$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft File: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft (raw, json) Hash identifier: h88W3KxHEtwFwxKbw9ZCFqAPJnNbAVVGj5g9YVNaSvc= Subject key identifier: B0:99:D9:42:F2:5F:60:99:34:E5:CD:49:C4:08:3B:C6:C7:26:A2:43 Authority key identifier: B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 Certificate issuer: /CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Certificate serial: 7E82CDF799E7097E5140064A6BDA17C63B97A185 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 12:40:01 +0000 Manifest this update: Fri 24 Jul 2026 12:35:01 +0000 Manifest next update: Sat 25 Jul 2026 13:50:01 +0000 Files and hashes: 1: B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl (hash: oNmG6drxCuY5RN3dwv/2/EQUU9ljB9Kjh1zVn3+B47o=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: 2jTqkZUMM6RgBn0H5+b2a8SLrtyFxeMaWfySgcjTtJg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:82:cd:f7:99:e7:09:7e:51:40:06:4a:6b:da:17:c6:3b:97:a1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5067E7802D7B19928BDFA93E6D5BA5661418AF9 Validity Not Before: Jul 24 12:35:01 2026 GMT Not After : Jul 25 13:50:01 2026 GMT Subject: CN=B099D942F25F609934E5CD49C4083BC6C726A243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:51:3a:b5:3e:9c:d8:0e:da:16:d8:b0:1c: 23:80:6f:60:74:ba:77:17:a0:2b:44:be:4e:3d:ed: 48:dd:cd:7e:d2:69:4f:ce:1d:d9:07:7e:66:59:a5: ec:28:9c:c2:84:3c:5d:4c:9f:74:f2:51:31:90:de: 5a:50:d0:27:ec:4d:2e:24:09:8b:6e:f9:6e:cf:32: 72:4d:b0:21:cf:d0:d7:16:6b:30:97:c5:53:d3:c9: 14:94:c8:bf:7e:f0:d7:72:c8:89:6a:89:6a:cb:8f: 06:86:20:aa:06:35:2b:a3:f4:29:e2:4e:26:84:e3: 66:4b:b5:b4:f0:06:15:96:5f:f3:a0:90:e8:48:3c: 7a:74:5c:64:5c:ce:c4:d6:fe:75:b0:37:67:3c:6d: 92:f3:e6:9c:96:83:dc:34:67:0b:c0:9c:45:ad:78: 87:19:7f:92:6c:b4:de:d0:be:74:bb:5b:6b:04:15: a7:c5:7a:a7:b9:74:a5:85:b4:9f:2f:95:59:d8:a7: e3:f3:98:2f:d1:91:c0:ab:58:7e:2c:a9:47:a2:26: 72:bd:46:bd:1c:c2:63:4c:bc:18:15:73:c6:77:fa: 76:5c:39:d6:65:ef:75:44:8e:62:3d:5d:68:e6:59: da:f3:4f:de:5b:d1:24:9b:ae:b7:3f:ea:76:ff:34: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:99:D9:42:F2:5F:60:99:34:E5:CD:49:C4:08:3B:C6:C7:26:A2:43 X509v3 Authority Key Identifier: keyid:B5:06:7E:78:02:D7:B1:99:28:BD:FA:93:E6:D5:BA:56:61:41:8A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/B5067E7802D7B19928BDFA93E6D5BA5661418AF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6d:c2:a7:8e:86:e6:b8:e7:3b:44:5c:e8:ca:e4:b8:20:57: a8:5f:dc:50:36:de:ca:bc:fb:b3:cc:d6:b8:bf:15:3a:b8:af: 75:a4:54:78:52:37:52:66:5f:97:6d:92:0d:58:aa:89:e1:24: 79:dc:35:e3:d3:f3:1e:aa:e5:e8:7e:0c:58:17:6f:7a:04:a6: 24:f8:ea:bb:46:73:b6:a5:47:b8:16:04:dd:02:57:26:78:34: 0e:70:e9:86:64:ee:22:be:95:c9:6d:3e:54:3e:b6:6e:1a:fc: 19:e7:7e:d8:f4:14:61:3f:a0:60:a2:d7:c4:4f:dc:6e:90:73: cf:94:95:81:ee:d2:18:1d:f8:e1:b9:25:12:62:1a:18:00:b1: b5:83:a5:f3:ef:2a:0b:24:16:5a:c0:20:d0:70:12:50:d5:dd: 3a:bd:3c:79:36:2a:6e:0c:35:f0:ed:ca:b5:45:61:a1:cc:1b: 7e:ad:e4:24:24:40:25:be:a2:ef:1e:62:55:bd:31:38:c2:9c: 81:c1:a4:c8:40:b6:05:7b:c0:49:6a:55:96:68:a3:71:49:ed: 26:a4:2e:12:6a:15:33:f8:8a:99:bb:b1:48:d9:80:c1:48:3f: 98:15:44:ca:73:c9:c0:8e:17:4a:a2:9b:a2:14:5f:ef:34:91: a3:0c:aa:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoLN95nnCX5RQAZKa9oXxjuXoYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2 MTQxOEFGOTAeFw0yNjA3MjQxMjM1MDFaFw0yNjA3MjUxMzUwMDFaMDMxMTAvBgNV BAMTKEIwOTlEOTQyRjI1RjYwOTkzNEU1Q0Q0OUM0MDgzQkM2QzcyNkEyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMj1E6tT6c2A7aFtiwHCOAb2B0 uncXoCtEvk497UjdzX7SaU/OHdkHfmZZpewonMKEPF1Mn3TyUTGQ3lpQ0CfsTS4k CYtu+W7PMnJNsCHP0NcWazCXxVPTyRSUyL9+8NdyyIlqiWrLjwaGIKoGNSuj9Cni TiaE42ZLtbTwBhWWX/OgkOhIPHp0XGRczsTW/nWwN2c8bZLz5pyWg9w0ZwvAnEWt eIcZf5JstN7QvnS7W2sEFafFeqe5dKWFtJ8vlVnYp+PzmC/RkcCrWH4sqUeiJnK9 Rr0cwmNMvBgVc8Z3+nZcOdZl73VEjmI9XWjmWdrzT95b0SSbrrc/6nb/NIWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJnZQvJfYJk05c1JxAg7xscmokMwHwYDVR0j BBgwFoAUtQZ+eALXsZkovfqT5tW6VmFBivkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmYwYzdhMzctNWQxOS00YzVjLTkzMDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgw MkQ3QjE5OTI4QkRGQTkzRTZENUJBNTY2MTQxOEFGOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNTA2N0U3ODAyRDdCMTk5MjhCREZBOTNFNkQ1QkE1NjYxNDE4 QUY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQjUwNjdFNzgwMkQ3QjE5OTI4QkRGQTkzRTZENUJB NTY2MTQxOEFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHptwqeOhua45ztEXOjK5LggV6hf3FA23sq8 +7PM1ri/FTq4r3WkVHhSN1JmX5dtkg1YqonhJHncNePT8x6q5eh+DFgXb3oEpiT4 6rtGc7alR7gWBN0CVyZ4NA5w6YZk7iK+lcltPlQ+tm4a/Bnnftj0FGE/oGCi18RP 3G6Qc8+UlYHu0hgd+OG5JRJiGhgAsbWDpfPvKgskFlrAINBwElDV3Tq9PHk2Km4M NfDtyrVFYaHMG36t5CQkQCW+ou8eYlW9MTjCnIHBpMhAtgV7wElqVZZoo3FJ7Sak LhJqFTP4ipm7sUjZgMFIP5gVRMpzycCOF0qim6IUX+80kaMMqhQ= -----END CERTIFICATE-----Generated at Fri Jul 24 15:07:55 2026 by rpki-client