$ rpki-client -vvf repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft File: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft (raw, json) Hash identifier: FrHh6WrZEAVnR8f14mx/jL9be+GZ6bYpjiazi85GiB8= Subject key identifier: 05:D8:8D:14:30:4C:0A:C3:41:AA:70:AD:AC:A6:7C:81:21:E9:BE:D0 Authority key identifier: BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A Certificate issuer: /CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Certificate serial: 284068D75B8A845697B4CA67817632DACD4B53BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft Manifest number: 0136 Signing time: Wed 15 Apr 2026 21:41:21 +0000 Manifest this update: Wed 15 Apr 2026 21:36:21 +0000 Manifest next update: Sun 19 Apr 2026 04:34:21 +0000 Files and hashes: 1: BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl (hash: +0z9PfEXBypUgkthFx+0/3X240J6OnftDt01U0CBqDw=) 2: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Qnnyi7gDeduqFHoOxDm0ej6IIeZV5kqDiu4+i5De3ZI=) 3: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: gHM5luFeEetgfWqiMHhu+lVFx8B4n56uDW1XsI2WvsE=) 4: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: foPeH94YxJOh2Wqv5gS26d6PmcQkpAdiKm2Z3R4p/G4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:68:d7:5b:8a:84:56:97:b4:ca:67:81:76:32:da:cd:4b:53:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD9B7A89C85E0DF6786F5BD51D4B7D963618231A Validity Not Before: Apr 15 21:36:21 2026 GMT Not After : Apr 19 04:34:21 2026 GMT Subject: CN=05D88D14304C0AC341AA70ADACA67C8121E9BED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:fe:ec:1c:15:80:91:65:dc:e1:f4:4e:d7: e5:b9:d6:5a:a8:d9:08:4f:d6:c6:26:f4:64:62:84: 85:10:c9:33:08:e7:40:c9:c7:7a:0c:8c:ba:3d:18: 88:4f:e9:41:ce:2f:43:54:ef:0e:7e:d6:d1:83:6e: 7a:ec:47:10:67:3e:19:91:92:20:32:84:f5:2b:02: 48:74:83:23:02:cb:11:37:28:c4:92:14:e9:0d:fd: 10:df:4b:a9:18:e0:73:d1:96:08:76:db:41:11:14: 79:61:20:d1:93:59:df:f5:ca:86:72:57:22:b5:e8: b6:fd:0d:3c:a0:00:95:1e:5c:3e:df:91:33:28:d4: 44:7a:e0:0d:5e:17:32:9b:45:bf:8c:5f:16:29:99: 85:93:89:dd:fb:7a:c5:48:7e:fb:fa:35:be:0c:3b: 9e:30:02:9a:76:15:f4:c5:e0:5c:12:7d:35:fa:5a: ed:68:c1:09:a9:8a:4c:25:fd:e5:e8:11:e0:d2:a4: 2e:4e:64:58:db:65:13:3b:e2:ab:42:38:10:3e:7b: 64:29:2a:25:02:0f:5d:44:be:3b:3c:e3:c3:d7:ab: 46:60:06:84:43:5d:00:ae:fd:92:1f:f6:b0:9f:9b: 81:f7:4a:ca:5b:4b:3f:0e:ba:3d:e4:1f:6d:40:54: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:8D:14:30:4C:0A:C3:41:AA:70:AD:AC:A6:7C:81:21:E9:BE:D0 X509v3 Authority Key Identifier: keyid:BD:9B:7A:89:C8:5E:0D:F6:78:6F:5B:D5:1D:4B:7D:96:36:18:23:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BD9B7A89C85E0DF6786F5BD51D4B7D963618231A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d1:43:63:c6:69:da:06:e5:05:8d:02:b0:0b:8c:4a:fd:b9: dc:18:13:f1:57:5a:36:8d:b5:c5:e4:a0:e6:95:fe:bc:42:d2: 61:18:57:b8:a1:67:03:e3:74:23:e6:cf:ea:08:87:bf:f8:0e: 9f:82:59:4a:43:8b:84:c2:7c:93:2f:64:8e:fa:0b:26:1b:16: 56:3b:43:f2:16:ec:f7:dd:9e:a6:17:ff:99:99:fe:62:2a:f1: e9:17:86:d9:4e:34:1a:4b:93:d6:6c:7b:3c:66:8a:13:0a:49: 0c:11:31:b0:6d:e6:c3:db:3d:b9:1b:5f:78:8a:a5:66:72:31: 30:7a:fb:98:84:82:0a:e1:5c:59:38:94:9b:80:43:66:34:b7: 61:f8:86:ed:d1:47:a0:c0:c5:2a:76:94:6b:0a:cd:bf:d1:1c: 06:6e:4e:f4:03:2e:f8:ca:a0:86:a0:25:bd:a1:55:30:85:c9: 34:ec:fc:2c:60:1f:dc:5c:33:23:4a:70:51:30:5e:9b:c3:27: 4d:05:b1:85:72:bb:fa:12:ce:df:b3:c1:4f:9c:01:7f:5e:95: cb:58:8b:3a:30:09:4f:8d:83:5d:ba:6e:ca:b3:1a:f4:67:a9: 19:da:ae:6c:b5:2c:74:af:72:3a:a8:4a:52:7a:ef:86:48:66: 57:b5:f1:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEBo11uKhFaXtMpngXYy2s1LU78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYz NjE4MjMxQTAeFw0yNjA0MTUyMTM2MjFaFw0yNjA0MTkwNDM0MjFaMDMxMTAvBgNV BAMTKDA1RDg4RDE0MzA0QzBBQzM0MUFBNzBBREFDQTY3QzgxMjFFOUJFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW7f7sHBWAkWXc4fRO1+W51lqo 2QhP1sYm9GRihIUQyTMI50DJx3oMjLo9GIhP6UHOL0NU7w5+1tGDbnrsRxBnPhmR kiAyhPUrAkh0gyMCyxE3KMSSFOkN/RDfS6kY4HPRlgh220ERFHlhINGTWd/1yoZy VyK16Lb9DTygAJUeXD7fkTMo1ER64A1eFzKbRb+MXxYpmYWTid37esVIfvv6Nb4M O54wApp2FfTF4FwSfTX6Wu1owQmpikwl/eXoEeDSpC5OZFjbZRM74qtCOBA+e2Qp KiUCD11Evjs848PXq0ZgBoRDXQCu/ZIf9rCfm4H3SspbSz8Ouj3kH21AVEZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdiNFDBMCsNBqnCtrKZ8gSHpvtAwHwYDVR0j BBgwFoAUvZt6icheDfZ4b1vVHUt9ljYYIxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzYwNjZlOC04ZTE5LTRkZTctOTQ3Yi05NGVlM2NkMDlmODUvMC9CRDlCN0E4OUM4 NUUwREY2Nzg2RjVCRDUxRDRCN0Q5NjM2MTgyMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdEOTYzNjE4 MjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkQ5QjdBODlDODVFMERGNjc4NkY1QkQ1MUQ0QjdE OTYzNjE4MjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLRQ2PGadoG5QWNArALjEr9udwYE/FXWjaN tcXkoOaV/rxC0mEYV7ihZwPjdCPmz+oIh7/4Dp+CWUpDi4TCfJMvZI76CyYbFlY7 Q/IW7PfdnqYX/5mZ/mIq8ekXhtlONBpLk9ZsezxmihMKSQwRMbBt5sPbPbkbX3iK pWZyMTB6+5iEggrhXFk4lJuAQ2Y0t2H4hu3RR6DAxSp2lGsKzb/RHAZuTvQDLvjK oIagJb2hVTCFyTTs/CxgH9xcMyNKcFEwXpvDJ00FsYVyu/oSzt+zwU+cAX9elctY izowCU+Ng126bsqzGvRnqRnarmy1LHSvcjqoSlJ674ZIZle18V4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:29:52 2026 by rpki-client