$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: b6IQLDUu492VP8MmAFpY0MSRrtBcaB03+VwV69F1ms8= Subject key identifier: 40:60:53:39:03:DC:72:C4:4F:97:D5:2F:17:74:07:A5:63:3A:8F:69 Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 62C0C7155768BFFFC4DB10915185F6B21AC86F29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: BF Signing time: Wed 23 Sep 2026 08:52:12 +0000 Manifest this update: Wed 23 Sep 2026 08:47:12 +0000 Manifest next update: Thu 24 Sep 2026 09:38:12 +0000 Files and hashes: 1: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: RBWQqRjV/Lqb65F5UepbUKniHkmv+2y/+157saa97uU=) 2: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) 3: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c0:c7:15:57:68:bf:ff:c4:db:10:91:51:85:f6:b2:1a:c8:6f:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Sep 23 08:47:12 2026 GMT Not After : Sep 24 09:38:12 2026 GMT Subject: CN=4060533903DC72C44F97D52F177407A5633A8F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:49:1f:6e:cc:ae:cf:51:d2:80:00:d8:aa:24: f7:ad:34:86:c5:cc:af:c4:38:96:25:74:d8:6f:b5: eb:ba:b1:73:e5:bc:71:44:79:91:2a:fa:93:8b:14: 87:15:a4:a6:34:c2:07:f1:0d:92:10:9f:9e:18:c6: fa:5c:aa:58:0d:c1:88:c8:9b:8e:62:b4:1e:5b:6e: ed:e1:01:be:f3:b6:1a:bb:04:d5:0d:9c:6b:35:91: 42:a5:45:21:dd:50:b8:19:b4:69:c3:71:96:03:74: 58:b9:dd:b0:d0:a5:2c:44:23:59:79:64:b6:93:e8: 8f:41:83:da:12:25:04:80:0b:6c:57:dc:45:ee:8d: 31:4c:07:ff:90:0d:63:c1:9e:aa:2a:c7:bb:b1:c6: 0b:6d:cb:3c:55:22:72:e2:01:f0:cf:1b:90:74:b4: bf:d9:58:8e:44:47:22:58:c0:ff:d6:37:82:b3:2f: db:6c:00:7c:7d:a1:20:1b:59:14:d5:e1:54:43:07: 7d:14:2a:86:0f:44:83:9a:1d:3a:5b:5d:1b:5a:21: 16:b9:eb:a0:e8:b6:96:61:60:d6:ed:b8:a3:61:5e: 60:8d:95:1d:68:e6:65:57:b3:27:9a:4a:bf:a5:c3: 19:e1:aa:39:1e:bd:20:59:f3:e5:94:f2:2c:c4:c5: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:60:53:39:03:DC:72:C4:4F:97:D5:2F:17:74:07:A5:63:3A:8F:69 X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:02:6c:f6:ca:b2:b6:15:6e:eb:d3:b1:58:81:f3:e0:c4:1a: b2:fa:6e:8a:b6:20:15:bc:12:a1:9d:95:8c:cf:27:e0:46:84: 77:44:b0:91:fb:bd:45:52:fb:19:fd:0f:a3:11:8c:60:4c:53: e7:2c:f3:74:2d:85:9f:8c:8b:ee:9a:67:2d:c3:94:a8:a5:07: 5b:2c:4c:77:97:ca:c7:5e:d2:74:31:87:88:f5:c6:f1:19:7d: 1c:f4:80:d3:10:46:47:39:5d:1d:35:37:0b:7d:08:a4:ec:72: 80:97:05:bd:cc:2c:31:15:0a:fe:c5:97:b2:6e:ac:32:1e:5c: 03:99:d8:85:ba:9a:86:3c:c4:38:1c:64:2a:e6:70:c2:b1:ea: 70:04:7e:6a:e2:c2:08:6e:6f:3c:e6:08:fa:58:53:37:2c:d4: e4:89:7b:7b:e9:a9:01:d6:61:db:9f:35:ec:e9:a3:5d:5a:cd: 06:81:3c:3b:fa:7f:5e:73:95:8d:d9:37:02:5b:5c:74:b8:7d: b4:f0:bc:a4:ff:6e:17:d8:34:9b:bd:8d:db:b3:58:14:e2:9e: 03:74:1e:6f:77:c6:9e:68:55:17:e6:b6:0b:4f:be:14:5f:9e: cc:01:ae:19:9d:1e:92:dc:cc:6b:05:17:eb:43:c5:0b:b6:a3: 1a:f3:e5:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsDHFVdov//E2xCRUYX2shrIbykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjA5MjMwODQ3MTJaFw0yNjA5MjQwOTM4MTJaMDMxMTAvBgNV BAMTKDQwNjA1MzM5MDNEQzcyQzQ0Rjk3RDUyRjE3NzQwN0E1NjMzQThGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiSR9uzK7PUdKAANiqJPetNIbF zK/EOJYldNhvteu6sXPlvHFEeZEq+pOLFIcVpKY0wgfxDZIQn54YxvpcqlgNwYjI m45itB5bbu3hAb7zthq7BNUNnGs1kUKlRSHdULgZtGnDcZYDdFi53bDQpSxEI1l5 ZLaT6I9Bg9oSJQSAC2xX3EXujTFMB/+QDWPBnqoqx7uxxgttyzxVInLiAfDPG5B0 tL/ZWI5ERyJYwP/WN4KzL9tsAHx9oSAbWRTV4VRDB30UKoYPRIOaHTpbXRtaIRa5 66DotpZhYNbtuKNhXmCNlR1o5mVXsyeaSr+lwxnhqjkevSBZ8+WU8izExWxrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGBTOQPccsRPl9UvF3QHpWM6j2kwHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcCbPbKsrYVbuvTsViB8+DEGrL6boq2IBW8 EqGdlYzPJ+BGhHdEsJH7vUVS+xn9D6MRjGBMU+cs83QthZ+Mi+6aZy3DlKilB1ss THeXysde0nQxh4j1xvEZfRz0gNMQRkc5XR01Nwt9CKTscoCXBb3MLDEVCv7Fl7Ju rDIeXAOZ2IW6moY8xDgcZCrmcMKx6nAEfmriwghubzzmCPpYUzcs1OSJe3vpqQHW YdufNezpo11azQaBPDv6f15zlY3ZNwJbXHS4fbTwvKT/bhfYNJu9jduzWBTingN0 Hm93xp5oVRfmtgtPvhRfnswBrhmdHpLczGsFF+tDxQu2oxrz5Y0= -----END CERTIFICATE-----Generated at Wed Sep 23 23:43:09 2026 by rpki-client