$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: sDXLN5YHR/q0JtUs2uKmjg5ySh5PdGu1aVtiB3uqpFU= Subject key identifier: 71:41:A8:28:1A:C6:CD:44:40:6B:CD:DC:69:87:AF:3D:E7:9A:7C:50 Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 5485CAE483A3A9067A3D5267E007154B093A0652 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 16:49:55 +0000 Manifest this update: Sat 13 Jun 2026 16:44:55 +0000 Manifest next update: Sun 14 Jun 2026 17:02:55 +0000 Files and hashes: 1: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) 2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) 3: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: nZi2RbsMovGtO6rkGYn2B1HCmEet73ZmbaWng6xBl0M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:85:ca:e4:83:a3:a9:06:7a:3d:52:67:e0:07:15:4b:09:3a:06:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Jun 13 16:44:55 2026 GMT Not After : Jun 14 17:02:55 2026 GMT Subject: CN=7141A8281AC6CD44406BCDDC6987AF3DE79A7C50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:5d:11:8b:18:89:99:78:33:89:d3:c5:3e: ad:b8:ba:75:3a:65:3c:fe:f6:56:67:c6:e5:e7:e0: f2:50:dc:40:1f:f2:24:fb:8a:51:7a:d8:cc:47:b0: fd:a0:92:12:85:79:da:d7:89:f2:45:01:e1:db:c2: 16:0c:2a:08:cf:5c:57:f7:22:b7:a2:f5:02:8f:9b: 5b:55:d2:59:f0:15:1e:97:c2:0e:61:3d:99:7b:62: 25:55:f0:1c:fb:34:ac:27:d0:4b:71:5c:67:02:5f: e9:39:fd:41:96:f8:7f:41:8c:10:05:6b:e0:71:af: 26:c9:08:d3:c1:7c:06:ba:14:c2:76:cc:a4:cf:66: dd:35:7f:39:a4:16:06:cd:9b:05:51:6f:ac:49:ff: ab:f0:78:3f:5b:a9:a3:1b:79:7f:eb:eb:ee:e8:07: 8b:50:62:45:f9:61:7e:cb:c4:dc:19:14:33:45:9e: 70:ee:6d:fd:c3:66:cb:e5:ad:f9:2d:eb:88:35:60: 96:57:a3:10:85:ae:ce:0f:bf:75:41:a2:18:7e:a4: b5:ea:d1:f9:7a:f1:58:94:f8:bd:ff:5e:69:f8:0a: f8:ff:22:b1:33:57:08:79:9d:61:2c:0d:d3:6b:92: 0a:37:1b:fa:e0:37:db:9c:e5:a0:0c:d0:4f:2e:a5: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:A8:28:1A:C6:CD:44:40:6B:CD:DC:69:87:AF:3D:E7:9A:7C:50 X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:23:2a:0c:77:4a:b7:a8:72:6d:d6:8e:ab:f8:a4:f0:a7:60: 9f:40:f1:59:ee:1f:3e:50:6e:5a:1a:80:a5:24:cf:4e:bb:80: 50:6c:b2:17:44:40:2a:59:02:37:6b:94:60:2f:97:74:20:0c: be:f0:ed:17:1c:93:6a:35:78:c2:63:69:0a:43:90:0f:75:3a: 10:5e:3a:d1:8d:e5:5e:e7:92:9a:1f:f7:17:b8:04:87:0e:d6: 68:fb:e1:18:9e:6c:f1:b9:4e:ae:0a:e2:ba:3d:0f:d4:6e:9e: 44:f7:b6:46:cf:2b:0a:da:5c:72:78:fc:8e:31:47:1d:74:c3: a9:75:b9:0a:e3:72:7b:c9:fb:d1:9b:06:1f:1e:98:ad:4c:3c: 27:6a:45:d7:58:8b:2e:d4:bf:ed:8a:64:c0:6b:94:b5:cf:ba: 46:b6:66:cb:54:2b:54:5b:34:c1:1b:4d:bf:1d:e2:10:f4:a5: 19:ea:cc:91:a1:0b:b9:dd:96:a1:79:8c:1c:43:3b:1b:9c:2f: bf:0a:21:17:f5:b6:b9:27:60:f7:b7:e8:45:d1:ee:73:1d:82: c6:88:3c:b0:61:21:5c:39:e9:0c:9c:c5:b5:d9:03:84:68:9f: f8:dd:09:81:3d:4f:f9:97:be:a1:88:79:8f:e9:88:57:15:3b: 64:cf:24:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIXK5IOjqQZ6PVJn4AcVSwk6BlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjA2MTMxNjQ0NTVaFw0yNjA2MTQxNzAyNTVaMDMxMTAvBgNV BAMTKDcxNDFBODI4MUFDNkNENDQ0MDZCQ0REQzY5ODdBRjNERTc5QTdDNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrSV0RixiJmXgzidPFPq24unU6 ZTz+9lZnxuXn4PJQ3EAf8iT7ilF62MxHsP2gkhKFedrXifJFAeHbwhYMKgjPXFf3 Irei9QKPm1tV0lnwFR6Xwg5hPZl7YiVV8Bz7NKwn0EtxXGcCX+k5/UGW+H9BjBAF a+BxrybJCNPBfAa6FMJ2zKTPZt01fzmkFgbNmwVRb6xJ/6vweD9bqaMbeX/r6+7o B4tQYkX5YX7LxNwZFDNFnnDubf3DZsvlrfkt64g1YJZXoxCFrs4Pv3VBohh+pLXq 0fl68ViU+L3/Xmn4Cvj/IrEzVwh5nWEsDdNrkgo3G/rgN9uc5aAM0E8upbOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUGoKBrGzURAa83caYevPeeafFAwHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0jKgx3Sreocm3Wjqv4pPCnYJ9A8VnuHz5Q bloagKUkz067gFBsshdEQCpZAjdrlGAvl3QgDL7w7Rcck2o1eMJjaQpDkA91OhBe OtGN5V7nkpof9xe4BIcO1mj74RiebPG5Tq4K4ro9D9RunkT3tkbPKwraXHJ4/I4x Rx10w6l1uQrjcnvJ+9GbBh8emK1MPCdqRddYiy7Uv+2KZMBrlLXPuka2ZstUK1Rb NMEbTb8d4hD0pRnqzJGhC7ndlqF5jBxDOxucL78KIRf1trknYPe36EXR7nMdgsaI PLBhIVw56QycxbXZA4Ron/jdCYE9T/mXvqGIeY/piFcVO2TPJPQ= -----END CERTIFICATE-----Generated at Sat Jun 13 21:19:46 2026 by rpki-client