$ rpki-client -vvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: WyXpKr7dGiBRx0YsuaWVz3JYeV4UIq+NSbTSjmQHO7M= Subject key identifier: D1:4F:C8:AA:52:95:FD:5C:3E:73:03:9D:39:3B:07:AF:7E:A3:EA:DC Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 563066636993F391249B8644B8AF58857B3A1F38 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 16:45:26 +0000 Manifest this update: Fri 12 Jun 2026 16:40:26 +0000 Manifest next update: Sat 13 Jun 2026 19:43:26 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) 2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: DfO+AK0ZS6Rd4/HEk+xKAz6EpV427CUY65+45jSoeFk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 19:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:30:66:63:69:93:f3:91:24:9b:86:44:b8:af:58:85:7b:3a:1f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Jun 12 16:40:26 2026 GMT Not After : Jun 13 19:43:26 2026 GMT Subject: CN=D14FC8AA5295FD5C3E73039D393B07AF7EA3EADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:99:1b:c4:de:9f:62:fe:cd:53:20:e3:fc: c4:04:52:1f:ab:c7:36:7b:db:08:f1:4b:50:4c:8d: 2b:8a:0f:eb:a3:4d:04:ac:e8:29:9f:36:49:10:41: 9e:21:e9:76:06:56:a8:13:62:a7:08:1c:7b:d1:78: 79:2d:68:0d:ef:9f:c5:46:37:b1:bb:41:82:cd:f2: 1e:28:d7:96:d2:ad:52:1f:1a:46:8d:eb:37:7b:46: 84:1e:4e:8a:9b:bf:c9:6f:b9:71:5b:71:8c:68:f9: 91:ab:bc:0b:d6:bb:4f:49:5e:8f:05:fa:43:c2:b0: aa:b6:3a:ef:66:4c:5f:6d:3b:18:e8:cb:c0:33:21: e3:dd:f4:ad:44:2d:1d:1c:76:e2:1b:7f:07:e8:76: 8b:28:88:46:99:c8:5f:3f:1d:b3:25:a6:62:74:f7: b3:fd:3d:14:d8:42:0b:f7:9b:b3:10:58:4c:18:0d: 9b:f1:3f:6d:7d:23:fe:02:b6:bb:e3:72:cb:2f:57: fc:85:81:49:99:a6:bb:a5:e7:51:b6:90:95:5e:bc: f8:56:60:71:8f:1f:1a:bf:2a:bf:60:07:25:13:72: 23:15:8b:b8:9b:79:d0:e6:95:02:95:a6:6c:0b:64: 73:33:83:26:98:4c:ea:e7:5a:e2:dd:17:77:56:34: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:C8:AA:52:95:FD:5C:3E:73:03:9D:39:3B:07:AF:7E:A3:EA:DC X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ba:ac:7f:9d:48:e7:f5:0c:0e:07:da:f0:74:03:1d:d9:16: f1:e6:58:69:69:e7:40:78:2a:dc:83:ca:33:ee:01:21:a5:b9: 33:c4:ee:8e:d7:2e:0b:bc:b1:1b:9a:f9:83:bf:7c:6a:d1:35: 92:6f:3a:2c:f4:92:b3:23:3b:cf:12:05:87:6a:be:f2:fc:55: 6d:b3:b5:c1:db:ba:2b:ad:f9:db:cf:54:ec:d4:26:b8:d4:a9: b3:60:cb:c3:66:53:64:dc:da:86:89:82:5b:c8:01:f2:6a:a3: 67:51:8c:ee:4e:c8:a7:82:88:19:e8:05:5b:61:e7:64:53:d3: 89:e8:3a:76:8c:9b:5e:81:cf:8a:71:b1:b1:c1:53:38:4a:2a: 35:b8:b2:5d:7d:7c:02:4d:1d:04:35:86:0b:48:b6:83:30:8e: f6:0a:6c:73:1e:1b:51:11:4b:27:5e:ea:b0:01:c6:46:e9:de: 07:2f:fd:46:5e:0a:91:a0:31:95:8b:f0:71:5d:c3:69:d9:32: e2:96:85:ab:0e:f4:4c:57:44:8c:b4:e1:6f:97:1d:1b:27:a1: f5:61:d2:f0:6e:94:1a:9b:08:03:2c:37:88:85:09:18:a3:31: 5f:9c:a8:5f:5e:50:48:c9:81:24:6e:0f:27:48:b0:4c:b7:5b: ad:04:62:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjBmY2mT85Ekm4ZEuK9YhXs6HzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA2MTIxNjQwMjZaFw0yNjA2MTMxOTQzMjZaMDMxMTAvBgNV BAMTKEQxNEZDOEFBNTI5NUZENUMzRTczMDM5RDM5M0IwN0FGN0VBM0VBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q5kbxN6fYv7NUyDj/MQEUh+r xzZ72wjxS1BMjSuKD+ujTQSs6CmfNkkQQZ4h6XYGVqgTYqcIHHvReHktaA3vn8VG N7G7QYLN8h4o15bSrVIfGkaN6zd7RoQeToqbv8lvuXFbcYxo+ZGrvAvWu09JXo8F +kPCsKq2Ou9mTF9tOxjoy8AzIePd9K1ELR0cduIbfwfodosoiEaZyF8/HbMlpmJ0 97P9PRTYQgv3m7MQWEwYDZvxP219I/4CtrvjcssvV/yFgUmZprul51G2kJVevPhW YHGPHxq/Kr9gByUTciMVi7ibedDmlQKVpmwLZHMzgyaYTOrnWuLdF3dWNKDVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0U/IqlKV/Vw+cwOdOTsHr36j6twwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO6rH+dSOf1DA4H2vB0Ax3ZFvHmWGlp50B4 KtyDyjPuASGluTPE7o7XLgu8sRua+YO/fGrRNZJvOiz0krMjO88SBYdqvvL8VW2z tcHbuiut+dvPVOzUJrjUqbNgy8NmU2Tc2oaJglvIAfJqo2dRjO5OyKeCiBnoBVth 52RT04noOnaMm16Bz4pxsbHBUzhKKjW4sl19fAJNHQQ1hgtItoMwjvYKbHMeG1ER Syde6rABxkbp3gcv/UZeCpGgMZWL8HFdw2nZMuKWhasO9ExXRIy04W+XHRsnofVh 0vBulBqbCAMsN4iFCRijMV+cqF9eUEjJgSRuDydIsEy3W60EYi8= -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:17 2026 by rpki-client