$ rpki-client -vvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: Q9Pl/VQG5i5n/3nwt6g0VltY3WuuUJlPp64cTZgDUVw= Subject key identifier: 4B:DA:19:AF:22:42:D7:C8:E1:0D:71:9B:42:EC:04:69:3A:35:35:A5 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 17DFB1C1730347D2864C6F9CB07B110F58CD162B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:21:02 +0000 Manifest this update: Thu 23 Jul 2026 21:16:02 +0000 Manifest next update: Fri 24 Jul 2026 21:39:02 +0000 Files and hashes: 1: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) 2: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: MnCd6KBLKqddkap7ZdgMeTnNGZVZkjdktwBVxrQfkQU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:df:b1:c1:73:03:47:d2:86:4c:6f:9c:b0:7b:11:0f:58:cd:16:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: Jul 23 21:16:02 2026 GMT Not After : Jul 24 21:39:02 2026 GMT Subject: CN=4BDA19AF2242D7C8E10D719B42EC04693A3535A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d2:56:bc:f8:31:2e:c7:9d:5c:1c:17:6d:20: b1:44:4d:35:82:83:43:5d:3f:ae:21:dc:4c:f2:23: 40:b1:7a:43:1d:6e:65:1d:16:1e:a2:db:93:06:e2: 8b:33:60:bd:57:60:d3:89:c3:6f:8a:76:12:3c:33: 44:f8:25:5e:25:9c:7d:11:d3:7b:ae:32:03:08:84: 7f:dd:cc:de:d9:a1:a1:47:cc:92:6a:73:f4:ad:6d: b4:8d:61:ac:64:6a:39:57:fe:07:f1:b9:40:47:d4: 3e:2f:07:b2:ff:3e:5a:f2:da:eb:d5:db:25:e7:c3: b2:c3:cd:bc:a5:58:e1:de:0c:93:e1:16:c6:40:d5: f3:5c:b6:87:06:8e:e1:d5:b3:bf:14:3c:4d:38:20: 35:2a:e8:24:30:e8:28:8c:b6:a8:91:02:fe:b5:f1: a8:27:8a:a6:a6:d6:f3:27:be:20:60:72:c5:ae:89: f9:36:f2:04:71:31:da:72:3a:6c:7c:21:ec:ec:61: e2:9a:99:71:16:02:f2:b2:45:7a:22:41:61:36:15: 07:c8:49:e1:dd:2b:b8:aa:65:14:2d:4f:f1:98:42: 0f:e2:06:57:81:8d:cd:d5:23:d6:74:cc:aa:51:5c: 1f:a3:03:e3:b8:ce:20:03:90:ad:fb:b0:9b:7d:c3: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DA:19:AF:22:42:D7:C8:E1:0D:71:9B:42:EC:04:69:3A:35:35:A5 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:5b:f9:76:89:d5:53:0f:89:02:71:73:e1:54:64:8d:3a:81: f2:89:c8:88:f7:4f:56:90:d5:79:87:fc:3b:fb:63:bf:75:8b: 69:bd:99:8c:75:41:b2:7b:9f:18:17:1a:b8:91:e1:f1:95:55: f4:01:87:53:01:1e:11:0e:ca:5c:8c:46:a3:84:ea:a6:ca:2f: 43:dc:4b:ac:0f:c0:81:b3:67:39:91:1b:1d:e8:91:4e:2a:c3: fb:a7:c5:2d:3e:1f:97:f0:23:d4:6f:c2:1a:86:e4:33:45:18: a0:6f:c3:5a:86:e4:e9:aa:93:64:3a:a2:4a:87:28:1a:0e:5e: f1:0b:7b:50:21:aa:99:f9:30:34:e7:e2:4f:2c:30:98:13:5c: 04:30:a6:33:3c:6d:32:b9:ee:0d:ea:1b:d5:dd:a4:7f:44:21: 7e:37:d3:0e:1b:37:10:cf:34:21:dc:d1:53:b0:80:3a:14:81: 21:51:d2:17:cf:11:43:08:1f:c8:13:d2:c7:66:38:86:5a:b6: 31:14:11:df:46:5e:3d:54:85:18:ef:5a:32:4e:27:78:e7:51: c2:5a:16:d8:6e:29:e3:41:57:b2:a0:23:80:01:ad:c1:f5:f1: 9d:0a:a5:0c:b3:88:71:55:c2:04:b2:13:4b:d6:e1:54:d2:48: 96:b7:de:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9+xwXMDR9KGTG+csHsRD1jNFiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjA3MjMyMTE2MDJaFw0yNjA3MjQyMTM5MDJaMDMxMTAvBgNV BAMTKDRCREExOUFGMjI0MkQ3QzhFMTBENzE5QjQyRUMwNDY5M0EzNTM1QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0la8+DEux51cHBdtILFETTWC g0NdP64h3EzyI0CxekMdbmUdFh6i25MG4oszYL1XYNOJw2+KdhI8M0T4JV4lnH0R 03uuMgMIhH/dzN7ZoaFHzJJqc/StbbSNYaxkajlX/gfxuUBH1D4vB7L/Plry2uvV 2yXnw7LDzbylWOHeDJPhFsZA1fNctocGjuHVs78UPE04IDUq6CQw6CiMtqiRAv61 8agniqam1vMnviBgcsWuifk28gRxMdpyOmx8IezsYeKamXEWAvKyRXoiQWE2FQfI SeHdK7iqZRQtT/GYQg/iBleBjc3VI9Z0zKpRXB+jA+O4ziADkK37sJt9w+VzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS9oZryJC18jhDXGbQuwEaTo1NaUwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhb+XaJ1VMPiQJxc+FUZI06gfKJyIj3T1aQ 1XmH/Dv7Y791i2m9mYx1QbJ7nxgXGriR4fGVVfQBh1MBHhEOylyMRqOE6qbKL0Pc S6wPwIGzZzmRGx3okU4qw/unxS0+H5fwI9RvwhqG5DNFGKBvw1qG5Omqk2Q6okqH KBoOXvELe1Ahqpn5MDTn4k8sMJgTXAQwpjM8bTK57g3qG9XdpH9EIX430w4bNxDP NCHc0VOwgDoUgSFR0hfPEUMIH8gT0sdmOIZatjEUEd9GXj1UhRjvWjJOJ3jnUcJa FthuKeNBV7KgI4ABrcH18Z0KpQyziHFVwgSyE0vW4VTSSJa33pw= -----END CERTIFICATE-----Generated at Fri Jul 24 15:05:51 2026 by rpki-client