$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: XNZZeCJH0Z/4daTSyxMoABns0D/jrt0ACgxCFAU66No= Subject key identifier: A0:F4:16:28:E9:A8:82:10:5E:72:21:E4:FA:AF:79:1E:CB:26:8B:92 Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 1471E665665395CFD878DEBDEC736E36AB680D03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 11:48:58 +0000 Manifest this update: Fri 24 Jul 2026 11:43:58 +0000 Manifest next update: Sat 25 Jul 2026 13:51:58 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) 3: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: +VpO5SGlAH36+VTvsPRP2x6BzF6JJ720SpDh50nhlok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:71:e6:65:66:53:95:cf:d8:78:de:bd:ec:73:6e:36:ab:68:0d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Jul 24 11:43:58 2026 GMT Not After : Jul 25 13:51:58 2026 GMT Subject: CN=A0F41628E9A882105E7221E4FAAF791ECB268B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f2:26:4a:fd:19:5f:f7:a4:27:6e:15:7f:0f: 69:e4:82:44:be:69:d0:59:cd:e0:d8:6d:05:53:8e: 9d:3e:bf:77:2f:8e:8a:76:36:98:2d:5d:07:ca:01: b9:68:09:3a:b5:30:23:e9:f2:c6:40:65:26:e1:98: 7f:92:ef:94:5e:26:b3:c3:81:9a:8c:08:0c:4a:c8: 86:0e:8b:08:35:e1:f0:18:b3:34:8a:fc:b8:d6:a9: 19:50:fd:0b:ca:90:8f:e3:07:b6:58:bd:5c:a4:eb: 96:fe:dc:09:7e:44:7d:fe:69:e4:88:9a:85:46:38: a1:25:4e:7c:77:d6:4c:58:27:47:90:b5:da:80:cb: d1:de:4d:ef:79:4f:87:9f:2a:df:08:8d:fb:1b:ac: e0:25:f6:cd:f0:0c:57:88:63:a0:ee:51:c3:0c:60: 61:f8:b1:f2:f1:7d:2d:dc:a4:97:35:86:2e:15:8a: cf:6a:01:56:0a:7f:b1:47:63:b2:25:dc:91:50:e4: 77:24:ab:b3:cd:50:19:7e:1f:00:d5:28:6b:cf:fb: b2:29:e8:4e:e8:2b:3d:15:de:75:ba:d5:a8:e3:3e: 99:2b:8d:d7:37:d9:e6:99:81:2c:c7:a1:ac:fe:d0: 82:b4:45:58:30:09:59:ac:ea:48:38:87:86:0a:1d: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F4:16:28:E9:A8:82:10:5E:72:21:E4:FA:AF:79:1E:CB:26:8B:92 X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ca:ce:f7:21:01:7c:5b:a6:36:59:f5:a1:f0:27:bc:e1:ce: 91:ba:83:dc:5c:76:8d:b7:ee:cb:85:df:0f:bd:65:72:72:3a: 13:67:14:6e:7a:d5:99:28:a6:fa:5c:ce:0a:84:ec:e1:b8:85: ea:58:ab:9c:95:88:eb:18:70:f4:ea:71:a4:f2:ee:c3:96:13: d3:aa:02:7e:4b:81:ad:d2:4c:5b:c2:18:02:77:30:42:0a:97: 81:de:74:7d:7a:21:4a:cd:d5:ac:fe:f6:91:69:b9:a2:88:08: 36:8c:0c:ba:c8:e6:82:a6:e7:54:b8:e4:72:4f:7b:71:bd:25: 33:db:2b:ce:3f:56:66:5e:9f:8d:97:1e:00:da:f0:fc:f8:26: 6c:03:34:44:5c:ba:31:79:38:63:a8:90:69:f1:23:85:b1:e1: 0d:38:6a:9a:84:ca:f6:be:72:d3:a1:bf:a2:b7:2b:d4:c7:8f: 84:31:3d:27:b4:a3:fe:0f:5d:8e:df:af:26:95:2b:1d:c5:2c: 38:5c:b0:41:97:b4:1a:36:4e:cd:13:f0:25:2b:9f:97:77:84: 7f:6c:73:ba:e9:8a:43:68:2d:e0:4a:cc:72:d3:04:2b:8d:c1: 04:50:9e:c8:17:0e:2a:2c:52:e2:fa:2b:0d:af:76:21:21:3c: 2d:d8:43:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHHmZWZTlc/YeN697HNuNqtoDQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjA3MjQxMTQzNThaFw0yNjA3MjUxMzUxNThaMDMxMTAvBgNV BAMTKEEwRjQxNjI4RTlBODgyMTA1RTcyMjFFNEZBQUY3OTFFQ0IyNjhCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf8iZK/Rlf96QnbhV/D2nkgkS+ adBZzeDYbQVTjp0+v3cvjop2NpgtXQfKAbloCTq1MCPp8sZAZSbhmH+S75ReJrPD gZqMCAxKyIYOiwg14fAYszSK/LjWqRlQ/QvKkI/jB7ZYvVyk65b+3Al+RH3+aeSI moVGOKElTnx31kxYJ0eQtdqAy9HeTe95T4efKt8IjfsbrOAl9s3wDFeIY6DuUcMM YGH4sfLxfS3cpJc1hi4Vis9qAVYKf7FHY7Il3JFQ5Hckq7PNUBl+HwDVKGvP+7Ip 6E7oKz0V3nW61ajjPpkrjdc32eaZgSzHoaz+0IK0RVgwCVms6kg4h4YKHaOTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPQWKOmoghBeciHk+q95Hssmi5IwHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXKzvchAXxbpjZZ9aHwJ7zhzpG6g9xcdo23 7suF3w+9ZXJyOhNnFG561ZkopvpczgqE7OG4hepYq5yViOsYcPTqcaTy7sOWE9Oq An5Lga3STFvCGAJ3MEIKl4HedH16IUrN1az+9pFpuaKICDaMDLrI5oKm51S45HJP e3G9JTPbK84/VmZen42XHgDa8Pz4JmwDNERcujF5OGOokGnxI4Wx4Q04apqEyva+ ctOhv6K3K9THj4QxPSe0o/4PXY7fryaVKx3FLDhcsEGXtBo2Ts0T8CUrn5d3hH9s c7rpikNoLeBKzHLTBCuNwQRQnsgXDiosUuL6Kw2vdiEhPC3YQ0A= -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:33 2026 by rpki-client