$ rpki-client -vvf rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft File: BF072074B801AFE1292270FB7A3E090A276EB893.mft (raw, json) Hash identifier: tpUGjvdzZR+4mKsxC6FkbkFRX0i7G7AdVb/qEPBMxt0= Subject key identifier: 5F:4C:F3:6E:45:38:96:FB:71:22:AD:B6:72:C6:B2:10:10:7A:FE:CB Authority key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 Certificate issuer: /CN=BF072074B801AFE1292270FB7A3E090A276EB893 Certificate serial: 1B9CA91EDA05A1AF0FEEC0C48D60AFCB4C2EE92A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 16:09:34 +0000 Manifest this update: Thu 23 Jul 2026 16:04:34 +0000 Manifest next update: Fri 24 Jul 2026 18:56:34 +0000 Files and hashes: 1: BF072074B801AFE1292270FB7A3E090A276EB893.crl (hash: n8E4sk/H5NAS7bgfKuuFiq6YRWivm/vn17Xni22jwUg=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: BKt7x+HSwXt0hFZm36Nu9CrkQ0Drly/dgK6bERbk3xk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9c:a9:1e:da:05:a1:af:0f:ee:c0:c4:8d:60:af:cb:4c:2e:e9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF072074B801AFE1292270FB7A3E090A276EB893 Validity Not Before: Jul 23 16:04:34 2026 GMT Not After : Jul 24 18:56:34 2026 GMT Subject: CN=5F4CF36E453896FB7122ADB672C6B210107AFECB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:ee:1a:9c:f6:fd:c2:d6:18:bf:98:e6:5c: e1:7d:c0:62:2d:44:9b:e7:bd:94:21:f5:85:9d:fa: 21:f8:5e:72:a7:50:6a:5f:9f:89:c2:27:47:88:11: 72:90:c3:5c:e4:87:11:01:ad:e4:f1:1f:6f:61:2b: 7f:5f:ab:27:d3:d5:70:b0:c1:e8:dd:bf:55:5d:59: 30:a8:db:89:4a:4c:a9:c6:97:8f:42:9a:21:cf:af: 54:23:5e:1f:df:a3:d1:f1:ca:8d:e4:64:4a:bb:c9: d3:0c:c2:b7:32:76:1a:a6:2e:50:d6:bf:bf:b4:81: ae:d8:27:c4:18:91:a6:13:c0:42:cf:71:a2:91:c9: 6a:8d:de:46:d7:ff:00:a3:28:81:41:b6:4b:62:6c: f5:6d:ac:af:f3:81:fe:9c:d3:b5:0d:09:3d:a2:ac: c7:8e:3b:2d:ac:8e:8f:74:b1:a5:fc:9e:c7:de:bb: 81:d4:cd:81:87:39:d3:ec:b4:58:6a:d9:f7:c7:01: a7:1f:17:17:a3:c5:cf:b4:a0:08:b1:d7:b7:1b:2c: 09:51:f5:0d:da:e4:3b:62:4c:63:f3:1b:1f:d3:26: 85:e1:9c:24:8f:92:9c:56:e0:d6:f0:7c:7e:56:7b: 93:11:7d:12:dc:ab:bf:8c:a2:f1:c9:b5:77:45:4b: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4C:F3:6E:45:38:96:FB:71:22:AD:B6:72:C6:B2:10:10:7A:FE:CB X509v3 Authority Key Identifier: keyid:BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a3:10:4a:91:50:f4:c9:e5:e5:ea:d4:fd:29:5d:8f:27:c5: 0d:59:88:7f:a1:39:82:de:08:46:ff:a0:5f:51:83:9e:ef:46: 5e:1a:b8:4d:28:ec:6e:fc:59:6e:a7:91:65:aa:b3:d3:41:ea: ae:a2:33:86:7b:c7:98:6f:7d:a8:a9:77:a5:7a:5a:6d:64:f2: 01:6a:f3:28:04:30:9a:9e:fc:72:cc:2e:d3:ad:3a:1b:8a:aa: 51:ec:cd:33:dc:8f:a0:53:07:60:6e:d5:1c:ee:77:fd:ee:7a: ad:92:7c:56:30:e3:1a:d0:ac:13:87:f4:ac:c9:c4:0a:3d:1d: d6:24:f1:71:65:46:42:5d:17:9e:5f:a5:95:3e:38:f9:37:3a: 12:e7:4b:dd:aa:78:17:0d:39:68:bb:61:98:d5:77:d6:05:ce: 82:21:fb:ed:d2:f7:ea:8f:ca:e6:5c:3d:a8:28:d6:e4:f7:0e: 55:d7:ee:6a:27:39:7b:04:33:8b:7b:5c:b4:60:7f:17:bc:c8: 79:8a:40:19:ad:f1:aa:e6:5e:40:5a:a8:e6:97:d8:9c:06:76: d6:3b:ba:4c:9b:b3:8e:a8:0f:4c:97:61:43:d9:80:4d:a1:e8: d9:7f:38:1d:8c:aa:59:0d:b9:38:e7:ec:58:d6:0e:fe:04:e8: cc:28:96:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5ypHtoFoa8P7sDEjWCvy0wu6SowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEy NzZFQjg5MzAeFw0yNjA3MjMxNjA0MzRaFw0yNjA3MjQxODU2MzRaMDMxMTAvBgNV BAMTKDVGNENGMzZFNDUzODk2RkI3MTIyQURCNjcyQzZCMjEwMTA3QUZFQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPe4anPb9wtYYv5jmXOF9wGIt RJvnvZQh9YWd+iH4XnKnUGpfn4nCJ0eIEXKQw1zkhxEBreTxH29hK39fqyfT1XCw wejdv1VdWTCo24lKTKnGl49CmiHPr1QjXh/fo9Hxyo3kZEq7ydMMwrcydhqmLlDW v7+0ga7YJ8QYkaYTwELPcaKRyWqN3kbX/wCjKIFBtktibPVtrK/zgf6c07UNCT2i rMeOOy2sjo90saX8nsfeu4HUzYGHOdPstFhq2ffHAacfFxejxc+0oAix17cbLAlR 9Q3a5DtiTGPzGx/TJoXhnCSPkpxW4NbwfH5We5MRfRLcq7+MovHJtXdFSwtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0zzbkU4lvtxIq22csayEBB6/sswHwYDVR0j BBgwFoAUvwcgdLgBr+EpInD7ej4JCiduuJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNkN2QyOWItZGQxYy00MWRkLWJlZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRC ODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEyNzZFQjg5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjA3MjA3NEI4MDFBRkUxMjkyMjcwRkI3QTNFMDkwQTI3NkVC ODkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5 MEEyNzZFQjg5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyjEEqRUPTJ5eXq1P0pXY8nxQ1ZiH+hOYLe CEb/oF9Rg57vRl4auE0o7G78WW6nkWWqs9NB6q6iM4Z7x5hvfaipd6V6Wm1k8gFq 8ygEMJqe/HLMLtOtOhuKqlHszTPcj6BTB2Bu1Rzud/3ueq2SfFYw4xrQrBOH9KzJ xAo9HdYk8XFlRkJdF55fpZU+OPk3OhLnS92qeBcNOWi7YZjVd9YFzoIh++3S9+qP yuZcPago1uT3DlXX7monOXsEM4t7XLRgfxe8yHmKQBmt8armXkBaqOaX2JwGdtY7 ukybs46oD0yXYUPZgE2h6Nl/OB2MqlkNuTjn7FjWDv4E6Mwolms= -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:57 2026 by rpki-client