$ rpki-client -vvf repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft File: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft (raw, json) Hash identifier: 1Ipgz8tmKae44J7jDFuVRYsp+zSZyasoH6TJO/RGGAE= Subject key identifier: 2A:A0:B9:6A:4D:EB:AE:EE:C6:72:D7:DA:B4:8D:14:48:8D:1D:18:1C Authority key identifier: BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 Certificate issuer: /CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Certificate serial: 38A50B007E4D36D4656ACE3FC3E6857F6AE5D11B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft Manifest number: 022F Signing time: Thu 16 Apr 2026 00:41:02 +0000 Manifest this update: Thu 16 Apr 2026 00:36:02 +0000 Manifest next update: Sun 19 Apr 2026 06:10:02 +0000 Files and hashes: 1: BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl (hash: 8KqgLGd3c0lNmWEXVyaWyO9i0L4H/kZUfjBGVJnZHN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 06:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a5:0b:00:7e:4d:36:d4:65:6a:ce:3f:c3:e6:85:7f:6a:e5:d1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB9F739640FAA3D90527D7B57D2D1D9993A42BD1 Validity Not Before: Apr 16 00:36:02 2026 GMT Not After : Apr 19 06:10:02 2026 GMT Subject: CN=2AA0B96A4DEBAEEEC672D7DAB48D14488D1D181C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:e9:01:d2:76:2e:f0:23:17:c4:c6:86:11: f6:78:d1:10:5e:9e:87:86:27:2b:4a:6c:e2:e4:6c: df:3b:df:45:8d:9d:63:a5:e3:bc:85:c1:24:56:36: 41:b1:83:23:e2:9e:3a:85:96:c7:30:aa:51:50:34: 5a:dd:22:8d:8f:d9:78:f5:7c:1a:f3:57:e0:51:6a: cc:e2:ae:19:aa:50:e0:14:fe:48:6d:96:28:ce:04: 8e:9a:f6:55:9c:bd:f3:ba:cf:9a:25:2b:20:3e:d5: f7:2d:86:e7:0d:61:54:b7:b7:91:53:22:b1:7d:ac: 9f:80:e1:ba:f5:bb:34:cd:d3:a0:de:60:e9:15:c9: 2f:4a:15:69:8b:16:5e:6d:9a:f4:76:ca:a9:96:15: 8f:33:2c:34:9d:f1:a6:09:e4:b2:aa:ef:7d:6b:66: 2e:f7:b1:76:1a:d2:42:03:b9:fb:35:d2:f7:72:b8: 2a:f5:91:64:ea:61:49:c2:fe:fb:08:82:b2:90:aa: c3:7c:44:53:2a:cb:a4:04:e1:26:ca:64:fa:d2:bf: 8f:11:5c:94:46:dc:02:db:33:3e:d3:f7:fb:86:9c: 5d:42:3c:8f:2a:57:5e:1a:b2:01:97:2d:a0:11:75: b5:67:ec:b5:e5:fa:15:d8:31:e2:ae:04:e5:c3:4f: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:B9:6A:4D:EB:AE:EE:C6:72:D7:DA:B4:8D:14:48:8D:1D:18:1C X509v3 Authority Key Identifier: keyid:BB:9F:73:96:40:FA:A3:D9:05:27:D7:B5:7D:2D:1D:99:93:A4:2B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2b30f16-e876-48cb-936b-702c3055113d/0/BB9F739640FAA3D90527D7B57D2D1D9993A42BD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:74:2a:81:27:3c:29:be:bd:bc:0e:99:e3:4b:60:4d:20:d1: 60:ec:a0:56:ed:82:b8:c2:ca:c7:77:c0:e6:ac:b7:d0:08:30: b6:1b:10:89:a9:6b:ee:14:ea:b2:f8:dc:74:52:91:ba:d6:a3: b0:88:f4:9d:86:ae:ca:e5:02:83:5b:12:60:e0:cb:37:f1:02: 6b:ca:a0:3c:90:d7:ea:74:0e:78:cb:8d:c9:74:09:52:8a:b1: 7c:01:6a:98:87:b1:05:80:87:ce:24:b1:65:81:51:f7:33:7b: f4:93:49:e3:81:a9:47:95:98:b9:00:ef:df:e5:3c:2f:ef:c9: 10:16:85:ed:f9:53:a1:ba:a2:5b:56:12:7a:84:a8:58:71:f9: 6b:d4:f0:4e:eb:b9:68:54:dd:58:f9:c6:91:2f:e8:f0:96:c0: 50:88:f3:bd:e7:58:48:b8:c2:4b:03:9b:4a:a9:09:99:5c:75: d0:e5:e1:e4:03:72:01:02:29:9c:aa:7b:e9:f2:42:17:90:b2: 2c:30:c8:10:f8:df:f4:85:6c:81:81:01:db:34:7c:01:44:1c: 8f:55:1c:df:75:80:7a:f9:39:89:96:aa:33:dd:5e:42:0a:a6: a6:db:e8:ed:a7:64:75:08:ab:e7:7f:09:9a:11:88:a8:71:38: 45:6f:ef:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKULAH5NNtRlas4/w+aFf2rl0RswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5 M0E0MkJEMTAeFw0yNjA0MTYwMDM2MDJaFw0yNjA0MTkwNjEwMDJaMDMxMTAvBgNV BAMTKDJBQTBCOTZBNERFQkFFRUVDNjcyRDdEQUI0OEQxNDQ4OEQxRDE4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglekB0nYu8CMXxMaGEfZ40RBe noeGJytKbOLkbN8730WNnWOl47yFwSRWNkGxgyPinjqFlscwqlFQNFrdIo2P2Xj1 fBrzV+BRaszirhmqUOAU/khtlijOBI6a9lWcvfO6z5olKyA+1fcthucNYVS3t5FT IrF9rJ+A4br1uzTN06DeYOkVyS9KFWmLFl5tmvR2yqmWFY8zLDSd8aYJ5LKq731r Zi73sXYa0kIDufs10vdyuCr1kWTqYUnC/vsIgrKQqsN8RFMqy6QE4SbKZPrSv48R XJRG3ALbMz7T9/uGnF1CPI8qV14asgGXLaARdbVn7LXl+hXYMeKuBOXDT8e/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqC5ak3rru7GctfatI0USI0dGBwwHwYDVR0j BBgwFoAUu59zlkD6o9kFJ9e1fS0dmZOkK9EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmIzMGYxNi1lODc2LTQ4Y2ItOTM2Yi03MDJjMzA1NTExM2QvMC9CQjlGNzM5NjQw RkFBM0Q5MDUyN0Q3QjU3RDJEMUQ5OTkzQTQyQkQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFEOTk5M0E0 MkJEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJiMzBmMTYtZTg3Ni00OGNiLTkz NmItNzAyYzMwNTUxMTNkLzAvQkI5RjczOTY0MEZBQTNEOTA1MjdEN0I1N0QyRDFE OTk5M0E0MkJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd0KoEnPCm+vbwOmeNLYE0g0WDsoFbtgrjC ysd3wOast9AIMLYbEImpa+4U6rL43HRSkbrWo7CI9J2GrsrlAoNbEmDgyzfxAmvK oDyQ1+p0DnjLjcl0CVKKsXwBapiHsQWAh84ksWWBUfcze/STSeOBqUeVmLkA79/l PC/vyRAWhe35U6G6oltWEnqEqFhx+WvU8E7ruWhU3Vj5xpEv6PCWwFCI873nWEi4 wksDm0qpCZlcddDl4eQDcgECKZyqe+nyQheQsiwwyBD43/SFbIGBAds0fAFEHI9V HN91gHr5OYmWqjPdXkIKpqbb6O2nZHUIq+d/CZoRiKhxOEVv708= -----END CERTIFICATE-----Generated at Fri Apr 17 22:46:47 2026 by rpki-client