$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft File: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft (raw, json) Hash identifier: GSvXVSgkDYAQr/ST8DHEn4QBrfaiz8k/LdhAkUslCeA= Subject key identifier: 21:F4:5A:57:09:CA:2C:8F:92:13:1F:34:96:AA:24:7E:AF:BC:3B:A3 Authority key identifier: B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 Certificate issuer: /CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Certificate serial: 5C5D95CA07E6EC7FE70E4695872E38ECF93A72FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft Manifest number: 0F Signing time: Tue 12 May 2026 13:03:15 +0000 Manifest this update: Tue 12 May 2026 12:58:15 +0000 Manifest next update: Wed 13 May 2026 14:43:15 +0000 Files and hashes: 1: B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl (hash: 5k7kuBZAhbX1oSsdCEq20qs2idmlyNwfwwno/hi22cE=) 2: 3130332e3138342e3132302e302f32342d3234203d3e20313439363633.roa (hash: AMAK0g33Kv2aI5QR9+0p9uxKjyyXdje3jg9ykQZ5pUA=) 3: 3130332e3138342e3132312e302f32342d3234203d3e20313439363633.roa (hash: fQwW9jEUlabh0L2NvQSOViFURIlDH59x+g1CS1ccauI=) 4: 3130332e3138342e3132302e302f32332d3233203d3e20313439363633.roa (hash: 6QK6aAC3OH45PZDy0os84YcWYINTJWbPpMpi72u5POI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5d:95:ca:07:e6:ec:7f:e7:0e:46:95:87:2e:38:ec:f9:3a:72:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0B8CDCEE7426D031020BEC1EAD2337CB51DA718 Validity Not Before: May 12 12:58:15 2026 GMT Not After : May 13 14:43:15 2026 GMT Subject: CN=21F45A5709CA2C8F92131F3496AA247EAFBC3BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:76:ae:bb:bb:6b:eb:5d:97:b4:fd:99:da: 24:19:17:3b:5a:a8:73:76:2d:a8:d7:dc:99:3a:b2: 16:5f:32:5d:80:05:41:e1:10:f9:d8:a6:55:c4:a3: 56:86:55:48:d1:d2:80:5f:60:ce:fe:2c:9a:74:40: 6f:89:6d:f9:b3:51:45:a4:ab:dd:2a:79:0e:14:97: d0:ec:f3:aa:4f:5a:79:c0:31:0e:8f:9f:8d:bb:13: fb:62:0a:b1:3b:76:c3:48:d0:1e:0d:33:ff:e4:98: 0c:af:3d:fa:cf:34:04:7f:7e:09:7e:9f:8f:40:9c: 66:4b:3a:16:cb:e8:bd:9c:08:47:11:11:57:56:3d: 9d:7d:57:f4:75:ae:af:a7:ed:2b:77:a2:7b:e1:e8: c3:e7:fa:99:17:a2:d5:fb:e4:71:19:4e:e2:95:85: b1:07:78:84:9e:25:44:d4:6a:af:97:05:c1:1d:06: ba:f0:f7:49:f4:43:54:96:49:9c:d4:16:6c:9c:4c: 30:3f:1e:c1:3d:5d:db:66:fe:d3:20:b9:06:b6:42: b9:7f:8c:a9:90:48:41:e2:75:d7:19:26:a1:37:2d: ff:6e:32:d7:d3:22:81:78:7c:66:89:76:c4:58:19: 39:2a:b9:54:0a:05:5b:27:d4:ab:47:8a:e4:c2:fa: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F4:5A:57:09:CA:2C:8F:92:13:1F:34:96:AA:24:7E:AF:BC:3B:A3 X509v3 Authority Key Identifier: keyid:B0:B8:CD:CE:E7:42:6D:03:10:20:BE:C1:EA:D2:33:7C:B5:1D:A7:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfc17cc2-f4a2-415e-8ea2-f9c47f75c4ca/0/B0B8CDCEE7426D031020BEC1EAD2337CB51DA718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:91:68:46:b9:98:4f:5b:5e:04:37:19:78:d0:24:8e:d4:99: e4:94:6d:67:37:5f:35:91:19:b5:b1:51:f2:7e:11:57:39:cf: 9c:77:6e:62:17:b5:33:b6:6d:e8:29:22:93:77:e2:27:c9:9d: dc:4c:50:be:bf:a0:28:7b:71:2b:a6:1b:dc:96:50:56:e6:ce: fd:a1:db:c1:e3:a8:02:59:52:be:dc:bf:5f:e9:1b:4e:1f:25: c1:83:cd:9e:d6:39:01:fb:a3:c1:e5:72:1e:dd:66:96:fd:7f: 9f:83:0f:f9:c3:15:e9:c4:50:42:af:68:b4:19:9d:2e:0a:f6: b0:d6:06:b0:3a:35:93:a8:f1:38:af:cf:05:3c:8f:1f:44:72: 46:64:1b:84:5c:99:97:02:69:7f:30:ed:a5:68:de:74:8b:3e: c9:ae:97:42:52:a5:88:5f:18:a7:17:d0:86:d1:91:79:b5:2e: 76:6a:d7:0f:34:b5:fc:1d:41:a1:ed:14:60:20:04:dd:72:04: 80:b2:8c:6d:ac:5e:b1:9b:0a:9a:03:d4:ae:0b:03:40:61:2d: d1:f2:f5:33:d3:b6:e1:9f:f2:80:bd:9e:f2:db:2f:52:34:71: d8:a7:72:3e:55:09:83:75:a8:9c:b6:e0:9f:3e:a2:16:cd:0c: 2b:2f:21:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXF2Vygfm7H/nDkaVhy447Pk6cv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NC NTFEQTcxODAeFw0yNjA1MTIxMjU4MTVaFw0yNjA1MTMxNDQzMTVaMDMxMTAvBgNV BAMTKDIxRjQ1QTU3MDlDQTJDOEY5MjEzMUYzNDk2QUEyNDdFQUZCQzNCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/Hauu7tr612XtP2Z2iQZFzta qHN2LajX3Jk6shZfMl2ABUHhEPnYplXEo1aGVUjR0oBfYM7+LJp0QG+JbfmzUUWk q90qeQ4Ul9Ds86pPWnnAMQ6Pn427E/tiCrE7dsNI0B4NM//kmAyvPfrPNAR/fgl+ n49AnGZLOhbL6L2cCEcREVdWPZ19V/R1rq+n7St3onvh6MPn+pkXotX75HEZTuKV hbEHeISeJUTUaq+XBcEdBrrw90n0Q1SWSZzUFmycTDA/HsE9Xdtm/tMguQa2Qrl/ jKmQSEHiddcZJqE3Lf9uMtfTIoF4fGaJdsRYGTkquVQKBVsn1KtHiuTC+sfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfRaVwnKLI+SEx80lqokfq+8O6MwHwYDVR0j BBgwFoAUsLjNzudCbQMQIL7B6tIzfLUdpxgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZjMTdjYzItZjRhMi00MTVlLThlYTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VF NzQyNkQwMzEwMjBCRUMxRUFEMjMzN0NCNTFEQTcxOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEI4Q0RDRUU3NDI2RDAzMTAyMEJFQzFFQUQyMzM3Q0I1MURB NzE4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZjMTdjYzItZjRhMi00MTVlLThl YTItZjljNDdmNzVjNGNhLzAvQjBCOENEQ0VFNzQyNkQwMzEwMjBCRUMxRUFEMjMz N0NCNTFEQTcxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuRaEa5mE9bXgQ3GXjQJI7UmeSUbWc3XzWR GbWxUfJ+EVc5z5x3bmIXtTO2begpIpN34ifJndxMUL6/oCh7cSumG9yWUFbmzv2h 28HjqAJZUr7cv1/pG04fJcGDzZ7WOQH7o8Hlch7dZpb9f5+DD/nDFenEUEKvaLQZ nS4K9rDWBrA6NZOo8TivzwU8jx9EckZkG4RcmZcCaX8w7aVo3nSLPsmul0JSpYhf GKcX0IbRkXm1LnZq1w80tfwdQaHtFGAgBN1yBICyjG2sXrGbCpoD1K4LA0BhLdHy 9TPTtuGf8oC9nvLbL1I0cdincj5VCYN1qJy24J8+ohbNDCsvIVk= -----END CERTIFICATE-----Generated at Wed May 13 02:12:46 2026 by rpki-client