$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: swHgspej77+qKieb2hsoR3ZV3TWQEPZuHDC+JiaQU4o= Subject key identifier: D9:86:3D:C0:CE:32:86:56:07:9F:66:76:85:7F:08:18:84:45:97:C7 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 24ACF672DDA700AF5431FAAB3C0E46C3B4E17FB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: BA Signing time: Fri 17 Apr 2026 14:13:17 +0000 Manifest this update: Fri 17 Apr 2026 14:08:17 +0000 Manifest next update: Mon 20 Apr 2026 17:58:17 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: ZgxAQLWCm0N/L24wmUifZiW7NYyTyUWd+yXAZbJwZ0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ac:f6:72:dd:a7:00:af:54:31:fa:ab:3c:0e:46:c3:b4:e1:7f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Apr 17 14:08:17 2026 GMT Not After : Apr 20 17:58:17 2026 GMT Subject: CN=D9863DC0CE328656079F6676857F0818844597C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:52:c3:6d:d4:4f:7b:99:de:6f:48:7a:b9: 75:f5:6d:d0:b2:4b:ab:20:a3:de:53:47:b8:ff:1a: 14:82:60:c9:a7:44:d9:8e:fc:b5:75:12:5d:bc:b7: f2:6b:4d:f9:8d:bc:ab:8a:0e:e8:99:ac:2f:b9:74: 63:bd:67:a5:eb:b7:c7:7c:40:12:07:05:ee:00:8c: 06:d0:00:63:6f:2c:4d:b6:27:ee:54:7e:b7:31:b7: 60:f0:e3:7e:cc:9c:a2:01:6c:5e:f6:ee:20:77:d7: 30:42:d7:21:2d:fb:b7:4d:23:81:35:a1:21:07:87: 20:45:f7:7f:0e:19:53:4a:db:ca:bb:e3:5d:f3:fe: 41:b2:dc:43:f4:14:1d:22:38:9e:22:48:e9:4a:8e: 6f:bf:2e:37:cc:f2:3f:8a:45:0c:c3:bc:7e:51:2f: d9:84:6f:d8:ad:7d:9f:33:1f:95:56:34:3c:4d:8f: f6:be:ae:99:c3:10:99:36:5a:e6:67:f3:37:0e:ed: 31:53:19:fb:b1:6a:e9:97:16:39:f5:38:6f:00:a3: 90:f1:26:ce:e8:a5:e9:a9:d9:de:ca:5d:47:83:38: 83:76:a5:4f:3d:02:07:ac:e7:31:3b:5c:fc:2f:7d: 60:02:d2:1b:5b:7e:d0:8c:8b:44:96:00:95:39:e6: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:86:3D:C0:CE:32:86:56:07:9F:66:76:85:7F:08:18:84:45:97:C7 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:56:4b:5c:39:1a:37:c9:ba:e9:2b:a5:76:b2:b4:46:37:1d: b2:6e:fe:e8:74:4a:f2:4b:96:a9:29:85:64:62:93:1a:17:f6: 7c:4b:b3:40:1e:c8:db:25:b1:7f:86:5c:b1:d9:62:f3:e9:91: a3:f6:23:72:7b:eb:ea:d7:a6:ae:01:36:32:49:02:8e:37:2f: 79:35:ad:4d:d0:f5:61:72:dc:bc:ca:32:6d:fb:18:2d:12:ec: 2d:82:11:d0:ee:89:43:53:6c:1f:6e:e7:e8:ab:86:bd:d8:db: f4:e1:47:7a:02:0d:86:50:0c:89:c9:a9:6e:98:ef:fc:5d:87: 30:9d:bc:b7:c9:2b:8b:25:eb:92:d9:6b:f6:3f:2e:b4:bc:38: 5e:5f:cd:6c:81:d3:9a:29:2e:1e:63:1a:88:d2:c5:29:31:b8: b5:f6:a7:45:78:42:cb:d5:7f:07:f2:3d:44:bf:e8:00:e8:7a: 3c:b4:31:b0:df:c4:3e:cb:1b:ca:b5:34:ef:4e:32:1d:3c:ad: 34:fc:e0:2b:bc:c8:ec:d6:c3:c8:59:39:b8:a2:b7:8b:db:87: 3e:2f:5b:c3:3b:14:02:45:8a:dc:1e:9a:85:fa:13:29:4c:3f: a7:af:93:ca:aa:da:98:75:95:c3:d0:a7:10:d0:15:50:24:38: 01:7e:0c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKz2ct2nAK9UMfqrPA5Gw7Thf7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNjA0MTcxNDA4MTdaFw0yNjA0MjAxNzU4MTdaMDMxMTAvBgNV BAMTKEQ5ODYzREMwQ0UzMjg2NTYwNzlGNjY3Njg1N0YwODE4ODQ0NTk3QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQFLDbdRPe5neb0h6uXX1bdCy S6sgo95TR7j/GhSCYMmnRNmO/LV1El28t/JrTfmNvKuKDuiZrC+5dGO9Z6Xrt8d8 QBIHBe4AjAbQAGNvLE22J+5Ufrcxt2Dw437MnKIBbF727iB31zBC1yEt+7dNI4E1 oSEHhyBF938OGVNK28q7413z/kGy3EP0FB0iOJ4iSOlKjm+/LjfM8j+KRQzDvH5R L9mEb9itfZ8zH5VWNDxNj/a+rpnDEJk2WuZn8zcO7TFTGfuxaumXFjn1OG8Ao5Dx Js7opemp2d7KXUeDOIN2pU89Ages5zE7XPwvfWAC0htbftCMi0SWAJU55nkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2YY9wM4yhlYHn2Z2hX8IGIRFl8cwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhWS1w5GjfJuukrpXaytEY3HbJu/uh0SvJL lqkphWRikxoX9nxLs0AeyNslsX+GXLHZYvPpkaP2I3J76+rXpq4BNjJJAo43L3k1 rU3Q9WFy3LzKMm37GC0S7C2CEdDuiUNTbB9u5+irhr3Y2/ThR3oCDYZQDInJqW6Y 7/xdhzCdvLfJK4sl65LZa/Y/LrS8OF5fzWyB05opLh5jGojSxSkxuLX2p0V4QsvV fwfyPUS/6ADoejy0MbDfxD7LG8q1NO9OMh08rTT84Cu8yOzWw8hZObiit4vbhz4v W8M7FAJFitwemoX6EylMP6evk8qq2ph1lcPQpxDQFVAkOAF+DPY= -----END CERTIFICATE-----Generated at Sun Apr 19 12:17:36 2026 by rpki-client