+gqtz1LBsi8vZP+LYyhU+49DfZTnC769w4EvzbKRNZAODhVo8dqLyC r8Chveze1s78YgOMeSTsklQ5kxVd7aomSewILNuAs3RwylAzktXQLne1C9ZYnyPV RRVU9cMVEP3ONPqM/+iIIZxJJOLSoxormlslTA5pzwFTTnM5ODCoZtmSOUF829ak gpPOMF5acLxmtK4SxtZO0L+8VW3NCKY4Pq+nvxlq7dNRPRb9lss= -----END CERTIFICATE-----Generated at Wed Apr 22 10:15:51 2026 by rpki-client