$ rpki-client -vvf repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft File: BD685C24FF8F432543C3E583484044A44E53067B.mft (raw, json) Hash identifier: y9oqtGp7jiWhD2/W/BJq6WLTzOTpnM+vN4NhrSRl3xY= Subject key identifier: 8C:09:EE:37:DD:79:9E:8D:EB:6F:FF:34:2B:98:B8:33:DA:01:63:7B Authority key identifier: BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B Certificate issuer: /CN=BD685C24FF8F432543C3E583484044A44E53067B Certificate serial: 0963280139B8AC057103B4BBFF71A8D1DC270622 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft Manifest number: 4C Signing time: Wed 15 Apr 2026 09:51:25 +0000 Manifest this update: Wed 15 Apr 2026 09:46:25 +0000 Manifest next update: Sat 18 Apr 2026 21:22:25 +0000 Files and hashes: 1: BD685C24FF8F432543C3E583484044A44E53067B.crl (hash: oDBELpAK4TjT/rLV9RRy2QWLgG6NOX5oNeq/dotXqLc=) 2: 3130332e38332e3139382e302f32342d3234203d3e20313336303931.roa (hash: dhpkhk04ab2tWVnfTiYy7HAwnFkFS5/nKq6B26Ta2Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 21:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:63:28:01:39:b8:ac:05:71:03:b4:bb:ff:71:a8:d1:dc:27:06:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD685C24FF8F432543C3E583484044A44E53067B Validity Not Before: Apr 15 09:46:25 2026 GMT Not After : Apr 18 21:22:25 2026 GMT Subject: CN=8C09EE37DD799E8DEB6FFF342B98B833DA01637B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:22:81:78:0d:e5:8f:48:90:b8:0a:04:36:e7: 94:da:51:32:b8:01:81:e1:25:95:c0:ba:6d:3a:45: a8:55:86:63:d4:67:e2:fc:97:f6:76:48:11:16:a1: a8:4a:4f:bf:1b:ae:a9:48:79:cc:64:2d:38:d2:b0: 81:4d:7c:59:5c:36:e2:8f:9b:d8:c2:76:e9:b1:ad: 99:f1:61:f6:d8:5e:9a:ce:ab:d6:03:e6:f9:ef:3f: fa:7a:e7:10:4f:fa:aa:62:7c:89:d4:1c:ea:a0:df: 83:cb:44:54:56:3a:99:c4:9a:74:ea:d4:75:6f:ff: 05:4a:f1:05:36:b3:49:8f:da:d0:cb:e5:fd:c8:a0: f5:4b:6e:80:c8:24:40:f2:67:fc:09:92:8c:f9:0d: 4d:0d:d7:aa:ef:93:59:76:a4:5c:69:02:7d:b2:0f: d9:f1:cc:f4:c6:c2:fa:41:7c:0d:0c:49:c7:f2:97: 79:0b:93:2a:04:63:aa:b7:38:e0:b5:7e:74:a1:a1: 48:f6:b5:2c:5e:0c:8d:b6:35:12:c7:5d:c0:77:30: 2b:98:36:19:39:36:fd:97:73:91:76:9e:7a:5d:cf: c9:76:d2:b9:6e:94:ee:55:6a:b6:70:11:42:f9:06: e5:b8:ec:74:54:4d:8c:68:48:53:e0:7e:ad:47:ab: 63:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:EE:37:DD:79:9E:8D:EB:6F:FF:34:2B:98:B8:33:DA:01:63:7B X509v3 Authority Key Identifier: keyid:BD:68:5C:24:FF:8F:43:25:43:C3:E5:83:48:40:44:A4:4E:53:06:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD685C24FF8F432543C3E583484044A44E53067B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4bf8641-bf70-4e3f-9871-ee26a33db3a2/0/BD685C24FF8F432543C3E583484044A44E53067B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:58:41:33:34:ea:09:03:b2:93:aa:66:77:af:e1:13:8d:4d: 0a:8a:25:13:dd:3f:93:db:30:f3:9c:48:03:b5:4a:a5:e8:93: 6e:b3:ee:a0:73:8a:29:79:15:9f:19:b1:65:10:f8:db:19:ff: 0a:37:f5:f4:e9:55:01:57:cc:2f:57:ab:eb:dd:9a:90:bd:46: ee:d0:00:8f:17:c7:07:6f:02:61:fa:59:60:b4:b0:fa:45:6b: 7e:38:f5:25:ba:2f:8e:4c:c8:6e:31:44:3b:42:84:60:db:f1: 65:b5:d6:37:00:26:b8:93:bd:82:e4:42:e1:c7:29:18:a3:40: 49:80:14:a7:bc:2f:1b:af:c2:85:31:41:80:a7:57:c5:fd:63: 52:54:fe:02:9e:39:e1:49:be:ad:50:de:fb:16:9f:34:49:b9: 80:b4:75:bc:e9:a3:77:b6:d0:64:b8:e4:af:10:7c:78:b6:03: db:63:47:21:07:1c:9b:fc:00:4f:1b:2b:6f:6d:81:ab:24:4a: 26:ef:43:b6:ff:b4:0a:79:b9:53:f3:28:b3:01:40:e9:fb:f6: 39:6b:98:14:80:2e:24:4c:e0:7b:37:d0:02:0e:d1:e9:48:f2: 8c:f2:6f:24:d3:19:50:c5:50:35:c4:82:e2:90:19:10:36:32: 51:ab:3c:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWMoATm4rAVxA7S7/3Go0dwnBiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0 RTUzMDY3QjAeFw0yNjA0MTUwOTQ2MjVaFw0yNjA0MTgyMTIyMjVaMDMxMTAvBgNV BAMTKDhDMDlFRTM3REQ3OTlFOERFQjZGRkYzNDJCOThCODMzREEwMTYzN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzIoF4DeWPSJC4CgQ255TaUTK4 AYHhJZXAum06RahVhmPUZ+L8l/Z2SBEWoahKT78brqlIecxkLTjSsIFNfFlcNuKP m9jCdumxrZnxYfbYXprOq9YD5vnvP/p65xBP+qpifInUHOqg34PLRFRWOpnEmnTq 1HVv/wVK8QU2s0mP2tDL5f3IoPVLboDIJEDyZ/wJkoz5DU0N16rvk1l2pFxpAn2y D9nxzPTGwvpBfA0MScfyl3kLkyoEY6q3OOC1fnShoUj2tSxeDI22NRLHXcB3MCuY Nhk5Nv2Xc5F2nnpdz8l20rlulO5VarZwEUL5BuW47HRUTYxoSFPgfq1Hq2OTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjAnuN915no3rb/80K5i4M9oBY3swHwYDVR0j BBgwFoAUvWhcJP+PQyVDw+WDSEBEpE5TBnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGJmODY0MS1iZjcwLTRlM2YtOTg3MS1lZTI2YTMzZGIzYTIvMC9CRDY4NUMyNEZG OEY0MzI1NDNDM0U1ODM0ODQwNDRBNDRFNTMwNjdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0QTQ0RTUz MDY3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRiZjg2NDEtYmY3MC00ZTNmLTk4 NzEtZWUyNmEzM2RiM2EyLzAvQkQ2ODVDMjRGRjhGNDMyNTQzQzNFNTgzNDg0MDQ0 QTQ0RTUzMDY3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdYQTM06gkDspOqZnev4RONTQqKJRPdP5Pb MPOcSAO1SqXok26z7qBziil5FZ8ZsWUQ+NsZ/wo39fTpVQFXzC9Xq+vdmpC9Ru7Q AI8XxwdvAmH6WWC0sPpFa3449SW6L45MyG4xRDtChGDb8WW11jcAJriTvYLkQuHH KRijQEmAFKe8LxuvwoUxQYCnV8X9Y1JU/gKeOeFJvq1Q3vsWnzRJuYC0dbzpo3e2 0GS45K8QfHi2A9tjRyEHHJv8AE8bK29tgaskSibvQ7b/tAp5uVPzKLMBQOn79jlr mBSALiRM4Hs30AIO0elI8ozybyTTGVDFUDXEguKQGRA2MlGrPFU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:22:35 2026 by rpki-client