$ rpki-client -vvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft File: BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json) Hash identifier: Ma0sFhIHy2bIchubNrgYr0LR4F1vdhA+s/jhS3LGdDg= Subject key identifier: F0:38:A9:ED:C4:F0:E9:20:67:FF:4C:19:84:F3:21:1D:9B:57:AE:60 Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Certificate serial: 2E8DEB9CE4FAA24E35DED53D2FDDE61F6770A807 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft Manifest number: 68 Signing time: Sun 19 Jul 2026 10:14:25 +0000 Manifest this update: Sun 19 Jul 2026 10:09:25 +0000 Manifest next update: Mon 20 Jul 2026 10:18:25 +0000 Files and hashes: 1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: k+3Di4dGpcWsHOygghtf9OSz7gbZR9m8uoBIp3deWVI=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:8d:eb:9c:e4:fa:a2:4e:35:de:d5:3d:2f:dd:e6:1f:67:70:a8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Validity Not Before: Jul 19 10:09:25 2026 GMT Not After : Jul 20 10:18:25 2026 GMT Subject: CN=F038A9EDC4F0E92067FF4C1984F3211D9B57AE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:12:01:1a:6d:b3:dd:8f:0a:d5:98:9a:af:e3: f6:c5:46:08:25:b3:be:67:35:cf:60:79:4e:45:3e: 68:0d:b1:94:b8:65:4d:f0:9d:4d:2b:96:91:99:5e: 72:61:30:10:1a:48:68:d0:40:56:e0:e3:3f:ca:c8: a4:2d:c6:84:7b:e8:6e:4e:6b:1d:99:96:7d:ad:df: 84:fe:95:ac:10:7f:78:89:e9:73:6d:a0:ba:a1:78: 42:1d:6a:c1:66:bc:c8:77:55:28:bb:75:a5:65:37: 38:da:36:61:05:80:61:e0:53:fa:c2:56:97:e3:6b: ef:94:20:4d:57:f1:39:bc:c1:81:28:90:60:9a:42: f9:f6:02:c3:81:83:26:40:48:4f:f6:2c:a2:1b:16: a2:66:7d:47:67:5a:ae:da:f9:8d:f9:00:d3:6f:a9: 11:75:23:df:f9:ae:20:3c:e5:60:28:56:9f:7a:ff: b7:f4:80:aa:8c:60:a3:9a:54:20:96:8d:f7:ce:7b: 42:c4:78:86:9b:fc:1e:6b:42:04:cc:e4:97:97:f8: 0c:29:fb:36:db:26:fe:23:76:97:87:72:8d:68:e6: e1:2c:1a:f9:19:eb:be:ed:1a:97:04:d4:54:89:ca: bd:1e:57:61:2c:41:ac:32:d7:7a:1a:fb:3b:76:d8: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:A9:ED:C4:F0:E9:20:67:FF:4C:19:84:F3:21:1D:9B:57:AE:60 X509v3 Authority Key Identifier: keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:3e:96:c0:5a:fc:64:1f:b3:7a:c5:28:7d:2b:53:c7:f7:40: 8f:bd:d3:44:fe:3c:93:1a:0c:64:5d:13:1e:d2:5d:58:12:46: 69:10:0f:45:b4:d1:da:bb:cd:a7:3b:d4:21:fc:24:06:80:b7: 41:3a:67:9f:d0:af:2d:38:f4:cd:b3:7a:a5:c0:a5:51:f4:12: dc:a8:58:16:91:53:44:fc:54:47:7d:3b:63:ed:de:26:d0:1b: d8:2f:19:fa:a5:a4:37:e9:52:39:44:5d:b8:3f:39:d3:35:18: 7d:cf:ee:4a:88:87:40:49:d2:cc:c2:3e:73:2b:66:6d:bf:18: 72:3e:1f:df:37:59:66:df:88:95:28:b3:54:11:62:b0:68:5b: 01:2b:5a:54:af:cf:fb:7b:10:fb:7d:90:80:45:2a:43:14:be: f7:d9:25:db:af:e4:f0:d3:28:5b:b7:5b:5b:5c:f8:b0:3a:21: d0:83:e3:59:e5:2e:83:73:5e:7c:0c:96:b1:66:b5:9e:22:e7: 5a:a8:e4:57:37:6a:18:9b:d2:2d:41:f8:b6:ce:b5:a1:86:86: 7e:86:f2:9a:e1:46:0a:d0:39:0b:87:0d:1e:52:f3:d9:e8:56: 68:7f:c8:23:d6:78:fa:c8:77:1a:f2:b0:78:94:22:4c:1d:42: a6:73:59:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULo3rnOT6ok413tU9L93mH2dwqAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRF NTgxMjAzQjAeFw0yNjA3MTkxMDA5MjVaFw0yNjA3MjAxMDE4MjVaMDMxMTAvBgNV BAMTKEYwMzhBOUVEQzRGMEU5MjA2N0ZGNEMxOTg0RjMyMTFEOUI1N0FFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQEgEabbPdjwrVmJqv4/bFRggl s75nNc9geU5FPmgNsZS4ZU3wnU0rlpGZXnJhMBAaSGjQQFbg4z/KyKQtxoR76G5O ax2Zln2t34T+lawQf3iJ6XNtoLqheEIdasFmvMh3VSi7daVlNzjaNmEFgGHgU/rC Vpfja++UIE1X8Tm8wYEokGCaQvn2AsOBgyZASE/2LKIbFqJmfUdnWq7a+Y35ANNv qRF1I9/5riA85WAoVp96/7f0gKqMYKOaVCCWjffOe0LEeIab/B5rQgTM5JeX+Awp +zbbJv4jdpeHco1o5uEsGvkZ677tGpcE1FSJyr0eV2EsQawy13oa+zt22Av/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Dip7cTw6SBn/0wZhPMhHZtXrmAwHwYDVR0j BBgwFoAUv4HseMyKYfz/cahiMhpSBOWBIDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg2OGNmMjItZDAyOS00NWUyLTllMjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhD QzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRFNTgxMjAzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjgxRUM3OENDOEE2MUZDRkY3MUE4NjIzMjFBNTIwNEU1ODEy MDNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUy MDRFNTgxMjAzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADg+lsBa/GQfs3rFKH0rU8f3QI+900T+PJMa DGRdEx7SXVgSRmkQD0W00dq7zac71CH8JAaAt0E6Z5/Qry049M2zeqXApVH0Etyo WBaRU0T8VEd9O2Pt3ibQG9gvGfqlpDfpUjlEXbg/OdM1GH3P7kqIh0BJ0szCPnMr Zm2/GHI+H983WWbfiJUos1QRYrBoWwErWlSvz/t7EPt9kIBFKkMUvvfZJduv5PDT KFu3W1tc+LA6IdCD41nlLoNzXnwMlrFmtZ4i51qo5Fc3ahib0i1B+LbOtaGGhn6G 8prhRgrQOQuHDR5S89noVmh/yCPWePrIdxrysHiUIkwdQqZzWb8= -----END CERTIFICATE-----Generated at Sun Jul 19 22:51:18 2026 by rpki-client