$ rpki-client -vvf repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft File: BF3B675AEBEE64D00B323056545D1F630F1C489E.mft (raw, json) Hash identifier: W+87OTRU2froF2SX0KJfirCMqppX1Oqg3GusUSPVZWs= Subject key identifier: E2:14:B0:9A:94:60:20:3D:D2:F6:0C:6F:B1:33:0B:8C:F2:25:9A:00 Authority key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Certificate issuer: /CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Certificate serial: 2C39506DFA82E5668B8BD6E39C8107219D6D9550 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft Manifest number: 056A Signing time: Fri 17 Apr 2026 09:40:56 +0000 Manifest this update: Fri 17 Apr 2026 09:35:56 +0000 Manifest next update: Mon 20 Apr 2026 13:55:56 +0000 Files and hashes: 1: BF3B675AEBEE64D00B323056545D1F630F1C489E.crl (hash: VkggHWPw9DANBoPq3TRXhcJqOEzPemg1Mwe+1VuXJ4c=) 2: 3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (hash: GYZuxR+Zqxd6pxL2lTHKcyVNBpecVMAB2ZosCkKojM0=) 3: 3230322e3135312e382e302f32322d3234203d3e2039373835.roa (hash: J6bQJ2rdsim2ttJlJ/Bk72O/5PQxeXoEvre44CKnHWo=) 4: 3232332e3136342e302e302f31362d3234203d3e2039373835.roa (hash: GqlYotz76qpsvx0YbP1++o+soFVawkjmgw8JjYGM37s=) 5: 323430333a373230303a3a2f33322d3438203d3e2039373835.roa (hash: CtyzufwtsM1OsMWgnYCmXW6JoR/5zQKHjokkqsxGYYM=) 6: 3230322e36392e39362e302f32302d3234203d3e20313331363931.roa (hash: levW4fK5Av9j8+txVVV15SprxZ5Vl8IniN5F3a6MoCA=) 7: 3131362e3231332e34382e302f32302d3234203d3e2039373835.roa (hash: ILkXkfNJzfGzwTYNzRYQw2a7890NKmPmydyWQw+HB7E=) 8: 3230322e36392e39362e302f32302d3234203d3e2039373835.roa (hash: 9zTx3s0a2rHUUwPutdrNSjBytv6Kk1GTM8S/civ+mWo=) 9: 3232302e3135372e39362e302f32302d3234203d3e2039373835.roa (hash: HNZfntXqIdjS6Oc1nk9EDrt/Ny6J1wp1N0wmznQcons=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:39:50:6d:fa:82:e5:66:8b:8b:d6:e3:9c:81:07:21:9d:6d:95:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Validity Not Before: Apr 17 09:35:56 2026 GMT Not After : Apr 20 13:55:56 2026 GMT Subject: CN=E214B09A9460203DD2F60C6FB1330B8CF2259A00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:45:f7:44:79:9b:bd:40:5e:91:33:96:ac:e1: 26:85:de:43:7a:ad:f8:ab:b6:81:bb:67:26:65:ed: c8:cc:fa:99:23:df:d5:29:aa:c8:1a:03:17:9b:47: 77:be:2f:c0:08:19:60:3d:1a:16:cd:cc:df:2e:de: 24:92:2e:f3:20:10:40:bc:da:1f:ee:31:ad:68:b7: a2:e0:a0:7e:aa:bf:f1:6a:8d:64:a4:0f:d1:a4:59: c8:24:86:ce:a8:05:4b:e2:7e:64:29:81:d9:bb:0f: 67:3d:91:17:60:17:88:ee:a4:65:d3:59:b6:54:9c: fe:71:5f:9a:73:3b:4f:0c:47:0f:6d:03:a1:e7:a6: c9:a5:82:23:50:e7:ea:77:90:b7:0d:22:0e:ac:8a: a7:97:34:8c:3c:50:7e:c3:0c:aa:32:da:bd:14:96: bd:c1:95:87:63:68:e3:2f:4f:d1:86:13:57:6b:38: cd:65:99:99:76:b9:80:13:48:db:2a:2d:74:51:4c: 90:2a:1f:e0:d7:cf:57:2d:5b:bc:92:4f:8c:35:7f: e7:5b:b6:12:08:69:c6:5a:e8:80:99:88:e9:a8:e6: bc:8d:d6:af:14:68:b4:a4:5c:de:f7:b1:6d:90:37: a0:28:06:ff:5c:57:74:c6:f8:2b:97:a3:ca:fe:b3: 76:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:14:B0:9A:94:60:20:3D:D2:F6:0C:6F:B1:33:0B:8C:F2:25:9A:00 X509v3 Authority Key Identifier: keyid:BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:c4:de:8c:09:74:0f:ae:aa:7d:c8:04:ce:91:eb:9c:78: 5b:b3:b1:2f:54:d6:73:4a:c7:28:8d:e9:6c:cd:28:0e:cb:dc: c6:c1:e5:13:8a:8f:1f:1c:75:e9:8a:c1:56:28:c6:ce:2c:54: ad:a1:03:eb:96:0a:2c:ce:96:bd:74:9e:e4:4f:0a:6b:de:b9: da:89:35:9e:e8:3c:fe:9d:3d:94:36:e1:ab:a8:de:1d:e4:ff: 23:0a:f1:23:da:a3:5f:0f:ff:6f:92:57:a1:df:06:f9:8b:23: 20:00:ef:73:51:12:31:2d:66:f5:88:b4:45:24:a5:43:10:54: 29:6f:4e:15:a2:1e:57:cc:a2:62:cc:99:19:f6:3d:4b:7d:dc: 43:b8:07:4b:b8:11:54:41:1f:2e:44:d8:c6:62:b5:36:96:03: a6:74:36:78:59:c9:67:3c:24:7e:6c:9d:e4:ba:88:f3:17:c9: 5a:72:18:0f:61:e6:47:e2:3b:f7:0c:c2:c5:bb:a9:9f:f7:af: e5:ee:00:02:42:bd:fb:bb:26:f1:72:64:13:3a:52:b7:1c:c8: 88:26:80:5c:44:68:1c:38:3d:0c:20:73:b1:7a:d6:f9:60:6a: 76:92:e8:3f:b5:ef:4a:aa:15:26:3f:c7:fb:f4:a4:41:eb:2f: c3:49:bd:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDlQbfqC5WaLi9bjnIEHIZ1tlVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMw RjFDNDg5RTAeFw0yNjA0MTcwOTM1NTZaFw0yNjA0MjAxMzU1NTZaMDMxMTAvBgNV BAMTKEUyMTRCMDlBOTQ2MDIwM0REMkY2MEM2RkIxMzMwQjhDRjIyNTlBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRRfdEeZu9QF6RM5as4SaF3kN6 rfirtoG7ZyZl7cjM+pkj39UpqsgaAxebR3e+L8AIGWA9GhbNzN8u3iSSLvMgEEC8 2h/uMa1ot6LgoH6qv/FqjWSkD9GkWcgkhs6oBUvifmQpgdm7D2c9kRdgF4jupGXT WbZUnP5xX5pzO08MRw9tA6HnpsmlgiNQ5+p3kLcNIg6siqeXNIw8UH7DDKoy2r0U lr3BlYdjaOMvT9GGE1drOM1lmZl2uYATSNsqLXRRTJAqH+DXz1ctW7yST4w1f+db thIIacZa6ICZiOmo5ryN1q8UaLSkXN73sW2QN6AoBv9cV3TG+CuXo8r+s3YZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4hSwmpRgID3S9gxvsTMLjPIlmgAwHwYDVR0j BBgwFoAUvztnWuvuZNALMjBWVF0fYw8cSJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMC9CRjNCNjc1QUVC RUU2NEQwMEIzMjMwNTY1NDVEMUY2MzBGMUM0ODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFGNjMwRjFD NDg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkwYzkwMDktYWQ1My00ZmE2LWEx ODMtMzRiMzQ1N2JlYTAzLzAvQkYzQjY3NUFFQkVFNjREMDBCMzIzMDU2NTQ1RDFG NjMwRjFDNDg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG04xN6MCXQPrqp9yATOkeuceFuzsS9U1nNK xyiN6WzNKA7L3MbB5ROKjx8cdemKwVYoxs4sVK2hA+uWCizOlr10nuRPCmveudqJ NZ7oPP6dPZQ24auo3h3k/yMK8SPao18P/2+SV6HfBvmLIyAA73NREjEtZvWItEUk pUMQVClvThWiHlfMomLMmRn2PUt93EO4B0u4EVRBHy5E2MZitTaWA6Z0NnhZyWc8 JH5sneS6iPMXyVpyGA9h5kfiO/cMwsW7qZ/3r+XuAAJCvfu7JvFyZBM6UrccyIgm gFxEaBw4PQwgc7F61vlganaS6D+170qqFSY/x/v0pEHrL8NJvSg= -----END CERTIFICATE-----Generated at Fri Apr 17 20:42:25 2026 by rpki-client