$ rpki-client -vvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: +gO92vpCNou7ghLZ8zN8wurIkNAoLDz+rqltlWE1UwQ= Subject key identifier: CE:19:7D:5E:19:7A:92:7D:3A:46:27:E4:F5:E4:D1:95:7B:C8:02:DE Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 112A955EFAA5F701F5EDBCA01A89AB39AC866B3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:35:29 +0000 Manifest this update: Wed 29 Jul 2026 03:30:29 +0000 Manifest next update: Thu 30 Jul 2026 05:59:29 +0000 Files and hashes: 1: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: aSH5E8aJQ82GSlQAErv3IJ77+xxqaDJZTQ1gt/7GqCg=) 2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:2a:95:5e:fa:a5:f7:01:f5:ed:bc:a0:1a:89:ab:39:ac:86:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Jul 29 03:30:29 2026 GMT Not After : Jul 30 05:59:29 2026 GMT Subject: CN=CE197D5E197A927D3A4627E4F5E4D1957BC802DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:02:53:49:55:56:48:9a:20:ee:e7:81:4e: 76:dc:ba:f3:ab:80:e7:7c:50:99:82:14:4c:bf:2d: c3:22:ff:52:7e:7d:1e:83:d9:d0:c8:8f:0f:c6:57: 8f:34:58:55:20:e1:af:9c:a6:d3:61:89:4c:da:26: e7:f5:f8:fa:19:69:48:24:65:ce:b0:8f:94:00:c1: 06:05:2b:bc:9d:0b:8f:a1:f5:b5:64:bf:95:e1:d6: 99:67:a7:2d:2e:a0:f4:9b:46:4a:03:78:a4:44:4c: 74:ff:d3:71:29:05:58:3f:d8:12:61:00:75:0a:61: 06:65:97:4c:06:48:ca:1f:5b:dd:63:b3:22:df:f2: d4:49:20:74:ba:9a:58:9f:b3:75:a1:fe:20:b8:82: 33:c0:54:14:e0:96:f3:9d:50:75:55:e0:c3:85:94: 71:53:d7:49:42:4e:e4:7d:83:23:86:f4:51:9a:b0: 01:dd:f7:02:1c:f7:ed:ee:2c:e1:d5:25:5e:9f:33: ef:71:95:46:8c:e7:3b:44:76:64:03:ac:b6:91:88: 6f:7a:2c:b4:89:b2:0c:27:84:da:16:a7:e6:a8:27: bd:c9:18:1f:48:6c:95:89:20:28:d7:7b:65:12:ec: 3e:2a:9c:0d:74:1a:aa:45:04:7d:3f:e8:71:bc:3a: f3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:19:7D:5E:19:7A:92:7D:3A:46:27:E4:F5:E4:D1:95:7B:C8:02:DE X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6f:a3:68:34:c2:08:74:d7:de:f0:89:8e:26:7e:08:d2:74: 71:4c:75:3d:91:38:f8:9f:4d:9f:ab:27:4e:75:f7:fa:1f:fd: 83:1d:96:72:aa:e3:44:56:9f:52:01:15:56:e3:fc:8e:1a:40: 91:99:be:60:ab:99:3b:40:7b:9a:95:44:7c:11:71:fd:c3:e6: 8b:b5:d7:a2:74:34:f6:47:9e:64:c7:0c:30:72:a8:03:79:93: b9:33:06:97:af:1f:c5:76:04:12:bc:ea:ec:5c:a8:e5:da:bc: 09:c3:46:d4:21:14:0d:3b:55:90:07:ed:9d:b4:83:ee:30:3d: 7a:fa:49:44:61:9f:bb:24:a8:85:ad:02:be:4b:ac:d9:bf:ad: 8f:9b:c5:c8:3b:3f:8f:d7:3d:20:aa:d9:3e:2c:76:ab:47:03: 99:34:58:48:e2:4e:96:72:86:0c:96:b4:85:2b:d7:c3:63:78: 83:50:91:b0:96:5c:1b:23:70:27:83:5c:cc:9a:d8:18:7b:a0: ee:51:c6:77:be:ce:1e:8e:0e:13:98:8c:70:e5:e5:57:5c:5a: 99:33:77:03:bc:e9:90:b1:66:73:c4:21:56:14:51:d5:81:9b: 32:5b:50:d2:23:36:c4:7f:7d:20:1f:9a:ec:31:5a:ff:ae:b6: a5:77:50:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUESqVXvql9wH17bygGomrOayGaz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjA3MjkwMzMwMjlaFw0yNjA3MzAwNTU5MjlaMDMxMTAvBgNV BAMTKENFMTk3RDVFMTk3QTkyN0QzQTQ2MjdFNEY1RTREMTk1N0JDODAyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKQJTSVVWSJog7ueBTnbcuvOr gOd8UJmCFEy/LcMi/1J+fR6D2dDIjw/GV480WFUg4a+cptNhiUzaJuf1+PoZaUgk Zc6wj5QAwQYFK7ydC4+h9bVkv5Xh1plnpy0uoPSbRkoDeKRETHT/03EpBVg/2BJh AHUKYQZll0wGSMofW91jsyLf8tRJIHS6mlifs3Wh/iC4gjPAVBTglvOdUHVV4MOF lHFT10lCTuR9gyOG9FGasAHd9wIc9+3uLOHVJV6fM+9xlUaM5ztEdmQDrLaRiG96 LLSJsgwnhNoWp+aoJ73JGB9IbJWJICjXe2US7D4qnA10GqpFBH0/6HG8OvOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhl9Xhl6kn06Rifk9eTRlXvIAt4wHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1vo2g0wgh0197wiY4mfgjSdHFMdT2ROPif TZ+rJ0519/of/YMdlnKq40RWn1IBFVbj/I4aQJGZvmCrmTtAe5qVRHwRcf3D5ou1 16J0NPZHnmTHDDByqAN5k7kzBpevH8V2BBK86uxcqOXavAnDRtQhFA07VZAH7Z20 g+4wPXr6SURhn7skqIWtAr5LrNm/rY+bxcg7P4/XPSCq2T4sdqtHA5k0WEjiTpZy hgyWtIUr18NjeINQkbCWXBsjcCeDXMya2Bh7oO5Rxne+zh6ODhOYjHDl5VdcWpkz dwO86ZCxZnPEIVYUUdWBmzJbUNIjNsR/fSAfmuwxWv+utqV3UHs= -----END CERTIFICATE-----Generated at Wed Jul 29 12:25:59 2026 by rpki-client