$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: +wII02rjJ8wRJ1kdm12+XZerrLgKqnvwZ6hFPtAbGto= Subject key identifier: C3:E0:2A:F9:4F:68:F1:CC:52:8E:69:D3:A0:EF:A6:F3:00:ED:0E:C2 Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 6C1CCE8B9050C1831452646947DB0FBE82543986 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:39:43 +0000 Manifest this update: Wed 17 Jun 2026 05:34:43 +0000 Manifest next update: Thu 18 Jun 2026 06:03:43 +0000 Files and hashes: 1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 2: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) 3: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: pG7qXJtTxXBzbja0asrCcuh/rJyYnAS3oxZHljvHK+E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:1c:ce:8b:90:50:c1:83:14:52:64:69:47:db:0f:be:82:54:39:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: Jun 17 05:34:43 2026 GMT Not After : Jun 18 06:03:43 2026 GMT Subject: CN=C3E02AF94F68F1CC528E69D3A0EFA6F300ED0EC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:d2:70:4a:bc:69:fc:d3:62:2f:1f:7a:53: 28:3f:c6:47:88:c4:d7:21:a4:c1:4f:c4:b0:1a:31: 08:cf:e5:a3:52:94:1a:e1:17:83:06:4c:3e:6e:1d: 6e:58:43:5f:0d:1d:1f:95:d7:e6:54:a4:fa:ff:cb: 9f:b2:01:63:7d:f5:de:f6:30:8d:1a:37:dd:4f:61: ef:c5:e2:51:80:6f:52:ab:20:67:eb:14:6a:65:d1: 04:12:c7:6a:4d:7f:00:2f:13:d6:ee:5e:17:c7:ff: 7a:63:9a:19:05:e2:33:b3:fc:53:ba:5e:75:82:0d: aa:9d:cd:bd:fd:33:73:fc:06:cb:5f:f5:9c:0c:87: 40:aa:32:9c:4e:41:63:b4:9e:b5:89:a4:e4:02:d5: 53:73:94:49:51:f4:3b:3e:13:2a:01:ac:4a:75:40: 22:22:35:79:c2:46:22:69:70:ca:61:6a:12:d7:7e: 64:7e:90:14:f3:1a:bd:09:32:25:ba:19:51:1b:71: e7:9f:4f:a7:c3:cf:b7:87:2d:59:69:6a:60:41:bc: d9:14:49:6d:ce:19:03:34:2e:17:59:af:a2:1b:5c: 25:63:61:e8:c4:02:96:02:f5:b8:99:de:8b:a6:09: 9c:da:94:7d:9b:7b:d6:2b:04:ee:08:33:10:60:25: e2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E0:2A:F9:4F:68:F1:CC:52:8E:69:D3:A0:EF:A6:F3:00:ED:0E:C2 X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:db:6f:85:9c:38:98:f1:1c:f1:68:2c:f5:af:c1:1a:e6:8d: a1:1c:58:a9:97:f0:a5:c7:a5:92:fc:6f:79:f2:e5:42:b3:d7: 8f:6d:44:5d:58:23:ae:ff:db:9e:70:d6:1f:00:f8:53:fd:cf: cf:c1:c0:c0:46:50:c5:17:33:88:58:53:33:0d:19:0b:dd:a1: ae:f5:94:4a:fa:cc:41:d3:7e:94:66:eb:41:ea:f3:48:7a:f2: 2c:62:f6:fc:49:15:c6:a6:9b:fb:7b:63:43:16:9e:77:e2:82: 07:2b:02:77:79:21:61:d2:9d:46:47:e4:20:cc:01:ea:be:52: 3f:19:54:55:88:82:88:29:03:eb:47:67:d8:7b:af:ea:3d:42: 00:8a:b8:b7:dc:9e:52:89:39:26:a9:6d:e0:d3:8f:e6:80:9a: 05:23:6b:21:81:91:57:44:03:4a:5c:d9:63:66:2e:a1:10:4b: 02:b6:90:5b:b1:da:56:63:03:16:13:30:14:2e:62:dd:2c:ec: 5b:28:da:5b:b2:68:7e:55:c7:e0:fa:45:e8:82:f1:63:fb:b1: b1:ca:ff:d8:87:cf:6c:eb:ef:fd:a7:69:c6:4e:2b:72:47:54: 7f:22:86:9c:27:ce:c6:31:3d:32:21:5e:d9:a0:a7:05:83:7e: 0b:c2:9b:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBzOi5BQwYMUUmRpR9sPvoJUOYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjA2MTcwNTM0NDNaFw0yNjA2MTgwNjAzNDNaMDMxMTAvBgNV BAMTKEMzRTAyQUY5NEY2OEYxQ0M1MjhFNjlEM0EwRUZBNkYzMDBFRDBFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXtJwSrxp/NNiLx96Uyg/xkeI xNchpMFPxLAaMQjP5aNSlBrhF4MGTD5uHW5YQ18NHR+V1+ZUpPr/y5+yAWN99d72 MI0aN91PYe/F4lGAb1KrIGfrFGpl0QQSx2pNfwAvE9buXhfH/3pjmhkF4jOz/FO6 XnWCDaqdzb39M3P8Bstf9ZwMh0CqMpxOQWO0nrWJpOQC1VNzlElR9Ds+EyoBrEp1 QCIiNXnCRiJpcMphahLXfmR+kBTzGr0JMiW6GVEbceefT6fDz7eHLVlpamBBvNkU SW3OGQM0LhdZr6IbXCVjYejEApYC9biZ3oumCZzalH2be9YrBO4IMxBgJeJRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw+Aq+U9o8cxSjmnToO+m8wDtDsIwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrbb4WcOJjxHPFoLPWvwRrmjaEcWKmX8KXH pZL8b3ny5UKz149tRF1YI67/255w1h8A+FP9z8/BwMBGUMUXM4hYUzMNGQvdoa71 lEr6zEHTfpRm60Hq80h68ixi9vxJFcamm/t7Y0MWnnfiggcrAnd5IWHSnUZH5CDM Aeq+Uj8ZVFWIgogpA+tHZ9h7r+o9QgCKuLfcnlKJOSapbeDTj+aAmgUjayGBkVdE A0pc2WNmLqEQSwK2kFux2lZjAxYTMBQuYt0s7Fso2luyaH5Vx+D6ReiC8WP7sbHK /9iHz2zr7/2nacZOK3JHVH8ihpwnzsYxPTIhXtmgpwWDfgvCmzM= -----END CERTIFICATE-----Generated at Wed Jun 17 10:02:40 2026 by rpki-client