$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: qTTUNLMHIbEPlZKXRUtRR4gm4WON6Xl2fGFlqijPqBc= Subject key identifier: 60:6B:C8:9C:95:E2:98:A7:F9:CD:CF:81:98:0B:79:AC:93:E6:57:3E Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 4733D2055EF14BF35B2A4C6EF0461CF77AFB47C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:13:25 +0000 Manifest this update: Tue 02 Jun 2026 15:08:25 +0000 Manifest next update: Wed 03 Jun 2026 17:57:25 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) 2: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: E7CGGH5HVX2SHVxeVbjAhnx02SdE9RVBhqa9WmwSids=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 17:57:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:33:d2:05:5e:f1:4b:f3:5b:2a:4c:6e:f0:46:1c:f7:7a:fb:47:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Jun 2 15:08:25 2026 GMT Not After : Jun 3 17:57:25 2026 GMT Subject: CN=606BC89C95E298A7F9CDCF81980B79AC93E6573E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:de:be:a4:04:b4:6a:f5:e1:2a:2d:70:d0: a8:f0:bf:f8:5e:5f:d7:4d:14:58:06:5c:3c:67:be: 30:0a:9c:75:84:e5:da:e0:e7:40:d2:2f:cf:03:9b: 61:19:fc:ae:24:aa:90:3d:2a:f9:ea:45:a3:5a:9c: 8e:2f:f0:3d:90:50:17:f7:eb:84:35:ae:b5:c3:88: 10:fc:b6:67:3b:fe:13:1a:e2:bf:c4:24:4d:e4:02: b0:7f:b3:f9:c5:72:72:d8:dd:7e:61:98:58:d4:88: 20:08:a6:0a:69:2c:8e:9f:53:18:69:8a:db:97:cf: cc:54:1e:a1:11:4c:dd:c1:d4:f5:57:3e:b5:6e:60: d9:90:76:92:c0:4e:7d:40:52:a1:d8:eb:74:c3:28: da:18:9b:24:29:2b:ac:29:2d:56:5c:09:d0:f2:bc: 59:94:2f:c3:eb:93:f4:73:bf:ed:f4:6a:d6:53:70: 61:3b:25:4d:81:a7:ef:c7:1e:27:b7:87:34:1f:5f: a9:dc:ca:a9:77:6e:c6:e8:29:db:18:15:f9:51:9c: 4f:9b:d0:ce:e4:03:43:f9:f0:54:27:fe:31:4c:bc: c1:97:2a:a0:47:20:24:53:70:01:e6:ea:86:13:13: 65:5b:2c:07:d5:5d:62:74:6b:b5:70:0e:9a:fa:d0: e3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6B:C8:9C:95:E2:98:A7:F9:CD:CF:81:98:0B:79:AC:93:E6:57:3E X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:12:5c:0d:85:09:e6:00:c8:0b:fb:90:47:68:ac:24:6a:b1: 14:83:53:c9:2c:bc:03:f8:4f:85:ab:e6:45:13:5c:34:0f:f0: 15:bb:08:3c:d2:c1:5c:c4:4e:c4:04:38:15:6b:49:23:08:36: 54:3d:99:5b:f2:0e:54:0c:5d:31:5d:b6:23:ff:f7:be:ac:76: 3a:81:6b:f5:d4:ab:33:27:30:aa:4d:c7:4a:fa:53:43:da:26: fb:e1:84:53:f3:42:dd:c0:4f:4e:fb:25:f8:5a:25:f1:93:da: 82:ae:2a:0c:00:5b:4b:34:89:6a:7b:1c:51:eb:47:de:8d:6f: 46:47:f7:b0:7c:bb:24:9d:d9:04:d0:68:0c:26:fe:fc:4a:09: 82:96:c0:20:ba:8f:28:33:17:69:1b:6f:59:3c:a0:73:fb:85: 2c:77:07:f8:a2:8d:11:d5:2f:d4:03:0d:1d:15:f7:81:16:f2: da:1d:2c:ca:04:1e:80:5d:dd:23:3f:22:26:67:cd:31:ac:50: 8a:08:cf:63:38:4d:ee:73:2b:e8:84:32:9e:35:bf:64:1f:59: 2e:11:1a:24:b2:69:e7:f5:bb:2b:05:88:a9:2e:59:dc:94:fa: 93:60:14:df:53:90:36:02:c4:74:26:07:e4:22:b4:ee:ba:97: 8f:e9:01:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzPSBV7xS/NbKkxu8EYc93r7R8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA2MDIxNTA4MjVaFw0yNjA2MDMxNzU3MjVaMDMxMTAvBgNV BAMTKDYwNkJDODlDOTVFMjk4QTdGOUNEQ0Y4MTk4MEI3OUFDOTNFNjU3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpg96+pAS0avXhKi1w0Kjwv/he X9dNFFgGXDxnvjAKnHWE5drg50DSL88Dm2EZ/K4kqpA9KvnqRaNanI4v8D2QUBf3 64Q1rrXDiBD8tmc7/hMa4r/EJE3kArB/s/nFcnLY3X5hmFjUiCAIpgppLI6fUxhp ituXz8xUHqERTN3B1PVXPrVuYNmQdpLATn1AUqHY63TDKNoYmyQpK6wpLVZcCdDy vFmUL8Prk/Rzv+30atZTcGE7JU2Bp+/HHie3hzQfX6ncyql3bsboKdsYFflRnE+b 0M7kA0P58FQn/jFMvMGXKqBHICRTcAHm6oYTE2VbLAfVXWJ0a7VwDpr60OPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGvInJXimKf5zc+BmAt5rJPmVz4wHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgSXA2FCeYAyAv7kEdorCRqsRSDU8ksvAP4 T4Wr5kUTXDQP8BW7CDzSwVzETsQEOBVrSSMINlQ9mVvyDlQMXTFdtiP/976sdjqB a/XUqzMnMKpNx0r6U0PaJvvhhFPzQt3AT077JfhaJfGT2oKuKgwAW0s0iWp7HFHr R96Nb0ZH97B8uySd2QTQaAwm/vxKCYKWwCC6jygzF2kbb1k8oHP7hSx3B/iijRHV L9QDDR0V94EW8todLMoEHoBd3SM/IiZnzTGsUIoIz2M4Te5zK+iEMp41v2QfWS4R GiSyaef1uysFiKkuWdyU+pNgFN9TkDYCxHQmB+QitO66l4/pAQc= -----END CERTIFICATE-----Generated at Wed Jun 3 04:41:16 2026 by rpki-client