$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft File: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft (raw, json) Hash identifier: v1DVcBITT1saZpT9SEcjInQ5AhnTQc4ylL3a22RIT+s= Subject key identifier: BA:09:06:D5:F8:71:21:7B:6E:EF:20:85:20:17:69:2C:91:09:9A:34 Authority key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE Certificate issuer: /CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Certificate serial: 2E15796838C64524986C61E1B8893F0435F2F301 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 17:36:40 +0000 Manifest this update: Thu 23 Jul 2026 17:31:40 +0000 Manifest next update: Fri 24 Jul 2026 21:35:40 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: 8ZFSRd4IMl+7UA1+qh6mSwLg2Ure6CZXxSWgxu+4aBo=) 2: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl (hash: Rj0r2q9SRkJLQLI5CQJEUE0DRBqITYhLOQ8C/ELeYxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:15:79:68:38:c6:45:24:98:6c:61:e1:b8:89:3f:04:35:f2:f3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Validity Not Before: Jul 23 17:31:40 2026 GMT Not After : Jul 24 21:35:40 2026 GMT Subject: CN=BA0906D5F871217B6EEF20852017692C91099A34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:31:c5:9f:8a:6f:cf:2b:1d:03:2b:6d:13: 8f:bc:e5:92:bb:2b:93:26:fa:32:50:da:67:64:f3: 13:57:6e:b3:6b:d5:5a:62:0f:05:61:06:c1:66:bb: 80:57:c1:54:21:0f:d1:e0:eb:5f:3c:8a:9c:bd:5a: 1f:e7:1c:57:5b:9b:a5:76:8b:cb:62:54:27:70:2d: 2a:d3:2d:c7:d1:f4:ac:5a:cb:92:ca:db:9e:c6:4c: 49:dd:a3:8d:3d:88:f8:1b:a7:1d:82:cb:11:70:0f: 95:fd:58:a0:1a:16:96:f0:bb:15:cc:c9:ac:d1:8d: 1a:2d:48:2e:85:ce:dc:eb:ec:d1:a0:cd:c9:0a:59: 37:3c:93:8e:be:bd:b9:96:30:87:64:27:6f:99:85: 67:bf:05:66:81:90:85:33:5e:16:90:ad:76:07:02: 49:6d:a1:87:03:8b:d4:fe:a5:1d:36:d4:5b:d7:6f: 77:e9:0a:78:ed:25:00:19:69:77:16:b9:e1:20:3f: 8d:b0:bd:e4:70:52:14:f8:09:c0:a5:d2:0d:54:89: 06:82:a5:a3:a3:74:16:80:f8:c9:bf:32:5d:c0:11: e5:b3:11:9a:01:03:12:ff:17:6e:e4:45:ee:99:6b: fa:ea:a5:1e:70:42:9b:fe:42:7f:4c:2a:72:bf:6e: 82:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:09:06:D5:F8:71:21:7B:6E:EF:20:85:20:17:69:2C:91:09:9A:34 X509v3 Authority Key Identifier: keyid:0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:09:38:bd:2c:e8:cd:69:27:82:72:92:24:84:46:cb:93:6f: 13:41:f6:31:44:c3:81:db:db:6e:8e:b8:a5:75:56:01:e5:d8: ae:a0:10:2a:5c:77:3a:98:93:d1:80:16:5d:49:47:fb:d2:7d: fb:29:40:26:ef:7e:78:9c:d8:1f:0a:b8:50:cc:e5:88:bd:89: 0e:b2:04:d2:5f:b1:d0:7c:62:b1:67:f5:3e:5d:a2:ca:60:89: 7c:89:37:45:91:d0:98:ea:ba:e0:42:63:41:fc:0a:17:e3:93: 98:56:9a:6e:44:57:bc:ec:12:42:0c:e6:ce:b1:fd:ca:c2:80: 67:d5:2d:d0:36:41:a4:63:24:fe:1e:33:24:ee:b1:4a:0f:df: 5d:cd:81:18:d7:22:9d:b6:7b:c8:3b:29:b2:87:a2:5e:e8:18: b2:84:94:a1:be:65:f0:47:64:8a:fe:f2:ab:22:f9:89:9a:e7: b6:0e:d8:9a:49:ba:95:8a:99:90:bf:36:7b:fc:59:1d:13:79: 11:e0:a4:06:c1:ab:6d:bf:79:16:e1:c0:0b:27:5c:62:35:61: f2:51:e4:43:a2:aa:d3:3d:40:33:88:79:37:ee:fb:24:fa:de: dc:b7:ab:22:a8:80:99:f2:af:0c:eb:89:fd:85:e7:6f:da:2c: 1f:45:64:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhV5aDjGRSSYbGHhuIk/BDXy8wEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNCMEND NkUyNDhCRTAeFw0yNjA3MjMxNzMxNDBaFw0yNjA3MjQyMTM1NDBaMDMxMTAvBgNV BAMTKEJBMDkwNkQ1Rjg3MTIxN0I2RUVGMjA4NTIwMTc2OTJDOTEwOTlBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjYTHFn4pvzysdAyttE4+85ZK7 K5Mm+jJQ2mdk8xNXbrNr1VpiDwVhBsFmu4BXwVQhD9Hg6188ipy9Wh/nHFdbm6V2 i8tiVCdwLSrTLcfR9Kxay5LK257GTEndo409iPgbpx2CyxFwD5X9WKAaFpbwuxXM yazRjRotSC6Fztzr7NGgzckKWTc8k46+vbmWMIdkJ2+ZhWe/BWaBkIUzXhaQrXYH AkltoYcDi9T+pR021FvXb3fpCnjtJQAZaXcWueEgP42wveRwUhT4CcCl0g1UiQaC paOjdBaA+Mm/Ml3AEeWzEZoBAxL/F27kRe6Za/rqpR5wQpv+Qn9MKnK/boJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUugkG1fhxIXtu7yCFIBdpLJEJmjQwHwYDVR0j BBgwFoAUC+/B7Fk7FsebxWAO9YE7DMbiSL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ4NzEzMDMtMDIxYS00YTBiLTllZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1 OTNCMTZDNzlCQzU2MDBFRjU4MTNCMENDNkUyNDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkVGQzFFQzU5M0IxNkM3OUJDNTYwMEVGNTgxM0IwQ0M2RTI0 OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNC MENDNkUyNDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQJOL0s6M1pJ4JykiSERsuTbxNB9jFEw4Hb 226OuKV1VgHl2K6gECpcdzqYk9GAFl1JR/vSffspQCbvfnic2B8KuFDM5Yi9iQ6y BNJfsdB8YrFn9T5dospgiXyJN0WR0JjquuBCY0H8Chfjk5hWmm5EV7zsEkIM5s6x /crCgGfVLdA2QaRjJP4eMyTusUoP313NgRjXIp22e8g7KbKHol7oGLKElKG+ZfBH ZIr+8qsi+Yma57YO2JpJupWKmZC/Nnv8WR0TeRHgpAbBq22/eRbhwAsnXGI1YfJR 5EOiqtM9QDOIeTfu+yT63ty3qyKogJnyrwzrif2F52/aLB9FZEs= -----END CERTIFICATE-----Generated at Fri Jul 24 04:14:19 2026 by rpki-client