$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: q6GeP9dqLXQvup7SjTBndWbM0Od8BlNVPrjDWhq5J8k= Subject key identifier: B5:69:E6:C1:22:52:25:BC:08:27:27:33:D4:DD:2E:B8:5A:BC:E0:78 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 603A592A9F6BA18D5FF9BD750C31D0F6CA314968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 71 Signing time: Mon 03 Nov 2025 00:51:52 +0000 Manifest this update: Mon 03 Nov 2025 00:46:52 +0000 Manifest next update: Thu 06 Nov 2025 11:08:52 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: 0CD5OvKDfqmX3xWlNKTuz9/3l1qOzimIKjWnEDNWHBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3a:59:2a:9f:6b:a1:8d:5f:f9:bd:75:0c:31:d0:f6:ca:31:49:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Nov 3 00:46:52 2025 GMT Not After : Nov 6 11:08:52 2025 GMT Subject: CN=B569E6C1225225BC08272733D4DD2EB85ABCE078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:77:a8:fb:2b:7a:b9:9e:fb:5b:e3:96:c6:4c: 22:33:59:97:1f:42:9d:3a:9d:5f:58:87:9a:07:f0: 4c:cd:e7:b2:a4:8c:d5:e2:f3:0f:7a:9b:07:92:e8: 48:6b:97:05:b4:35:21:b1:05:16:48:df:8d:94:29: 0f:23:e5:78:c4:0f:36:26:37:fb:9c:25:f8:26:50: f3:67:aa:ef:1e:fa:ea:07:eb:b8:f8:50:4e:fe:06: 20:6b:67:a6:4a:15:fe:7b:d6:17:88:ab:4b:e2:53: 2c:be:e2:2b:70:91:da:f4:b6:d6:62:82:b5:50:54: 5f:bf:84:27:64:08:c9:5d:54:6c:4f:03:22:8b:ad: d3:a9:09:fa:52:7c:17:f1:59:83:5b:e1:e6:92:5a: 2b:d0:d2:bc:8a:03:40:b2:ac:ed:0b:6c:93:fa:55: f0:81:94:97:04:b0:33:b6:77:b3:26:21:19:e7:ac: 3e:15:98:c8:8d:58:fe:3f:94:fd:50:8e:f0:49:08: 5a:a0:75:16:4e:e6:24:2a:c0:c2:78:ed:d8:07:39: 8a:68:61:c1:46:45:af:43:1c:a3:88:ea:df:c7:76: 60:71:be:11:8d:af:e2:10:eb:b6:e2:fb:e8:07:22: bf:c3:26:b7:36:e4:60:bf:0e:3f:c1:86:e6:d9:42: 9c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:69:E6:C1:22:52:25:BC:08:27:27:33:D4:DD:2E:B8:5A:BC:E0:78 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ea:35:f7:4d:8f:0a:41:7c:4d:20:11:17:ea:98:32:a3:6b: 16:ea:3a:dd:f9:92:0d:36:59:60:39:49:60:3c:77:0c:e5:c7: 72:44:ac:49:3c:75:15:ad:49:fd:b9:48:2d:8c:a8:96:64:c0: 50:a2:02:59:5f:0a:92:40:5a:52:0a:d1:ed:44:ae:f7:bd:42: 84:0f:a4:91:6d:20:9e:94:f8:34:ec:6a:69:b1:77:46:28:47: d6:42:04:f7:91:ba:57:31:eb:ef:80:18:46:d4:96:c5:56:d2: 3f:29:09:bd:39:e0:2c:15:b0:33:2d:60:19:c9:91:20:4a:e0: 80:70:b7:76:7b:ba:74:40:73:fe:c1:ff:af:fa:b5:a9:dd:91: 31:d2:2b:ea:2a:f9:b4:bd:28:be:c3:7f:4a:ab:30:7e:6d:d0: 55:a5:d4:13:e4:71:36:23:97:21:ba:99:4c:9e:5f:fb:d9:3d: bf:18:ba:78:d0:68:6e:36:33:13:96:fd:15:58:c3:3f:db:db: 48:dd:60:68:5e:f4:a1:e2:c9:87:cb:0e:87:57:75:f7:a9:9a: 80:7e:24:56:9c:63:9a:4f:bd:06:6d:16:92:57:a3:83:4b:35: 69:c7:11:98:e8:21:ab:be:f9:c6:d8:79:0e:3c:ca:c7:88:ec: 64:85:15:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDpZKp9roY1f+b11DDHQ9soxSWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTExMDMwMDQ2NTJaFw0yNTExMDYxMTA4NTJaMDMxMTAvBgNV BAMTKEI1NjlFNkMxMjI1MjI1QkMwODI3MjczM0Q0REQyRUI4NUFCQ0UwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0d6j7K3q5nvtb45bGTCIzWZcf Qp06nV9Yh5oH8EzN57KkjNXi8w96mweS6EhrlwW0NSGxBRZI342UKQ8j5XjEDzYm N/ucJfgmUPNnqu8e+uoH67j4UE7+BiBrZ6ZKFf571heIq0viUyy+4itwkdr0ttZi grVQVF+/hCdkCMldVGxPAyKLrdOpCfpSfBfxWYNb4eaSWivQ0ryKA0CyrO0LbJP6 VfCBlJcEsDO2d7MmIRnnrD4VmMiNWP4/lP1QjvBJCFqgdRZO5iQqwMJ47dgHOYpo YcFGRa9DHKOI6t/HdmBxvhGNr+IQ67bi++gHIr/DJrc25GC/Dj/BhubZQpz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtWnmwSJSJbwIJycz1N0uuFq84HgwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbqNfdNjwpBfE0gERfqmDKjaxbqOt35kg02 WWA5SWA8dwzlx3JErEk8dRWtSf25SC2MqJZkwFCiAllfCpJAWlIK0e1Erve9QoQP pJFtIJ6U+DTsammxd0YoR9ZCBPeRulcx6++AGEbUlsVW0j8pCb054CwVsDMtYBnJ kSBK4IBwt3Z7unRAc/7B/6/6tandkTHSK+oq+bS9KL7Df0qrMH5t0FWl1BPkcTYj lyG6mUyeX/vZPb8YunjQaG42MxOW/RVYwz/b20jdYGhe9KHiyYfLDodXdfepmoB+ JFacY5pPvQZtFpJXo4NLNWnHEZjoIau++cbYeQ48yseI7GSFFYc= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:42 2025 by rpki-client