$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: efM5TBZy3BTQamqfImh3TRduTOjJ8nwNsiKX8mo10tI= Subject key identifier: 42:2E:56:71:54:7A:37:22:11:AF:5F:AC:96:1A:10:D9:6E:79:10:45 Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 1BDFE1B8B10CFC32A6FF831018612146F8F333B9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:36 +0000 Manifest this update: Tue 12 May 2026 20:32:36 +0000 Manifest next update: Wed 13 May 2026 23:17:36 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) 2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: F/2om/JNSh599Qmkj5X0WoTfFvEnJPxoouTjMi9WKzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:df:e1:b8:b1:0c:fc:32:a6:ff:83:10:18:61:21:46:f8:f3:33:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: May 12 20:32:36 2026 GMT Not After : May 13 23:17:36 2026 GMT Subject: CN=422E5671547A372211AF5FAC961A10D96E791045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:af:3e:6c:79:b5:eb:70:9f:b4:7b:37:ee: 8c:09:2d:a7:ea:f0:cd:f9:d3:39:09:c9:83:3b:e3: 05:c7:6f:7b:0f:99:37:47:23:40:75:13:b2:bc:6c: 84:cf:0f:e5:d6:09:6d:e0:75:4f:9c:ce:f1:86:25: ef:9d:3a:dd:61:6c:71:72:28:cf:b2:59:04:1d:62: b1:29:cf:ae:f3:2b:e3:9b:99:f0:d8:39:87:b4:8b: 12:25:62:05:93:e3:bf:e6:a0:c1:ce:5a:11:81:a0: 40:67:b1:ce:34:34:fc:7d:1e:e9:df:7d:2c:76:92: be:5c:97:40:f0:bf:54:2d:63:91:dd:27:f9:42:08: 8c:d3:92:7c:99:be:8b:a5:1f:56:11:52:66:52:3c: 94:32:b1:fe:b8:6e:20:eb:68:4b:46:77:cc:56:93: b1:39:c3:7c:9c:8d:ce:2d:b8:cf:8b:69:71:05:a7: 38:3c:36:85:e3:aa:ef:8e:aa:a7:11:2e:b6:b6:0b: ce:06:39:80:e2:4b:5c:84:50:eb:cb:9e:7c:ce:cb: 02:3b:47:b2:40:ba:9e:3a:db:25:e2:45:d4:e3:86: 9b:5d:8c:cf:f6:bd:88:44:28:d1:bb:2e:11:ec:6b: b9:6e:90:54:4c:4f:b2:45:b3:8d:2e:f0:18:c7:93: 2e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2E:56:71:54:7A:37:22:11:AF:5F:AC:96:1A:10:D9:6E:79:10:45 X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:6f:b0:b5:21:bb:bf:d2:61:03:bc:63:b4:e0:37:cc:14:df: d1:95:e6:57:5c:1b:14:8c:9c:6c:61:e0:f0:56:4b:78:5e:25: 5f:23:d4:6e:44:86:1a:40:62:c2:23:fa:15:01:55:9b:96:76: f3:4e:00:55:67:31:c0:05:ea:20:86:13:bb:71:79:1c:1f:46: a9:70:a3:bf:f7:bf:97:4f:0d:27:8b:7d:3f:8f:1a:08:bf:31: c7:ca:5c:36:9d:ea:5e:a8:7d:fe:0a:bd:d0:aa:b4:41:52:b0: ad:6b:5f:1f:33:38:f6:43:ff:d7:9b:a6:17:7b:ab:a2:e9:ac: bd:d7:82:ce:2c:31:b4:ae:79:6d:bc:54:ef:d6:56:a8:fb:37: 35:08:5a:18:c1:c9:6e:d0:90:9c:e4:25:ed:83:b4:f5:cc:d9: 15:4c:0a:5f:30:60:0f:d9:c2:32:6b:f2:57:0e:35:b4:ae:74: 03:70:14:67:a1:83:5c:09:4b:7f:27:09:ce:02:b2:df:22:e4: 5c:9c:80:4e:99:60:13:9f:41:3c:c9:3b:7f:49:7f:54:57:e3: c7:4c:bd:1c:f8:53:24:a9:61:cd:74:01:dd:5d:b1:a3:0c:6e: 37:13:ba:1d:67:31:66:95:e2:2a:26:23:73:08:81:5e:3d:20: 3e:41:49:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9/huLEM/DKm/4MQGGEhRvjzM7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA1MTIyMDMyMzZaFw0yNjA1MTMyMzE3MzZaMDMxMTAvBgNV BAMTKDQyMkU1NjcxNTQ3QTM3MjIxMUFGNUZBQzk2MUExMEQ5NkU3OTEwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH068+bHm163CftHs37owJLafq 8M350zkJyYM74wXHb3sPmTdHI0B1E7K8bITPD+XWCW3gdU+czvGGJe+dOt1hbHFy KM+yWQQdYrEpz67zK+ObmfDYOYe0ixIlYgWT47/moMHOWhGBoEBnsc40NPx9Hunf fSx2kr5cl0Dwv1QtY5HdJ/lCCIzTknyZvoulH1YRUmZSPJQysf64biDraEtGd8xW k7E5w3ycjc4tuM+LaXEFpzg8NoXjqu+OqqcRLra2C84GOYDiS1yEUOvLnnzOywI7 R7JAup462yXiRdTjhptdjM/2vYhEKNG7LhHsa7lukFRMT7JFs40u8BjHky7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQi5WcVR6NyIRr1+slhoQ2W55EEUwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRvsLUhu7/SYQO8Y7TgN8wU39GV5ldcGxSM nGxh4PBWS3heJV8j1G5EhhpAYsIj+hUBVZuWdvNOAFVnMcAF6iCGE7txeRwfRqlw o7/3v5dPDSeLfT+PGgi/McfKXDad6l6off4KvdCqtEFSsK1rXx8zOPZD/9ebphd7 q6LprL3Xgs4sMbSueW28VO/WVqj7NzUIWhjByW7QkJzkJe2DtPXM2RVMCl8wYA/Z wjJr8lcONbSudANwFGehg1wJS38nCc4Cst8i5FycgE6ZYBOfQTzJO39Jf1RX48dM vRz4UySpYc10Ad1dsaMMbjcTuh1nMWaV4iomI3MIgV49ID5BSSY= -----END CERTIFICATE-----Generated at Wed May 13 02:40:18 2026 by rpki-client