$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: lucPQBQekTPqdDEUZRPmU9fofbdFD2Fw4zRz808EqL8= Subject key identifier: E3:8B:50:8A:1D:B5:3A:C0:5F:EE:ED:4D:56:D8:88:60:F7:D8:04:CA Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 408C4771D46C037445ECA88770598979CF98E19F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 17:12:57 +0000 Manifest this update: Tue 28 Jul 2026 17:07:57 +0000 Manifest next update: Wed 29 Jul 2026 19:43:57 +0000 Files and hashes: 1: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) 2: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: 99lDP1rqjkqOWcX1DKZVPVUGmbNQ4eZMSOYKMlgJpq4=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8c:47:71:d4:6c:03:74:45:ec:a8:87:70:59:89:79:cf:98:e1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Jul 28 17:07:57 2026 GMT Not After : Jul 29 19:43:57 2026 GMT Subject: CN=E38B508A1DB53AC05FEEED4D56D88860F7D804CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:a4:82:83:f7:b8:aa:7a:6e:d4:01:dd:b2: 93:ea:91:b2:e4:0d:46:65:5f:ac:2e:a8:d9:59:8e: 5b:99:43:ac:08:80:31:98:96:a4:7d:2e:42:40:fb: 79:c8:20:b5:f7:7f:05:c7:dd:17:3b:e0:3a:1f:28: 9c:4f:6c:95:9a:33:31:e7:57:0c:85:11:40:40:a8: 01:7d:9d:35:f8:6e:9c:3b:95:7c:95:5a:5f:2f:bf: 1e:1d:6a:67:a9:ed:8f:fb:bd:8f:46:ce:b6:10:46: e9:ac:1a:88:1d:75:9e:81:b5:91:5d:82:c4:d8:0b: 87:d2:4d:b5:d2:67:ce:b6:6f:88:33:c5:cc:ab:fa: 58:b7:45:41:41:55:de:7a:29:19:6a:80:cc:61:e6: 6d:19:4f:40:b1:a8:0b:83:9c:c5:d6:fb:db:05:77: a1:81:7a:3a:da:d3:0c:02:17:76:14:0d:e6:18:e7: 9a:60:8c:57:77:bd:af:a5:3f:72:85:46:fd:b5:4e: 57:90:97:a2:93:23:51:bd:90:bc:8b:76:cf:2b:7f: d0:72:3f:13:e7:62:db:43:30:49:a1:fd:88:9f:17: e8:87:de:81:89:c6:9f:df:57:2a:66:48:71:b2:7f: a9:3d:c4:bb:42:64:d4:84:c4:10:d7:9c:54:67:8c: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8B:50:8A:1D:B5:3A:C0:5F:EE:ED:4D:56:D8:88:60:F7:D8:04:CA X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1d:03:da:79:55:85:bd:3e:8e:ce:61:ae:07:ad:b2:ed:5c: bb:10:3a:94:2a:d4:4f:d5:7c:44:0a:ad:0d:63:f2:51:0a:8d: 8d:4b:5a:8e:77:15:87:c8:d9:f0:0d:af:a5:2f:4a:5d:11:1e: d8:cc:96:cb:78:f5:76:1f:b7:84:cc:b4:fb:f8:92:c0:cd:2f: 45:40:e5:05:d2:40:d8:4f:96:ce:29:05:15:aa:25:64:a5:e5: 08:74:84:f1:a9:3e:c0:90:31:00:45:50:7c:f7:d6:0e:e9:4b: 8a:26:1b:ac:c3:a6:14:1a:ad:41:4a:bf:b0:2f:9d:22:b3:bb: 52:42:5f:f6:e3:61:f5:79:48:0f:a2:cb:20:a3:76:63:c6:b1: a2:f1:d4:b2:03:e0:9c:69:97:63:7f:16:ea:10:36:54:c0:9a: d1:7b:68:45:79:7c:fa:74:d3:a4:25:09:68:0d:16:45:af:e0: ac:f9:f7:ff:bb:03:06:69:b1:a1:80:37:8e:80:e1:76:7e:5e: 2e:f3:dc:8d:6a:aa:d5:27:1d:94:57:c5:df:06:0e:6c:87:d8: ba:d3:db:9c:1d:23:9c:dd:3a:2c:62:97:9a:7d:81:b2:58:d0: 78:a7:b4:11:45:2f:84:3c:17:05:19:7b:b5:ab:1a:54:78:65: 32:26:27:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIxHcdRsA3RF7KiHcFmJec+Y4Z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjA3MjgxNzA3NTdaFw0yNjA3MjkxOTQzNTdaMDMxMTAvBgNV BAMTKEUzOEI1MDhBMURCNTNBQzA1RkVFRUQ0RDU2RDg4ODYwRjdEODA0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9haSCg/e4qnpu1AHdspPqkbLk DUZlX6wuqNlZjluZQ6wIgDGYlqR9LkJA+3nIILX3fwXH3Rc74DofKJxPbJWaMzHn VwyFEUBAqAF9nTX4bpw7lXyVWl8vvx4damep7Y/7vY9GzrYQRumsGogddZ6BtZFd gsTYC4fSTbXSZ862b4gzxcyr+li3RUFBVd56KRlqgMxh5m0ZT0CxqAuDnMXW+9sF d6GBejra0wwCF3YUDeYY55pgjFd3va+lP3KFRv21TleQl6KTI1G9kLyLds8rf9By PxPnYttDMEmh/YifF+iH3oGJxp/fVypmSHGyf6k9xLtCZNSExBDXnFRnjIvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44tQih21OsBf7u1NVtiIYPfYBMowHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8dA9p5VYW9Po7OYa4HrbLtXLsQOpQq1E/V fEQKrQ1j8lEKjY1LWo53FYfI2fANr6UvSl0RHtjMlst49XYft4TMtPv4ksDNL0VA 5QXSQNhPls4pBRWqJWSl5Qh0hPGpPsCQMQBFUHz31g7pS4omG6zDphQarUFKv7Av nSKzu1JCX/bjYfV5SA+iyyCjdmPGsaLx1LID4Jxpl2N/FuoQNlTAmtF7aEV5fPp0 06QlCWgNFkWv4Kz59/+7AwZpsaGAN46A4XZ+Xi7z3I1qqtUnHZRXxd8GDmyH2LrT 25wdI5zdOixil5p9gbJY0HintBFFL4Q8FwUZe7WrGlR4ZTImJ9A= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:15 2026 by rpki-client