$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: 8MLRjGEacQKIM6u5GpjHcUj6IlsBAYe70Vpb0Jj5mig= Subject key identifier: D5:50:A7:78:FF:5F:8E:39:CD:7E:68:85:FC:4E:E0:DF:4A:90:44:B1 Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 7BC17352934E33C8671B85DDA65F773F0F8DDD14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: 6B Signing time: Mon 20 Oct 2025 04:51:52 +0000 Manifest this update: Mon 20 Oct 2025 04:46:52 +0000 Manifest next update: Thu 23 Oct 2025 16:41:52 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: Sl2J3VGTNgTrWebAMnCJFhLYdoAnDOSIGLWmqdMcryg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c1:73:52:93:4e:33:c8:67:1b:85:dd:a6:5f:77:3f:0f:8d:dd:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Oct 20 04:46:52 2025 GMT Not After : Oct 23 16:41:52 2025 GMT Subject: CN=D550A778FF5F8E39CD7E6885FC4EE0DF4A9044B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cb:3b:7f:d2:d7:b2:79:0e:ea:67:f3:ee:51: 27:b1:ca:54:0a:dc:c8:42:c7:4b:80:13:96:8c:fb: f9:ac:8a:c1:cc:44:b4:96:18:c6:8b:0c:64:02:9a: 6c:9c:d4:de:ff:d5:6a:02:da:91:31:7a:01:df:b4: fe:e8:e4:a7:08:3f:2f:36:aa:a4:c9:d5:86:ec:3b: 59:a4:cb:62:45:b6:11:35:c9:af:05:ec:07:da:b8: e8:1d:0c:82:bf:7f:41:fe:cc:5a:a0:bf:6e:a0:67: ee:53:b3:27:b5:40:44:8b:e0:f0:a2:5d:38:a1:20: f3:fb:af:99:52:97:84:96:ea:37:d1:8b:b3:69:d8: d3:f8:46:db:b5:e6:b8:9f:c9:31:aa:f8:1a:35:e4: 87:f0:fe:c6:d3:b2:7d:67:43:1b:24:7d:15:88:d6: 31:a9:05:bc:ab:30:47:46:db:d7:23:66:48:ce:bf: 1a:d8:26:f5:60:0a:c1:47:72:91:aa:86:8d:3d:02: 7f:d8:f3:09:73:ce:a6:0a:94:10:f2:ea:9c:18:29: 9f:21:33:7f:56:16:a3:6e:44:33:ec:90:d6:2f:a9: 82:44:49:7c:f4:e6:16:b4:38:6d:9b:28:e8:ad:eb: d7:f7:a3:aa:bc:48:a3:1d:5f:b8:d6:11:4b:95:72: bf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:50:A7:78:FF:5F:8E:39:CD:7E:68:85:FC:4E:E0:DF:4A:90:44:B1 X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:55:0b:6e:e1:80:f3:17:21:b6:39:03:7e:ad:bf:0f:b5:92: 37:8b:db:90:e4:1e:d3:37:29:52:2c:94:62:83:e2:db:b0:5f: 35:ff:db:c6:67:69:cc:0c:9f:45:a0:dd:d7:9a:15:28:03:a9: 83:91:28:9f:bc:14:b8:69:0b:c3:82:91:f6:49:7a:2d:58:ef: 79:e7:84:5b:99:57:d7:47:65:60:65:b5:0f:11:e9:d3:43:68: 10:b4:38:90:e9:a0:d6:a7:27:42:dc:25:ff:cc:07:85:1f:2e: bb:d2:a9:6e:f7:53:51:c3:cf:e7:20:8e:b0:67:bb:48:4f:73: fe:2e:b8:b0:fc:52:56:73:1b:00:01:5c:47:93:f3:1f:64:1d: b2:80:91:4e:8e:82:bf:c1:30:1f:3a:13:50:47:d8:7b:3c:46: 70:8b:f0:27:81:bc:4b:59:9f:c4:db:30:b0:80:d5:c5:d2:2a: 06:33:96:09:24:03:41:9f:a2:81:0d:7c:fc:ca:b7:60:20:43: 78:9f:5c:e6:1b:dc:e2:71:76:b1:dc:a4:20:25:72:7f:6e:cc: e9:c9:1d:e5:38:54:fa:e9:2e:9b:77:e9:37:8d:3f:2a:5e:5a: e9:9f:fb:62:d9:94:fa:86:eb:44:92:af:e0:c9:e0:c5:d7:a2: 6f:08:5e:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8FzUpNOM8hnG4Xdpl93Pw+N3RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNTEwMjAwNDQ2NTJaFw0yNTEwMjMxNjQxNTJaMDMxMTAvBgNV BAMTKEQ1NTBBNzc4RkY1RjhFMzlDRDdFNjg4NUZDNEVFMERGNEE5MDQ0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdyzt/0teyeQ7qZ/PuUSexylQK 3MhCx0uAE5aM+/msisHMRLSWGMaLDGQCmmyc1N7/1WoC2pExegHftP7o5KcIPy82 qqTJ1YbsO1mky2JFthE1ya8F7AfauOgdDIK/f0H+zFqgv26gZ+5Tsye1QESL4PCi XTihIPP7r5lSl4SW6jfRi7Np2NP4Rtu15rifyTGq+Bo15Ifw/sbTsn1nQxskfRWI 1jGpBbyrMEdG29cjZkjOvxrYJvVgCsFHcpGqho09An/Y8wlzzqYKlBDy6pwYKZ8h M39WFqNuRDPskNYvqYJESXz05ha0OG2bKOit69f3o6q8SKMdX7jWEUuVcr+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VCneP9fjjnNfmiF/E7g30qQRLEwHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpVC27hgPMXIbY5A36tvw+1kjeL25DkHtM3 KVIslGKD4tuwXzX/28ZnacwMn0Wg3deaFSgDqYORKJ+8FLhpC8OCkfZJei1Y73nn hFuZV9dHZWBltQ8R6dNDaBC0OJDpoNanJ0LcJf/MB4UfLrvSqW73U1HDz+cgjrBn u0hPc/4uuLD8UlZzGwABXEeT8x9kHbKAkU6Ogr/BMB86E1BH2Hs8RnCL8CeBvEtZ n8TbMLCA1cXSKgYzlgkkA0GfooENfPzKt2AgQ3ifXOYb3OJxdrHcpCAlcn9uzOnJ HeU4VPrpLpt36TeNPypeWumf+2LZlPqG60SSr+DJ4MXXom8IXus= -----END CERTIFICATE-----Generated at Mon Oct 20 18:04:12 2025 by rpki-client