$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft File: BF072074B801AFE1292270FB7A3E090A276EB893.mft (raw, json) Hash identifier: 1GDXWbrNzIW4o/rvAKlWUBZgEeXBd6Je11MUz2xYano= Subject key identifier: A9:33:B6:25:2F:92:70:E6:94:59:2B:34:8F:C4:C6:A7:6E:F2:E2:84 Authority key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 Certificate issuer: /CN=BF072074B801AFE1292270FB7A3E090A276EB893 Certificate serial: 02663B60DD90AC31641CBEAA23CFA42C74B0F80B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 23:14:48 +0000 Manifest this update: Wed 23 Sep 2026 23:09:48 +0000 Manifest next update: Thu 24 Sep 2026 23:45:48 +0000 Files and hashes: 1: BF072074B801AFE1292270FB7A3E090A276EB893.crl (hash: kgyu49i/198zw62MYl0gOW6mC7Dw1a7k/NFr//CPv8w=) 2: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: BKt7x+HSwXt0hFZm36Nu9CrkQ0Drly/dgK6bERbk3xk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:66:3b:60:dd:90:ac:31:64:1c:be:aa:23:cf:a4:2c:74:b0:f8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF072074B801AFE1292270FB7A3E090A276EB893 Validity Not Before: Sep 23 23:09:48 2026 GMT Not After : Sep 24 23:45:48 2026 GMT Subject: CN=A933B6252F9270E694592B348FC4C6A76EF2E284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:88:15:8e:99:08:b3:0a:10:93:47:9a:92: 58:7a:2d:49:54:4b:eb:03:ef:32:36:43:17:52:81: 85:e2:dc:09:67:fc:d1:c1:9c:9c:a3:d6:0e:8f:1f: 11:b9:9c:f6:57:02:fe:a9:80:8f:90:7a:d8:77:74: b1:3f:f7:7d:65:65:d9:eb:55:04:32:c6:0b:20:8c: 47:cc:1f:08:2e:9f:91:66:f3:24:8e:b8:fc:81:c4: 4b:dd:cc:97:b6:1f:92:12:86:e1:8d:1c:3a:5d:3d: 4d:c4:45:1c:26:a2:cd:71:be:62:40:01:35:22:ec: 7a:41:ea:69:3e:32:dc:a1:3c:2c:f6:cc:00:33:c4: 75:c5:b1:f6:01:61:08:7b:e7:aa:ff:3e:da:2a:4c: 76:5c:3c:a3:0c:4b:e2:15:2b:36:23:bf:18:c8:37: 22:15:bc:6e:60:38:31:0a:6d:00:b4:10:7b:06:06: e5:26:38:fc:be:ff:2e:26:00:96:9d:a5:1d:2e:88: d8:c4:6e:03:39:ab:ad:8f:52:8f:4c:20:5f:05:be: 01:d9:84:d0:66:94:ba:e9:65:d3:b4:bd:3c:2b:36: 17:ae:61:5a:96:3d:e9:e7:9f:9f:f5:69:50:6c:a9: fe:db:79:dd:e0:35:dc:37:0e:47:67:d4:50:f9:90: 3c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:33:B6:25:2F:92:70:E6:94:59:2B:34:8F:C4:C6:A7:6E:F2:E2:84 X509v3 Authority Key Identifier: keyid:BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:0a:27:2c:9f:65:65:9c:d4:c3:59:b5:84:a0:2f:d4:7f:45: 94:5b:40:2b:8d:20:1b:76:41:66:c4:d3:47:8f:30:c4:cb:8d: 17:3c:6f:ca:50:9c:07:ad:8c:5f:3a:9d:78:f1:3d:ca:54:de: 8b:7f:d9:e9:90:d6:f2:35:5a:6c:e0:63:10:e7:c4:ab:ee:72: 3e:c1:30:d1:bd:d6:a7:af:98:ba:15:10:62:04:a0:19:e3:3b: cc:ee:37:dc:ba:88:77:8b:c2:4c:86:e6:d2:29:d7:90:5a:20: 02:b0:83:18:40:bd:b4:32:58:85:fd:88:99:e7:26:6c:71:3b: 75:4a:fd:9c:ac:a5:f1:ac:56:30:64:c8:27:71:b4:eb:5d:ba: 2e:a9:74:2c:6b:9e:ba:0b:ec:e6:ed:1c:f5:c5:43:23:a5:8d: e1:91:43:8c:f1:e9:86:35:2c:5b:d5:07:b7:41:6b:6a:55:4f: 6e:cb:71:a1:a1:e4:d7:47:74:16:31:cf:ec:a9:03:a8:96:c4: c6:72:8f:37:24:37:26:09:c5:42:28:b0:6b:26:15:ee:04:51: ed:ed:9b:b8:34:6f:c9:40:78:52:53:72:6a:36:4d:cd:13:af: cc:2c:4b:b4:d6:cf:fa:22:13:b3:21:25:95:e3:94:60:06:d7: 92:6a:c2:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmY7YN2QrDFkHL6qI8+kLHSw+AswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEy NzZFQjg5MzAeFw0yNjA5MjMyMzA5NDhaFw0yNjA5MjQyMzQ1NDhaMDMxMTAvBgNV BAMTKEE5MzNCNjI1MkY5MjcwRTY5NDU5MkIzNDhGQzRDNkE3NkVGMkUyODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoogVjpkIswoQk0eaklh6LUlU S+sD7zI2QxdSgYXi3Aln/NHBnJyj1g6PHxG5nPZXAv6pgI+Qeth3dLE/931lZdnr VQQyxgsgjEfMHwgun5Fm8ySOuPyBxEvdzJe2H5IShuGNHDpdPU3ERRwmos1xvmJA ATUi7HpB6mk+MtyhPCz2zAAzxHXFsfYBYQh756r/PtoqTHZcPKMMS+IVKzYjvxjI NyIVvG5gODEKbQC0EHsGBuUmOPy+/y4mAJadpR0uiNjEbgM5q62PUo9MIF8FvgHZ hNBmlLrpZdO0vTwrNheuYVqWPennn5/1aVBsqf7bed3gNdw3Dkdn1FD5kDw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqTO2JS+ScOaUWSs0j8TGp27y4oQwHwYDVR0j BBgwFoAUvwcgdLgBr+EpInD7ej4JCiduuJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNkN2QyOWItZGQxYy00MWRkLWJlZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRC ODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEyNzZFQjg5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjA3MjA3NEI4MDFBRkUxMjkyMjcwRkI3QTNFMDkwQTI3NkVC ODkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5 MEEyNzZFQjg5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4KJyyfZWWc1MNZtYSgL9R/RZRbQCuNIBt2 QWbE00ePMMTLjRc8b8pQnAetjF86nXjxPcpU3ot/2emQ1vI1WmzgYxDnxKvucj7B MNG91qevmLoVEGIEoBnjO8zuN9y6iHeLwkyG5tIp15BaIAKwgxhAvbQyWIX9iJnn JmxxO3VK/ZyspfGsVjBkyCdxtOtdui6pdCxrnroL7ObtHPXFQyOljeGRQ4zx6YY1 LFvVB7dBa2pVT27LcaGh5NdHdBYxz+ypA6iWxMZyjzckNyYJxUIosGsmFe4EUe3t m7g0b8lAeFJTcmo2Tc0Tr8wsS7TWz/oiE7MhJZXjlGAG15Jqwg4= -----END CERTIFICATE-----Generated at Thu Sep 24 11:11:33 2026 by rpki-client