$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json) Hash identifier: ZVHOE799WtPKiTOZ1e968CH8GNPOk/bzFlX6SDqXCeQ= Subject key identifier: D3:29:6B:39:55:A0:5B:EE:18:EA:CE:43:8E:D5:EE:DB:11:F8:88:D9 Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Certificate serial: 4BD235EDE50E32C78C865A1B89E082EAD2DA4519 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:27:36 +0000 Manifest this update: Thu 23 Jul 2026 18:22:36 +0000 Manifest next update: Fri 24 Jul 2026 21:17:36 +0000 Files and hashes: 1: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=) 2: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=) 3: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: NyhfbpsbmCsEDp3CaUOjQ1lHJWj6cRct8nmjFJ/VZwY=) 4: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d2:35:ed:e5:0e:32:c7:8c:86:5a:1b:89:e0:82:ea:d2:da:45:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Validity Not Before: Jul 23 18:22:36 2026 GMT Not After : Jul 24 21:17:36 2026 GMT Subject: CN=D3296B3955A05BEE18EACE438ED5EEDB11F888D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:e2:79:78:3e:91:ee:2a:c1:89:e4:fb:ed: c7:77:36:e2:20:81:70:5e:e7:41:79:a1:31:90:39: 8a:e5:43:66:cb:24:8a:58:a8:09:00:e1:d3:8e:fb: 60:49:11:d4:b8:b5:a6:f7:b8:34:80:30:90:42:9f: 5b:10:c6:c3:1a:bd:e3:ba:52:32:4e:25:e5:56:81: d0:2c:d6:8f:dc:47:e6:a0:55:4b:4b:d6:4b:99:28: da:a8:04:37:34:f7:35:e7:18:84:d6:76:12:df:09: d9:77:bc:da:6d:f8:ae:51:e6:b9:aa:ef:aa:79:d2: 5a:a3:e1:4b:6c:99:ce:49:01:f0:0c:37:80:ff:6f: 0a:7f:e8:1c:4e:2e:14:ce:da:74:b2:c6:3c:94:6c: 82:8c:03:8a:0b:43:7b:a6:7c:29:31:bc:dc:e2:04: 6b:96:09:0c:35:0d:6b:87:2f:0c:be:94:d8:b1:be: bf:24:94:86:24:ac:2d:0c:27:65:b3:39:14:e3:ff: ab:93:6a:33:b1:97:0b:9d:85:92:f3:06:df:a6:54: d0:cd:db:29:08:48:13:34:3b:89:35:11:65:0b:f8: 4a:c5:07:55:9f:8c:f6:d1:0d:49:37:f0:a4:18:3b: bb:27:14:49:52:b4:85:d0:95:a5:28:f1:13:23:a0: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:6B:39:55:A0:5B:EE:18:EA:CE:43:8E:D5:EE:DB:11:F8:88:D9 X509v3 Authority Key Identifier: keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c9:16:d4:35:fc:de:30:c3:da:d0:b0:c7:dd:5e:85:0f:85: 84:9a:1a:5b:7c:df:a9:07:9a:66:8b:14:52:28:dc:b4:57:fe: 1e:ce:76:58:88:fd:09:8a:74:d1:4d:c3:79:47:c7:0b:48:cb: 5a:d3:e5:f7:8e:20:3b:fd:fe:45:68:ef:b1:7b:47:fd:71:33: db:70:6b:a9:f2:31:27:fa:66:3a:47:f7:e5:15:8d:8b:50:4a: 65:f8:60:db:ec:88:91:c4:4a:27:fc:59:ca:8b:7d:68:5f:7e: 82:20:ea:bf:64:cf:bd:d4:6b:99:00:50:f0:9c:15:ab:13:c6: 8d:44:5e:70:c5:43:05:f1:d4:c9:58:40:61:0d:c6:4a:f8:5a: 77:ba:33:4f:73:5a:8a:9b:da:24:b9:38:dc:18:7a:ee:fe:a2: da:f6:2c:1e:cf:65:23:19:f4:83:aa:dc:e7:6d:b5:0b:e6:21: b3:28:da:35:cb:86:15:6b:f0:84:8a:48:84:b6:7b:ed:b8:df: c9:cf:ed:19:7f:4a:09:f6:ed:f9:0a:f0:62:22:07:1f:dc:a8: 60:e9:40:4c:61:35:08:9c:d2:2a:67:78:78:56:85:83:a7:7e: 9c:c8:9b:66:f3:1d:c6:b5:ee:33:dd:c5:23:bb:25:74:91:f1: 87:bb:9e:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9I17eUOMseMhlobieCC6tLaRRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NC NTFEQTcxODAeFw0yNjA3MjMxODIyMzZaFw0yNjA3MjQyMTE3MzZaMDMxMTAvBgNV BAMTKEQzMjk2QjM5NTVBMDVCRUUxOEVBQ0U0MzhFRDVFRURCMTFGODg4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8geJ5eD6R7irBieT77cd3NuIg gXBe50F5oTGQOYrlQ2bLJIpYqAkA4dOO+2BJEdS4tab3uDSAMJBCn1sQxsMaveO6 UjJOJeVWgdAs1o/cR+agVUtL1kuZKNqoBDc09zXnGITWdhLfCdl3vNpt+K5R5rmq 76p50lqj4Utsmc5JAfAMN4D/bwp/6BxOLhTO2nSyxjyUbIKMA4oLQ3umfCkxvNzi BGuWCQw1DWuHLwy+lNixvr8klIYkrC0MJ2WzORTj/6uTajOxlwudhZLzBt+mVNDN 2ykISBM0O4k1EWUL+ErFB1WfjPbRDUk38KQYO7snFElStIXQlaUo8RMjoLGZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ylrOVWgW+4Y6s5DjtXu2xH4iNkwHwYDVR0j BBgwFoAUsLjNzudCbQMQIL7B6tIzfLUdpxgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZjMTdjYzItZjRhMi00MTVlLThlYTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VF NzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NCNTFEQTcxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEI4Q0RDRUU3NDI2RDAzMTAyMEJFQzFFQUQyMzM3Q0I1MURB NzE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMz N0NCNTFEQTcxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrJFtQ1/N4ww9rQsMfdXoUPhYSaGlt836kH mmaLFFIo3LRX/h7OdliI/QmKdNFNw3lHxwtIy1rT5feOIDv9/kVo77F7R/1xM9tw a6nyMSf6ZjpH9+UVjYtQSmX4YNvsiJHESif8WcqLfWhffoIg6r9kz73Ua5kAUPCc FasTxo1EXnDFQwXx1MlYQGENxkr4Wne6M09zWoqb2iS5ONwYeu7+otr2LB7PZSMZ 9IOq3OdttQvmIbMo2jXLhhVr8ISKSIS2e+2438nP7Rl/Sgn27fkK8GIiBx/cqGDp QExhNQic0ipneHhWhYOnfpzIm2bzHca17jPdxSO7JXSR8Ye7nkU= -----END CERTIFICATE-----Generated at Fri Jul 24 10:02:22 2026 by rpki-client