$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: vxjO0mbjWnlYTUtH21OmAPRvTKdzC/OfkLAychBD4pc= Subject key identifier: E3:5F:CF:2E:91:80:77:69:DC:8A:80:B1:60:47:F4:06:48:A3:47:49 Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 1E17469AD5AFC3F6892B411595C9BC636856641F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: 49 Signing time: Fri 26 Jun 2026 07:01:24 +0000 Manifest this update: Fri 26 Jun 2026 06:56:24 +0000 Manifest next update: Sat 27 Jun 2026 08:23:24 +0000 Files and hashes: 1: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) 2: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: lW68QJQsDFLNvCJC+4wSAR0+L+BU+kdPjjBpHLnfRA8=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Jun 2026 06:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:17:46:9a:d5:af:c3:f6:89:2b:41:15:95:c9:bc:63:68:56:64:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Jun 26 06:56:24 2026 GMT Not After : Jun 27 08:23:24 2026 GMT Subject: CN=E35FCF2E91807769DC8A80B16047F40648A34749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:b9:70:54:50:1e:e9:bf:4b:11:6b:86:3b: 2c:aa:1b:79:2d:85:0c:1e:25:2c:2d:45:80:03:ca: d8:4a:12:a0:03:6d:1f:63:45:cf:f8:fa:cf:0f:af: ce:a5:98:c5:0c:32:5c:07:42:60:ac:71:96:69:7b: 5e:4d:20:51:49:3e:34:bb:6f:24:2d:2f:7a:d6:89: a5:fc:b1:aa:06:c7:8f:47:1d:2e:dc:e2:38:09:3c: c9:25:1b:f1:aa:23:35:7f:48:ae:a0:c1:73:84:db: cf:63:b8:df:b8:cc:5f:b3:6e:86:d0:b4:88:11:c1: d6:14:57:c1:66:5d:66:a7:e6:02:de:8b:f0:46:fd: b6:c5:02:68:fe:07:89:c0:99:c4:6b:43:80:bc:20: 86:e6:43:1d:c6:3e:2e:ff:3b:30:af:8d:41:79:10: e6:34:36:f0:f7:c5:68:88:da:22:cb:2e:c8:f9:23: 6e:0e:2c:05:64:29:e1:bd:7d:0a:a5:56:80:00:92: 74:0d:e5:a5:8d:e1:48:fe:93:71:87:76:a8:fa:cc: 7c:14:59:ad:aa:96:30:25:ec:0c:7c:f5:83:fd:2c: 94:d9:1c:14:6a:37:46:32:50:c9:2b:b1:b9:24:8e: 34:a7:5e:fc:33:10:99:1b:28:1d:52:cb:d6:63:11: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:5F:CF:2E:91:80:77:69:DC:8A:80:B1:60:47:F4:06:48:A3:47:49 X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9f:47:1a:bb:69:9e:8f:3e:2f:a3:4c:72:87:a6:4e:37:6b: fb:51:e1:00:55:25:2d:72:24:e3:97:40:21:b1:39:30:e5:d0: 6a:38:dc:a7:f4:1a:0d:66:c0:64:d3:78:88:04:c6:b6:8d:da: 52:79:49:84:55:26:76:35:01:2f:73:a1:0f:ff:d4:ba:97:5a: 02:6c:01:9d:3d:51:63:a7:06:8f:74:78:c1:9f:09:a6:94:a6: 00:4b:62:2d:0d:3d:04:5a:c5:b5:f3:31:6a:45:fc:12:e9:e2: b1:7c:4b:cc:02:d1:ed:94:53:a3:b9:a9:44:a8:6e:59:68:7b: f6:b3:35:20:3c:e5:3b:57:57:4d:b4:72:40:18:42:9e:72:07: 5d:f3:d4:ff:cc:12:36:b8:09:c8:33:34:74:48:91:b3:b9:65: a6:00:0f:27:42:67:56:21:ea:33:ab:2c:f3:b2:17:75:91:14: 61:51:67:f0:27:ce:75:6b:c5:72:bb:df:4a:fc:8e:00:b1:9d: 65:3f:ef:4d:d9:83:76:e2:0f:4f:27:fd:17:5f:31:18:28:91: f4:a9:84:66:20:80:7e:dc:f3:f0:4d:52:de:84:f4:5c:08:51: d7:b4:65:8f:f2:7f:f7:80:05:45:1c:44:58:ec:56:17:2d:97: 3b:20:74:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhdGmtWvw/aJK0EVlcm8Y2hWZB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjA2MjYwNjU2MjRaFw0yNjA2MjcwODIzMjRaMDMxMTAvBgNV BAMTKEUzNUZDRjJFOTE4MDc3NjlEQzhBODBCMTYwNDdGNDA2NDhBMzQ3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvA7lwVFAe6b9LEWuGOyyqG3kt hQweJSwtRYADythKEqADbR9jRc/4+s8Pr86lmMUMMlwHQmCscZZpe15NIFFJPjS7 byQtL3rWiaX8saoGx49HHS7c4jgJPMklG/GqIzV/SK6gwXOE289juN+4zF+zbobQ tIgRwdYUV8FmXWan5gLei/BG/bbFAmj+B4nAmcRrQ4C8IIbmQx3GPi7/OzCvjUF5 EOY0NvD3xWiI2iLLLsj5I24OLAVkKeG9fQqlVoAAknQN5aWN4Uj+k3GHdqj6zHwU Wa2qljAl7Ax89YP9LJTZHBRqN0YyUMkrsbkkjjSnXvwzEJkbKB1Sy9ZjEUoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU41/PLpGAd2ncioCxYEf0BkijR0kwHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqfRxq7aZ6PPi+jTHKHpk43a/tR4QBVJS1y JOOXQCGxOTDl0Go43Kf0Gg1mwGTTeIgExraN2lJ5SYRVJnY1AS9zoQ//1LqXWgJs AZ09UWOnBo90eMGfCaaUpgBLYi0NPQRaxbXzMWpF/BLp4rF8S8wC0e2UU6O5qUSo blloe/azNSA85TtXV020ckAYQp5yB13z1P/MEja4CcgzNHRIkbO5ZaYADydCZ1Yh 6jOrLPOyF3WRFGFRZ/AnznVrxXK730r8jgCxnWU/703Zg3biD08n/RdfMRgokfSp hGYggH7c8/BNUt6E9FwIUde0ZY/yf/eABUUcRFjsVhctlzsgdGA= -----END CERTIFICATE-----Generated at Fri Jun 26 23:05:04 2026 by rpki-client