$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json) Hash identifier: CaSLUZ03lydUIL+NwBcBAwaPxFep/1kMtZvLb1eCgcw= Subject key identifier: 4A:26:27:1A:F4:9B:2E:9E:2D:49:7F:E8:5D:5B:7D:39:76:79:88:24 Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Certificate serial: 43255B5F7F48D17ADC3B6D6946936BB3D05D224E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:48:05 +0000 Manifest this update: Thu 23 Jul 2026 18:43:05 +0000 Manifest next update: Fri 24 Jul 2026 20:53:05 +0000 Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=) 2: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=) 3: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: P3zhB024aY9ptCFnbdTl0B7U+SX0Xf6dQvTshbRd0nY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:25:5b:5f:7f:48:d1:7a:dc:3b:6d:69:46:93:6b:b3:d0:5d:22:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Validity Not Before: Jul 23 18:43:05 2026 GMT Not After : Jul 24 20:53:05 2026 GMT Subject: CN=4A26271AF49B2E9E2D497FE85D5B7D3976798824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:56:e9:bb:fe:5e:6e:28:d0:5a:85:df:62:df: e9:5f:b2:69:f6:ff:48:70:16:e2:f6:fd:e8:96:58: ed:1a:bc:ea:0b:7a:14:89:6f:8a:34:c6:3f:18:eb: df:ff:3e:74:51:f1:25:f7:5c:da:3d:56:54:ae:42: 02:d7:51:71:14:34:3f:2c:6b:e0:c7:c9:90:f2:d9: 44:fe:04:5b:7f:9e:e9:95:29:89:13:89:84:e8:bd: dd:62:91:a6:9f:a9:e4:e9:08:fe:f5:5a:88:67:44: 33:0a:ea:4f:76:20:ed:a9:f1:c5:43:e6:6e:09:e4: 55:d4:a6:c7:16:97:83:61:c3:68:40:f9:8a:0e:32: 4d:89:2d:ad:67:05:33:bd:ce:71:a7:b0:b9:89:9e: 3f:21:92:28:f2:8a:a1:51:e9:d0:d8:3d:fe:22:f1: f2:50:98:ee:d8:84:02:35:9e:58:14:75:2c:45:2e: 37:89:af:ae:e8:a2:64:95:f9:9a:b1:55:3c:28:45: d3:0d:1f:80:77:24:80:e1:77:13:a7:bc:bd:41:dd: 0f:e7:b0:97:91:eb:91:73:8c:6a:18:b6:88:a2:78: bb:06:15:2e:8a:87:5d:b7:10:83:6f:76:69:ec:26: 21:bd:bc:a3:b2:4d:30:72:2d:49:30:86:b2:ad:0a: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:26:27:1A:F4:9B:2E:9E:2D:49:7F:E8:5D:5B:7D:39:76:79:88:24 X509v3 Authority Key Identifier: keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ef:a1:e2:cf:f4:d0:4b:16:21:1f:d8:7b:20:1c:99:31:5a: 0f:81:9d:d4:8d:a2:de:11:a5:6d:cf:1b:90:c8:6f:eb:11:f9: 4d:7a:61:b2:ea:7f:3b:6f:58:bb:ba:c9:bb:75:e5:eb:42:a9: ce:31:99:a1:cc:35:27:99:d7:62:f6:c7:be:98:2e:b2:62:25: 4d:92:0f:f8:a0:b3:de:a8:25:93:fc:18:2e:6c:43:b6:6b:2e: 7b:bb:ef:65:8d:d0:7b:0a:e7:14:6f:d2:38:bb:52:33:f0:1c: f6:f1:1f:b8:91:84:15:f0:29:e7:4b:a7:5a:95:45:73:0c:aa: 65:bc:17:89:da:8b:bc:bc:9f:67:e7:0c:b9:4a:7a:2f:8b:93: 21:eb:13:d9:dc:27:97:7a:b1:14:9b:6d:30:3f:bc:5e:aa:41: a1:5a:27:fa:50:b2:07:be:af:2d:c6:e3:12:46:2e:95:79:a6: b7:b7:cd:7f:ad:5f:94:e5:3f:38:1c:75:5e:11:fb:7c:82:1c: 42:9e:49:48:22:65:65:e8:f9:91:49:71:1e:4e:9c:ec:49:ad: 16:5b:2c:c3:74:52:91:e1:77:7b:f2:28:93:4e:9d:9e:54:d7: 5f:c1:3e:ce:30:ab:62:e6:eb:bd:05:c8:70:ac:38:f8:cb:2a: e9:2a:dc:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyVbX39I0XrcO21pRpNrs9BdIk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1 MDdGNTVENjAeFw0yNjA3MjMxODQzMDVaFw0yNjA3MjQyMDUzMDVaMDMxMTAvBgNV BAMTKDRBMjYyNzFBRjQ5QjJFOUUyRDQ5N0ZFODVENUI3RDM5NzY3OTg4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXVum7/l5uKNBahd9i3+lfsmn2 /0hwFuL2/eiWWO0avOoLehSJb4o0xj8Y69//PnRR8SX3XNo9VlSuQgLXUXEUND8s a+DHyZDy2UT+BFt/numVKYkTiYTovd1ikaafqeTpCP71WohnRDMK6k92IO2p8cVD 5m4J5FXUpscWl4Nhw2hA+YoOMk2JLa1nBTO9znGnsLmJnj8hkijyiqFR6dDYPf4i 8fJQmO7YhAI1nlgUdSxFLjeJr67oomSV+ZqxVTwoRdMNH4B3JIDhdxOnvL1B3Q/n sJeR65FzjGoYtoiieLsGFS6Kh123EINvdmnsJiG9vKOyTTByLUkwhrKtCskRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSiYnGvSbLp4tSX/oXVt9OXZ5iCQwHwYDVR0j BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3 MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1 NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5 QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPvoeLP9NBLFiEf2HsgHJkxWg+BndSNot4R pW3PG5DIb+sR+U16YbLqfztvWLu6ybt15etCqc4xmaHMNSeZ12L2x76YLrJiJU2S D/igs96oJZP8GC5sQ7ZrLnu772WN0HsK5xRv0ji7UjPwHPbxH7iRhBXwKedLp1qV RXMMqmW8F4nai7y8n2fnDLlKei+LkyHrE9ncJ5d6sRSbbTA/vF6qQaFaJ/pQsge+ ry3G4xJGLpV5pre3zX+tX5TlPzgcdV4R+3yCHEKeSUgiZWXo+ZFJcR5OnOxJrRZb LMN0UpHhd3vyKJNOnZ5U11/BPs4wq2Lm670FyHCsOPjLKukq3OE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:00:26 2026 by rpki-client