$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: UHSnbJkOwlHVRRz29YxP5lCKQY8tlXInHRXLELwGDVw= Subject key identifier: 9C:D1:DB:FC:6B:36:20:18:A5:CF:B9:1F:52:46:55:E2:79:18:21:17 Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 1B17E892B17B161235AAAD882B387DF859FAED06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:01:39 +0000 Manifest this update: Tue 12 May 2026 19:56:39 +0000 Manifest next update: Wed 13 May 2026 23:01:39 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 3: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: iYtBLoMdaN4ycqV3dm1EX0YWHgKIMg2iXXkSFwL9XL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:17:e8:92:b1:7b:16:12:35:aa:ad:88:2b:38:7d:f8:59:fa:ed:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: May 12 19:56:39 2026 GMT Not After : May 13 23:01:39 2026 GMT Subject: CN=9CD1DBFC6B362018A5CFB91F524655E279182117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1d:b6:cd:73:d5:15:80:0c:ab:74:1e:08:49: b5:a9:13:a3:fa:bc:66:25:5d:20:cb:15:e6:cc:50: 27:7a:a1:42:6d:42:47:8c:0a:a4:5c:c0:e3:6a:4e: 63:80:8c:b7:96:a1:f1:5a:9d:58:ee:2d:6c:04:58: b8:a2:1a:e2:27:b2:3f:69:67:a7:d5:09:3d:7e:51: 52:f5:9c:5f:a3:c8:47:73:29:49:69:58:1a:fa:6c: 14:8d:b9:99:75:54:65:f4:f4:29:fe:e6:61:34:90: 8b:b8:1f:ce:b8:f5:02:82:5f:bc:47:bd:15:51:66: 75:a3:dd:8e:ab:20:3a:b1:e5:10:bd:ab:51:46:f3: 1c:43:35:5c:2b:3f:61:9f:7d:33:c6:c3:92:5b:4a: 95:a9:91:7e:f0:31:44:47:52:32:06:e9:57:52:0f: f0:ee:8f:ae:bb:27:bb:b0:15:2b:53:60:3f:5a:9f: 4f:06:cd:70:be:bd:57:78:f4:02:46:3b:61:27:9e: 6c:0e:6d:6e:e2:64:d2:7e:c4:82:85:16:fe:d9:eb: df:e0:88:ae:a5:9f:fc:14:9d:df:e7:2f:af:66:4c: de:fe:da:dc:00:76:ba:8b:a5:49:3c:1f:0e:ac:35: f7:f9:55:32:03:40:d0:1f:64:db:f7:fc:23:44:b0: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D1:DB:FC:6B:36:20:18:A5:CF:B9:1F:52:46:55:E2:79:18:21:17 X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4b:96:9c:96:81:b0:58:8f:f9:0e:28:c5:88:8d:a2:33:2c: 5b:53:68:bf:94:c4:68:61:09:cf:07:13:36:71:d7:2f:fa:f0: 82:ef:b0:5e:68:e8:fa:41:9c:e3:68:58:86:fa:8e:4e:e2:86: fd:14:9c:a7:d5:62:5f:2e:e7:d4:58:4d:e4:ff:23:28:45:d6: 42:fa:78:b8:df:fa:2d:21:e3:b2:7c:eb:92:83:85:53:4d:11: 12:b7:8a:3f:a8:89:c4:e3:ff:0a:d0:ab:ee:d3:09:d1:7e:36: 69:9a:5a:9d:5d:cd:56:51:14:fa:91:4c:2d:65:2f:77:98:d7: ef:4f:00:9b:30:e8:b8:bb:65:7f:de:7e:9e:d6:cb:50:99:d8: 9f:dd:02:f9:24:0a:ae:fc:ec:dc:31:85:5d:c6:1f:1a:43:49: 0d:0a:f5:7e:be:fa:73:3c:48:6c:a2:98:fd:99:e9:69:5b:ee: 8f:ea:24:9b:9f:ab:a2:24:88:b9:ed:ff:1d:cf:e6:71:69:0d: db:d8:08:41:ed:dc:09:05:7a:6f:bc:dd:22:3a:23:46:df:b3: 83:17:b4:35:dd:66:c5:e5:c3:5e:b7:62:27:74:ca:96:54:f3: 25:3d:cf:30:44:5d:04:7e:84:c3:b6:de:2a:26:49:7c:d9:e5: 86:ef:36:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxfokrF7FhI1qq2IKzh9+Fn67QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjA1MTIxOTU2MzlaFw0yNjA1MTMyMzAxMzlaMDMxMTAvBgNV BAMTKDlDRDFEQkZDNkIzNjIwMThBNUNGQjkxRjUyNDY1NUUyNzkxODIxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWHbbNc9UVgAyrdB4ISbWpE6P6 vGYlXSDLFebMUCd6oUJtQkeMCqRcwONqTmOAjLeWofFanVjuLWwEWLiiGuInsj9p Z6fVCT1+UVL1nF+jyEdzKUlpWBr6bBSNuZl1VGX09Cn+5mE0kIu4H8649QKCX7xH vRVRZnWj3Y6rIDqx5RC9q1FG8xxDNVwrP2GffTPGw5JbSpWpkX7wMURHUjIG6VdS D/Duj667J7uwFStTYD9an08GzXC+vVd49AJGO2EnnmwObW7iZNJ+xIKFFv7Z69/g iK6ln/wUnd/nL69mTN7+2twAdrqLpUk8Hw6sNff5VTIDQNAfZNv3/CNEsNaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNHb/Gs2IBilz7kfUkZV4nkYIRcwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5LlpyWgbBYj/kOKMWIjaIzLFtTaL+UxGhh Cc8HEzZx1y/68ILvsF5o6PpBnONoWIb6jk7ihv0UnKfVYl8u59RYTeT/IyhF1kL6 eLjf+i0h47J865KDhVNNERK3ij+oicTj/wrQq+7TCdF+NmmaWp1dzVZRFPqRTC1l L3eY1+9PAJsw6Li7ZX/efp7Wy1CZ2J/dAvkkCq787NwxhV3GHxpDSQ0K9X6++nM8 SGyimP2Z6Wlb7o/qJJufq6IkiLnt/x3P5nFpDdvYCEHt3AkFem+83SI6I0bfs4MX tDXdZsXlw163Yid0ypZU8yU9zzBEXQR+hMO23iomSXzZ5YbvNpk= -----END CERTIFICATE-----Generated at Wed May 13 01:40:56 2026 by rpki-client