$ rpki-client -vvf rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft File: BF072074B801AFE1292270FB7A3E090A276EB893.mft (raw, json) Hash identifier: 6/rpL+Yh/e6gXiX7tNjZLXQY6yNrsCD0kKYXvPB0tTY= Subject key identifier: 62:E4:1B:BA:C4:F5:7F:94:78:61:46:75:2D:29:43:78:B6:DA:E1:3D Authority key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 Certificate issuer: /CN=BF072074B801AFE1292270FB7A3E090A276EB893 Certificate serial: 26696FC585B1FDE66F5CE22CB3FCB08C99969732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:19 +0000 Manifest this update: Tue 02 Jun 2026 19:13:19 +0000 Manifest next update: Wed 03 Jun 2026 22:37:19 +0000 Files and hashes: 1: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: BKt7x+HSwXt0hFZm36Nu9CrkQ0Drly/dgK6bERbk3xk=) 2: BF072074B801AFE1292270FB7A3E090A276EB893.crl (hash: aM5dszsRzI7OxBwYOgn2ycTiHfupSLsqsgFF6glVmD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:69:6f:c5:85:b1:fd:e6:6f:5c:e2:2c:b3:fc:b0:8c:99:96:97:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF072074B801AFE1292270FB7A3E090A276EB893 Validity Not Before: Jun 2 19:13:19 2026 GMT Not After : Jun 3 22:37:19 2026 GMT Subject: CN=62E41BBAC4F57F94786146752D294378B6DAE13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:03:7a:e8:e7:f1:a2:8c:29:76:0d:3d:97: 14:40:8c:38:d3:c0:f3:b4:3a:36:8b:f6:2a:20:5a: 71:30:f5:b1:bd:25:a3:e8:e5:9e:f2:e6:44:55:c2: 1d:3e:52:2d:c9:c0:52:a2:0c:d0:86:bb:b5:fc:9c: 47:35:d7:ec:ba:57:25:7e:80:55:1a:d1:fd:dd:46: df:83:71:ef:f8:bc:f3:42:9a:af:8a:8e:c7:36:18: a1:fe:e0:0f:9a:7f:f2:d6:d8:84:57:03:5d:bf:ff: 55:ca:f3:03:5c:ab:b3:87:92:c0:2e:e8:c8:0d:e4: 10:f6:6e:7b:4d:b9:ef:15:ad:14:90:0a:7b:28:26: da:16:64:11:68:17:e4:55:7a:7a:e7:20:10:ab:22: 78:76:94:7f:92:f5:63:63:0d:80:ab:af:4d:dc:dd: 38:d6:15:c4:f0:38:b2:e0:79:05:80:f5:70:b8:d5: 0b:74:8c:6d:76:bb:90:9f:50:5e:47:3a:f0:da:94: bc:85:06:44:7c:73:d9:3c:e3:81:55:26:c2:36:f2: 2f:a0:cf:de:45:c1:d9:cd:e4:55:26:f6:50:ad:b1: d0:96:b3:08:93:90:95:ee:2c:ff:be:99:25:0a:9b: 59:96:8f:87:cc:54:d2:79:5c:89:48:52:ed:15:ae: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E4:1B:BA:C4:F5:7F:94:78:61:46:75:2D:29:43:78:B6:DA:E1:3D X509v3 Authority Key Identifier: keyid:BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d4:bc:1d:71:47:83:4c:da:41:97:80:f4:f8:80:e1:4a:67: dc:ef:76:20:58:e0:a5:8e:d6:e7:77:53:23:a5:1c:04:69:10: 5a:0d:fd:a6:54:82:19:eb:01:6c:e1:64:bb:3a:7a:95:aa:b2: 60:97:53:ab:37:e4:97:a4:f4:5b:e7:fa:0f:ce:0d:03:28:14: 3a:a0:dd:e6:54:39:97:86:74:cd:44:63:b4:d1:68:3b:af:80: d3:92:50:9f:47:e6:7f:21:33:76:f1:15:c9:03:26:2c:e1:16: 75:9a:a7:b7:6b:f9:09:36:65:f5:37:34:86:59:e5:dc:e8:bf: 33:c8:3e:17:ed:ae:7f:44:18:91:44:60:c5:5a:95:69:44:03: b4:6e:2d:14:91:1f:ff:90:a9:ac:10:4f:61:79:f5:4e:e8:ba: 20:33:a0:08:11:63:50:2b:02:2c:bd:20:7e:03:6c:17:87:00: 37:06:74:37:eb:19:24:86:5d:d8:04:2a:3b:a7:db:18:7e:9d: d1:45:37:85:be:cc:37:ce:07:26:69:1f:98:d7:90:d2:02:98: 6a:9b:16:15:53:db:a2:62:59:33:91:cd:5a:93:bd:53:d6:68: 80:e5:e3:b8:9b:1f:02:2c:11:7c:92:1d:8c:45:4e:d0:89:e3: a0:d5:9e:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmlvxYWx/eZvXOIss/ywjJmWlzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEy NzZFQjg5MzAeFw0yNjA2MDIxOTEzMTlaFw0yNjA2MDMyMjM3MTlaMDMxMTAvBgNV BAMTKDYyRTQxQkJBQzRGNTdGOTQ3ODYxNDY3NTJEMjk0Mzc4QjZEQUUxM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeBAN66Ofxoowpdg09lxRAjDjT wPO0OjaL9iogWnEw9bG9JaPo5Z7y5kRVwh0+Ui3JwFKiDNCGu7X8nEc11+y6VyV+ gFUa0f3dRt+Dce/4vPNCmq+Kjsc2GKH+4A+af/LW2IRXA12//1XK8wNcq7OHksAu 6MgN5BD2bntNue8VrRSQCnsoJtoWZBFoF+RVenrnIBCrInh2lH+S9WNjDYCrr03c 3TjWFcTwOLLgeQWA9XC41Qt0jG12u5CfUF5HOvDalLyFBkR8c9k844FVJsI28i+g z95FwdnN5FUm9lCtsdCWswiTkJXuLP++mSUKm1mWj4fMVNJ5XIlIUu0Vro2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYuQbusT1f5R4YUZ1LSlDeLba4T0wHwYDVR0j BBgwFoAUvwcgdLgBr+EpInD7ej4JCiduuJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNkN2QyOWItZGQxYy00MWRkLWJlZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRC ODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEyNzZFQjg5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjA3MjA3NEI4MDFBRkUxMjkyMjcwRkI3QTNFMDkwQTI3NkVC ODkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5 MEEyNzZFQjg5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHUvB1xR4NM2kGXgPT4gOFKZ9zvdiBY4KWO 1ud3UyOlHARpEFoN/aZUghnrAWzhZLs6epWqsmCXU6s35Jek9Fvn+g/ODQMoFDqg 3eZUOZeGdM1EY7TRaDuvgNOSUJ9H5n8hM3bxFckDJizhFnWap7dr+Qk2ZfU3NIZZ 5dzovzPIPhftrn9EGJFEYMValWlEA7RuLRSRH/+QqawQT2F59U7ouiAzoAgRY1Ar Aiy9IH4DbBeHADcGdDfrGSSGXdgEKjun2xh+ndFFN4W+zDfOByZpH5jXkNICmGqb FhVT26JiWTORzVqTvVPWaIDl47ibHwIsEXySHYxFTtCJ46DVnv8= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:08 2026 by rpki-client