$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: N0Hj+JHS3uZhMB95/PzvLpgOQx2SG4wYc33ML2WeG+U= Subject key identifier: 1D:7A:58:80:44:D5:BB:D5:C5:2F:10:C3:D5:07:1C:28:5C:3A:5E:50 Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 235C0766837E88A2F7608D194E31F4F307944C6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 15:21:01 +0000 Manifest this update: Sun 02 Aug 2026 15:16:01 +0000 Manifest next update: Mon 03 Aug 2026 18:24:01 +0000 Files and hashes: 1: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: hsfCvCBESQZn0ixQnAh6DX9m95OUKLlvouqG6ihOt6I=) 2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:5c:07:66:83:7e:88:a2:f7:60:8d:19:4e:31:f4:f3:07:94:4c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Aug 2 15:16:01 2026 GMT Not After : Aug 3 18:24:01 2026 GMT Subject: CN=1D7A588044D5BBD5C52F10C3D5071C285C3A5E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:8b:14:9b:34:be:57:4d:89:e6:4b:ed:bd: 37:21:ea:d7:d1:be:50:13:7a:53:4a:a3:cb:81:b3: d4:7b:0c:5e:a3:37:47:22:90:4f:cd:e9:e5:3f:9e: 01:ea:d7:3e:0e:d5:4a:d3:ac:a1:31:ba:6f:eb:1b: 90:37:5b:ee:e9:99:49:83:bc:2f:ef:1e:1b:c8:c5: db:d5:24:af:d8:1a:2c:31:9e:89:dc:4f:a9:cc:4e: 1f:3a:53:3c:ba:31:f7:0a:22:4a:88:7d:22:16:bd: be:6b:58:4a:63:c3:88:a7:b0:0d:ce:e0:57:68:db: e5:36:5e:8f:d8:c5:ab:02:1e:e6:25:67:f0:1e:bd: d3:08:fc:1e:f2:7a:f1:47:50:ce:59:ca:1f:6a:6d: ca:56:05:88:36:ea:29:8c:bf:fa:f6:d9:34:82:d6: 9b:f2:aa:ae:43:ca:4e:2c:30:03:26:94:e5:72:08: a9:0f:c4:4a:82:55:d5:0c:1f:e2:fa:58:45:a5:8b: 67:fb:a1:ed:35:72:51:ff:01:8a:35:e8:fd:5c:e4: 56:ed:a7:1f:e8:55:41:c5:5d:61:95:90:a9:99:3f: 03:39:9c:ec:bc:b6:07:59:7d:f6:10:8f:25:be:d1: 4a:7c:41:f5:c8:15:c2:66:eb:df:96:90:40:d2:4f: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:58:80:44:D5:BB:D5:C5:2F:10:C3:D5:07:1C:28:5C:3A:5E:50 X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a8:58:fa:c3:d6:d0:2b:8b:e9:c6:30:91:b7:17:4e:3b:7d: c7:c7:78:e5:3c:53:f0:7b:b8:1a:db:39:29:f6:6f:34:96:6a: 2e:c1:0a:5d:c0:3f:fa:73:28:8d:4c:ca:e0:8e:a7:47:33:be: 32:b4:a5:a2:2b:24:af:f3:59:0f:d6:b5:08:13:02:57:42:fd: 01:6c:61:80:86:94:45:09:36:a9:48:48:4e:3d:4f:4f:1b:d5: 51:62:8e:c8:5a:10:f8:9f:cc:b2:24:42:48:99:51:1f:07:29: 1c:c0:ca:eb:04:b6:6f:72:58:e1:90:1b:77:a2:ba:c3:aa:7a: 46:ba:99:3b:f5:0c:12:8a:bf:e7:1b:70:36:d8:e2:a9:3c:ae: 15:e9:cc:02:87:03:d6:98:9f:57:75:e5:53:01:80:a4:c5:7f: 43:9b:67:ca:39:5c:23:08:5a:b2:b3:8d:7f:36:d0:4f:66:2d: 3b:e2:82:8c:2d:f4:c6:bb:a8:c5:87:c8:ab:82:3c:fc:21:96: 54:97:97:31:8b:89:5d:76:e2:61:19:da:ee:65:fe:b7:76:d3: 1e:91:79:99:0a:2f:6b:d3:1a:49:f1:a0:9f:aa:72:61:cd:f1: a9:2f:03:bb:f7:0d:05:4c:e5:6e:49:80:44:aa:7f:64:8c:c5: 26:c1:21:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1wHZoN+iKL3YI0ZTjH08weUTG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjA4MDIxNTE2MDFaFw0yNjA4MDMxODI0MDFaMDMxMTAvBgNV BAMTKDFEN0E1ODgwNDRENUJCRDVDNTJGMTBDM0Q1MDcxQzI4NUMzQTVFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT+osUmzS+V02J5kvtvTch6tfR vlATelNKo8uBs9R7DF6jN0cikE/N6eU/ngHq1z4O1UrTrKExum/rG5A3W+7pmUmD vC/vHhvIxdvVJK/YGiwxnoncT6nMTh86Uzy6MfcKIkqIfSIWvb5rWEpjw4insA3O 4Fdo2+U2Xo/YxasCHuYlZ/AevdMI/B7yevFHUM5Zyh9qbcpWBYg26imMv/r22TSC 1pvyqq5Dyk4sMAMmlOVyCKkPxEqCVdUMH+L6WEWli2f7oe01clH/AYo16P1c5Fbt px/oVUHFXWGVkKmZPwM5nOy8tgdZffYQjyW+0Up8QfXIFcJm69+WkEDST7MzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHXpYgETVu9XFLxDD1QccKFw6XlAwHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHioWPrD1tAri+nGMJG3F047fcfHeOU8U/B7 uBrbOSn2bzSWai7BCl3AP/pzKI1MyuCOp0czvjK0paIrJK/zWQ/WtQgTAldC/QFs YYCGlEUJNqlISE49T08b1VFijshaEPifzLIkQkiZUR8HKRzAyusEtm9yWOGQG3ei usOqeka6mTv1DBKKv+cbcDbY4qk8rhXpzAKHA9aYn1d15VMBgKTFf0ObZ8o5XCMI WrKzjX820E9mLTvigowt9Ma7qMWHyKuCPPwhllSXlzGLiV124mEZ2u5l/rd20x6R eZkKL2vTGknxoJ+qcmHN8akvA7v3DQVM5W5JgESqf2SMxSbBIQ4= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:44 2026 by rpki-client