$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: JRN77stCDTm8SPi+8LaR65rzJL3HaRng8HKjVuMqPho= Subject key identifier: 3F:98:C3:F2:7C:21:CB:13:DB:DD:D0:62:8F:70:C6:21:8D:C3:83:3A Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 718DA2CD147D821391D039D73C5C42C7C2F29003 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:44:12 +0000 Manifest this update: Tue 21 Jul 2026 02:39:12 +0000 Manifest next update: Wed 22 Jul 2026 03:09:12 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) 3: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: YIETAwSAnKGeHzcMwh7NE+m4FS3ne9uP4ce9R+ZLJfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8d:a2:cd:14:7d:82:13:91:d0:39:d7:3c:5c:42:c7:c2:f2:90:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Jul 21 02:39:12 2026 GMT Not After : Jul 22 03:09:12 2026 GMT Subject: CN=3F98C3F27C21CB13DBDDD0628F70C6218DC3833A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7e:96:24:de:81:f3:b3:c8:86:a9:80:44:73: 9c:0f:1c:24:91:b9:e5:37:69:3a:f6:ab:a3:39:55: 58:18:72:32:d5:c5:e9:de:08:cd:da:1d:bb:ca:4c: 54:f2:57:82:d5:26:e1:51:46:30:f7:e3:cd:12:d8: bc:19:0f:e3:a8:f1:e9:bf:c8:8c:d5:ae:62:b1:dd: 42:37:c6:aa:d7:56:bd:ae:af:f9:1c:1f:42:10:a4: 24:e7:1f:17:25:09:59:38:19:ed:9e:1c:61:01:c8: 43:be:a8:d9:e1:8d:b9:bf:f4:6b:25:c5:06:69:14: ab:cc:49:14:d7:02:66:9f:1a:49:c8:6d:9c:ec:d4: b1:b0:52:e2:05:1b:29:10:5c:90:ab:36:c5:0f:21: e5:e3:40:79:31:cc:8f:0a:12:43:52:1c:3f:4a:26: 73:21:49:95:59:52:be:4c:a8:25:bc:3c:24:3c:ea: 6f:ee:2f:f1:26:f9:5b:c7:37:05:26:03:fd:90:61: 09:5e:6e:59:f3:f6:52:df:69:a1:90:bb:83:52:61: f9:7a:a1:4c:fc:c5:04:eb:b6:a7:3e:de:fd:df:be: de:45:10:f7:ea:e8:80:b1:13:25:bd:93:22:03:f7: fb:4c:54:0f:8f:0e:65:e5:89:05:63:a4:c8:f8:61: 79:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:98:C3:F2:7C:21:CB:13:DB:DD:D0:62:8F:70:C6:21:8D:C3:83:3A X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:69:b5:4c:0a:35:f1:c7:aa:00:ac:f5:1c:f3:00:83:9b:12: cf:5e:4f:a6:fb:94:1c:45:fa:df:d4:13:ad:47:be:c7:a3:75: 28:29:53:8c:2d:63:46:47:a8:c9:ad:b5:e3:b7:e6:33:0b:d6: 48:c8:39:35:1b:8c:aa:35:73:39:6a:ea:cb:4a:93:2a:21:95: ed:18:6d:c5:df:a5:49:61:5a:56:86:ae:09:4c:d6:bf:12:56: ff:41:80:d0:76:7b:20:06:23:7a:89:e5:5e:69:57:b0:90:64: 7e:21:a9:b9:51:c1:e4:94:d3:f5:9a:98:a8:1f:e9:e9:4b:9d: 4f:5c:ad:a0:1d:c5:69:4b:f3:7a:10:64:27:a1:ae:ce:7e:90: 40:3b:ee:00:2e:40:78:1c:11:81:5d:83:11:f3:4c:08:a0:d8: 58:85:8b:be:f6:4b:db:75:06:87:61:82:ca:62:22:48:cd:52: 15:9d:c0:2f:8b:5d:35:bc:58:ca:3f:88:cc:f3:95:8a:b1:0c: 19:79:5f:3c:f5:c4:a0:8f:b2:ea:89:09:7a:4b:c7:43:27:0f: aa:04:75:0e:d8:66:4c:fc:d3:50:68:3a:e8:2d:ee:bd:6f:14: ca:c8:f7:02:ec:dd:d7:1b:2f:bb:33:ec:cd:60:da:9d:3e:4a: dd:2e:94:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcY2izRR9ghOR0DnXPFxCx8LykAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA3MjEwMjM5MTJaFw0yNjA3MjIwMzA5MTJaMDMxMTAvBgNV BAMTKDNGOThDM0YyN0MyMUNCMTNEQkRERDA2MjhGNzBDNjIxOERDMzgzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNfpYk3oHzs8iGqYBEc5wPHCSR ueU3aTr2q6M5VVgYcjLVxeneCM3aHbvKTFTyV4LVJuFRRjD3480S2LwZD+Oo8em/ yIzVrmKx3UI3xqrXVr2ur/kcH0IQpCTnHxclCVk4Ge2eHGEByEO+qNnhjbm/9Gsl xQZpFKvMSRTXAmafGknIbZzs1LGwUuIFGykQXJCrNsUPIeXjQHkxzI8KEkNSHD9K JnMhSZVZUr5MqCW8PCQ86m/uL/Em+VvHNwUmA/2QYQleblnz9lLfaaGQu4NSYfl6 oUz8xQTrtqc+3v3fvt5FEPfq6ICxEyW9kyID9/tMVA+PDmXliQVjpMj4YXmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP5jD8nwhyxPb3dBij3DGIY3DgzowHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5ptUwKNfHHqgCs9RzzAIObEs9eT6b7lBxF +t/UE61HvsejdSgpU4wtY0ZHqMmtteO35jML1kjIOTUbjKo1czlq6stKkyohle0Y bcXfpUlhWlaGrglM1r8SVv9BgNB2eyAGI3qJ5V5pV7CQZH4hqblRweSU0/WamKgf 6elLnU9craAdxWlL83oQZCehrs5+kEA77gAuQHgcEYFdgxHzTAig2FiFi772S9t1 BodhgspiIkjNUhWdwC+LXTW8WMo/iMzzlYqxDBl5Xzz1xKCPsuqJCXpLx0MnD6oE dQ7YZkz801BoOugt7r1vFMrI9wLs3dcbL7sz7M1g2p0+St0ulPI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:42 2026 by rpki-client