$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: AIaByD1nzNlJz8FeBok5rkDYxCIeBZj6tjFGnrzfdnA= Subject key identifier: 44:26:3A:07:6D:C0:74:6E:E0:AD:F6:13:48:7E:25:E4:FC:B7:96:91 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 2FF3AA1DA3F4560918418B03EF8B7B21F760F169 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: A5 Signing time: Sat 28 Feb 2026 00:32:01 +0000 Manifest this update: Sat 28 Feb 2026 00:27:01 +0000 Manifest next update: Tue 03 Mar 2026 11:53:01 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: v0RpG5vtkd4bENgB3iBuWMC3f3qlzkYhVVp+Ume14pA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f3:aa:1d:a3:f4:56:09:18:41:8b:03:ef:8b:7b:21:f7:60:f1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Feb 28 00:27:01 2026 GMT Not After : Mar 3 11:53:01 2026 GMT Subject: CN=44263A076DC0746EE0ADF613487E25E4FCB79691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:06:f8:25:c7:4f:96:97:04:8e:7e:90:d4: 56:49:4a:e1:ec:33:61:0c:79:82:94:f1:0d:fc:64: 50:d1:3d:85:46:40:53:8a:24:22:d2:53:2b:9e:0e: ed:b2:1f:05:61:e2:c6:5e:2d:dc:74:99:2e:5f:72: 38:b6:db:3e:66:37:b3:67:6c:b6:fa:b9:10:e7:95: 5e:f6:4e:b6:a9:1d:57:3d:6c:b7:7e:c3:b8:35:06: 10:65:ba:18:95:b5:9e:72:fe:88:25:96:f6:03:01: fb:0b:56:af:d6:a1:03:da:98:a5:54:f1:f4:4e:44: 39:bb:fd:28:b7:48:ce:99:ed:95:cd:75:ec:94:14: 0f:12:9b:89:75:f0:c4:e4:ce:b6:64:a1:bb:2b:e9: 54:12:ff:d3:8b:a3:29:29:62:69:96:d3:41:e9:a7: d5:34:06:e7:03:94:46:75:82:a9:6d:25:71:17:e4: 52:c6:3f:07:18:00:8e:7b:fd:12:40:e0:14:24:2d: 0e:d8:ca:9e:15:a4:10:bc:37:9c:3c:18:9b:0e:81: 11:e6:cc:4a:9b:27:51:76:7a:8e:bd:e0:cd:5a:27: c3:05:f3:0a:7c:ec:57:33:41:dc:04:14:d8:58:1e: f5:0f:d3:b3:5e:e5:05:af:ef:fd:7f:23:be:09:52: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:26:3A:07:6D:C0:74:6E:E0:AD:F6:13:48:7E:25:E4:FC:B7:96:91 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:c7:ac:43:21:b7:ad:62:82:d4:7c:e8:9d:83:d9:f2:a6: 0b:0c:13:24:ac:b1:b9:c6:05:96:73:7b:e1:54:68:ae:b6:b5: 9a:bb:9e:ac:d3:9e:34:a8:de:4a:70:9e:dd:30:a8:70:a7:7f: 0a:06:91:e2:77:ab:8f:9d:7d:1f:a6:bd:8d:9a:8c:40:98:8d: 6e:65:9b:2f:b5:7b:1e:36:fc:b5:0a:ef:e6:2c:5f:fd:c6:7b: 86:e4:17:11:0a:f5:2a:46:5a:dd:4d:f6:fa:84:43:3f:63:84: c5:f0:13:89:35:7d:ea:92:cd:cb:29:fe:97:4a:0c:f2:64:66: 6d:eb:f8:32:dd:58:f4:b0:f1:da:a8:5f:52:58:b7:b3:36:48: 6b:c6:07:d1:a0:15:f0:9a:85:cf:d5:10:6c:cd:f1:1e:74:42: be:b5:53:f1:ec:4e:0d:9b:3b:91:83:e1:2e:e8:4c:c1:c6:99: 3d:c2:4a:3b:7a:48:4d:f2:95:80:be:4f:dc:42:70:43:4a:27: 73:c4:26:1e:5b:07:54:24:6e:76:a2:9f:b1:be:ff:1e:30:aa: 4d:94:3e:e2:3b:14:a1:dc:da:27:50:2d:a3:8a:55:32:90:64: 1d:38:05:59:ca:d7:d2:c5:45:9a:17:c1:49:b7:22:01:e5:c7: 8e:f0:15:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/OqHaP0VgkYQYsD74t7Ifdg8WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNjAyMjgwMDI3MDFaFw0yNjAzMDMxMTUzMDFaMDMxMTAvBgNV BAMTKDQ0MjYzQTA3NkRDMDc0NkVFMEFERjYxMzQ4N0UyNUU0RkNCNzk2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWOwb4JcdPlpcEjn6Q1FZJSuHs M2EMeYKU8Q38ZFDRPYVGQFOKJCLSUyueDu2yHwVh4sZeLdx0mS5fcji22z5mN7Nn bLb6uRDnlV72TrapHVc9bLd+w7g1BhBluhiVtZ5y/ogllvYDAfsLVq/WoQPamKVU 8fRORDm7/Si3SM6Z7ZXNdeyUFA8Sm4l18MTkzrZkobsr6VQS/9OLoykpYmmW00Hp p9U0BucDlEZ1gqltJXEX5FLGPwcYAI57/RJA4BQkLQ7Yyp4VpBC8N5w8GJsOgRHm zEqbJ1F2eo694M1aJ8MF8wp87FczQdwEFNhYHvUP07Ne5QWv7/1/I74JUu57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURCY6B23AdG7grfYTSH4l5Py3lpEwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXLx6xDIbetYoLUfOidg9nypgsMEySssbnG BZZze+FUaK62tZq7nqzTnjSo3kpwnt0wqHCnfwoGkeJ3q4+dfR+mvY2ajECYjW5l my+1ex42/LUK7+YsX/3Ge4bkFxEK9SpGWt1N9vqEQz9jhMXwE4k1feqSzcsp/pdK DPJkZm3r+DLdWPSw8dqoX1JYt7M2SGvGB9GgFfCahc/VEGzN8R50Qr61U/HsTg2b O5GD4S7oTMHGmT3CSjt6SE3ylYC+T9xCcENKJ3PEJh5bB1Qkbnain7G+/x4wqk2U PuI7FKHc2idQLaOKVTKQZB04BVnK19LFRZoXwUm3IgHlx47wFbM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:41:31 2026 by rpki-client