$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: RrB6WF3B3r4FqmsaNZa8403jQlQmxRCB6V2CIM45J8s= Subject key identifier: 30:D1:A0:73:4A:3D:77:6D:B6:E2:B7:5E:23:D2:E6:F4:2E:96:5F:52 Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 2AF02A6F952B7DED624B1317D6CE4AEE4C948E18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 05:46:29 +0000 Manifest this update: Fri 24 Jul 2026 05:41:29 +0000 Manifest next update: Sat 25 Jul 2026 07:46:29 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) 2: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: 6QgGeZuadYdnwbl7vY/3Cjm1A9ps7O8Kq+6G+0DaGQQ=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f0:2a:6f:95:2b:7d:ed:62:4b:13:17:d6:ce:4a:ee:4c:94:8e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Jul 24 05:41:29 2026 GMT Not After : Jul 25 07:46:29 2026 GMT Subject: CN=30D1A0734A3D776DB6E2B75E23D2E6F42E965F52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7e:76:2d:f8:a3:75:0f:c8:e0:69:a1:9c:ea: ee:65:c5:18:4a:6a:16:23:f9:c0:f3:15:af:c5:c1: 30:11:28:68:2a:a9:54:00:e4:6f:a2:cc:59:08:8a: 64:a3:2b:4b:36:31:56:41:45:16:c8:0d:22:23:10: 38:85:07:e1:eb:74:27:04:3e:10:8e:d5:a4:34:df: 41:cf:de:b7:72:b6:cf:c6:db:fd:0b:40:9b:92:47: 7f:95:6b:1a:b7:45:fd:9d:69:7e:0d:22:98:74:d7: ce:5e:5d:09:20:ef:62:02:0f:33:d3:26:b5:78:d8: 4b:b8:3f:1f:e0:85:19:98:66:23:37:79:6c:e0:49: d2:59:3b:c2:ba:db:0f:d5:61:fa:99:04:4d:db:ff: c6:81:d5:5f:8e:55:9e:05:4d:8b:b8:e4:5d:07:85: d6:08:3b:6e:fc:34:93:8e:80:2f:0c:86:78:e8:9d: 77:af:c5:2a:43:4e:66:26:8a:05:38:a1:f5:62:99: f0:2e:fe:49:4e:35:97:bc:8a:7d:ff:0e:1f:5d:8e: fb:34:8a:c4:18:98:cd:87:b0:c1:a5:71:70:61:5d: ff:16:3d:af:0b:80:4a:21:1a:80:ec:15:c4:17:1d: cf:77:18:a3:2c:a2:27:dc:7b:a6:95:ea:05:b5:57: 97:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:A0:73:4A:3D:77:6D:B6:E2:B7:5E:23:D2:E6:F4:2E:96:5F:52 X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:39:e7:07:8a:be:9f:ba:18:e1:15:29:bb:89:7b:01:a1:a1: e6:a8:8d:b8:e3:7c:54:06:33:49:e8:4f:d1:8d:de:99:ac:2f: c0:ce:94:6b:75:f7:73:d3:83:42:73:ce:52:bd:99:82:b8:a2: cf:a5:f0:d5:64:38:72:76:38:70:4e:66:b5:3f:1a:93:09:a2: b0:6c:f7:cd:47:21:87:32:2f:0c:bb:2a:fd:b7:bc:63:a7:cf: 9d:59:20:a5:4c:0c:50:3c:48:ab:be:f4:64:6f:ef:e1:3a:48: 02:6a:3b:58:65:22:b5:ac:2a:58:92:7e:da:dc:48:da:d9:18: ff:1f:23:7f:f8:df:4c:18:9d:1e:7a:4b:4b:60:dc:ca:9a:40: da:25:ac:3a:e0:29:72:ca:3f:6d:7c:65:cf:e2:ca:51:b5:ae: 66:5b:f8:5c:f6:6d:62:c5:e3:14:b3:da:68:16:06:19:6e:95: 9c:0f:1d:d5:4e:37:c3:d1:7c:a5:1f:9c:b2:f2:f7:cd:90:b9: 30:a3:4e:eb:09:2e:98:61:ec:e4:f3:ab:5f:77:8f:71:69:ce: db:c8:47:af:cb:d1:03:6c:a9:24:de:08:d5:0e:a1:77:ef:6c: 0e:3d:37:a8:a3:c5:64:cb:36:d1:7c:91:d6:55:c2:5e:39:05: c3:0a:e1:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvAqb5Urfe1iSxMX1s5K7kyUjhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA3MjQwNTQxMjlaFw0yNjA3MjUwNzQ2MjlaMDMxMTAvBgNV BAMTKDMwRDFBMDczNEEzRDc3NkRCNkUyQjc1RTIzRDJFNkY0MkU5NjVGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbfnYt+KN1D8jgaaGc6u5lxRhK ahYj+cDzFa/FwTARKGgqqVQA5G+izFkIimSjK0s2MVZBRRbIDSIjEDiFB+HrdCcE PhCO1aQ030HP3rdyts/G2/0LQJuSR3+Vaxq3Rf2daX4NIph0185eXQkg72ICDzPT JrV42Eu4Px/ghRmYZiM3eWzgSdJZO8K62w/VYfqZBE3b/8aB1V+OVZ4FTYu45F0H hdYIO278NJOOgC8MhnjonXevxSpDTmYmigU4ofVimfAu/klONZe8in3/Dh9djvs0 isQYmM2HsMGlcXBhXf8WPa8LgEohGoDsFcQXHc93GKMsoifce6aV6gW1V5dzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNGgc0o9d2224rdeI9Lm9C6WX1IwHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM55weKvp+6GOEVKbuJewGhoeaojbjjfFQG M0noT9GN3pmsL8DOlGt193PTg0JzzlK9mYK4os+l8NVkOHJ2OHBOZrU/GpMJorBs 981HIYcyLwy7Kv23vGOnz51ZIKVMDFA8SKu+9GRv7+E6SAJqO1hlIrWsKliSftrc SNrZGP8fI3/430wYnR56S0tg3MqaQNolrDrgKXLKP218Zc/iylG1rmZb+Fz2bWLF 4xSz2mgWBhlulZwPHdVON8PRfKUfnLLy982QuTCjTusJLphh7OTzq193j3FpztvI R6/L0QNsqSTeCNUOoXfvbA49N6ijxWTLNtF8kdZVwl45BcMK4Qo= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:39 2026 by rpki-client