$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft File: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft (raw, json) Hash identifier: m3vfQDR13Y41G2mDkmhaUIzLet0yOCpQ94IMF4aR/qQ= Subject key identifier: 85:D2:82:35:2D:C9:BF:55:E0:4B:CA:A5:C3:DD:61:B6:D8:34:3F:A1 Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Certificate serial: 3D393874EFA9A0A8665571CE043D7F621C29B435 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft Manifest number: 026F Signing time: Tue 21 Apr 2026 07:21:38 +0000 Manifest this update: Tue 21 Apr 2026 07:16:38 +0000 Manifest next update: Fri 24 Apr 2026 16:22:38 +0000 Files and hashes: 1: 3130332e3138392e36322e302f32342d3234203d3e20313439373436.roa (hash: e8eIFrn/eUH5duTImnVIIrZAb8UtgLMsSB2c7nTYPik=) 2: 3130332e3138392e36332e302f32342d3234203d3e20313439373436.roa (hash: KkYyNZh9ZDbNoVpyOM3q+Wq6B9uj3EG/cdRvxrx75Ic=) 3: BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl (hash: AMMCkSxSLebekNNAHwvc5GEeWr5t+2I4oktqYSWXxls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 16:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:39:38:74:ef:a9:a0:a8:66:55:71:ce:04:3d:7f:62:1c:29:b4:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307 Validity Not Before: Apr 21 07:16:38 2026 GMT Not After : Apr 24 16:22:38 2026 GMT Subject: CN=85D282352DC9BF55E04BCAA5C3DD61B6D8343FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:5f:5e:8d:4e:82:22:b5:57:81:c0:05:ac: 9d:1a:46:b1:6f:bb:a8:43:c5:25:80:98:23:e9:6b: c4:17:34:5a:ae:95:87:64:82:75:4d:24:4c:ac:84: 8e:29:91:64:12:ba:6c:9f:70:5f:fd:aa:4c:1f:94: 71:4e:f3:86:5b:87:07:06:f5:ca:4d:30:05:d7:46: c6:b9:be:12:af:32:0b:36:c4:cb:e3:38:02:e2:fe: c1:67:55:89:a4:db:43:2e:40:f1:a1:4a:91:96:57: 78:a2:13:ef:9f:70:b1:f7:7a:8c:8a:8a:1c:dc:a7: 3f:c6:7f:08:45:f7:eb:37:c9:89:56:dc:cb:bf:4b: 04:d9:f1:67:3e:04:7b:eb:1d:e5:c4:19:52:e5:26: cc:1e:f1:5a:ff:75:6a:91:86:89:6d:5e:c7:ef:85: 23:19:c8:ce:fc:42:9f:e3:0f:c7:ca:f6:e1:a2:bb: 9b:03:54:43:2c:81:2a:68:70:b8:78:1e:04:84:f3: bd:ca:ad:bb:3a:9a:7c:a3:f5:84:cc:9c:1e:25:56: 18:2e:1f:4c:b9:65:44:da:b8:5b:af:87:07:39:3b: ea:e9:34:98:84:67:60:90:6e:c1:11:54:56:c4:9f: cf:14:5e:41:f4:e3:e5:fc:42:46:14:fb:35:80:05: 0b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D2:82:35:2D:C9:BF:55:E0:4B:CA:A5:C3:DD:61:B6:D8:34:3F:A1 X509v3 Authority Key Identifier: keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:90:f1:60:23:a0:6b:cf:df:44:6b:2e:3d:c8:48:22:2f:4f: ac:53:5d:7a:08:0a:b3:44:c2:1a:e7:81:81:e2:61:77:f1:7a: 34:d2:19:1f:a7:54:11:a7:dc:8b:ed:fd:8a:fb:cc:c0:4a:de: a5:ca:66:f0:21:ad:b0:9d:4f:f9:20:bf:51:91:72:1e:48:b1: f0:c3:ad:ab:d3:c8:83:5e:57:b2:89:52:43:62:96:07:8b:b9: 68:17:66:92:16:08:66:2b:a5:7a:7b:f4:41:39:e5:a7:b2:d6: 00:b7:09:1f:cb:56:30:5b:53:eb:13:a5:da:d3:dd:05:02:36: 5b:b7:a3:aa:c6:34:a7:20:95:08:bf:4c:27:15:91:25:0d:65: d9:4c:a1:83:64:c4:e2:98:04:bb:5b:13:bf:35:0b:d9:7c:96: c5:02:ea:43:60:7d:88:ac:f2:89:f0:a8:30:a9:70:f6:83:c3: a9:8b:a0:78:66:e4:7b:c2:e2:1e:0e:98:95:33:1b:c0:f5:48: 9b:28:a3:50:21:29:dd:d1:02:64:5e:2a:e6:f9:fb:07:13:74: 3f:35:24:77:96:6b:7c:36:b9:eb:38:57:f5:05:bd:a5:f2:1d: 26:9a:75:15:9e:50:b9:f0:c9:b2:49:ff:a6:17:f9:9b:43:31: 6c:b8:ea:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTk4dO+poKhmVXHOBD1/YhwptDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZF RTczRjMwNzAeFw0yNjA0MjEwNzE2MzhaFw0yNjA0MjQxNjIyMzhaMDMxMTAvBgNV BAMTKDg1RDI4MjM1MkRDOUJGNTVFMDRCQ0FBNUMzREQ2MUI2RDgzNDNGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7V9ejU6CIrVXgcAFrJ0aRrFv u6hDxSWAmCPpa8QXNFqulYdkgnVNJEyshI4pkWQSumyfcF/9qkwflHFO84ZbhwcG 9cpNMAXXRsa5vhKvMgs2xMvjOALi/sFnVYmk20MuQPGhSpGWV3iiE++fcLH3eoyK ihzcpz/GfwhF9+s3yYlW3Mu/SwTZ8Wc+BHvrHeXEGVLlJswe8Vr/dWqRholtXsfv hSMZyM78Qp/jD8fK9uGiu5sDVEMsgSpocLh4HgSE873Krbs6mnyj9YTMnB4lVhgu H0y5ZUTauFuvhwc5O+rpNJiEZ2CQbsERVFbEn88UXkH04+X8QkYU+zWABQtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhdKCNS3Jv1XgS8qlw91httg0P6EwHwYDVR0j BBgwFoAUvzjd1doqvwjrHdjYe1ZvNu5z8wcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjM0ZWYxZC03MzRkLTRjNzEtOGJhNy1kMzFlMTY4YjYzMmMvMC9CRjM4RERENURB MkFCRjA4RUIxREQ4RDg3QjU2NkYzNkVFNzNGMzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZGMzZFRTcz RjMwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIzNGVmMWQtNzM0ZC00YzcxLThi YTctZDMxZTE2OGI2MzJjLzAvQkYzOERERDVEQTJBQkYwOEVCMUREOEQ4N0I1NjZG MzZFRTczRjMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaQ8WAjoGvP30RrLj3ISCIvT6xTXXoICrNE whrngYHiYXfxejTSGR+nVBGn3Ivt/Yr7zMBK3qXKZvAhrbCdT/kgv1GRch5IsfDD ravTyINeV7KJUkNilgeLuWgXZpIWCGYrpXp79EE55aey1gC3CR/LVjBbU+sTpdrT 3QUCNlu3o6rGNKcglQi/TCcVkSUNZdlMoYNkxOKYBLtbE781C9l8lsUC6kNgfYis 8onwqDCpcPaDw6mLoHhm5HvC4h4OmJUzG8D1SJsoo1AhKd3RAmReKub5+wcTdD81 JHeWa3w2ues4V/UFvaXyHSaadRWeULnwybJJ/6YX+ZtDMWy46kM= -----END CERTIFICATE-----Generated at Wed Apr 22 10:05:07 2026 by rpki-client