$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: J4EbAjAOcaZUePP6Yrbb+mmKa6VfeDNsJfnwzez+LGE= Subject key identifier: 88:BE:EB:1C:C1:F6:1E:34:94:7A:A2:35:81:14:02:97:3D:A5:CA:CC Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 2E48EB3500F2FE47A240364A3AFD74D9E59E9342 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 026D Signing time: Thu 16 Apr 2026 12:41:40 +0000 Manifest this update: Thu 16 Apr 2026 12:36:40 +0000 Manifest next update: Sun 19 Apr 2026 23:02:40 +0000 Files and hashes: 1: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: BzWbIaOgNkWtnK5nCo/eiYIiu2cl4PvBOKG0mtj90aA=) 2: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: e8eIFrn/eUH5duTImnVIIrZAb8UtgLMsSB2c7nTYPik=) 3: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:48:eb:35:00:f2:fe:47:a2:40:36:4a:3a:fd:74:d9:e5:9e:93:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Apr 16 12:36:40 2026 GMT Not After : Apr 19 23:02:40 2026 GMT Subject: CN=88BEEB1CC1F61E34947AA235811402973DA5CACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fa:4b:c7:dc:69:4a:2c:00:a1:5b:90:19:68: c7:fa:98:d4:a3:58:a6:bc:75:7d:07:c8:2c:2e:f0: 2c:28:49:26:fb:70:a1:fc:1a:d1:6d:79:69:ea:79: 09:8c:29:68:76:29:d3:2a:4c:fb:69:ab:d6:83:26: 5a:b2:82:e3:7e:1f:c5:cc:80:64:f0:02:fa:38:13: 27:ba:55:d9:c9:a7:2a:5f:62:f4:6f:7b:92:44:6e: 3a:8c:52:0a:d9:47:32:b3:7b:1f:8e:99:e4:d3:84: 38:4b:94:b4:15:7d:84:fa:ae:cc:a9:cc:ed:a8:43: 9e:31:91:f7:ad:b7:49:dc:9a:6d:b4:d2:43:f0:04: cc:8f:3f:d5:8b:32:1e:ae:f1:22:af:31:bf:0d:2b: 76:14:7e:74:2f:22:a2:1f:87:e9:c5:25:4c:c1:26: be:cc:a2:dc:28:e0:cb:3f:09:b1:ae:90:a6:90:c4: dd:cd:31:67:c5:b6:5e:60:d4:78:a3:85:9b:47:a3: 9c:7f:75:66:23:ec:05:06:aa:aa:ba:9c:af:aa:b2: 2e:70:74:51:be:9c:49:b7:5e:fe:f5:ec:b9:e2:c8: ee:46:35:5e:df:fd:d2:e2:3a:91:e8:82:d7:c8:d3: 8f:2f:b5:5c:7b:cd:09:b9:f0:ef:c1:51:40:38:2a: 45:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:BE:EB:1C:C1:F6:1E:34:94:7A:A2:35:81:14:02:97:3D:A5:CA:CC X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f1:1f:5d:39:32:da:7b:f0:c3:56:87:cd:53:39:a0:be:33: f4:53:b6:ca:05:01:8b:34:d9:70:42:29:85:5a:fc:e6:f5:46: 36:5b:95:71:9e:86:3b:38:b7:00:a7:6c:34:e3:d5:9a:4c:4b: 18:df:e0:c8:b6:42:e4:fb:27:e5:18:27:6b:3c:58:7f:cf:d4: 4c:11:46:c0:58:ac:dc:d0:7a:3e:50:85:c4:7a:91:0d:25:cc: 28:f2:9c:41:55:0e:ed:17:bc:3a:98:73:35:c2:0d:1e:60:54: 69:ef:3e:60:fe:0d:8d:21:85:af:e1:11:f3:e0:dd:64:82:b6: 4e:eb:1d:8a:dd:07:b1:c7:c1:cb:ff:be:08:09:23:b6:00:03: e0:df:a4:12:f4:84:e6:f7:96:7c:84:f2:5b:e3:3e:24:36:c8: 38:7f:54:72:17:62:c4:91:4b:07:b1:84:7a:b9:7f:e2:4a:ee: ae:46:a5:b2:02:a3:71:7c:76:b0:94:e5:d8:5c:e5:c0:88:2c: b5:fd:0a:94:b2:fb:fc:6a:3c:9c:bf:42:d6:cc:33:bf:c4:a2: ec:a6:5d:29:67:df:46:f8:e1:a8:f6:e0:34:a3:e0:2b:5b:71: 60:0b:2b:66:9a:b8:2b:9a:0b:c6:e1:4a:50:3c:de:85:e8:40: da:bc:5e:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULkjrNQDy/keiQDZKOv102eWek0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNjA0MTYxMjM2NDBaFw0yNjA0MTkyMzAyNDBaMDMxMTAvBgNV BAMTKDg4QkVFQjFDQzFGNjFFMzQ5NDdBQTIzNTgxMTQwMjk3M0RBNUNBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY+kvH3GlKLAChW5AZaMf6mNSj WKa8dX0HyCwu8CwoSSb7cKH8GtFteWnqeQmMKWh2KdMqTPtpq9aDJlqyguN+H8XM gGTwAvo4Eye6VdnJpypfYvRve5JEbjqMUgrZRzKzex+OmeTThDhLlLQVfYT6rsyp zO2oQ54xkfett0ncmm200kPwBMyPP9WLMh6u8SKvMb8NK3YUfnQvIqIfh+nFJUzB Jr7Motwo4Ms/CbGukKaQxN3NMWfFtl5g1HijhZtHo5x/dWYj7AUGqqq6nK+qsi5w dFG+nEm3Xv717LniyO5GNV7f/dLiOpHogtfI048vtVx7zQm58O/BUUA4KkULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiL7rHMH2HjSUeqI1gRQClz2lyswwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvxH105Mtp78MNWh81TOaC+M/RTtsoFAYs0 2XBCKYVa/Ob1RjZblXGehjs4twCnbDTj1ZpMSxjf4Mi2QuT7J+UYJ2s8WH/P1EwR RsBYrNzQej5QhcR6kQ0lzCjynEFVDu0XvDqYczXCDR5gVGnvPmD+DY0hha/hEfPg 3WSCtk7rHYrdB7HHwcv/vggJI7YAA+DfpBL0hOb3lnyE8lvjPiQ2yDh/VHIXYsSR SwexhHq5f+JK7q5GpbICo3F8drCU5dhc5cCILLX9CpSy+/xqPJy/QtbMM7/Eouym XSln30b44aj24DSj4CtbcWALK2aauCuaC8bhSlA83oXoQNq8XmY= -----END CERTIFICATE-----Generated at Fri Apr 17 09:38:25 2026 by rpki-client