$ rpki-client -vvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft File: BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json) Hash identifier: hZJ7Xm7uqR30PBMtWB+P3Ga25752H6hcyasfdmG6SRk= Subject key identifier: 55:20:43:98:01:0C:E9:A1:9A:09:AB:B5:F3:D0:33:20:64:BF:BC:17 Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Certificate serial: 6066BED0BE6679A52D4A20CC6480C3A4E798298B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:11:57 +0000 Manifest this update: Tue 12 May 2026 11:06:57 +0000 Manifest next update: Wed 13 May 2026 12:39:57 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=) 2: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: lWSi3h3bhWNpqWlBd4SU/WPdxrkxeDycrSU7TKwZXHg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:66:be:d0:be:66:79:a5:2d:4a:20:cc:64:80:c3:a4:e7:98:29:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Validity Not Before: May 12 11:06:57 2026 GMT Not After : May 13 12:39:57 2026 GMT Subject: CN=55204398010CE9A19A09ABB5F3D0332064BFBC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:80:ed:84:6b:a6:30:27:cb:40:68:20:ca:8f: 98:a7:0d:bf:bf:3c:2a:ce:67:85:47:06:21:9f:58: 30:07:fc:e1:64:b1:c2:96:18:73:e2:d0:c4:fc:f3: 38:de:82:65:ea:6f:77:56:e7:89:b0:89:16:dc:aa: e6:98:9c:00:9b:ce:4c:43:32:5d:f4:11:c6:f8:8a: 99:7f:93:57:36:a8:1c:74:47:38:2f:04:9a:c5:a1: 2a:f6:bc:10:5f:6e:f1:28:41:b6:1e:66:27:6c:b3: da:05:52:f1:cf:a8:d9:45:d4:fe:c7:7e:de:6c:56: e6:f4:69:f1:bb:62:81:2b:e9:51:d5:02:74:be:95: 9d:69:4c:74:71:e6:3a:dc:18:84:d9:2e:29:5e:30: 03:f6:3f:fd:8c:83:8d:87:7f:3b:a6:ff:a5:26:6f: ca:a9:19:ec:4a:81:e6:1d:44:5e:36:38:8a:e5:46: ce:6f:bf:ed:db:d9:ec:bb:3d:67:50:4e:07:f5:74: ca:d0:57:d3:f4:46:df:0f:e5:05:11:93:2f:61:40: 69:bb:58:35:b6:0b:ea:95:45:7f:1b:36:7b:b5:05: 5b:2e:1d:a5:d7:e0:9a:29:a3:01:81:b3:b8:60:23: af:34:ff:d4:78:88:27:9b:7a:07:6f:f5:40:13:1d: ac:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:20:43:98:01:0C:E9:A1:9A:09:AB:B5:F3:D0:33:20:64:BF:BC:17 X509v3 Authority Key Identifier: keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:dd:5c:9a:99:e9:ef:a0:2d:04:4f:2f:92:db:c8:a6:02:62: 90:4c:30:a2:5f:1e:d3:72:6d:f6:50:86:34:51:4b:54:6c:73: 93:22:10:e2:02:77:50:37:b2:47:5d:7f:78:79:be:40:38:5e: dc:80:e6:71:96:6f:57:70:1a:2c:f5:a9:e9:b3:37:a6:d2:af: d2:a8:14:a5:f2:d1:a4:a4:01:fd:2a:52:25:d9:c0:7b:ae:96: 51:17:ea:7e:30:38:44:72:30:5d:6c:59:62:5c:95:0e:cb:0d: 5e:42:30:7b:cf:2e:10:50:0f:10:bf:fe:90:92:d1:de:7f:3d: f8:ac:6d:60:00:47:e4:72:c2:a5:59:58:74:52:39:68:6e:4c: 92:3a:03:3d:58:df:64:60:64:1e:9f:73:dc:9a:93:ca:32:9e: dd:bc:3a:1e:46:24:22:4c:db:61:52:4a:f5:da:92:7c:2c:9a: 0f:21:b7:b1:56:3b:85:af:27:28:42:43:b3:dc:36:28:2f:2b: 74:e8:ff:49:f7:97:d8:9e:e2:8f:8d:7d:1b:2d:83:0d:f8:c1: f3:b3:71:90:8d:9f:87:44:f0:dd:48:ca:94:ab:f0:b2:27:06: 53:02:34:be:4b:05:1c:c3:f0:36:02:2e:9b:88:46:d4:c1:15: 66:c0:b1:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGa+0L5meaUtSiDMZIDDpOeYKYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRF NTgxMjAzQjAeFw0yNjA1MTIxMTA2NTdaFw0yNjA1MTMxMjM5NTdaMDMxMTAvBgNV BAMTKDU1MjA0Mzk4MDEwQ0U5QTE5QTA5QUJCNUYzRDAzMzIwNjRCRkJDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgO2Ea6YwJ8tAaCDKj5inDb+/ PCrOZ4VHBiGfWDAH/OFkscKWGHPi0MT88zjegmXqb3dW54mwiRbcquaYnACbzkxD Ml30Ecb4ipl/k1c2qBx0RzgvBJrFoSr2vBBfbvEoQbYeZidss9oFUvHPqNlF1P7H ft5sVub0afG7YoEr6VHVAnS+lZ1pTHRx5jrcGITZLileMAP2P/2Mg42Hfzum/6Um b8qpGexKgeYdRF42OIrlRs5vv+3b2ey7PWdQTgf1dMrQV9P0Rt8P5QURky9hQGm7 WDW2C+qVRX8bNnu1BVsuHaXX4JopowGBs7hgI680/9R4iCebegdv9UATHawdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVSBDmAEM6aGaCau189AzIGS/vBcwHwYDVR0j BBgwFoAUv4HseMyKYfz/cahiMhpSBOWBIDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg2OGNmMjItZDAyOS00NWUyLTllMjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhD QzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRFNTgxMjAzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjgxRUM3OENDOEE2MUZDRkY3MUE4NjIzMjFBNTIwNEU1ODEy MDNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUy MDRFNTgxMjAzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7dXJqZ6e+gLQRPL5LbyKYCYpBMMKJfHtNy bfZQhjRRS1Rsc5MiEOICd1A3skddf3h5vkA4XtyA5nGWb1dwGiz1qemzN6bSr9Ko FKXy0aSkAf0qUiXZwHuullEX6n4wOERyMF1sWWJclQ7LDV5CMHvPLhBQDxC//pCS 0d5/PfisbWAAR+RywqVZWHRSOWhuTJI6Az1Y32RgZB6fc9yak8oynt28Oh5GJCJM 22FSSvXaknwsmg8ht7FWO4WvJyhCQ7PcNigvK3To/0n3l9ie4o+NfRstgw34wfOz cZCNn4dE8N1IypSr8LInBlMCNL5LBRzD8DYCLpuIRtTBFWbAsao= -----END CERTIFICATE-----Generated at Wed May 13 02:36:53 2026 by rpki-client