$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: ff+4sQStuujKDDa4/05eyjYE3NMJvHBiL/+WKkBOhCo= Subject key identifier: 92:E8:02:6B:19:DF:EB:89:28:75:DF:82:CC:34:BC:C2:44:BD:E5:A8 Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 71280BFFECC62512AB4262E8E4AD26FA6C3DA3EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: 6A Signing time: Tue 21 Jul 2026 04:36:25 +0000 Manifest this update: Tue 21 Jul 2026 04:31:25 +0000 Manifest next update: Wed 22 Jul 2026 05:19:25 +0000 Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) 2: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: Czx48SicpdPvdpTZy+sNPgcHfVlpXXn3wo/TXjHNeyo=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:28:0b:ff:ec:c6:25:12:ab:42:62:e8:e4:ad:26:fa:6c:3d:a3:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Jul 21 04:31:25 2026 GMT Not After : Jul 22 05:19:25 2026 GMT Subject: CN=92E8026B19DFEB892875DF82CC34BCC244BDE5A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:79:6a:be:55:84:d5:cb:ae:cd:60:cd:d3: 88:23:c4:da:bd:16:b7:cc:f3:d4:21:bc:c8:e6:69: 8b:f4:4e:94:bb:8a:ce:b0:03:79:a0:61:ca:c6:c0: a5:7e:cb:8e:61:b0:f6:99:ef:be:9c:79:67:5f:98: 62:fe:18:e3:48:ac:e3:77:81:5f:cd:6f:04:02:6f: c1:ef:51:3a:f8:08:7c:a1:d6:78:67:be:4c:ad:c8: 14:a1:7c:df:3b:e5:ac:62:9d:24:e0:eb:2c:e7:b8: 98:8e:17:58:17:39:76:37:fa:9c:c1:78:91:30:14: e0:d4:5c:e1:4c:a8:36:e4:bf:e8:4c:d8:06:8f:4b: 6b:73:1e:38:4e:b9:cb:94:ba:9e:97:c3:c8:0a:e9: 8e:b7:93:9e:e4:e3:69:64:f0:ea:a6:fd:f9:fc:e8: e1:3f:43:41:90:c8:e4:a8:b0:95:ab:d9:89:38:b8: 46:12:a4:7d:68:ec:8d:6b:26:6c:8a:c9:83:f6:2d: c1:f4:e6:a3:29:59:59:22:e5:81:3c:79:8f:24:d7: e5:c1:bb:38:b9:5d:c9:b2:b7:03:1b:db:8e:84:a1: 2e:f5:cb:05:75:34:f1:48:28:e4:e6:bb:12:33:80: f2:76:3f:88:f6:2e:0f:73:65:74:2c:fe:8b:6b:82: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E8:02:6B:19:DF:EB:89:28:75:DF:82:CC:34:BC:C2:44:BD:E5:A8 X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b0:38:ee:80:01:e3:16:aa:8b:66:50:eb:e2:74:17:93:5c: db:0f:0f:d1:f9:b7:af:32:a7:fe:ba:34:63:c2:c6:80:e8:44: 88:b8:f1:83:ea:4d:fa:9a:6c:ca:39:16:80:e9:12:2e:af:66: 40:69:17:10:e9:5c:7f:55:7d:b1:9e:e3:cc:83:1c:54:69:98: 52:ee:6c:d3:64:b4:dd:2c:ba:fc:aa:ab:1a:98:b3:93:52:a6: df:cb:cc:5a:47:7f:2e:17:cc:39:22:c4:b3:27:d9:cf:e1:78: a7:18:c1:50:34:ae:9d:d5:1b:fe:71:c4:47:eb:b4:b0:59:79: 36:2f:e0:37:3c:9e:dc:bd:b7:b4:d0:e4:ce:1a:96:6a:09:e8: ff:2b:eb:0a:f8:0c:ea:11:fc:ff:2f:a3:d1:d2:92:eb:09:61: c9:a5:34:dd:48:c8:c5:5c:e8:e4:e3:5f:33:fa:1b:a7:cd:78: af:b2:44:0c:f7:49:c8:8e:38:63:1e:f8:9f:59:62:c7:dc:68: d4:83:eb:0d:76:ed:d5:e4:b5:5d:95:67:71:0c:87:c0:9f:46: 87:c2:86:bb:b2:97:6c:d9:a9:24:37:42:f5:ea:0a:f2:bd:53: 35:5e:73:87:e5:21:74:f3:c0:72:f8:e3:3b:f7:64:df:28:c3: 6b:bc:01:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcSgL/+zGJRKrQmLo5K0m+mw9o+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA3MjEwNDMxMjVaFw0yNjA3MjIwNTE5MjVaMDMxMTAvBgNV BAMTKDkyRTgwMjZCMTlERkVCODkyODc1REY4MkNDMzRCQ0MyNDRCREU1QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpXlqvlWE1cuuzWDN04gjxNq9 FrfM89QhvMjmaYv0TpS7is6wA3mgYcrGwKV+y45hsPaZ776ceWdfmGL+GONIrON3 gV/NbwQCb8HvUTr4CHyh1nhnvkytyBShfN875axinSTg6yznuJiOF1gXOXY3+pzB eJEwFODUXOFMqDbkv+hM2AaPS2tzHjhOucuUup6Xw8gK6Y63k57k42lk8Oqm/fn8 6OE/Q0GQyOSosJWr2Yk4uEYSpH1o7I1rJmyKyYP2LcH05qMpWVki5YE8eY8k1+XB uzi5XcmytwMb246EoS71ywV1NPFIKOTmuxIzgPJ2P4j2Lg9zZXQs/otrgtDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkugCaxnf64kodd+CzDS8wkS95agwHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADywOO6AAeMWqotmUOvidBeTXNsPD9H5t68y p/66NGPCxoDoRIi48YPqTfqabMo5FoDpEi6vZkBpFxDpXH9VfbGe48yDHFRpmFLu bNNktN0suvyqqxqYs5NSpt/LzFpHfy4XzDkixLMn2c/heKcYwVA0rp3VG/5xxEfr tLBZeTYv4Dc8nty9t7TQ5M4almoJ6P8r6wr4DOoR/P8vo9HSkusJYcmlNN1IyMVc 6OTjXzP6G6fNeK+yRAz3SciOOGMe+J9ZYsfcaNSD6w127dXktV2VZ3EMh8CfRofC hruyl2zZqSQ3QvXqCvK9UzVec4flIXTzwHL44zv3ZN8ow2u8AXU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:59 2026 by rpki-client