$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: Tz74n5iGSHb3bn09yVwvqySXIO4KxSW57iCh9Uvs7pQ= Subject key identifier: F6:C8:BB:36:71:3E:D1:A8:71:81:74:8F:8C:CB:C9:B5:3D:2B:99:DB Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 2F932A4694CE1E843F94D672B1EEB48B389AA6AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 01:16:37 +0000 Manifest this update: Fri 25 Sep 2026 01:11:37 +0000 Manifest next update: Sat 26 Sep 2026 03:09:37 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) 2: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: h2+RgKdXJWb34LTPaKAc37QLY177C9gYy6MLpoY9ey8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:93:2a:46:94:ce:1e:84:3f:94:d6:72:b1:ee:b4:8b:38:9a:a6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Sep 25 01:11:37 2026 GMT Not After : Sep 26 03:09:37 2026 GMT Subject: CN=F6C8BB36713ED1A87181748F8CCBC9B53D2B99DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:19:17:f8:56:b0:6c:da:8c:97:10:be:3b:ff: ef:4c:51:7a:78:2a:93:ef:e1:ff:26:92:8f:23:87: 64:5b:8e:eb:ca:3b:20:ef:dc:b3:9e:b2:7c:0a:c6: 54:d2:16:a1:ca:96:ec:80:11:08:5f:5a:e1:19:b0: ae:37:a1:53:f6:a9:48:a0:4b:53:a9:69:8c:09:17: 3a:4a:1f:69:9a:a8:29:0a:e9:aa:00:bf:a9:91:28: 04:df:89:80:1f:76:55:7b:be:dc:ce:90:31:e3:d3: c4:36:54:4f:5e:36:14:a0:56:d2:33:52:cd:f9:e7: 96:94:93:be:6f:e4:40:23:4b:23:6b:9a:89:2d:75: 3a:65:18:83:9a:df:2b:68:a2:ed:5a:18:5e:8b:c1: 49:d2:c8:72:ff:57:50:d0:98:77:b4:51:bd:fb:34: 46:d2:86:91:62:63:9c:61:24:23:08:35:cf:90:18: 4d:56:1d:50:38:19:af:8e:dc:b0:8a:ac:0b:73:f2: c5:b0:84:2d:08:e1:40:02:d8:77:16:4f:c9:ab:09: 86:1b:a6:7f:f3:bc:4d:eb:c5:37:19:f9:cc:b3:4a: 59:51:48:d6:dc:db:f6:f7:1b:e8:8e:4b:70:eb:3a: be:f6:47:40:44:e9:5d:36:13:e5:6c:a7:18:90:19: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C8:BB:36:71:3E:D1:A8:71:81:74:8F:8C:CB:C9:B5:3D:2B:99:DB X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:38:b8:f6:73:03:d4:f2:e7:7b:7f:a2:85:cb:12:fa:cf:ab: cd:1d:5c:4f:d6:de:6f:7b:b1:6b:b5:0f:4a:1b:12:76:40:f2: d0:e3:d9:66:03:0b:a5:97:a6:4a:68:42:30:c6:a1:4e:d9:f3: 85:85:26:12:ed:cc:2f:d9:f2:ea:de:a4:08:a0:8f:da:01:0b: 40:e1:21:7e:28:5b:da:ae:d4:58:a6:b1:35:5c:fc:48:c8:2c: ba:fc:ab:b0:56:e0:df:9f:2a:67:94:c8:c7:f0:ba:d1:4a:a2: db:19:54:e8:f0:9b:e9:b9:0d:42:07:a7:ff:bb:e1:38:45:e6: e6:e8:dc:2c:52:90:7c:7e:c9:a5:bd:66:b1:cf:7a:56:75:1a: 24:40:46:98:63:3f:a7:76:81:40:c8:c1:4e:33:91:ed:f7:b0: ae:d8:0a:a1:23:74:f6:7a:89:3d:1b:1b:64:eb:55:73:cc:30: 87:d3:b7:31:44:9f:6b:56:b8:cb:30:2f:cd:bc:94:09:8a:a3: 64:ee:a7:04:7a:6e:92:67:68:46:ee:d8:b0:62:7b:82:e8:da: 8e:db:a2:26:44:0c:54:c9:ed:5f:22:5e:5e:99:67:4a:c1:37: 64:66:bb:2c:ad:f9:d9:f7:a1:8c:36:5d:40:b5:4f:6b:b0:77: cc:2f:ce:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5MqRpTOHoQ/lNZyse60iziapq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjA5MjUwMTExMzdaFw0yNjA5MjYwMzA5MzdaMDMxMTAvBgNV BAMTKEY2QzhCQjM2NzEzRUQxQTg3MTgxNzQ4RjhDQ0JDOUI1M0QyQjk5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfGRf4VrBs2oyXEL47/+9MUXp4 KpPv4f8mko8jh2RbjuvKOyDv3LOesnwKxlTSFqHKluyAEQhfWuEZsK43oVP2qUig S1OpaYwJFzpKH2maqCkK6aoAv6mRKATfiYAfdlV7vtzOkDHj08Q2VE9eNhSgVtIz Us3555aUk75v5EAjSyNrmoktdTplGIOa3ytoou1aGF6LwUnSyHL/V1DQmHe0Ub37 NEbShpFiY5xhJCMINc+QGE1WHVA4Ga+O3LCKrAtz8sWwhC0I4UAC2HcWT8mrCYYb pn/zvE3rxTcZ+cyzSllRSNbc2/b3G+iOS3DrOr72R0BE6V02E+VspxiQGSv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9si7NnE+0ahxgXSPjMvJtT0rmdswHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk4uPZzA9Ty53t/ooXLEvrPq80dXE/W3m97 sWu1D0obEnZA8tDj2WYDC6WXpkpoQjDGoU7Z84WFJhLtzC/Z8urepAigj9oBC0Dh IX4oW9qu1FimsTVc/EjILLr8q7BW4N+fKmeUyMfwutFKotsZVOjwm+m5DUIHp/+7 4ThF5ubo3CxSkHx+yaW9ZrHPelZ1GiRARphjP6d2gUDIwU4zke33sK7YCqEjdPZ6 iT0bG2TrVXPMMIfTtzFEn2tWuMswL828lAmKo2TupwR6bpJnaEbu2LBie4Lo2o7b oiZEDFTJ7V8iXl6ZZ0rBN2Rmuyyt+dn3oYw2XUC1T2uwd8wvztw= -----END CERTIFICATE-----Generated at Fri Sep 25 04:01:30 2026 by rpki-client