$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: zwO8etrplx2udMWyGWrenMjvfgRTlUFfFwFQfPEJR0A= Subject key identifier: 77:40:C5:F3:C7:DA:3D:A8:94:3F:7D:3F:F3:76:FA:24:51:E4:0F:1A Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 3428AE3B36855E575325370652BC937C54251295 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 10:58:26 +0000 Manifest this update: Thu 23 Jul 2026 10:53:26 +0000 Manifest next update: Fri 24 Jul 2026 12:05:26 +0000 Files and hashes: 1: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: /06mfS07KUESSHElPvkQCuJOLDhPery5BB7I9u8Qh0A=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:28:ae:3b:36:85:5e:57:53:25:37:06:52:bc:93:7c:54:25:12:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Jul 23 10:53:26 2026 GMT Not After : Jul 24 12:05:26 2026 GMT Subject: CN=7740C5F3C7DA3DA8943F7D3FF376FA2451E40F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:48:bc:57:ea:ec:7f:3e:d8:af:bb:a1:1b: f4:b9:f2:d3:22:ca:e9:0f:e6:57:11:82:1d:2b:5f: 20:28:ab:1f:39:a4:71:8c:f3:0d:96:d9:8e:21:3d: 40:7d:a4:a2:86:c3:01:04:98:d9:f2:08:b6:7c:a9: f7:94:eb:be:a7:b2:e4:fd:74:47:d8:0e:4f:e0:46: 95:87:19:cd:82:8b:a9:33:14:09:e1:ef:68:df:cc: 0f:b3:bc:2b:30:1d:52:b1:36:68:ae:8f:55:63:8a: cc:aa:9e:4a:7b:29:88:8b:59:95:e9:43:bd:22:5c: 6d:12:5c:ad:80:5b:c9:df:02:67:d5:61:d5:43:cf: ba:46:8d:c6:13:65:5e:9a:d8:0c:49:b6:83:63:07: 00:a2:86:a7:ab:61:f9:cf:fd:94:2b:55:5b:f8:7c: 08:8b:2d:e9:b9:d4:eb:8f:be:7b:5a:2d:b6:08:d5: 0d:9a:9d:b9:38:08:f0:60:1d:17:ae:6a:99:39:3d: 56:88:1a:0f:7d:04:37:c3:a9:13:b0:cd:7c:c0:27: 10:7d:5e:1c:f4:60:e2:c1:51:95:48:7f:52:ad:a1: 7f:9c:25:c1:61:37:e0:64:02:1f:2a:83:7a:c7:6c: a9:87:76:8b:83:6f:a5:80:3a:b9:39:4f:33:2c:30: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:40:C5:F3:C7:DA:3D:A8:94:3F:7D:3F:F3:76:FA:24:51:E4:0F:1A X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d8:5e:74:59:f3:07:d5:12:6d:d9:37:b9:c1:78:8a:18:dd: 21:17:ea:22:f3:fd:c2:68:40:4b:4c:6e:cb:7d:e9:cc:65:31: b0:a3:2e:31:12:33:d0:1f:68:11:9d:4e:69:2b:9f:39:88:d3: b6:27:01:88:63:04:f1:c0:1a:2e:c8:9c:e5:84:3d:07:0d:c4: 40:c4:c6:09:c1:dd:52:60:26:be:5f:91:37:f2:e5:0c:9e:f2: b7:b9:1b:34:88:39:4a:16:48:76:d8:d4:d9:63:6e:75:e7:c6: 14:87:b9:17:da:45:46:ca:f3:38:07:28:2d:6e:19:6b:ed:5c: df:a5:a3:ba:bf:14:ea:70:1f:8b:5e:91:9a:ef:3b:7b:d3:aa: 68:56:8f:4a:55:0c:fe:ef:2f:cd:64:27:73:0a:43:6e:e2:b5: 3b:46:a7:56:e8:0e:ac:c8:68:71:fc:6a:6b:f5:75:71:22:b3: 52:2b:8b:2f:8f:16:b7:b3:17:97:d3:85:c8:60:f4:b2:dd:bc: 34:cb:b5:ab:2e:c2:e5:f5:18:63:23:d3:57:72:04:74:22:7a: 5e:f8:41:9e:00:be:a6:e6:3e:4b:68:ac:aa:f6:e0:d7:6a:23: 59:f6:6c:9d:fb:fa:07:9f:5b:e3:da:25:52:3c:94:08:40:cb: f0:3c:e6:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCiuOzaFXldTJTcGUryTfFQlEpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjA3MjMxMDUzMjZaFw0yNjA3MjQxMjA1MjZaMDMxMTAvBgNV BAMTKDc3NDBDNUYzQzdEQTNEQTg5NDNGN0QzRkYzNzZGQTI0NTFFNDBGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuEUi8V+rsfz7Yr7uhG/S58tMi yukP5lcRgh0rXyAoqx85pHGM8w2W2Y4hPUB9pKKGwwEEmNnyCLZ8qfeU676nsuT9 dEfYDk/gRpWHGc2Ci6kzFAnh72jfzA+zvCswHVKxNmiuj1Vjisyqnkp7KYiLWZXp Q70iXG0SXK2AW8nfAmfVYdVDz7pGjcYTZV6a2AxJtoNjBwCihqerYfnP/ZQrVVv4 fAiLLem51OuPvntaLbYI1Q2anbk4CPBgHReuapk5PVaIGg99BDfDqROwzXzAJxB9 Xhz0YOLBUZVIf1KtoX+cJcFhN+BkAh8qg3rHbKmHdouDb6WAOrk5TzMsMI1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd0DF88faPaiUP30/83b6JFHkDxowHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3YXnRZ8wfVEm3ZN7nBeIoY3SEX6iLz/cJo QEtMbst96cxlMbCjLjESM9AfaBGdTmkrnzmI07YnAYhjBPHAGi7InOWEPQcNxEDE xgnB3VJgJr5fkTfy5Qye8re5GzSIOUoWSHbY1NljbnXnxhSHuRfaRUbK8zgHKC1u GWvtXN+lo7q/FOpwH4tekZrvO3vTqmhWj0pVDP7vL81kJ3MKQ27itTtGp1boDqzI aHH8amv1dXEis1Iriy+PFrezF5fThchg9LLdvDTLtasuwuX1GGMj01dyBHQiel74 QZ4AvqbmPktorKr24NdqI1n2bJ37+gefW+PaJVI8lAhAy/A85qA= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:37 2026 by rpki-client