$ rpki-client -vvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: xdo0n6c7mt/XU7KPZm0hlvPvd4DTZzhrsYOn/4O7bU8= Subject key identifier: 5A:3F:98:07:E5:33:96:F2:C6:C4:EF:18:A7:FF:60:1B:5C:7F:A6:FF Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 08432EC3D5F86D81FD656EA4E506FD24618F375C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: 38 Signing time: Sat 13 Jun 2026 12:45:10 +0000 Manifest this update: Sat 13 Jun 2026 12:40:10 +0000 Manifest next update: Sun 14 Jun 2026 15:04:10 +0000 Files and hashes: 1: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: QlU+WUdf53GotoymnRawA54WtT2lweq3UQQcwHBQBR4=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:43:2e:c3:d5:f8:6d:81:fd:65:6e:a4:e5:06:fd:24:61:8f:37:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Jun 13 12:40:10 2026 GMT Not After : Jun 14 15:04:10 2026 GMT Subject: CN=5A3F9807E53396F2C6C4EF18A7FF601B5C7FA6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c1:bf:4c:0f:14:8f:1b:5c:9f:bc:9d:45:7e: 6d:00:d6:fe:6f:55:d6:86:c6:f1:40:18:82:8d:cd: 49:06:17:b8:82:03:d2:c5:4b:97:18:44:8a:6c:88: 37:68:d4:85:1f:34:f6:b6:6f:4f:b9:b9:70:e0:30: f1:c5:05:06:2b:b7:f7:c4:c4:18:27:df:51:bb:93: f0:02:09:50:96:4f:a2:7f:62:25:66:b1:05:b9:a4: 4c:62:a0:ce:ae:3e:9e:29:09:ba:39:5c:72:0f:cd: 83:d5:e7:cb:3d:81:6b:d8:c5:c4:fe:02:fa:d9:da: 1c:2b:d4:f1:2c:39:5b:09:2e:aa:3f:20:86:17:06: da:d2:0c:de:e0:3f:99:9a:df:fa:2a:ad:d2:a1:58: e3:16:1a:6b:bd:54:a3:a7:92:b6:79:cb:42:5d:16: 8d:1b:c6:f2:27:cf:72:a6:2d:49:00:0d:2a:87:e8: c0:fc:98:1a:79:ff:08:2d:9e:11:ac:82:5b:97:0f: e1:d3:12:b2:9d:4a:66:5e:01:d2:23:8f:ae:7c:17: d1:16:94:6c:9b:0c:84:a9:8c:6d:10:e6:4c:4e:47: 44:de:56:09:f1:fc:19:99:ff:2c:14:8a:30:b4:19: c6:1a:0a:31:99:d5:b6:96:b4:c4:75:0b:60:d4:f0: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:98:07:E5:33:96:F2:C6:C4:EF:18:A7:FF:60:1B:5C:7F:A6:FF X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5b:61:da:36:b1:a3:37:bb:6c:5f:65:79:32:cf:29:01:3b: 8b:76:f2:36:c8:84:31:62:de:7b:0a:12:b8:6b:55:c6:6d:20: e4:72:e5:7d:56:c0:33:c6:24:b1:de:ac:95:34:d8:b2:91:49: de:0d:e0:25:04:ec:47:bb:50:b1:5f:4b:cc:b5:0b:e3:ae:1e: f7:c3:c5:87:21:1e:8d:12:0c:ce:e8:a5:b5:eb:06:81:c6:92: 82:13:6a:d3:62:ff:d9:d9:c8:26:be:da:88:5a:57:c0:d1:45: 1d:85:e6:d6:08:aa:92:64:02:aa:22:f9:9b:aa:aa:36:d4:06: c9:34:9d:67:70:b7:d5:a9:3e:4e:ee:65:eb:fa:23:63:d1:9c: ec:3b:37:c0:d3:58:ef:17:e4:5c:a3:76:69:ec:46:21:a0:83: 6d:a7:52:93:43:c6:11:57:98:3c:de:d3:2d:c5:90:17:3d:c5: 81:62:4c:c0:f6:44:ad:d3:1c:b6:24:d5:eb:ab:f5:ee:a7:b0: af:a7:52:34:e2:10:eb:78:37:0e:54:e0:03:d3:8d:c5:0a:63: b5:99:5e:f6:94:c6:b9:81:b9:86:69:c8:db:42:de:eb:3a:eb: d1:9e:0a:39:f2:f0:e3:ca:3d:01:ed:5d:0c:29:34:6a:0f:1b: b1:91:cd:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEMuw9X4bYH9ZW6k5Qb9JGGPN1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjA2MTMxMjQwMTBaFw0yNjA2MTQxNTA0MTBaMDMxMTAvBgNV BAMTKDVBM0Y5ODA3RTUzMzk2RjJDNkM0RUYxOEE3RkY2MDFCNUM3RkE2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpwb9MDxSPG1yfvJ1Ffm0A1v5v VdaGxvFAGIKNzUkGF7iCA9LFS5cYRIpsiDdo1IUfNPa2b0+5uXDgMPHFBQYrt/fE xBgn31G7k/ACCVCWT6J/YiVmsQW5pExioM6uPp4pCbo5XHIPzYPV58s9gWvYxcT+ AvrZ2hwr1PEsOVsJLqo/IIYXBtrSDN7gP5ma3/oqrdKhWOMWGmu9VKOnkrZ5y0Jd Fo0bxvInz3KmLUkADSqH6MD8mBp5/wgtnhGsgluXD+HTErKdSmZeAdIjj658F9EW lGybDISpjG0Q5kxOR0TeVgnx/BmZ/ywUijC0GcYaCjGZ1baWtMR1C2DU8G6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWj+YB+UzlvLGxO8Yp/9gG1x/pv8wHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZbYdo2saM3u2xfZXkyzykBO4t28jbIhDFi 3nsKErhrVcZtIORy5X1WwDPGJLHerJU02LKRSd4N4CUE7Ee7ULFfS8y1C+OuHvfD xYchHo0SDM7opbXrBoHGkoITatNi/9nZyCa+2ohaV8DRRR2F5tYIqpJkAqoi+Zuq qjbUBsk0nWdwt9WpPk7uZev6I2PRnOw7N8DTWO8X5FyjdmnsRiGgg22nUpNDxhFX mDze0y3FkBc9xYFiTMD2RK3THLYk1eur9e6nsK+nUjTiEOt4Nw5U4APTjcUKY7WZ XvaUxrmBuYZpyNtC3us669GeCjny8OPKPQHtXQwpNGoPG7GRzWM= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:31 2026 by rpki-client