$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: 9I8rsThloxf5fiZx3ZFZqTALPwTw8D2acndQ61ojxfY= Subject key identifier: CA:E1:20:98:B6:EE:0A:97:8A:D9:3B:A3:B1:55:8A:C6:A9:4B:D7:EB Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 44EC1DBB8705C2DD4552951CF301A6A728B549C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:11:54 +0000 Manifest this update: Tue 12 May 2026 17:06:54 +0000 Manifest next update: Wed 13 May 2026 19:55:54 +0000 Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) 2: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) 3: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: WvetsSC08lnlKUVqfVUfDF/c2nXReFY1ohIR/RSI+Qg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ec:1d:bb:87:05:c2:dd:45:52:95:1c:f3:01:a6:a7:28:b5:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: May 12 17:06:54 2026 GMT Not After : May 13 19:55:54 2026 GMT Subject: CN=CAE12098B6EE0A978AD93BA3B1558AC6A94BD7EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7c:17:29:37:a9:54:58:9d:a5:ed:d0:81:7d: b6:15:fd:b2:95:6c:59:55:ce:30:13:9c:8e:df:bb: 95:9b:74:98:1b:2d:52:0d:11:78:74:de:60:9c:b5: 29:2f:dc:66:74:a0:6e:ad:0d:d9:7e:95:37:9f:01: f0:c1:6c:a7:aa:ba:d0:80:4f:dd:83:a0:33:ec:5a: 5c:64:59:62:94:e2:44:3e:32:ef:0f:64:d3:59:21: 51:61:85:a1:fd:a0:aa:e9:84:88:b6:18:0f:b6:e9: e4:46:dd:4d:45:52:4d:e1:cf:cc:6f:c4:e5:4e:f3: b2:85:3a:e6:1b:a0:b6:4a:85:f6:fa:01:85:5b:7f: 4f:ad:00:4f:34:08:93:9f:53:ff:21:78:22:88:1c: ee:ae:87:a7:4a:5f:84:36:1f:ea:a9:17:25:90:83: ee:8f:23:4d:1a:7c:17:08:c6:68:e0:b1:fc:ef:87: 73:40:84:02:2d:5f:ff:52:e2:92:e7:3b:0c:3c:c1: 9c:e5:aa:f0:15:91:9f:f3:de:9b:f7:9b:72:fa:e9: 44:fd:f9:ed:7c:65:74:2a:0e:1f:6c:2a:be:bc:79: 23:52:c2:06:c6:e4:3b:47:90:79:0e:8c:00:5e:45: a8:d6:b5:4b:a3:bc:b3:83:7b:63:72:a7:d3:6f:fc: 3c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E1:20:98:B6:EE:0A:97:8A:D9:3B:A3:B1:55:8A:C6:A9:4B:D7:EB X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:80:07:2f:15:48:4c:23:b4:f8:48:fc:c7:6c:ec:7e:cf:76: be:2e:88:e4:63:b7:d5:f8:43:f9:e3:4d:e6:cd:3e:91:52:de: 6a:84:04:f5:d8:59:36:28:9b:ce:19:b4:ff:d9:c7:a9:03:da: 22:1f:f0:94:22:41:50:93:70:c0:25:bf:ff:a5:b6:8e:76:ea: c8:33:07:37:e8:94:31:ac:91:98:3a:54:da:0f:95:23:8d:9f: a1:1b:cf:8c:6c:da:57:f7:ee:e2:fe:ed:69:73:6e:80:05:48: c7:7c:64:dc:7e:0e:a6:45:6f:5d:13:91:16:0a:e9:f2:e3:bd: a4:8a:82:4a:10:d5:92:eb:3b:73:98:80:f0:e2:69:25:46:44: e9:48:fe:1c:4d:22:e4:d7:81:91:f9:7b:18:f0:2d:93:48:8d: 9f:dd:6a:49:27:86:39:7b:67:0e:59:56:e4:ef:1d:68:75:79: 4e:61:f3:5c:40:50:7e:84:08:81:9b:d3:7d:97:59:4f:f9:9c: 84:4b:b4:d3:05:6e:5a:96:8b:21:e3:8e:60:6a:51:cf:a0:80: 84:15:7e:6a:33:f9:16:2f:d6:02:69:6a:a5:8a:81:2f:8c:e8: 6a:15:d3:11:1e:d4:83:77:ad:e8:62:53:67:c1:2b:1d:12:3c: 28:9c:e2:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROwdu4cFwt1FUpUc8wGmpyi1ScAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA1MTIxNzA2NTRaFw0yNjA1MTMxOTU1NTRaMDMxMTAvBgNV BAMTKENBRTEyMDk4QjZFRTBBOTc4QUQ5M0JBM0IxNTU4QUM2QTk0QkQ3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfBcpN6lUWJ2l7dCBfbYV/bKV bFlVzjATnI7fu5WbdJgbLVINEXh03mCctSkv3GZ0oG6tDdl+lTefAfDBbKequtCA T92DoDPsWlxkWWKU4kQ+Mu8PZNNZIVFhhaH9oKrphIi2GA+26eRG3U1FUk3hz8xv xOVO87KFOuYboLZKhfb6AYVbf0+tAE80CJOfU/8heCKIHO6uh6dKX4Q2H+qpFyWQ g+6PI00afBcIxmjgsfzvh3NAhAItX/9S4pLnOww8wZzlqvAVkZ/z3pv3m3L66UT9 +e18ZXQqDh9sKr68eSNSwgbG5DtHkHkOjABeRajWtUujvLODe2Nyp9Nv/DypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuEgmLbuCpeK2TujsVWKxqlL1+swHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOABy8VSEwjtPhI/Mds7H7Pdr4uiORjt9X4 Q/njTebNPpFS3mqEBPXYWTYom84ZtP/Zx6kD2iIf8JQiQVCTcMAlv/+lto526sgz BzfolDGskZg6VNoPlSONn6Ebz4xs2lf37uL+7WlzboAFSMd8ZNx+DqZFb10TkRYK 6fLjvaSKgkoQ1ZLrO3OYgPDiaSVGROlI/hxNIuTXgZH5exjwLZNIjZ/dakknhjl7 Zw5ZVuTvHWh1eU5h81xAUH6ECIGb032XWU/5nIRLtNMFblqWiyHjjmBqUc+ggIQV fmoz+RYv1gJpaqWKgS+M6GoV0xEe1IN3rehiU2fBKx0SPCic4p8= -----END CERTIFICATE-----Generated at Wed May 13 02:26:30 2026 by rpki-client