$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: kyQMH6ZzXud3bQUUUQufn6BcvASmJqWkjLBI7jjjVDM= Subject key identifier: D9:DE:1B:81:D9:B4:61:BD:4B:AC:75:4B:86:D0:E6:D4:EF:F5:54:43 Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 66E5B8A750943D596344B917F2131C9215952732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 08:32:35 +0000 Manifest this update: Sun 19 Jul 2026 08:27:35 +0000 Manifest next update: Mon 20 Jul 2026 11:10:35 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) 2: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: b51d4szoeU58CYNdJR4fuJfI/y0VkSA5AWeOQPVgdEM=) 3: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e5:b8:a7:50:94:3d:59:63:44:b9:17:f2:13:1c:92:15:95:27:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Jul 19 08:27:35 2026 GMT Not After : Jul 20 11:10:35 2026 GMT Subject: CN=D9DE1B81D9B461BD4BAC754B86D0E6D4EFF55443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:16:2c:62:48:bc:f8:c9:0a:76:fe:2d:ab:3c: e1:36:9e:1a:c1:37:4a:c0:3b:30:1b:c8:67:0f:9c: b1:fa:4c:26:d2:ce:5e:60:b0:2b:3c:1d:fb:17:ef: 6f:95:57:fa:63:83:f8:7f:42:3f:f2:84:01:d7:c6: 97:31:44:a4:26:4c:71:2d:f5:51:59:c8:47:76:73: 62:11:da:80:8a:ed:f6:6c:69:91:03:f0:a0:b6:5e: 27:0e:a9:2f:ae:d2:40:27:3b:02:2e:c4:dc:d8:47: 0f:b5:0f:51:97:ec:2a:64:52:64:28:6e:98:89:5a: 83:75:a8:af:11:88:43:78:21:66:a3:8f:2e:ba:0b: 3a:59:13:71:f2:16:e0:5e:6c:7d:00:44:8d:bb:4e: 33:f3:88:c6:ae:fb:67:3c:c9:b7:57:4b:d7:e0:a3: f8:49:0e:94:30:67:ad:de:03:8b:33:63:ae:7e:a3: 9c:c7:e1:6f:ec:19:c0:52:e3:09:5a:4f:0c:1b:e4: c1:e1:c1:37:39:43:6b:43:e6:79:f1:de:b8:75:45: f2:3d:38:40:3b:06:18:55:66:d1:52:81:9d:13:4f: 65:e1:e9:df:b8:1a:d8:7d:cb:b4:b8:f6:13:32:a9: 70:bc:56:96:51:b2:6a:2d:47:bd:7e:3e:8f:6a:19: 25:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:1B:81:D9:B4:61:BD:4B:AC:75:4B:86:D0:E6:D4:EF:F5:54:43 X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d2:c4:e1:53:f9:f6:21:60:1f:ab:76:04:85:2d:ee:49:e5: b3:5d:77:fc:b0:e5:47:b3:c3:fb:4c:4f:fe:71:a3:d1:d7:d6: b4:98:c6:47:f8:c4:a1:3a:8c:c1:3f:0e:66:d3:93:55:3d:58: 23:5f:00:fb:63:9d:c3:c9:c8:75:c7:a5:7b:70:40:c1:8c:52: 66:0a:cf:2c:99:49:e8:3c:bd:62:eb:34:e7:36:e0:b7:ce:4d: 80:7d:1f:75:e6:e0:57:21:5e:e6:6d:2d:1a:0e:f8:67:4e:ce: 95:30:b4:61:c5:93:86:50:72:79:96:32:3a:b6:c3:e2:93:b1: bc:74:e6:59:32:f5:1e:5a:73:56:80:9b:32:5d:b5:b1:20:07: d2:b0:cb:af:07:c3:90:93:3e:46:53:2a:85:51:f0:5e:3f:32: 55:94:23:32:3b:30:d6:e1:13:f6:c1:05:40:ad:5d:f5:7b:a6: 15:06:72:9a:61:1a:c0:4e:78:df:58:b3:37:70:f4:e7:be:a4: 06:f7:53:84:bb:e1:d3:b7:49:89:5b:8d:3c:66:18:0b:88:f1: 98:62:f0:ba:d1:19:78:be:de:18:62:13:9f:f9:0f:3a:e1:4f: 0a:03:1a:d4:d7:8b:50:b6:47:2a:ef:69:e0:55:60:33:41:c9: 75:60:15:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuW4p1CUPVljRLkX8hMckhWVJzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjA3MTkwODI3MzVaFw0yNjA3MjAxMTEwMzVaMDMxMTAvBgNV BAMTKEQ5REUxQjgxRDlCNDYxQkQ0QkFDNzU0Qjg2RDBFNkQ0RUZGNTU0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1FixiSLz4yQp2/i2rPOE2nhrB N0rAOzAbyGcPnLH6TCbSzl5gsCs8HfsX72+VV/pjg/h/Qj/yhAHXxpcxRKQmTHEt 9VFZyEd2c2IR2oCK7fZsaZED8KC2XicOqS+u0kAnOwIuxNzYRw+1D1GX7CpkUmQo bpiJWoN1qK8RiEN4IWajjy66CzpZE3HyFuBebH0ARI27TjPziMau+2c8ybdXS9fg o/hJDpQwZ63eA4szY65+o5zH4W/sGcBS4wlaTwwb5MHhwTc5Q2tD5nnx3rh1RfI9 OEA7BhhVZtFSgZ0TT2Xh6d+4Gth9y7S49hMyqXC8VpZRsmotR71+Po9qGSVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2d4bgdm0Yb1LrHVLhtDm1O/1VEMwHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzSxOFT+fYhYB+rdgSFLe5J5bNdd/yw5Uez w/tMT/5xo9HX1rSYxkf4xKE6jME/DmbTk1U9WCNfAPtjncPJyHXHpXtwQMGMUmYK zyyZSeg8vWLrNOc24LfOTYB9H3Xm4FchXuZtLRoO+GdOzpUwtGHFk4ZQcnmWMjq2 w+KTsbx05lky9R5ac1aAmzJdtbEgB9Kwy68Hw5CTPkZTKoVR8F4/MlWUIzI7MNbh E/bBBUCtXfV7phUGcpphGsBOeN9Yszdw9Oe+pAb3U4S74dO3SYlbjTxmGAuI8Zhi 8LrRGXi+3hhiE5/5DzrhTwoDGtTXi1C2RyrvaeBVYDNByXVgFe4= -----END CERTIFICATE-----Generated at Sun Jul 19 23:21:51 2026 by rpki-client