$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: ez6Occ0jpQy3iq68XJczAvfgovreNWx7vAhz44d0oHk= Subject key identifier: 33:8D:4A:B6:A2:63:3E:E8:47:96:79:F0:7C:77:BC:49:E1:A9:02:1A Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 06989C71BE48A58DEB0ADFCE68C84AB0DC95FA97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 21:05:48 +0000 Manifest this update: Thu 23 Jul 2026 21:00:48 +0000 Manifest next update: Fri 24 Jul 2026 23:14:48 +0000 Files and hashes: 1: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: mzCPLJeOMrr7Cm0WmyxjsLW1SFFNzZp3DVd1MDNE4PA=) 2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:98:9c:71:be:48:a5:8d:eb:0a:df:ce:68:c8:4a:b0:dc:95:fa:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Jul 23 21:00:48 2026 GMT Not After : Jul 24 23:14:48 2026 GMT Subject: CN=338D4AB6A2633EE8479679F07C77BC49E1A9021A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:c7:50:03:b1:8c:a2:68:be:c8:f6:00:b0: e7:7c:dd:47:40:48:db:7b:0c:76:f3:5f:aa:80:3d: 6d:61:ae:75:c1:af:6e:cf:f3:45:29:e7:39:67:f9: bb:6f:ca:3e:be:3e:31:cf:f7:ef:13:23:72:fd:18: 14:7d:fa:47:89:62:5d:f6:5a:77:e0:1a:3f:83:69: aa:7d:ba:0f:c6:9e:c7:3d:ce:21:3c:1e:57:eb:27: 60:3f:be:cc:93:52:b5:39:65:d9:af:8b:a1:bd:00: 47:b5:fa:7d:f3:d4:85:e2:41:20:63:33:34:d8:db: ba:93:5e:78:15:fd:4c:82:f4:15:fd:ff:85:7a:05: 20:0f:76:a5:b9:80:71:2e:84:c2:a0:23:cc:9c:d1: 9f:ff:55:48:06:43:c5:97:65:39:24:d8:f6:f5:9f: 37:4a:6b:32:41:57:ba:96:0d:53:77:15:90:d2:19: 60:87:92:75:9e:71:83:8a:22:a0:ae:a9:7e:af:e4: 59:a4:50:34:3e:e9:8a:35:b7:fb:0b:ae:1f:08:64: d0:e0:12:5a:4f:df:ec:f4:52:0b:34:0d:60:f1:4b: 26:7f:77:0b:14:99:3b:43:8a:dc:b9:c2:e8:3e:5d: a9:8a:f6:67:5d:fa:bd:83:ba:bd:b5:c8:63:b4:81: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:4A:B6:A2:63:3E:E8:47:96:79:F0:7C:77:BC:49:E1:A9:02:1A X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:e7:f1:07:28:d2:c1:ec:cf:31:00:ab:f5:e6:f3:ab:c1:0c: ac:9d:f8:99:1a:30:86:17:4c:5a:b0:47:af:74:c3:27:54:ec: df:84:98:8a:7c:ee:89:08:c7:cf:c2:9a:a7:e1:71:99:29:6f: de:52:f5:3a:46:d4:98:4a:6e:20:e7:89:89:26:a8:6f:27:ec: 22:87:3a:32:7a:a6:47:65:a6:a6:7c:ad:a9:1b:80:a9:f1:35: 74:ba:1c:00:56:61:0a:fe:a9:21:b8:c5:9e:7c:78:98:95:38: 4c:9f:38:27:03:46:66:e2:15:03:30:d6:46:54:20:ba:0f:a4: 51:4d:d0:85:ea:a1:3c:d2:db:65:a7:f5:40:14:5e:ff:7a:82: 38:0e:9f:c7:2f:9f:a5:a2:c3:ad:38:5d:d6:68:51:2a:d7:1d: 7f:59:ee:f2:7b:f9:fe:0b:a4:8e:7e:e5:be:95:d8:a3:49:61: 62:73:07:c0:09:13:01:5b:15:20:89:e0:d3:c8:e6:d4:58:69: 48:f8:21:a7:ef:a4:31:2f:75:06:2a:07:40:d1:5f:e8:f5:69: 92:d5:c8:d3:5b:d5:ab:3c:de:c1:a8:ed:92:db:b6:bd:98:2a: c6:b6:69:2c:06:c2:e9:3f:3a:66:21:80:df:fe:7b:ab:ce:14: 8f:4c:c9:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpiccb5IpY3rCt/OaMhKsNyV+pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjA3MjMyMTAwNDhaFw0yNjA3MjQyMzE0NDhaMDMxMTAvBgNV BAMTKDMzOEQ0QUI2QTI2MzNFRTg0Nzk2NzlGMDdDNzdCQzQ5RTFBOTAyMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprsdQA7GMomi+yPYAsOd83UdA SNt7DHbzX6qAPW1hrnXBr27P80Up5zln+btvyj6+PjHP9+8TI3L9GBR9+keJYl32 WnfgGj+Daap9ug/Gnsc9ziE8HlfrJ2A/vsyTUrU5Zdmvi6G9AEe1+n3z1IXiQSBj MzTY27qTXngV/UyC9BX9/4V6BSAPdqW5gHEuhMKgI8yc0Z//VUgGQ8WXZTkk2Pb1 nzdKazJBV7qWDVN3FZDSGWCHknWecYOKIqCuqX6v5FmkUDQ+6Yo1t/sLrh8IZNDg ElpP3+z0Ugs0DWDxSyZ/dwsUmTtDity5wug+XamK9mdd+r2Dur21yGO0geDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM41KtqJjPuhHlnnwfHe8SeGpAhowHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfn8Qco0sHszzEAq/Xm86vBDKyd+JkaMIYX TFqwR690wydU7N+EmIp87okIx8/CmqfhcZkpb95S9TpG1JhKbiDniYkmqG8n7CKH OjJ6pkdlpqZ8rakbgKnxNXS6HABWYQr+qSG4xZ58eJiVOEyfOCcDRmbiFQMw1kZU ILoPpFFN0IXqoTzS22Wn9UAUXv96gjgOn8cvn6Wiw604XdZoUSrXHX9Z7vJ7+f4L pI5+5b6V2KNJYWJzB8AJEwFbFSCJ4NPI5tRYaUj4IafvpDEvdQYqB0DRX+j1aZLV yNNb1as83sGo7ZLbtr2YKsa2aSwGwuk/OmYhgN/+e6vOFI9MyZI= -----END CERTIFICATE-----Generated at Fri Jul 24 05:14:03 2026 by rpki-client