$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: zHIOsl4k8IJygHrLBAi6dIsQUCUkNKygAYdAOUo9J0Y= Subject key identifier: 2F:72:30:DF:A6:9B:2D:EF:75:79:87:9E:2E:5D:46:1D:CA:5F:04:7A Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 64EAE6219208911D34902043FE4541014244A09E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:36:49 +0000 Manifest this update: Wed 23 Sep 2026 12:31:49 +0000 Manifest next update: Thu 24 Sep 2026 14:37:49 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) 2: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: tuxDIdVCP9RNtLcrATh8wm55EYqsHLQiSg9PpbE/yEQ=) 3: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 14:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ea:e6:21:92:08:91:1d:34:90:20:43:fe:45:41:01:42:44:a0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: Sep 23 12:31:49 2026 GMT Not After : Sep 24 14:37:49 2026 GMT Subject: CN=2F7230DFA69B2DEF7579879E2E5D461DCA5F047A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:37:35:08:5b:a8:18:82:14:36:95:f4:c9: 8b:2b:66:b8:28:f3:52:60:0c:52:18:f8:c5:54:a3: be:56:b6:dc:a9:af:f3:ab:f5:17:27:a5:51:e1:25: 3b:36:9f:44:bc:d1:31:67:0c:81:7e:4e:e9:29:b8: 3e:a8:7e:5d:77:5c:cd:21:05:ed:54:3a:6f:9b:80: c0:d9:1e:12:22:e0:13:09:fe:11:9b:11:ef:f1:7b: 76:eb:d1:9d:5c:6f:b4:a0:05:5a:3f:4f:a3:33:ef: 9c:c5:7a:5b:c9:a4:c3:9f:49:99:00:8a:23:e1:21: 26:8f:27:ad:35:6e:f7:4a:dc:61:7f:49:37:ab:fb: 95:c9:bc:7e:45:aa:aa:52:af:47:1b:a4:32:5a:7c: 09:5e:4f:ee:94:0b:62:4c:ef:96:08:54:dd:11:9f: be:3c:a0:39:1c:89:bc:68:66:20:0c:39:79:c8:02: 0e:8b:bd:27:a4:92:da:8c:6d:13:e4:9c:07:e1:8b: c9:96:82:da:bc:7a:87:d9:de:8f:5a:cd:9a:40:00: b5:0a:a5:5e:f5:11:ff:13:54:7b:00:bd:50:eb:ec: f6:65:ab:ae:75:3c:ed:d7:9d:94:6f:ee:ac:ec:f3: a2:e3:c8:45:a7:52:d6:84:7e:ec:09:85:02:7d:5b: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:72:30:DF:A6:9B:2D:EF:75:79:87:9E:2E:5D:46:1D:CA:5F:04:7A X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:cc:81:1b:28:23:f0:4d:3f:c6:1b:11:a2:00:49:48:3b:ab: d4:d2:1d:f5:22:e4:a6:30:50:72:80:6a:43:39:ad:c3:ef:e7: 5e:8c:5b:6d:41:60:4b:2c:73:5b:c3:20:01:2b:b5:66:65:14: b7:38:b0:b3:7d:21:53:3c:80:98:f0:9b:59:0b:f1:8d:76:5a: 9b:ce:68:f7:51:c3:dd:05:1d:35:7e:58:cb:7c:b4:6e:6e:da: 12:59:55:6c:ed:a0:f7:a2:22:1f:14:fe:f7:27:59:34:a2:07: 84:74:b1:04:2c:b3:ea:52:cb:fe:bb:46:a5:d6:b0:cd:98:e0: dd:df:d1:16:c1:dc:dd:bd:24:f6:f4:64:03:1b:86:d9:2f:42: fd:10:97:8b:f6:1e:0b:e5:f0:d4:d7:5f:7d:dd:f2:28:8c:68: 23:71:26:4e:53:1f:9a:9d:a3:59:70:16:d7:cb:a4:9e:a1:1f: ab:d5:42:6a:f6:80:b4:cd:fa:86:2c:e7:f9:9b:09:c7:c5:3f: b7:59:bc:26:2e:6b:4f:49:b1:02:01:1d:0d:d9:2d:bd:44:0d: 90:f2:0c:25:44:25:6b:96:1b:ee:fc:b3:80:03:43:82:02:db: 44:dc:21:05:45:65:00:4c:47:97:2c:b8:fb:d1:70:a2:b8:6b: b6:7d:3d:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZOrmIZIIkR00kCBD/kVBAUJEoJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjA5MjMxMjMxNDlaFw0yNjA5MjQxNDM3NDlaMDMxMTAvBgNV BAMTKDJGNzIzMERGQTY5QjJERUY3NTc5ODc5RTJFNUQ0NjFEQ0E1RjA0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2wDc1CFuoGIIUNpX0yYsrZrgo 81JgDFIY+MVUo75Wttypr/Or9RcnpVHhJTs2n0S80TFnDIF+TukpuD6ofl13XM0h Be1UOm+bgMDZHhIi4BMJ/hGbEe/xe3br0Z1cb7SgBVo/T6Mz75zFelvJpMOfSZkA iiPhISaPJ601bvdK3GF/STer+5XJvH5FqqpSr0cbpDJafAleT+6UC2JM75YIVN0R n748oDkcibxoZiAMOXnIAg6LvSekktqMbRPknAfhi8mWgtq8eofZ3o9azZpAALUK pV71Ef8TVHsAvVDr7PZlq651PO3XnZRv7qzs86LjyEWnUtaEfuwJhQJ9W/5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL3Iw36abLe91eYeeLl1GHcpfBHowHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/MgRsoI/BNP8YbEaIASUg7q9TSHfUi5KYw UHKAakM5rcPv516MW21BYEssc1vDIAErtWZlFLc4sLN9IVM8gJjwm1kL8Y12WpvO aPdRw90FHTV+WMt8tG5u2hJZVWztoPeiIh8U/vcnWTSiB4R0sQQss+pSy/67RqXW sM2Y4N3f0RbB3N29JPb0ZAMbhtkvQv0Ql4v2Hgvl8NTXX33d8iiMaCNxJk5TH5qd o1lwFtfLpJ6hH6vVQmr2gLTN+oYs5/mbCcfFP7dZvCYua09JsQIBHQ3ZLb1EDZDy DCVEJWuWG+78s4ADQ4IC20TcIQVFZQBMR5csuPvRcKK4a7Z9Pb4= -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:10 2026 by rpki-client