$ rpki-client -vvf repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft File: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft (raw, json) Hash identifier: mcr2vsXIziBK/r3cBh0fq8L5U2daVktjHyqcX9JvozI= Subject key identifier: 68:9B:AE:EF:E0:12:56:55:7D:62:4A:64:86:D7:81:63:27:9F:B7:05 Authority key identifier: BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE Certificate issuer: /CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Certificate serial: 36139B6C14BB9F67973A9A08EC6F15486104AB84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft Manifest number: 025A Signing time: Sun 19 Apr 2026 08:21:38 +0000 Manifest this update: Sun 19 Apr 2026 08:16:38 +0000 Manifest next update: Wed 22 Apr 2026 17:54:38 +0000 Files and hashes: 1: BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl (hash: KJX4k/tkxs+hjSROLVSciuvwjv78AJKM3Zuf/Mz6o+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:13:9b:6c:14:bb:9f:67:97:3a:9a:08:ec:6f:15:48:61:04:ab:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE Validity Not Before: Apr 19 08:16:38 2026 GMT Not After : Apr 22 17:54:38 2026 GMT Subject: CN=689BAEEFE01256557D624A6486D78163279FB705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:7d:1c:90:db:36:f3:b4:62:ac:b9:39:9e: 23:d8:ad:57:36:e6:2c:f4:ce:02:9f:46:46:fa:20: 7e:e8:42:36:fa:0b:7b:29:8e:df:a3:21:87:d7:dd: 96:8f:5a:fc:ed:db:20:95:34:2a:e6:ab:59:d3:b5: d8:a0:2e:77:92:e6:fa:d0:55:45:72:93:34:91:16: 05:01:06:ad:98:d4:89:3c:18:15:c1:cf:42:3d:0d: b7:21:cf:29:3e:4f:c7:87:1c:06:42:84:15:b1:b5: 1d:e3:78:0c:47:1a:59:e1:ee:f1:52:0c:cb:0a:31: b7:4f:5d:ca:ed:82:d5:c4:a1:ce:be:f6:cb:21:95: 3c:dc:59:ba:a6:17:85:3f:15:b5:0e:76:16:8a:f5: 53:d4:dd:7e:61:d8:67:d8:15:8e:b6:91:29:d3:11: dc:71:02:55:5c:90:2b:6c:3d:4b:fc:a3:70:d8:cc: 4e:a0:72:83:11:63:8c:ee:dc:65:f9:c1:8f:87:88: 27:95:60:5a:96:45:26:1c:e7:01:0a:cc:99:00:be: d1:cb:58:98:35:b7:e5:04:c7:7e:c3:71:af:8b:6f: 60:aa:81:64:12:38:12:48:6c:c3:2e:b7:e8:66:fc: 98:83:9e:38:a3:65:34:ce:72:19:94:6f:88:0d:dc: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:AE:EF:E0:12:56:55:7D:62:4A:64:86:D7:81:63:27:9F:B7:05 X509v3 Authority Key Identifier: keyid:BC:0E:CF:DD:D0:81:CE:51:32:BE:C9:CF:DC:1A:39:0A:9A:F3:BC:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f86a13bd-b79a-450e-9be3-3d5a03ab93b1/0/BC0ECFDDD081CE5132BEC9CFDC1A390A9AF3BCBE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:14:24:49:ad:94:01:e0:fa:d9:df:71:3c:e8:c3:e4:de:f3: e7:65:62:31:cb:82:c9:55:47:13:a4:8d:a1:5f:a9:43:65:4f: a2:be:e4:d8:9b:78:a4:97:c4:d6:65:91:2f:07:6b:42:6b:3c: de:a9:94:36:9f:ea:76:0a:64:52:69:10:18:80:7b:62:8b:22: a5:34:8a:30:9c:64:2f:96:71:c3:47:02:6d:c5:24:36:29:e1: 4f:84:3f:9d:67:62:83:9f:28:c6:e6:64:45:17:62:9e:5d:82: 1a:f4:e5:7c:82:50:03:fb:b5:f7:14:fb:f7:3a:b6:7e:4d:a1: 54:76:69:41:62:81:72:a9:cb:2d:c7:d9:43:84:c5:7c:6a:a0: 06:77:10:e5:2e:8a:ed:0e:92:63:9a:cb:75:e8:31:a5:83:43: b9:6f:13:da:35:3f:77:0e:52:a7:b1:69:12:d1:e4:bd:75:b9: a1:30:c9:5f:a3:da:0b:9f:32:8e:8d:b6:aa:71:f9:4d:11:63: ef:86:e7:47:27:1c:c1:ed:b2:62:f9:a6:33:69:64:53:6b:d8: 6e:92:8b:18:a8:b5:c8:fc:cd:8a:8f:3c:52:e1:a7:86:2c:54: e6:1e:41:c1:85:39:25:8d:21:06:c6:74:f8:1a:16:80:e2:84: 68:01:dc:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhObbBS7n2eXOpoI7G8VSGEEq4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5 QUYzQkNCRTAeFw0yNjA0MTkwODE2MzhaFw0yNjA0MjIxNzU0MzhaMDMxMTAvBgNV BAMTKDY4OUJBRUVGRTAxMjU2NTU3RDYyNEE2NDg2RDc4MTYzMjc5RkI3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgn0ckNs287RirLk5niPYrVc2 5iz0zgKfRkb6IH7oQjb6C3spjt+jIYfX3ZaPWvzt2yCVNCrmq1nTtdigLneS5vrQ VUVykzSRFgUBBq2Y1Ik8GBXBz0I9Dbchzyk+T8eHHAZChBWxtR3jeAxHGlnh7vFS DMsKMbdPXcrtgtXEoc6+9sshlTzcWbqmF4U/FbUOdhaK9VPU3X5h2GfYFY62kSnT EdxxAlVckCtsPUv8o3DYzE6gcoMRY4zu3GX5wY+HiCeVYFqWRSYc5wEKzJkAvtHL WJg1t+UEx37Dca+Lb2CqgWQSOBJIbMMut+hm/JiDnjijZTTOchmUb4gN3ElXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJuu7+ASVlV9YkpkhteBYyeftwUwHwYDVR0j BBgwFoAUvA7P3dCBzlEyvsnP3Bo5CprzvL4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODZhMTNiZC1iNzlhLTQ1MGUtOWJlMy0zZDVhMDNhYjkzYjEvMC9CQzBFQ0ZEREQw ODFDRTUxMzJCRUM5Q0ZEQzFBMzkwQTlBRjNCQ0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5MEE5QUYz QkNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg2YTEzYmQtYjc5YS00NTBlLTli ZTMtM2Q1YTAzYWI5M2IxLzAvQkMwRUNGREREMDgxQ0U1MTMyQkVDOUNGREMxQTM5 MEE5QUYzQkNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEUJEmtlAHg+tnfcTzow+Te8+dlYjHLgslV RxOkjaFfqUNlT6K+5NibeKSXxNZlkS8Ha0JrPN6plDaf6nYKZFJpEBiAe2KLIqU0 ijCcZC+WccNHAm3FJDYp4U+EP51nYoOfKMbmZEUXYp5dghr05XyCUAP7tfcU+/c6 tn5NoVR2aUFigXKpyy3H2UOExXxqoAZ3EOUuiu0OkmOay3XoMaWDQ7lvE9o1P3cO UqexaRLR5L11uaEwyV+j2gufMo6Ntqpx+U0RY++G50cnHMHtsmL5pjNpZFNr2G6S ixiotcj8zYqPPFLhp4YsVOYeQcGFOSWNIQbGdPgaFoDihGgB3HY= -----END CERTIFICATE-----Generated at Sun Apr 19 10:17:11 2026 by rpki-client