$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: sYuxnaJGNqRDUmDt2XnH7FEjqkC8W7kqY5bb7t9ypAA= Subject key identifier: 36:20:CB:74:50:C8:0A:EF:B4:5B:28:41:18:C6:31:AB:1D:02:11:08 Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 7A23CFFCDB34D63F4C2BBE2FD2893A029EE6DC93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 15:05:32 +0000 Manifest this update: Sun 19 Jul 2026 15:00:32 +0000 Manifest next update: Mon 20 Jul 2026 15:37:32 +0000 Files and hashes: 1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 2: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: XNDWVSY6VLGwlc+Y3NErUypRJ0Uy18UuR/Gwv2XMb0A=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 15:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:23:cf:fc:db:34:d6:3f:4c:2b:be:2f:d2:89:3a:02:9e:e6:dc:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: Jul 19 15:00:32 2026 GMT Not After : Jul 20 15:37:32 2026 GMT Subject: CN=3620CB7450C80AEFB45B284118C631AB1D021108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:8f:c9:a8:96:e8:d9:f8:06:36:d2:f7:82: 8e:b4:e7:5b:99:6b:e6:27:9e:3a:04:0f:e0:d0:97: b1:ad:41:5d:18:3e:aa:49:8e:b9:eb:34:07:eb:6b: da:a3:b1:ef:c3:06:71:52:43:3a:ef:be:70:7e:d0: 13:a8:dc:44:d9:ae:a7:47:2f:aa:6b:51:16:48:d5: f2:50:bd:28:62:3e:9a:ce:7b:9b:68:f4:7f:46:02: 5f:51:02:74:7f:28:82:5e:d5:e1:77:52:9b:98:1e: 20:c5:29:f0:e0:f9:d7:ab:9c:53:11:d4:6d:21:df: 0c:2f:e3:a6:60:dd:d0:e1:ab:d7:81:ee:fe:3a:17: 68:76:c7:a5:99:17:9d:f1:cc:c8:2a:c6:b4:0c:2d: 13:0f:94:ed:a2:4c:1d:48:23:75:32:68:d7:5f:b5: 05:d0:44:df:c2:95:9f:35:f6:65:62:76:e6:26:56: a9:c7:b8:af:c7:58:78:3e:b2:17:4a:56:45:2d:bd: 2f:b8:14:3c:dd:38:e6:47:1f:c8:65:cd:3f:dc:f9: a4:26:74:9d:ec:6a:92:80:7a:95:a2:75:ab:89:28: b8:45:8d:9b:bb:b7:cd:92:c6:ca:eb:22:87:7e:2d: dc:a0:ee:4f:a9:9b:56:30:9a:f9:77:8c:7c:4c:f6: be:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:20:CB:74:50:C8:0A:EF:B4:5B:28:41:18:C6:31:AB:1D:02:11:08 X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ed:fc:09:70:2a:bf:c3:86:9d:7b:a1:bd:44:bc:f9:31:bd: 18:d0:44:7c:5f:f5:39:eb:3f:4c:43:2f:d3:75:fe:4f:ac:2b: e2:2b:d6:f6:a8:d4:74:f6:88:ee:fe:df:bf:3f:a3:7b:99:34: 62:5f:a1:67:21:54:ba:a1:ec:3f:f1:23:93:c0:04:58:ee:ee: b8:0c:6f:9b:31:96:25:fa:21:68:51:9a:04:88:02:ff:8a:16: bd:6b:34:2b:48:7f:ce:42:58:7d:02:17:4e:be:3e:e8:62:47: f2:18:b5:12:1b:44:84:c9:49:8d:be:07:e0:7e:81:55:d8:c8: 19:17:7b:b0:3d:e1:43:9d:ee:4b:04:90:e1:45:7a:df:18:9f: 82:66:d3:1c:9c:e6:13:5f:5f:1f:11:ca:51:88:2e:66:06:00: a4:7e:cb:74:48:d3:f8:48:65:64:85:61:c8:ce:be:3c:9c:36: a7:fc:be:db:6f:2b:26:ed:18:85:f1:7f:2b:99:87:7a:1f:34: 6c:2e:e7:63:1d:8c:ba:ad:72:e6:2c:6b:9b:48:47:a2:2f:70: d9:0f:37:ce:48:fe:65:65:18:82:b9:c9:76:66:90:3b:2b:dc: 6f:70:b2:1f:20:85:7e:78:37:8e:0a:e9:82:b4:ab:9c:4d:09: 25:17:27:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiPP/Ns01j9MK74v0ok6Ap7m3JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjA3MTkxNTAwMzJaFw0yNjA3MjAxNTM3MzJaMDMxMTAvBgNV BAMTKDM2MjBDQjc0NTBDODBBRUZCNDVCMjg0MTE4QzYzMUFCMUQwMjExMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2tY/JqJbo2fgGNtL3go6051uZ a+YnnjoED+DQl7GtQV0YPqpJjrnrNAfra9qjse/DBnFSQzrvvnB+0BOo3ETZrqdH L6prURZI1fJQvShiPprOe5to9H9GAl9RAnR/KIJe1eF3UpuYHiDFKfDg+dernFMR 1G0h3wwv46Zg3dDhq9eB7v46F2h2x6WZF53xzMgqxrQMLRMPlO2iTB1II3UyaNdf tQXQRN/ClZ819mViduYmVqnHuK/HWHg+shdKVkUtvS+4FDzdOOZHH8hlzT/c+aQm dJ3sapKAepWidauJKLhFjZu7t82SxsrrIod+Ldyg7k+pm1Ywmvl3jHxM9r4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNiDLdFDICu+0WyhBGMYxqx0CEQgwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjt/AlwKr/Dhp17ob1EvPkxvRjQRHxf9Tnr P0xDL9N1/k+sK+Ir1vao1HT2iO7+378/o3uZNGJfoWchVLqh7D/xI5PABFju7rgM b5sxliX6IWhRmgSIAv+KFr1rNCtIf85CWH0CF06+PuhiR/IYtRIbRITJSY2+B+B+ gVXYyBkXe7A94UOd7ksEkOFFet8Yn4Jm0xyc5hNfXx8RylGILmYGAKR+y3RI0/hI ZWSFYcjOvjycNqf8vttvKybtGIXxfyuZh3ofNGwu52MdjLqtcuYsa5tIR6IvcNkP N85I/mVlGIK5yXZmkDsr3G9wsh8ghX54N44K6YK0q5xNCSUXJ/o= -----END CERTIFICATE-----Generated at Mon Jul 20 04:13:26 2026 by rpki-client