$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: 2iwM19kPVUtKOWIBBANeZFyBHsgbhSelKNpvvAbLLUc= Subject key identifier: 6C:08:DF:8D:E0:54:2F:E4:D7:CD:8B:63:E3:4C:90:1E:62:D5:7C:7A Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 08EA0FA7CF614E226EB6944A83A7686C5B008D4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 18:23:02 +0000 Manifest this update: Fri 19 Jun 2026 18:18:02 +0000 Manifest next update: Sat 20 Jun 2026 18:29:02 +0000 Files and hashes: 1: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) 2: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: Lok7cYr5Ze3MOVEgcvVrwSPDSv7IoOOs4kwojElQHik=) 3: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ea:0f:a7:cf:61:4e:22:6e:b6:94:4a:83:a7:68:6c:5b:00:8d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Jun 19 18:18:02 2026 GMT Not After : Jun 20 18:29:02 2026 GMT Subject: CN=6C08DF8DE0542FE4D7CD8B63E34C901E62D57C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:34:fb:0a:8a:70:b2:0a:78:86:d5:ca:53:c6: d7:42:27:5c:c0:40:f0:27:fc:d8:32:79:b3:d3:89: 10:9d:87:e3:7f:10:e5:2f:f6:04:90:c4:18:3e:c6: a4:68:ad:2c:60:27:df:e3:50:f4:90:6d:57:ed:26: 58:a4:70:c1:c7:17:8e:68:b8:de:fc:f8:f2:95:2b: 73:a4:99:bf:49:1a:46:0b:3c:23:ab:05:d6:fa:62: c8:4f:9b:8a:76:01:47:4a:50:81:a2:8b:b4:90:09: f4:62:17:cc:ad:5a:18:58:1a:0d:db:e1:38:38:69: dd:27:fa:3e:2a:91:92:91:d5:0e:62:e9:09:d5:64: 08:61:68:bb:f1:94:fd:0c:df:b4:36:75:23:b2:f8: 43:99:83:fd:02:25:46:3f:fa:f6:2e:95:a5:81:95: ba:66:d8:f5:15:d3:ce:5c:7d:87:f9:d7:45:4e:79: bc:31:50:4b:20:7f:ed:ed:96:0e:d8:90:8d:1c:71: c9:1a:51:a4:27:75:59:71:44:c8:76:d0:e7:e3:33: c5:8e:0e:5a:97:ab:3f:e5:de:8a:35:75:09:49:49: ba:44:34:82:62:10:78:be:6e:32:e5:c1:07:fe:83: 4a:ea:3e:3b:6a:c8:98:ba:02:88:e7:f5:f1:ea:0b: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:08:DF:8D:E0:54:2F:E4:D7:CD:8B:63:E3:4C:90:1E:62:D5:7C:7A X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9a:8d:d3:49:59:cf:e9:18:7f:a1:8f:9b:2e:ef:92:76:a7: 0c:0d:6b:60:e4:1c:73:d3:ab:5f:ad:aa:f5:54:f3:2f:cc:62: a2:89:a5:a7:76:f0:c5:76:b0:f6:2b:41:40:fd:64:65:43:37: 85:e2:31:a4:3f:7c:d0:30:c9:f4:7c:42:98:bf:f8:98:34:40: 18:7f:f6:05:10:11:c2:32:10:d4:9e:2b:27:ec:6f:dc:3b:df: 90:d7:8a:1a:4f:6a:8e:7c:58:57:1a:15:93:bc:42:4b:b8:8d: 98:c7:e4:6e:84:e4:b4:e2:f7:73:e6:cf:f0:15:21:5c:1d:02: ca:04:d5:4d:d7:6e:69:d2:ad:7d:da:52:a3:d5:69:19:9f:3c: d7:fa:97:84:42:88:63:3c:74:24:3f:99:29:30:f3:42:ad:2b: e1:45:80:05:c3:42:5b:f8:05:c8:bd:85:85:97:d2:dc:a0:5b: e5:bb:bd:15:5d:d3:5f:cd:fd:36:6c:0c:15:5e:e5:8e:38:e5: 33:a0:b6:9e:ef:dd:35:49:b7:9d:24:92:6a:06:84:85:fe:9d: 13:ec:0b:7c:5e:2b:19:90:b8:b3:3e:a4:e5:f8:06:ed:37:c8: da:7c:fa:a9:ab:5f:0a:55:fe:10:35:c0:25:82:97:60:9b:4e: a9:d2:c4:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCOoPp89hTiJutpRKg6dobFsAjUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA2MTkxODE4MDJaFw0yNjA2MjAxODI5MDJaMDMxMTAvBgNV BAMTKDZDMDhERjhERTA1NDJGRTREN0NEOEI2M0UzNEM5MDFFNjJENTdDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYNPsKinCyCniG1cpTxtdCJ1zA QPAn/NgyebPTiRCdh+N/EOUv9gSQxBg+xqRorSxgJ9/jUPSQbVftJlikcMHHF45o uN78+PKVK3Okmb9JGkYLPCOrBdb6YshPm4p2AUdKUIGii7SQCfRiF8ytWhhYGg3b 4Tg4ad0n+j4qkZKR1Q5i6QnVZAhhaLvxlP0M37Q2dSOy+EOZg/0CJUY/+vYulaWB lbpm2PUV085cfYf510VOebwxUEsgf+3tlg7YkI0ccckaUaQndVlxRMh20OfjM8WO DlqXqz/l3oo1dQlJSbpENIJiEHi+bjLlwQf+g0rqPjtqyJi6Aojn9fHqCz1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAjfjeBUL+TXzYtj40yQHmLVfHowHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCajdNJWc/pGH+hj5su75J2pwwNa2DkHHPT q1+tqvVU8y/MYqKJpad28MV2sPYrQUD9ZGVDN4XiMaQ/fNAwyfR8Qpi/+Jg0QBh/ 9gUQEcIyENSeKyfsb9w735DXihpPao58WFcaFZO8Qku4jZjH5G6E5LTi93Pmz/AV IVwdAsoE1U3XbmnSrX3aUqPVaRmfPNf6l4RCiGM8dCQ/mSkw80KtK+FFgAXDQlv4 Bci9hYWX0tygW+W7vRVd01/N/TZsDBVe5Y445TOgtp7v3TVJt50kkmoGhIX+nRPs C3xeKxmQuLM+pOX4Bu03yNp8+qmrXwpV/hA1wCWCl2CbTqnSxJg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:49 2026 by rpki-client