$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: 9lK32sRI7spVGjAtIpbWtJXHOWpFUXZ6aGTWTYgWZbM= Subject key identifier: 92:2E:03:44:1C:D5:91:9E:07:C8:EB:F3:62:5A:E8:7B:FF:88:22:1B Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 14B1E7A7D3025F183F885B36AE23EC50BDE0E697 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 04:55:26 +0000 Manifest this update: Fri 24 Jul 2026 04:50:26 +0000 Manifest next update: Sat 25 Jul 2026 07:56:26 +0000 Files and hashes: 1: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: NVdWgAq5Jpr7yhesFHgLNCNgORISNwTKNEK/2I7VDqo=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b1:e7:a7:d3:02:5f:18:3f:88:5b:36:ae:23:ec:50:bd:e0:e6:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Jul 24 04:50:26 2026 GMT Not After : Jul 25 07:56:26 2026 GMT Subject: CN=922E03441CD5919E07C8EBF3625AE87BFF88221B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:0e:ae:51:25:36:7b:e7:3f:dd:59:c9:ac: ec:1c:04:f7:85:e5:1d:76:c6:1d:1c:3a:00:bd:10: 53:b6:cc:b8:7b:53:67:39:4c:be:a7:7e:ca:57:2b: de:83:f6:93:fb:46:32:41:54:f4:f3:4b:ac:9f:55: 6b:07:8b:6e:8e:09:af:b4:19:cc:02:5f:a7:80:2e: b4:f2:22:4e:0c:7e:0f:0e:f1:86:87:38:cf:20:09: 0c:53:cc:d4:3d:02:ce:c8:a0:43:bf:99:ce:02:92: 9a:98:3e:e0:61:17:59:1e:f4:e7:21:6f:2d:5c:84: 11:a9:27:57:6c:e0:7b:60:98:f5:75:ae:4a:b5:1b: 79:3b:0a:ec:85:5b:95:dc:3e:c3:a6:ae:45:b2:95: 9f:bb:fc:48:20:e8:d3:fa:9d:3f:26:1f:3c:2e:18: bd:c7:82:84:24:e3:b4:90:0a:07:ce:6a:4f:6f:93: 0a:57:3e:ad:f5:21:d8:1d:6e:e0:a7:57:1d:e7:31: 90:03:c9:09:0a:11:e0:a8:a2:1b:39:d7:12:e8:ad: 4c:90:f7:f9:7b:ef:d4:7c:69:9c:56:e7:1c:26:d6: 69:a8:aa:f7:ef:e1:81:d9:3a:04:94:26:84:89:45: e9:29:f8:b9:3d:32:4e:dd:b4:87:e9:79:67:40:c5: da:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2E:03:44:1C:D5:91:9E:07:C8:EB:F3:62:5A:E8:7B:FF:88:22:1B X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:03:00:99:84:f9:81:42:f3:b5:6f:1f:1f:a2:b7:06:49:19: 20:62:b6:e0:62:0e:cc:22:52:2c:05:52:9f:fc:a1:8f:f4:20: d6:f5:7e:bd:bf:92:6b:73:98:10:30:be:e2:32:c6:e9:cd:98: 14:1b:75:01:65:2c:03:8d:81:2b:99:ae:af:51:3b:db:de:77: 47:bb:01:91:59:50:7d:07:5c:44:cf:36:82:84:30:02:7d:59: 2f:ef:4a:b9:08:4b:62:ec:09:26:31:4d:3e:b2:2e:a1:58:1c: 2b:b2:73:a1:2a:b0:c8:32:5f:ea:7b:c1:81:52:b4:4b:3a:49: 08:33:3a:99:f9:d8:ae:ea:5a:c5:f4:5b:41:0e:97:60:04:0e: 8d:37:d4:a7:84:6d:bf:ba:c5:9a:8a:31:95:4c:d5:de:5e:5a: c3:87:f0:d3:f7:78:40:82:60:6b:c2:3d:a6:81:4c:74:02:42: 7a:bd:ee:01:23:7a:d9:5e:e0:88:f5:77:fe:cf:c2:1e:69:31: 2d:a8:c2:f3:6a:df:8e:31:4f:d4:55:dc:90:63:aa:41:16:26: 90:e0:5c:c6:33:33:c9:41:9b:a0:cf:48:40:c5:b0:9f:01:23: 2b:6f:a2:47:5a:80:54:44:61:98:3b:53:38:78:b6:be:59:13: d0:8c:3e:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLHnp9MCXxg/iFs2riPsUL3g5pcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA3MjQwNDUwMjZaFw0yNjA3MjUwNzU2MjZaMDMxMTAvBgNV BAMTKDkyMkUwMzQ0MUNENTkxOUUwN0M4RUJGMzYyNUFFODdCRkY4ODIyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4g6uUSU2e+c/3VnJrOwcBPeF 5R12xh0cOgC9EFO2zLh7U2c5TL6nfspXK96D9pP7RjJBVPTzS6yfVWsHi26OCa+0 GcwCX6eALrTyIk4Mfg8O8YaHOM8gCQxTzNQ9As7IoEO/mc4CkpqYPuBhF1ke9Och by1chBGpJ1ds4HtgmPV1rkq1G3k7CuyFW5XcPsOmrkWylZ+7/Egg6NP6nT8mHzwu GL3HgoQk47SQCgfOak9vkwpXPq31IdgdbuCnVx3nMZADyQkKEeCoohs51xLorUyQ 9/l779R8aZxW5xwm1mmoqvfv4YHZOgSUJoSJRekp+Lk9Mk7dtIfpeWdAxdrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUki4DRBzVkZ4HyOvzYlroe/+IIhswHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcDAJmE+YFC87VvHx+itwZJGSBituBiDswi UiwFUp/8oY/0INb1fr2/kmtzmBAwvuIyxunNmBQbdQFlLAONgSuZrq9RO9ved0e7 AZFZUH0HXETPNoKEMAJ9WS/vSrkIS2LsCSYxTT6yLqFYHCuyc6EqsMgyX+p7wYFS tEs6SQgzOpn52K7qWsX0W0EOl2AEDo031KeEbb+6xZqKMZVM1d5eWsOH8NP3eECC YGvCPaaBTHQCQnq97gEjetle4Ij1d/7Pwh5pMS2owvNq344xT9RV3JBjqkEWJpDg XMYzM8lBm6DPSEDFsJ8BIytvokdagFREYZg7Uzh4tr5ZE9CMPkE= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:18 2026 by rpki-client