$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: ef8mgFvMy2zVDkx6HqrUiEM/cNk1qk2XYFWNPmMZFV4= Subject key identifier: EE:C0:98:45:FB:02:C0:DE:C8:BD:20:F4:12:21:FD:9F:66:75:76:55 Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 5FB2A3D760C51333477E4705A7832B33566DE442 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: 1D Signing time: Sat 23 May 2026 01:29:54 +0000 Manifest this update: Sat 23 May 2026 01:24:54 +0000 Manifest next update: Sun 24 May 2026 04:30:54 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 3: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: TczsBqR9JKDdnaIJWIetOxcMD0FTOtx7iRlilHE1vZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 12:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b2:a3:d7:60:c5:13:33:47:7e:47:05:a7:83:2b:33:56:6d:e4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: May 23 01:24:54 2026 GMT Not After : May 24 04:30:54 2026 GMT Subject: CN=EEC09845FB02C0DEC8BD20F41221FD9F66757655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:74:d2:93:04:ad:6f:dd:22:bd:46:9b:bd: 64:90:34:1e:b4:16:43:ca:12:9d:08:66:fd:70:ea: 6c:c4:f1:44:9b:24:46:19:1a:cf:75:cf:d7:69:46: 20:a4:90:0a:e6:68:f2:12:f7:de:49:64:77:dd:bf: a6:97:cc:65:45:4a:5a:70:13:45:03:b1:50:fc:a4: c7:33:64:47:59:1d:71:03:55:cd:1e:51:a3:46:58: c4:d5:d7:e4:ca:7f:e5:89:19:60:05:e0:29:64:7e: a7:27:aa:5c:f2:bc:ca:a1:97:4e:73:14:f4:00:d2: 31:77:5e:6d:b1:37:fc:bc:0b:cd:0c:7e:d5:5e:aa: 63:20:b1:22:af:62:2d:bc:6d:29:a2:6a:be:45:ab: 44:57:36:74:d5:66:8d:63:d2:d9:90:ae:c4:f6:53: 8e:3b:55:4b:bb:ae:42:59:41:82:af:98:e0:a7:c3: 40:03:40:4b:95:76:77:a3:11:3b:06:9f:e0:15:e3: d5:d4:61:b1:e2:50:be:2e:07:b4:d3:de:ab:37:60: 21:b2:01:2a:f9:45:53:e9:33:42:6a:1e:55:30:56: ec:9c:c3:66:5a:a5:d4:2a:46:9b:79:bc:1c:be:4d: d0:01:a5:80:25:51:c1:55:31:b6:f4:56:38:e1:1d: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C0:98:45:FB:02:C0:DE:C8:BD:20:F4:12:21:FD:9F:66:75:76:55 X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:22:1d:94:d5:60:d9:d0:84:50:d2:89:22:80:ae:29:6a:e9: 49:68:4d:46:f8:a9:88:63:fd:99:92:9d:60:8c:6c:f6:ed:b5: 59:90:78:21:12:58:36:07:9e:d2:d4:58:5c:0c:96:5d:3e:0d: 06:a7:19:d2:20:22:f0:43:78:68:f2:8b:90:3e:08:9d:0f:03: f6:58:ac:23:c9:19:48:77:95:cf:13:e6:5b:72:4c:c1:08:ca: 24:cc:cc:ad:40:5c:bc:6d:36:14:76:4f:3d:27:f7:4b:76:66: 6a:1a:4b:af:03:80:49:28:ca:c6:3b:d2:52:33:cb:b2:e4:4a: 9c:7a:a1:d4:04:13:02:5f:41:46:3c:ef:10:38:cf:ed:fd:1b: 01:70:05:bf:a5:4a:84:8e:9f:21:06:32:3a:a9:53:09:7f:67: 15:1b:b5:ad:6c:89:40:3c:b3:3e:ae:7b:fb:20:7d:2f:b7:49: 65:81:4e:1b:2b:c7:ec:98:8a:78:c2:f2:24:25:cc:62:bd:d7: 41:93:1e:0f:66:c6:b3:cc:b5:88:21:5e:12:ff:67:9b:d4:72: 45:ac:51:83:cf:f4:a8:0d:da:03:b0:e2:61:d9:96:b1:8a:49: 08:b2:83:fd:4d:3f:45:f0:75:7e:96:f3:bb:09:fc:3a:2e:c0: 9e:ec:7b:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX7Kj12DFEzNHfkcFp4MrM1Zt5EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjA1MjMwMTI0NTRaFw0yNjA1MjQwNDMwNTRaMDMxMTAvBgNV BAMTKEVFQzA5ODQ1RkIwMkMwREVDOEJEMjBGNDEyMjFGRDlGNjY3NTc2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+3TSkwStb90ivUabvWSQNB60 FkPKEp0IZv1w6mzE8USbJEYZGs91z9dpRiCkkArmaPIS995JZHfdv6aXzGVFSlpw E0UDsVD8pMczZEdZHXEDVc0eUaNGWMTV1+TKf+WJGWAF4ClkfqcnqlzyvMqhl05z FPQA0jF3Xm2xN/y8C80MftVeqmMgsSKvYi28bSmiar5Fq0RXNnTVZo1j0tmQrsT2 U447VUu7rkJZQYKvmOCnw0ADQEuVdnejETsGn+AV49XUYbHiUL4uB7TT3qs3YCGy ASr5RVPpM0JqHlUwVuycw2ZapdQqRpt5vBy+TdABpYAlUcFVMbb0VjjhHVZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7sCYRfsCwN7IvSD0EiH9n2Z1dlUwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUiHZTVYNnQhFDSiSKArilq6UloTUb4qYhj /ZmSnWCMbPbttVmQeCESWDYHntLUWFwMll0+DQanGdIgIvBDeGjyi5A+CJ0PA/ZY rCPJGUh3lc8T5ltyTMEIyiTMzK1AXLxtNhR2Tz0n90t2ZmoaS68DgEkoysY70lIz y7LkSpx6odQEEwJfQUY87xA4z+39GwFwBb+lSoSOnyEGMjqpUwl/ZxUbta1siUA8 sz6ue/sgfS+3SWWBThsrx+yYinjC8iQlzGK910GTHg9mxrPMtYghXhL/Z5vUckWs UYPP9KgN2gOw4mHZlrGKSQiyg/1NP0XwdX6W87sJ/DouwJ7se5Y= -----END CERTIFICATE-----Generated at Sat May 23 06:06:48 2026 by rpki-client