$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: ktiad+rAxcQCovYzhjKCbsHqHXLLHg8tZdpjfxslv6M= Subject key identifier: 45:81:06:B6:F1:35:19:23:F7:AB:17:AB:6A:17:67:44:2F:30:CF:05 Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 08A3CA58BC57A5F4345A744D33426D78EA1DDA23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:13:52 +0000 Manifest this update: Tue 16 Jun 2026 16:08:52 +0000 Manifest next update: Wed 17 Jun 2026 17:29:52 +0000 Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) 2: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: AKx9GeiAARLzcXmKB/mOLKmqNyY8s7TZmHrX95buljM=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:a3:ca:58:bc:57:a5:f4:34:5a:74:4d:33:42:6d:78:ea:1d:da:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Jun 16 16:08:52 2026 GMT Not After : Jun 17 17:29:52 2026 GMT Subject: CN=458106B6F1351923F7AB17AB6A1767442F30CF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:46:8e:53:ff:ed:a5:e0:88:38:3f:8c:45: 15:fd:53:d7:6d:05:e1:b8:3e:0c:8a:78:32:d4:23: e6:1d:4a:8a:33:1f:0c:81:4f:83:03:11:3f:94:e7: 85:49:e5:24:0b:df:b3:8c:d8:99:88:fb:21:e8:e2: 14:ed:74:25:18:ff:b6:81:e7:1f:8d:0e:1c:5f:8b: 28:30:cf:17:c5:32:85:b0:af:4d:ef:e7:0b:34:e3: 70:bb:5d:74:a1:a8:e3:7a:c8:df:b3:10:04:36:9e: 80:78:a4:db:92:b8:64:b6:52:9a:b7:22:fe:d7:c8: f6:32:65:71:45:87:ec:52:28:33:76:85:4f:52:a7: 85:b7:26:e4:47:04:60:ab:f3:18:7d:79:5d:b6:c6: 97:c2:01:1c:55:4b:c0:4a:2a:3a:fc:5a:c2:0d:b9: e5:62:2a:e4:69:81:5c:3b:8a:eb:ac:7a:5e:59:49: f4:57:53:3c:70:34:6f:2e:9f:6b:73:ec:48:06:86: 3c:23:84:f9:6b:34:53:8a:14:e1:81:83:24:4d:5b: f5:7f:67:0d:73:69:53:4c:67:55:b7:79:c1:94:83: 01:51:41:12:3f:66:e3:84:a1:62:b1:12:e6:e6:85: 9f:7d:97:79:13:43:5a:3b:d5:bf:2c:24:12:db:86: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:06:B6:F1:35:19:23:F7:AB:17:AB:6A:17:67:44:2F:30:CF:05 X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:89:f8:a1:27:52:0a:b4:73:70:b7:c5:46:25:0a:9a:e7:aa: d2:ef:2e:a1:46:b2:be:dd:a7:e0:6e:c6:27:07:2e:2b:30:64: 05:e3:97:b2:3c:73:3f:99:d1:d5:93:c1:42:a4:51:6a:7d:bb: 5e:71:88:25:ac:d5:89:9b:1b:93:b5:b4:b2:35:2c:67:aa:b8: 63:c9:82:2a:ec:4d:36:94:e5:ca:88:cb:46:08:42:63:49:a0: 23:68:18:f5:11:88:71:78:e9:4c:f0:7a:19:d0:06:15:a3:01: 9a:0e:69:18:98:4a:db:5e:39:02:7b:b0:c9:e3:97:8e:dd:d5: d4:e6:68:02:77:6d:7e:0b:11:8b:c2:6b:36:0b:e5:75:b5:25: 37:ea:3d:6c:c3:ea:89:a5:3b:e4:46:ea:57:c4:f7:57:42:c9: 0e:66:52:e2:f0:f8:9e:bf:d7:ef:c1:15:bf:39:1e:a6:73:0a: 85:f0:98:41:33:11:13:93:ff:70:59:db:2f:b3:b3:bf:8c:3b: f0:2b:4f:36:88:9c:f9:53:81:85:c9:d1:d2:41:29:fb:2a:60: 09:60:9d:11:f6:ea:1c:52:60:67:e3:f6:cc:e7:23:6b:79:27: 48:6e:04:32:33:06:cd:5c:98:6e:dd:d2:74:d3:a5:64:4e:c5: fc:3b:d7:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKPKWLxXpfQ0WnRNM0JteOod2iMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA2MTYxNjA4NTJaFw0yNjA2MTcxNzI5NTJaMDMxMTAvBgNV BAMTKDQ1ODEwNkI2RjEzNTE5MjNGN0FCMTdBQjZBMTc2NzQ0MkYzMENGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXEaOU//tpeCIOD+MRRX9U9dt BeG4PgyKeDLUI+YdSoozHwyBT4MDET+U54VJ5SQL37OM2JmI+yHo4hTtdCUY/7aB 5x+NDhxfiygwzxfFMoWwr03v5ws043C7XXShqON6yN+zEAQ2noB4pNuSuGS2Upq3 Iv7XyPYyZXFFh+xSKDN2hU9Sp4W3JuRHBGCr8xh9eV22xpfCARxVS8BKKjr8WsIN ueViKuRpgVw7iuusel5ZSfRXUzxwNG8un2tz7EgGhjwjhPlrNFOKFOGBgyRNW/V/ Zw1zaVNMZ1W3ecGUgwFRQRI/ZuOEoWKxEubmhZ99l3kTQ1o71b8sJBLbhtcDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYEGtvE1GSP3qxerahdnRC8wzwUwHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSJ+KEnUgq0c3C3xUYlCprnqtLvLqFGsr7d p+BuxicHLiswZAXjl7I8cz+Z0dWTwUKkUWp9u15xiCWs1YmbG5O1tLI1LGequGPJ girsTTaU5cqIy0YIQmNJoCNoGPURiHF46UzwehnQBhWjAZoOaRiYStteOQJ7sMnj l47d1dTmaAJ3bX4LEYvCazYL5XW1JTfqPWzD6omlO+RG6lfE91dCyQ5mUuLw+J6/ 1+/BFb85HqZzCoXwmEEzEROT/3BZ2y+zs7+MO/ArTzaInPlTgYXJ0dJBKfsqYAlg nRH26hxSYGfj9sznI2t5J0huBDIzBs1cmG7d0nTTpWROxfw710k= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:57 2026 by rpki-client