$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: y8Cyppv67pned8bZCVQiYgFMmivNFfinkMFNMB3QhsE= Subject key identifier: 59:FE:50:EC:F8:49:1B:76:E9:A9:60:4D:49:D4:35:A6:97:1E:7A:1A Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 3644B198BC909BA9115AEA6DB3B8ED656BD04CA7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:03:03 +0000 Manifest this update: Fri 24 Jul 2026 02:58:03 +0000 Manifest next update: Sat 25 Jul 2026 06:19:03 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) 3: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: khCDj1BaR8TccnPjt4spy9YpSPS3PlZD+asDJbUQKwc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 06:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:44:b1:98:bc:90:9b:a9:11:5a:ea:6d:b3:b8:ed:65:6b:d0:4c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Jul 24 02:58:03 2026 GMT Not After : Jul 25 06:19:03 2026 GMT Subject: CN=59FE50ECF8491B76E9A9604D49D435A6971E7A1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:29:18:80:fd:9b:c0:6f:7d:a9:f4:4e:37:b9: 46:42:69:1c:43:fe:86:5e:28:b9:82:d7:d4:45:47: f9:0f:3e:69:86:09:3c:e3:a4:fe:4f:40:e4:c3:84: 1e:6b:3c:41:03:4b:80:c9:28:72:a6:1d:07:27:15: e6:9b:e4:6c:b7:f3:e8:0e:cf:91:83:8f:b8:40:c4: 79:8c:a4:59:7c:67:20:71:34:3a:e3:3b:6e:28:fd: 29:79:f9:88:ae:d0:50:1f:eb:18:b9:9d:c6:a8:9a: 0e:b0:c4:54:d3:3b:40:64:ab:e5:32:f4:47:25:20: 21:ef:8f:e0:a4:95:58:4a:b9:f5:06:fd:07:6c:25: 43:0b:5a:89:05:5e:ec:f0:7d:a9:c0:6b:e3:65:f7: 4e:3e:e0:a4:85:98:32:dc:90:20:a1:5a:b5:fb:5d: 0b:84:46:bf:e9:1e:cb:e6:5b:8a:ae:88:ec:76:06: ff:6d:42:fd:df:a2:69:69:88:4c:73:ae:41:a2:84: b1:0b:a0:b2:6a:91:1e:44:57:c6:f5:80:6f:6a:b6: d1:d3:9e:0a:e1:7d:20:ea:65:27:bd:b4:71:87:9f: c1:85:cf:e2:8b:99:a3:d0:bd:30:ba:8f:f8:5a:1e: 19:cd:0c:5c:09:e2:ba:f7:c5:c6:63:03:23:74:76: 6c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FE:50:EC:F8:49:1B:76:E9:A9:60:4D:49:D4:35:A6:97:1E:7A:1A X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:24:d0:79:aa:39:b1:22:df:94:ef:91:44:6c:88:a3:02:44: d3:79:86:d8:d0:42:7e:bd:fd:c0:97:64:53:0e:64:a8:5b:61: 64:40:98:21:b4:4c:1f:73:8d:ad:6e:7b:51:b7:71:62:12:65: 00:27:9e:aa:30:33:f9:04:01:c7:75:fc:53:6e:bd:be:43:ad: f0:57:28:44:5c:54:ea:cb:f5:9d:15:82:01:88:8b:93:54:d3: 1e:e3:6c:ea:75:db:c0:9a:0c:ad:ca:19:42:8d:4d:37:ed:b8: f4:2e:7e:7b:01:e5:6e:91:6b:e9:d3:7c:e3:ec:42:39:97:48: e0:b3:46:62:89:25:44:f6:ba:d9:0c:5b:11:50:2a:8b:37:e2: e1:9a:44:d6:a2:e3:f3:5b:dc:af:b1:8d:39:0f:08:22:9d:29: d7:4c:f8:8e:be:2a:b0:61:58:51:40:95:b5:7e:6b:56:ed:5e: 44:e1:a9:e2:fa:9f:1f:0c:de:4a:b6:80:73:ea:ba:d4:cc:03: bf:31:7a:b2:30:da:ab:d4:47:d0:88:07:5d:80:13:99:97:3e: fe:0a:a7:16:c7:33:07:2d:c4:c6:c8:f5:54:90:88:3b:33:77: 44:c4:79:87:f4:a9:1e:ec:66:88:2c:88:2c:a9:ec:72:4e:73: 35:83:92:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkSxmLyQm6kRWupts7jtZWvQTKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA3MjQwMjU4MDNaFw0yNjA3MjUwNjE5MDNaMDMxMTAvBgNV BAMTKDU5RkU1MEVDRjg0OTFCNzZFOUE5NjA0RDQ5RDQzNUE2OTcxRTdBMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKKRiA/ZvAb32p9E43uUZCaRxD /oZeKLmC19RFR/kPPmmGCTzjpP5PQOTDhB5rPEEDS4DJKHKmHQcnFeab5Gy38+gO z5GDj7hAxHmMpFl8ZyBxNDrjO24o/Sl5+Yiu0FAf6xi5ncaomg6wxFTTO0Bkq+Uy 9EclICHvj+CklVhKufUG/QdsJUMLWokFXuzwfanAa+Nl904+4KSFmDLckCChWrX7 XQuERr/pHsvmW4quiOx2Bv9tQv3fomlpiExzrkGihLELoLJqkR5EV8b1gG9qttHT ngrhfSDqZSe9tHGHn8GFz+KLmaPQvTC6j/haHhnNDFwJ4rr3xcZjAyN0dmwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWf5Q7PhJG3bpqWBNSdQ1ppceehowHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0k0HmqObEi35TvkURsiKMCRNN5htjQQn69 /cCXZFMOZKhbYWRAmCG0TB9zja1ue1G3cWISZQAnnqowM/kEAcd1/FNuvb5DrfBX KERcVOrL9Z0VggGIi5NU0x7jbOp128CaDK3KGUKNTTftuPQufnsB5W6Ra+nTfOPs QjmXSOCzRmKJJUT2utkMWxFQKos34uGaRNai4/Nb3K+xjTkPCCKdKddM+I6+KrBh WFFAlbV+a1btXkThqeL6nx8M3kq2gHPqutTMA78xerIw2qvUR9CIB12AE5mXPv4K pxbHMwctxMbI9VSQiDszd0TEeYf0qR7sZogsiCyp7HJOczWDkpw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:03:56 2026 by rpki-client