$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: baamA4orSVlqXZb4zt6t/goGqshO44v3se9os74CQJ4= Subject key identifier: F8:8F:AF:D7:0B:80:3A:48:94:7F:75:EC:86:8F:A3:E7:BE:95:E6:5C Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 6B53A51761F6997BDEC30543FBED5D2D85A5C559 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:30:06 +0000 Manifest this update: Thu 23 Jul 2026 16:25:06 +0000 Manifest next update: Fri 24 Jul 2026 20:06:06 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) 2: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: DO0Kvxd/IMYK/TzrXds0THYL6Uz3RWtPZZ8q5iXeK8w=) 3: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:53:a5:17:61:f6:99:7b:de:c3:05:43:fb:ed:5d:2d:85:a5:c5:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Jul 23 16:25:06 2026 GMT Not After : Jul 24 20:06:06 2026 GMT Subject: CN=F88FAFD70B803A48947F75EC868FA3E7BE95E65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:70:2d:0f:2a:f4:14:d0:8c:c4:12:2a:d3: 1a:46:ff:dc:52:67:96:d2:04:c6:5b:63:f9:ae:dc: 7e:3b:84:24:69:ea:cb:e0:29:51:e4:f2:6d:5f:e4: 51:85:91:43:35:30:db:34:e4:7a:ec:20:24:7d:ba: 9b:73:7e:83:34:11:69:4a:ae:8e:11:06:30:6c:14: 4b:ca:98:e7:76:c6:5c:a9:e7:ae:04:a1:4e:1f:ed: cf:4e:fd:48:53:d9:f1:aa:5f:21:c3:b9:de:4e:ee: d1:2a:62:47:87:0c:84:04:b6:3b:d2:73:75:23:46: 41:2a:ec:7d:fc:bc:f5:d4:2a:c3:89:6f:f8:03:fe: 8c:fc:17:12:f9:2f:bf:8c:c2:40:5c:8a:aa:2f:df: a7:c3:ef:ef:ba:ab:14:6b:0d:c9:cb:0c:e1:b8:5d: ed:87:56:db:e1:fb:32:ea:5a:67:4e:b5:02:90:ab: 26:61:dc:cb:a8:21:a6:2f:ff:08:52:ad:aa:f2:e1: 1e:63:9e:39:9c:b5:fc:85:d3:c7:88:75:23:42:13: f0:72:d6:76:2a:b5:05:be:cc:20:3b:eb:26:4b:fc: 16:33:f4:51:74:1d:40:73:ee:2c:ba:0d:e5:1e:9c: 6d:bd:9a:05:33:1b:0a:2a:2a:90:c8:ca:3d:96:be: 73:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8F:AF:D7:0B:80:3A:48:94:7F:75:EC:86:8F:A3:E7:BE:95:E6:5C X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:8d:66:3e:34:76:92:fa:58:5f:9d:0c:4d:9e:01:da:08:33: ef:05:71:7c:6b:6b:46:d9:b6:93:15:95:59:d0:41:0e:4e:3a: 11:e4:17:83:7f:ba:de:cb:29:08:a1:c3:a4:64:d5:73:6d:85: 74:9c:c7:a8:1c:c1:db:13:e7:ba:a0:a8:ac:1f:10:f3:ac:46: 2d:07:92:f2:ab:f3:41:7b:69:e6:28:94:48:95:12:4f:7b:2d: 67:7c:b7:6e:2e:d3:76:24:20:de:e4:3d:87:f1:26:ae:9a:f7: ba:35:c9:58:9f:e6:2e:1e:50:3d:59:62:b1:35:30:14:c5:be: 8d:5f:f8:52:94:f3:b0:20:ff:9b:57:ff:51:30:a2:64:d0:93: de:c4:de:b1:86:fe:8c:30:23:bc:f9:fa:46:7a:16:c9:77:2a: d9:87:f8:c5:3e:00:0d:64:8a:a2:71:f8:26:76:12:21:53:f2: 58:c0:b2:9c:9c:c1:53:a9:e8:e7:3e:19:2f:c2:3f:d9:77:ef: 08:b8:33:7b:cc:38:9a:4c:7d:8a:55:14:bb:cf:7c:d7:a4:1b: f2:f3:e0:2b:c7:3b:a8:bb:6b:37:c3:7c:43:24:6f:4e:a5:05: 5a:42:66:db:e8:0b:fe:92:52:25:97:0b:74:2c:1a:12:1a:73: 40:bb:2a:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1OlF2H2mXvewwVD++1dLYWlxVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjA3MjMxNjI1MDZaFw0yNjA3MjQyMDA2MDZaMDMxMTAvBgNV BAMTKEY4OEZBRkQ3MEI4MDNBNDg5NDdGNzVFQzg2OEZBM0U3QkU5NUU2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5iXAtDyr0FNCMxBIq0xpG/9xS Z5bSBMZbY/mu3H47hCRp6svgKVHk8m1f5FGFkUM1MNs05HrsICR9uptzfoM0EWlK ro4RBjBsFEvKmOd2xlyp564EoU4f7c9O/UhT2fGqXyHDud5O7tEqYkeHDIQEtjvS c3UjRkEq7H38vPXUKsOJb/gD/oz8FxL5L7+MwkBciqov36fD7++6qxRrDcnLDOG4 Xe2HVtvh+zLqWmdOtQKQqyZh3MuoIaYv/whSrary4R5jnjmctfyF08eIdSNCE/By 1nYqtQW+zCA76yZL/BYz9FF0HUBz7iy6DeUenG29mgUzGwoqKpDIyj2WvnNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+I+v1wuAOkiUf3Xsho+j576V5lwwHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeNZj40dpL6WF+dDE2eAdoIM+8FcXxra0bZ tpMVlVnQQQ5OOhHkF4N/ut7LKQihw6Rk1XNthXScx6gcwdsT57qgqKwfEPOsRi0H kvKr80F7aeYolEiVEk97LWd8t24u03YkIN7kPYfxJq6a97o1yVif5i4eUD1ZYrE1 MBTFvo1f+FKU87Ag/5tX/1EwomTQk97E3rGG/owwI7z5+kZ6Fsl3KtmH+MU+AA1k iqJx+CZ2EiFT8ljAspycwVOp6Oc+GS/CP9l37wi4M3vMOJpMfYpVFLvPfNekG/Lz 4CvHO6i7azfDfEMkb06lBVpCZtvoC/6SUiWXC3QsGhIac0C7KpY= -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:22 2026 by rpki-client