$ rpki-client -vvf repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft File: BF97329188204CAD55AEC0D48286FAC81B806C71.mft (raw, json) Hash identifier: pQOTNp9iVs5xCEWs5ECal2UWCy0Dp3i6bcGr/Qtjo5A= Subject key identifier: C1:78:FE:0C:68:11:7A:BA:C7:E8:D6:BF:5D:E8:F5:F0:9B:CA:93:FD Authority key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Certificate issuer: /CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Certificate serial: 68C3671AE05C320D1B4C5E88E3142FC8C67ECC84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft Manifest number: B0 Signing time: Wed 25 Mar 2026 11:52:08 +0000 Manifest this update: Wed 25 Mar 2026 11:47:08 +0000 Manifest next update: Sat 28 Mar 2026 18:26:08 +0000 Files and hashes: 1: BF97329188204CAD55AEC0D48286FAC81B806C71.crl (hash: 2o3ibW+sqAmd19yBE6+fvFI5cNHOj7hW6axcUgXQgk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c3:67:1a:e0:5c:32:0d:1b:4c:5e:88:e3:14:2f:c8:c6:7e:cc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Validity Not Before: Mar 25 11:47:08 2026 GMT Not After : Mar 28 18:26:08 2026 GMT Subject: CN=C178FE0C68117ABAC7E8D6BF5DE8F5F09BCA93FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1d:ce:ec:d6:b6:79:61:53:3e:4c:f6:38:3d: 63:fd:67:1d:35:6c:67:b0:18:0c:61:ec:46:9b:cb: d2:90:f2:3e:85:0f:eb:25:7f:8c:30:f1:d4:60:99: 2c:82:01:5d:4d:a1:a2:e3:80:2f:90:97:79:e0:15: 94:7a:41:0d:56:29:bb:09:c2:d9:b4:fc:80:bf:30: fb:13:3d:9a:61:39:b6:c3:4c:70:75:ee:e3:61:ee: 05:0c:a6:87:e7:f7:00:2b:bc:73:f7:ce:49:59:93: 69:99:80:b5:8f:f0:91:ad:99:b5:99:37:03:39:9f: 4c:8a:45:dc:1a:17:39:1c:6e:e2:f8:d3:71:fc:10: ba:53:51:a3:0f:77:de:87:64:68:2b:8d:bf:f4:bf: 5c:c6:28:96:bb:01:fc:3d:bb:91:01:ff:be:bd:5f: a8:3d:68:ba:e1:9e:b2:b5:4c:b5:2f:53:27:eb:69: 14:b6:77:fe:1c:39:be:fd:95:16:18:bd:7f:bd:ee: 26:ad:0b:b7:30:cd:0c:9f:a3:b5:64:9e:d1:48:86: 39:ed:2c:de:35:a0:37:34:65:b0:5c:8d:51:57:6c: f5:74:9b:71:0e:ba:f8:4c:2c:f6:29:68:8e:8f:6d: c2:23:34:8f:c4:fc:2d:07:d2:dd:d4:61:e2:d1:b0: 50:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:78:FE:0C:68:11:7A:BA:C7:E8:D6:BF:5D:E8:F5:F0:9B:CA:93:FD X509v3 Authority Key Identifier: keyid:BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3a:28:4e:3e:d7:c2:ee:56:63:72:bb:13:59:fc:81:54:b1: 63:e6:46:c9:8e:ee:92:9c:fe:39:b7:92:36:4d:8b:74:09:4b: ee:53:1e:14:16:cb:16:0e:ac:6f:ee:c6:3e:4a:a2:0c:aa:45: 05:64:8a:9c:55:ad:10:2a:30:d9:4b:77:d0:11:64:e4:5a:51: e2:28:92:69:ce:d7:13:dc:bf:b2:4c:60:72:30:2e:10:ef:d4: 6b:4e:00:39:e8:a6:1f:60:a7:57:70:a7:a5:fe:7f:f2:d4:67: a1:57:9f:e2:a8:7c:c1:52:f6:d5:f0:00:49:6c:de:f3:27:7a: 19:f8:92:db:9e:0c:08:73:28:b7:dd:cf:dd:95:32:46:0c:5c: fb:dd:ef:d8:ba:a2:46:25:71:c4:05:a6:fd:6a:f3:3e:b7:0b: ee:77:29:7e:e6:1f:c4:38:c7:49:eb:e6:33:70:89:93:1b:14: 90:05:c8:67:ab:b9:b3:24:9a:d0:fd:3d:38:a6:71:2f:4f:90: a0:36:b8:ff:2d:c3:f0:2c:9c:4a:e8:ab:c6:36:7f:4b:40:58: 1c:bf:17:ff:e3:06:84:b4:e3:20:ee:c5:60:5b:51:eb:c9:79: 04:27:37:0f:11:3c:0f:23:30:2c:c4:7e:a6:e2:cf:ad:7b:4f: b1:6d:0d:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMNnGuBcMg0bTF6I4xQvyMZ+zIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgx QjgwNkM3MTAeFw0yNjAzMjUxMTQ3MDhaFw0yNjAzMjgxODI2MDhaMDMxMTAvBgNV BAMTKEMxNzhGRTBDNjgxMTdBQkFDN0U4RDZCRjVERThGNUYwOUJDQTkzRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHc7s1rZ5YVM+TPY4PWP9Zx01 bGewGAxh7Eaby9KQ8j6FD+slf4ww8dRgmSyCAV1NoaLjgC+Ql3ngFZR6QQ1WKbsJ wtm0/IC/MPsTPZphObbDTHB17uNh7gUMpofn9wArvHP3zklZk2mZgLWP8JGtmbWZ NwM5n0yKRdwaFzkcbuL403H8ELpTUaMPd96HZGgrjb/0v1zGKJa7Afw9u5EB/769 X6g9aLrhnrK1TLUvUyfraRS2d/4cOb79lRYYvX+97iatC7cwzQyfo7VkntFIhjnt LN41oDc0ZbBcjVFXbPV0m3EOuvhMLPYpaI6PbcIjNI/E/C0H0t3UYeLRsFDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwXj+DGgRerrH6Na/Xej18JvKk/0wHwYDVR0j BBgwFoAUv5cykYggTK1VrsDUgob6yBuAbHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMC9CRjk3MzI5MTg4 MjA0Q0FENTVBRUMwRDQ4Mjg2RkFDODFCODA2QzcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZBQzgxQjgw NkM3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzI5Y2NlYjYtYTRlNy00ZTgyLTg4 YmUtYmI5Njk3YmQxZDAxLzAvQkY5NzMyOTE4ODIwNENBRDU1QUVDMEQ0ODI4NkZB QzgxQjgwNkM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY6KE4+18LuVmNyuxNZ/IFUsWPmRsmO7pKc /jm3kjZNi3QJS+5THhQWyxYOrG/uxj5KogyqRQVkipxVrRAqMNlLd9ARZORaUeIo kmnO1xPcv7JMYHIwLhDv1GtOADnoph9gp1dwp6X+f/LUZ6FXn+KofMFS9tXwAEls 3vMnehn4ktueDAhzKLfdz92VMkYMXPvd79i6okYlccQFpv1q8z63C+53KX7mH8Q4 x0nr5jNwiZMbFJAFyGerubMkmtD9PTimcS9PkKA2uP8tw/AsnEroq8Y2f0tAWBy/ F//jBoS04yDuxWBbUevJeQQnNw8RPA8jMCzEfqbiz617T7FtDTs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:26 2026 by rpki-client