$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: YgPIwXK5iH6GqimOR9DE6/Dc2Iza8KbdWv+SKPb0+hM= Subject key identifier: 97:E9:48:D6:00:36:1B:75:74:5C:E0:6D:63:86:B0:28:D2:51:D1:EB Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 763406BDDE96B50BFB07E1A176559D77DD5A5722 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 21:42:24 +0000 Manifest this update: Thu 24 Sep 2026 21:37:24 +0000 Manifest next update: Fri 25 Sep 2026 22:57:24 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) 2: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: DtqUpscBiXIy3mIOBH587zbpWh+HIVUreKiEsmiTKFQ=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:34:06:bd:de:96:b5:0b:fb:07:e1:a1:76:55:9d:77:dd:5a:57:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Sep 24 21:37:24 2026 GMT Not After : Sep 25 22:57:24 2026 GMT Subject: CN=97E948D600361B75745CE06D6386B028D251D1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:7a:11:4d:8f:94:9b:cb:0d:46:b8:d9:fc: c1:fe:ee:87:29:0f:68:54:6b:97:63:41:9e:85:cf: 7a:6c:14:1e:11:c3:56:c4:09:9f:43:91:49:54:28: 79:52:65:6a:d4:e4:d8:b4:cd:df:b0:26:f5:75:6c: c6:e9:28:ec:a5:5d:9a:b6:e2:fe:1f:91:c7:37:cc: 24:e3:1a:f6:38:73:a2:6f:6f:45:23:75:ed:93:6d: 58:38:28:d9:62:c2:ff:3c:bb:80:5f:84:b4:86:81: 7b:84:12:78:5c:0b:27:f7:52:84:63:89:43:de:7b: a3:52:c8:04:1b:e9:95:2d:68:ae:05:90:19:7f:15: 8b:ef:bb:d5:58:e3:f1:ab:75:fe:cd:a1:71:0c:e2: de:49:43:e3:ae:dd:bc:62:aa:96:33:00:3f:ea:68: 0a:7e:a9:32:96:94:96:89:b6:f6:db:d3:c2:b7:4a: fc:22:72:85:cb:fd:ba:c2:f5:94:fa:35:64:ac:13: b9:4f:24:fa:ad:67:40:91:18:f4:ea:51:48:82:61: d0:0e:b8:03:ae:ac:83:44:e1:11:b1:ca:27:a9:52: 69:22:d1:6a:fd:96:c7:3b:ff:03:75:89:d8:16:b8: d4:a2:81:b6:62:57:47:46:d0:68:2d:87:6c:97:4f: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E9:48:D6:00:36:1B:75:74:5C:E0:6D:63:86:B0:28:D2:51:D1:EB X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b3:1b:1e:7a:ae:ef:dc:5b:0b:7e:5b:06:2b:05:b2:00:c7: 7c:f1:d1:31:13:dd:13:d7:dc:9a:15:bc:d8:06:88:7a:95:db: 90:e7:ad:21:2b:be:01:98:fc:47:2a:0c:a9:df:eb:ad:9f:9c: 37:d2:63:88:5e:09:2c:1c:89:e8:35:ae:96:51:09:9a:91:e2: d2:94:f6:b6:1b:e8:8c:29:f3:1b:7c:12:b5:42:a2:81:f6:1d: 22:40:ad:0e:db:40:a7:42:ec:4c:a5:d0:aa:c1:24:17:0f:b2: c3:e1:8c:50:9c:8c:e3:5c:b3:af:5e:c6:71:20:3d:61:95:85: 03:15:4a:39:5a:0c:3c:31:53:fd:ae:80:6b:ad:4c:a0:33:56: c6:16:83:e4:96:18:42:3f:28:cf:cb:18:24:7b:15:2b:fd:25: 23:5d:f2:0f:f1:7b:a3:db:58:5a:59:dd:db:f4:18:be:70:29: fd:96:5e:6a:dd:3e:7f:dc:ed:c4:db:3e:0e:d0:0b:be:80:ec: d2:c0:5b:60:e5:b2:d9:af:a8:25:89:b7:e0:7a:f4:55:4a:3b: a6:94:c0:b3:ca:51:fe:79:eb:61:01:e8:8a:fa:fd:45:79:4c: dc:2d:45:5b:02:eb:38:0c:f4:4b:b8:cb:53:89:e9:57:43:61: 90:14:3d:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjQGvd6WtQv7B+GhdlWdd91aVyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA5MjQyMTM3MjRaFw0yNjA5MjUyMjU3MjRaMDMxMTAvBgNV BAMTKDk3RTk0OEQ2MDAzNjFCNzU3NDVDRTA2RDYzODZCMDI4RDI1MUQxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3enoRTY+Um8sNRrjZ/MH+7ocp D2hUa5djQZ6Fz3psFB4Rw1bECZ9DkUlUKHlSZWrU5Ni0zd+wJvV1bMbpKOylXZq2 4v4fkcc3zCTjGvY4c6Jvb0Ujde2TbVg4KNliwv88u4BfhLSGgXuEEnhcCyf3UoRj iUPee6NSyAQb6ZUtaK4FkBl/FYvvu9VY4/Grdf7NoXEM4t5JQ+Ou3bxiqpYzAD/q aAp+qTKWlJaJtvbb08K3SvwicoXL/brC9ZT6NWSsE7lPJPqtZ0CRGPTqUUiCYdAO uAOurINE4RGxyiepUmki0Wr9lsc7/wN1idgWuNSigbZiV0dG0Ggth2yXT4bFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl+lI1gA2G3V0XOBtY4awKNJR0eswHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+zGx56ru/cWwt+WwYrBbIAx3zx0TET3RPX 3JoVvNgGiHqV25DnrSErvgGY/EcqDKnf662fnDfSY4heCSwcieg1rpZRCZqR4tKU 9rYb6Iwp8xt8ErVCooH2HSJArQ7bQKdC7Eyl0KrBJBcPssPhjFCcjONcs69exnEg PWGVhQMVSjlaDDwxU/2ugGutTKAzVsYWg+SWGEI/KM/LGCR7FSv9JSNd8g/xe6Pb WFpZ3dv0GL5wKf2WXmrdPn/c7cTbPg7QC76A7NLAW2DlstmvqCWJt+B69FVKO6aU wLPKUf5562EB6Ir6/UV5TNwtRVsC6zgM9Eu4y1OJ6VdDYZAUPV4= -----END CERTIFICATE-----Generated at Fri Sep 25 01:17:50 2026 by rpki-client