$ rpki-client -vvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: fdNiMUay1pXyS0wiRz17r+BkxbtZNdgoq+So28ZVcBI= Subject key identifier: 8F:2D:D7:23:C3:72:44:64:BF:14:BB:37:F7:80:55:70:C5:26:DD:7A Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 606D0A6B8FFAA66D4884989D1E2F18167E4ECC4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 15:02:26 +0000 Manifest this update: Tue 16 Jun 2026 14:57:26 +0000 Manifest next update: Wed 17 Jun 2026 16:16:26 +0000 Files and hashes: 1: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: K/GGyr9XN5FvamLCLFSnAyjTRr5ZA3Ec8TtRjHB8VBQ=) 2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:6d:0a:6b:8f:fa:a6:6d:48:84:98:9d:1e:2f:18:16:7e:4e:cc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Jun 16 14:57:26 2026 GMT Not After : Jun 17 16:16:26 2026 GMT Subject: CN=8F2DD723C3724464BF14BB37F7805570C526DD7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:18:0a:bd:a5:5f:0d:f7:cc:d9:69:92:12:0d: 2e:a1:64:c6:f3:97:71:11:a1:b6:82:bc:c9:7f:26: 58:89:bc:77:de:be:70:0a:c0:97:86:a7:c7:ca:47: e6:5a:da:6d:fb:92:fa:b3:97:8e:c8:58:28:d1:f7: c6:7d:69:b3:00:25:d0:38:3c:9d:bb:ef:f8:24:46: d4:7e:cb:e5:b4:a3:65:a1:34:7f:c2:0f:c3:9c:fa: 58:73:53:43:1e:ed:73:7a:9d:17:ab:09:a4:e9:02: fc:01:1e:4c:37:c8:6f:04:63:9f:72:73:0a:88:f4: 42:b5:ac:6a:2a:1b:ef:0a:29:37:b8:e5:48:19:57: ed:fd:94:f0:9b:17:4c:c5:3d:d4:ea:7e:2b:8e:f2: 17:47:c9:c0:3a:79:ec:eb:82:cc:d6:ce:65:36:2f: c7:1c:88:86:0d:e2:40:10:6f:4b:e2:28:82:79:6a: 8d:38:6b:27:17:ff:30:59:45:28:52:ea:d5:24:b1: 32:e4:5b:09:5d:c8:6a:75:ff:3b:bb:e4:a4:73:7b: b4:26:3f:58:73:6e:ab:89:18:a3:98:0d:e7:81:97: 08:e3:91:ab:5b:aa:22:cc:75:f3:0f:db:5e:cb:27: 6f:d2:a2:07:cb:9a:5a:9a:0f:9a:b2:d8:ec:4e:4c: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:D7:23:C3:72:44:64:BF:14:BB:37:F7:80:55:70:C5:26:DD:7A X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e6:83:f6:b9:57:7d:f6:9b:20:f1:5c:de:4f:27:50:7a:7f: 02:38:1e:9b:d6:e3:70:6f:27:77:a0:0b:fa:3d:2f:56:d5:fb: 24:67:c2:16:14:78:30:cd:84:bd:f4:f6:1f:71:05:de:51:06: 17:69:35:05:54:9b:c0:d7:2e:e1:80:67:ad:36:e9:34:fd:7a: fb:67:e8:32:d9:08:0b:f9:7e:b6:ef:8e:e4:5d:b5:d7:9e:52: ed:d3:9d:8c:c1:9c:cd:00:7c:e9:8e:65:63:b8:29:fe:b4:84: 1c:85:f8:e7:bf:80:9a:21:09:25:69:0f:f0:2c:af:de:2b:97: e3:5e:23:36:61:76:7a:30:45:45:3a:92:19:ce:7c:0a:84:95: 6b:7e:49:82:8c:fe:fa:86:53:91:7b:07:1e:62:be:ed:38:b1: 4b:74:3f:55:78:66:d2:26:29:ff:2f:5d:4f:36:bf:88:79:70: b3:9b:4b:30:4e:f6:cd:c4:75:4d:19:8d:54:6f:52:4d:57:f0: 7a:10:95:e5:60:bb:db:44:d8:98:44:c7:30:e2:68:da:18:08: c1:ec:30:a9:53:c4:71:f8:5f:d6:cd:14:93:09:fc:12:3c:ac: 45:e1:bb:ba:d3:f9:39:1c:94:a0:8b:a5:13:aa:12:01:a6:14: 78:e6:bc:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYG0Ka4/6pm1IhJidHi8YFn5OzE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjA2MTYxNDU3MjZaFw0yNjA2MTcxNjE2MjZaMDMxMTAvBgNV BAMTKDhGMkRENzIzQzM3MjQ0NjRCRjE0QkIzN0Y3ODA1NTcwQzUyNkREN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGAq9pV8N98zZaZISDS6hZMbz l3ERobaCvMl/JliJvHfevnAKwJeGp8fKR+Za2m37kvqzl47IWCjR98Z9abMAJdA4 PJ277/gkRtR+y+W0o2WhNH/CD8Oc+lhzU0Me7XN6nRerCaTpAvwBHkw3yG8EY59y cwqI9EK1rGoqG+8KKTe45UgZV+39lPCbF0zFPdTqfiuO8hdHycA6eezrgszWzmU2 L8cciIYN4kAQb0viKIJ5ao04aycX/zBZRShS6tUksTLkWwldyGp1/zu75KRze7Qm P1hzbquJGKOYDeeBlwjjkatbqiLMdfMP217LJ2/SogfLmlqaD5qy2OxOTEBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjy3XI8NyRGS/FLs394BVcMUm3XowHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfmg/a5V332myDxXN5PJ1B6fwI4HpvW43Bv J3egC/o9L1bV+yRnwhYUeDDNhL309h9xBd5RBhdpNQVUm8DXLuGAZ6026TT9evtn 6DLZCAv5frbvjuRdtdeeUu3TnYzBnM0AfOmOZWO4Kf60hByF+Oe/gJohCSVpD/As r94rl+NeIzZhdnowRUU6khnOfAqElWt+SYKM/vqGU5F7Bx5ivu04sUt0P1V4ZtIm Kf8vXU82v4h5cLObSzBO9s3EdU0ZjVRvUk1X8HoQleVgu9tE2JhExzDiaNoYCMHs MKlTxHH4X9bNFJMJ/BI8rEXhu7rT+TkclKCLpROqEgGmFHjmvIQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:00:59 2026 by rpki-client