$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: X6WGSaGi/smmG6dBgznAbJdS2fpdbpK0I3KMRl7qfvA= Subject key identifier: B2:1B:93:E8:A7:8D:44:3A:75:71:16:4D:8E:68:D4:E4:26:FE:57:53 Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 3D264940A9F5751DBEF1D848862EF6FF07E1D78C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 20:26:42 +0000 Manifest this update: Tue 28 Jul 2026 20:21:42 +0000 Manifest next update: Wed 29 Jul 2026 22:34:42 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) 2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: uBZX5uaBPJlr/1od0CeBypM67boSh/kZtplJqjipexA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:26:49:40:a9:f5:75:1d:be:f1:d8:48:86:2e:f6:ff:07:e1:d7:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Jul 28 20:21:42 2026 GMT Not After : Jul 29 22:34:42 2026 GMT Subject: CN=B21B93E8A78D443A7571164D8E68D4E426FE5753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:79:0c:8c:76:2b:a2:78:55:e2:73:62:96:55: 1c:91:f3:c3:a0:0e:31:41:c3:77:99:13:4e:29:c7: 06:9a:ef:66:91:98:22:d3:28:0a:05:ef:d4:d6:6a: c6:5e:47:1f:cc:a4:72:89:26:c2:00:49:29:15:8a: 9a:50:d7:cb:b6:30:2e:ff:c0:35:2a:47:9c:56:70: 31:84:33:b5:40:71:91:6e:6f:c5:de:2b:2c:55:21: 61:9a:b4:fa:9e:77:5e:8c:76:02:b5:d2:ac:57:2b: 64:a1:77:28:51:53:af:bc:6c:4d:c2:bc:2b:ca:e7: bb:22:7e:e0:03:ab:9b:c1:05:ac:76:1b:d7:d3:47: a0:99:96:0d:4c:5d:e7:a9:41:ad:41:49:39:0d:c0: 67:25:70:6c:85:f0:e6:de:05:24:56:95:74:23:78: 03:f9:67:df:4d:f6:4c:97:1f:a6:97:43:6c:70:68: e4:90:db:a8:a9:a1:01:91:c8:77:8a:b8:98:44:1f: 90:5d:d7:a5:da:f4:d2:99:f4:8e:85:b7:de:62:62: eb:4f:67:7f:58:da:b7:9b:9a:d6:07:db:73:91:6c: d8:4e:d6:92:a5:b2:57:52:ae:6d:c2:f6:0d:fe:9b: e4:f6:15:78:35:f1:f6:11:dd:14:bf:81:50:05:e2: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1B:93:E8:A7:8D:44:3A:75:71:16:4D:8E:68:D4:E4:26:FE:57:53 X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e0:d2:04:ec:8f:9a:6b:a6:b0:31:cf:db:e3:d2:85:96:6e: 89:83:0c:d3:03:7c:36:c2:07:33:ab:4d:af:0b:5e:0d:3f:b2: 4d:c5:f4:ff:6b:01:8e:a6:82:5a:bb:16:e2:59:97:34:e2:21: 35:ed:cb:98:4a:a9:71:c6:87:d6:86:87:c8:44:6d:14:c8:d9: 08:e9:87:23:b5:2f:14:e2:c3:51:d0:83:d9:0f:0c:28:c8:f6: 30:1d:25:b6:9d:02:65:51:a8:bc:e9:e9:35:1e:f8:2c:e1:9b: c6:5b:c8:42:ee:b7:d6:90:b1:70:00:47:5b:0a:56:c4:4e:2e: 32:47:de:8f:b0:33:a0:1a:1e:e5:79:dd:8b:33:de:b9:3e:8f: 98:14:c7:ee:41:68:3e:3b:bb:5e:c2:91:32:f9:00:e8:97:7a: 6b:b6:9d:a8:e3:db:6d:01:3d:fc:ee:5c:64:b4:84:4a:58:5f: a6:f8:fc:9e:6c:85:f4:48:79:0f:3a:a4:ae:6d:c5:47:f5:b8: 82:8c:52:f9:5d:10:0c:f0:48:24:12:0c:78:6c:4a:8a:cc:35: 83:81:62:d9:f2:ce:66:39:a5:2b:9b:45:61:4b:87:67:4e:12: 6e:00:0d:87:76:11:b0:5c:a8:e9:a6:27:4f:81:66:03:b2:f9: 5a:70:86:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSZJQKn1dR2+8dhIhi72/wfh14wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA3MjgyMDIxNDJaFw0yNjA3MjkyMjM0NDJaMDMxMTAvBgNV BAMTKEIyMUI5M0U4QTc4RDQ0M0E3NTcxMTY0RDhFNjhENEU0MjZGRTU3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeQyMdiuieFXic2KWVRyR88Og DjFBw3eZE04pxwaa72aRmCLTKAoF79TWasZeRx/MpHKJJsIASSkVippQ18u2MC7/ wDUqR5xWcDGEM7VAcZFub8XeKyxVIWGatPqed16MdgK10qxXK2ShdyhRU6+8bE3C vCvK57sifuADq5vBBax2G9fTR6CZlg1MXeepQa1BSTkNwGclcGyF8ObeBSRWlXQj eAP5Z99N9kyXH6aXQ2xwaOSQ26ipoQGRyHeKuJhEH5Bd16Xa9NKZ9I6Ft95iYutP Z39Y2rebmtYH23ORbNhO1pKlsldSrm3C9g3+m+T2FXg18fYR3RS/gVAF4icNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUshuT6KeNRDp1cRZNjmjU5Cb+V1MwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/g0gTsj5prprAxz9vj0oWWbomDDNMDfDbC BzOrTa8LXg0/sk3F9P9rAY6mglq7FuJZlzTiITXty5hKqXHGh9aGh8hEbRTI2Qjp hyO1LxTiw1HQg9kPDCjI9jAdJbadAmVRqLzp6TUe+Czhm8ZbyELut9aQsXAAR1sK VsROLjJH3o+wM6AaHuV53Ysz3rk+j5gUx+5BaD47u17CkTL5AOiXemu2najj220B PfzuXGS0hEpYX6b4/J5shfRIeQ86pK5txUf1uIKMUvldEAzwSCQSDHhsSorMNYOB YtnyzmY5pSubRWFLh2dOEm4ADYd2EbBcqOmmJ0+BZgOy+Vpwhvc= -----END CERTIFICATE-----Generated at Wed Jul 29 02:12:59 2026 by rpki-client