$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: PLExnkepx+SGyFGZH/WpeE6e7DurJ06qB7UYpcxsvCQ= Subject key identifier: AB:A3:02:6B:F8:4E:E2:DB:11:EF:C3:0E:0B:7E:03:AA:06:EB:B7:84 Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 09015F4C24EF53CA9F19C29AC7491E9D00FF90CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: 0109 Signing time: Sat 14 Nov 2026 09:05:49 +0000 Manifest this update: Sat 14 Nov 2026 09:00:49 +0000 Manifest next update: Sun 15 Nov 2026 11:29:49 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32342d3234203d3e20313533313237.roa (hash: DNx0QLWpr1YneqLawB/18FpPinDAJ9roVaakfpCQ+z0=) 2: 3136302e3138372e3135312e302f32342d3234203d3e20313533313237.roa (hash: PY2cdm4cDThhK3Nzh3f/7vmBzsiNx5GQah9qgEoI//k=) 3: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) 4: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: bGY3YxVNvay3ju9LTQzk8L8RXBxXzmFV/Hw2GFFRtpE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 11:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:01:5f:4c:24:ef:53:ca:9f:19:c2:9a:c7:49:1e:9d:00:ff:90:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Nov 14 09:00:49 2026 GMT Not After : Nov 15 11:29:49 2026 GMT Subject: CN=ABA3026BF84EE2DB11EFC30E0B7E03AA06EBB784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:40:79:32:75:7a:46:f2:cb:c9:72:42:c4:c0: 9a:1b:1f:06:61:ed:82:03:60:31:41:48:bf:1e:f5: 27:4c:23:7d:e8:91:e0:cc:4c:fb:bb:98:a3:d8:c6: 5e:d8:41:fa:1d:00:9b:db:df:72:1c:e4:38:b2:21: 5f:ba:bc:e1:7f:05:cd:2f:1c:9f:9a:2c:51:07:86: a3:13:5a:22:6f:61:e6:dd:59:ad:44:2d:1f:b1:bb: 92:30:09:21:54:62:46:87:87:ea:8c:4f:d9:36:d0: b7:09:04:ee:5c:b7:e5:7b:11:0a:9a:5a:a1:c8:34: f5:77:ba:5c:b6:b7:f7:33:ea:64:46:37:7c:42:de: 0b:ff:20:28:6a:cb:ca:5b:95:56:3d:2f:b7:94:13: 58:71:6b:f9:b4:0c:ec:3c:84:8d:4f:37:c4:38:a8: e9:41:02:82:ee:c6:f6:2d:dc:d5:b5:2a:a2:8a:54: 76:19:7b:e5:98:50:9f:14:5a:a1:e7:ce:7f:02:e9: b4:ae:b5:fb:98:43:dc:06:b2:02:14:69:80:86:07: 6c:a2:1e:6b:f6:11:e0:66:73:11:c8:02:2a:80:8e: 24:79:a4:4a:1a:ca:93:40:64:d6:1e:aa:b9:5d:9a: 41:2e:5d:8d:4d:94:77:fc:92:97:44:34:27:1e:e1: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A3:02:6B:F8:4E:E2:DB:11:EF:C3:0E:0B:7E:03:AA:06:EB:B7:84 X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:84:f8:3f:60:af:23:62:5c:ca:d1:84:c6:c7:0f:e8:13:fe: 2c:15:aa:32:de:9e:ad:f3:e9:99:67:98:f9:1f:a8:18:ce:5f: 4d:2b:c8:e2:bf:db:c3:00:15:06:30:af:5a:50:bc:20:90:c7: 03:f7:8f:1d:d5:1a:16:e8:76:a1:8b:3f:20:cb:9e:09:7c:68: 00:b8:5f:0e:d9:c6:21:e5:38:37:0d:e8:52:a7:cd:77:22:bf: db:c2:e4:d9:fd:1b:38:39:cc:05:55:db:08:03:a9:b9:e5:7a: 03:cd:ed:41:cf:e4:e2:fc:9b:68:de:cc:5e:c1:e7:19:de:48: c3:00:3d:94:0d:3e:dd:c5:5f:3a:94:4b:6d:fe:9b:0a:c7:d1: df:a8:5e:22:1e:6a:a0:47:b4:d5:6a:ca:cf:bb:5d:83:6c:d7: 7c:d4:33:b2:98:2e:0a:60:14:1b:93:b5:30:a5:0c:63:0e:ec: af:f3:21:09:92:7a:4a:0f:d3:76:5d:b5:7e:1f:be:c7:8f:c8: 0b:af:4b:df:4b:1b:95:e2:da:bb:fc:60:b8:53:df:87:70:b9: 57:43:e9:a1:43:d3:fa:d1:02:91:30:d2:c0:59:a4:6c:70:f6: c9:48:3a:89:be:e8:33:4d:82:48:2b:d2:5e:1b:23:d9:7b:1b: 4b:6e:ee:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCQFfTCTvU8qfGcKax0kenQD/kMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjExMTQwOTAwNDlaFw0yNjExMTUxMTI5NDlaMDMxMTAvBgNV BAMTKEFCQTMwMjZCRjg0RUUyREIxMUVGQzMwRTBCN0UwM0FBMDZFQkI3ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnQHkydXpG8svJckLEwJobHwZh 7YIDYDFBSL8e9SdMI33okeDMTPu7mKPYxl7YQfodAJvb33Ic5DiyIV+6vOF/Bc0v HJ+aLFEHhqMTWiJvYebdWa1ELR+xu5IwCSFUYkaHh+qMT9k20LcJBO5ct+V7EQqa WqHINPV3uly2t/cz6mRGN3xC3gv/IChqy8pblVY9L7eUE1hxa/m0DOw8hI1PN8Q4 qOlBAoLuxvYt3NW1KqKKVHYZe+WYUJ8UWqHnzn8C6bSutfuYQ9wGsgIUaYCGB2yi Hmv2EeBmcxHIAiqAjiR5pEoaypNAZNYeqrldmkEuXY1NlHf8kpdENCce4aShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6MCa/hO4tsR78MOC34Dqgbrt4QwHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaE+D9gryNiXMrRhMbHD+gT/iwVqjLenq3z 6ZlnmPkfqBjOX00ryOK/28MAFQYwr1pQvCCQxwP3jx3VGhbodqGLPyDLngl8aAC4 Xw7ZxiHlODcN6FKnzXciv9vC5Nn9Gzg5zAVV2wgDqbnlegPN7UHP5OL8m2jezF7B 5xneSMMAPZQNPt3FXzqUS23+mwrH0d+oXiIeaqBHtNVqys+7XYNs13zUM7KYLgpg FBuTtTClDGMO7K/zIQmSekoP03ZdtX4fvsePyAuvS99LG5Xi2rv8YLhT34dwuVdD 6aFD0/rRApEw0sBZpGxw9slIOom+6DNNgkgr0l4bI9l7G0tu7rE= -----END CERTIFICATE-----Generated at Sun Nov 15 00:24:25 2026 by rpki-client