$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json) Hash identifier: gzHlM3jGbSNSkhUMhCnuxPVLTlkIa/KOsWIFixOcHnE= Subject key identifier: 2D:A8:77:2B:EB:AD:D0:FF:37:D1:37:C1:83:21:F0:35:4A:F9:E0:D7 Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Certificate serial: 5CC38107210B2E9C71287F1717D492C16AC23E30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 18:03:55 +0000 Manifest this update: Mon 20 Jul 2026 17:58:55 +0000 Manifest next update: Tue 21 Jul 2026 19:30:55 +0000 Files and hashes: 1: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: 8twh50vQfU9USWQgR8oYV53fIrkrbeHKoRrZDzaSBLM=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=) 3: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=) 4: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c3:81:07:21:0b:2e:9c:71:28:7f:17:17:d4:92:c1:6a:c2:3e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Validity Not Before: Jul 20 17:58:55 2026 GMT Not After : Jul 21 19:30:55 2026 GMT Subject: CN=2DA8772BEBADD0FF37D137C18321F0354AF9E0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:dc:bd:b9:22:a4:97:bf:25:83:dd:a0:aa: 40:03:f1:a3:bd:e6:a7:0c:ab:96:dd:26:ff:e2:fb: f5:0c:da:56:55:c6:85:69:f6:7b:61:6c:1e:8a:72: 0d:9a:f3:8e:ae:f6:4d:39:59:25:14:eb:6f:59:c6: d5:84:08:b8:bc:45:5e:ac:6a:45:8f:ea:3a:2d:c6: 8b:4d:35:d1:5f:8e:03:a1:5c:71:55:51:12:5c:d0: b6:df:63:a4:43:4b:e1:cd:26:2e:51:82:e9:e3:9e: a9:46:b0:83:d6:a6:1a:ff:70:ec:14:4b:d5:5a:1e: 30:d7:a2:ad:ef:0a:0e:eb:30:53:99:47:ef:4d:1c: c0:32:e0:84:8a:56:98:ea:f9:94:bb:21:b1:00:11: 46:e6:80:dd:6c:17:d2:5b:d4:7b:c6:eb:53:97:72: 5e:b0:b6:f6:df:b7:46:5c:92:6e:5c:4e:5c:4b:18: 22:53:e2:55:9d:cf:94:2e:e3:b5:95:dc:95:36:15: 9b:73:36:34:23:3d:5f:6a:f4:8c:23:48:d9:34:3e: 5f:c3:e4:91:74:7a:3f:07:5d:4f:8b:ce:2b:0b:d6: 4c:19:3c:ee:28:cc:80:84:ad:32:c4:7e:fa:19:35: 30:63:86:9a:82:08:29:5d:2d:7f:0e:6e:dc:14:e2: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A8:77:2B:EB:AD:D0:FF:37:D1:37:C1:83:21:F0:35:4A:F9:E0:D7 X509v3 Authority Key Identifier: keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:56:e6:fd:28:66:60:26:4f:ee:7e:4f:c2:55:f8:bb:f5:4b: 54:fe:77:17:cf:1d:1c:f9:ce:0e:0e:64:99:44:fb:e4:7a:22: 3c:78:90:7c:a9:a7:cd:46:4f:c5:09:76:36:4d:24:1c:01:99: 6e:3f:fa:2c:72:96:4d:f7:15:fe:fe:b5:9f:51:06:32:95:8d: d9:36:16:b6:02:3e:c7:64:28:46:9d:8f:cd:0b:d5:ae:9a:b9: a9:11:80:62:9c:62:c6:c8:75:1a:15:5d:22:c6:d3:b9:98:41: 38:62:d0:e1:87:e1:1c:01:78:21:31:04:9b:f3:83:bc:1b:47: b2:f1:8f:52:cd:0b:22:ae:96:fd:ee:5d:fd:99:07:44:23:0c: 42:0e:3e:a0:c6:73:62:bf:be:80:ab:27:2d:76:f0:59:61:1f: 04:1f:07:82:40:2d:29:51:02:f2:20:83:f6:47:2f:bf:70:6f: fd:11:1b:1e:a7:2a:2a:1e:6f:50:c8:82:6c:a2:fc:e5:cc:0b: ee:e3:11:b7:5d:8e:b5:eb:9a:82:cc:96:ce:be:41:39:a6:17: 6b:69:77:38:53:14:38:c3:07:84:29:30:df:9f:ce:7b:09:38: a8:b3:7e:43:9a:dd:1f:4a:9b:7a:e8:69:4e:6c:16:6e:19:94: d5:45:90:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMOBByELLpxxKH8XF9SSwWrCPjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NC NTFEQTcxODAeFw0yNjA3MjAxNzU4NTVaFw0yNjA3MjExOTMwNTVaMDMxMTAvBgNV BAMTKDJEQTg3NzJCRUJBREQwRkYzN0QxMzdDMTgzMjFGMDM1NEFGOUUwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwdy9uSKkl78lg92gqkAD8aO9 5qcMq5bdJv/i+/UM2lZVxoVp9nthbB6Kcg2a846u9k05WSUU629ZxtWECLi8RV6s akWP6jotxotNNdFfjgOhXHFVURJc0LbfY6RDS+HNJi5RgunjnqlGsIPWphr/cOwU S9VaHjDXoq3vCg7rMFOZR+9NHMAy4ISKVpjq+ZS7IbEAEUbmgN1sF9Jb1HvG61OX cl6wtvbft0Zckm5cTlxLGCJT4lWdz5Qu47WV3JU2FZtzNjQjPV9q9IwjSNk0Pl/D 5JF0ej8HXU+LzisL1kwZPO4ozICErTLEfvoZNTBjhpqCCCldLX8ObtwU4qxpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULah3K+ut0P830TfBgyHwNUr54NcwHwYDVR0j BBgwFoAUsLjNzudCbQMQIL7B6tIzfLUdpxgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZjMTdjYzItZjRhMi00MTVlLThlYTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VF NzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NCNTFEQTcxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEI4Q0RDRUU3NDI2RDAzMTAyMEJFQzFFQUQyMzM3Q0I1MURB NzE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMz N0NCNTFEQTcxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlW5v0oZmAmT+5+T8JV+Lv1S1T+dxfPHRz5 zg4OZJlE++R6Ijx4kHypp81GT8UJdjZNJBwBmW4/+ixylk33Ff7+tZ9RBjKVjdk2 FrYCPsdkKEadj80L1a6auakRgGKcYsbIdRoVXSLG07mYQThi0OGH4RwBeCExBJvz g7wbR7Lxj1LNCyKulv3uXf2ZB0QjDEIOPqDGc2K/voCrJy128FlhHwQfB4JALSlR AvIgg/ZHL79wb/0RGx6nKioeb1DIgmyi/OXMC+7jEbddjrXrmoLMls6+QTmmF2tp dzhTFDjDB4QpMN+fznsJOKizfkOa3R9Km3roaU5sFm4ZlNVFkIw= -----END CERTIFICATE-----Generated at Tue Jul 21 07:06:33 2026 by rpki-client