$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: YcpF8WyJa9SrH9+iMr8WL7SgianaOuEtlNamqO21z7c= Subject key identifier: BB:4E:CF:47:1E:80:72:1C:A1:7B:43:25:CC:62:D7:A6:A1:A8:55:EB Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 55FED7FC20F8EEA5CC4FD244F57FBACE3048B9BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:39:03 +0000 Manifest this update: Wed 23 Sep 2026 22:34:03 +0000 Manifest next update: Fri 25 Sep 2026 00:16:03 +0000 Files and hashes: 1: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: 64vGL6PnwtNlZ2p003lf7rctZjwZKIsz08RjVDn/Fpk=) 2: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 00:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fe:d7:fc:20:f8:ee:a5:cc:4f:d2:44:f5:7f:ba:ce:30:48:b9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Sep 23 22:34:03 2026 GMT Not After : Sep 25 00:16:03 2026 GMT Subject: CN=BB4ECF471E80721CA17B4325CC62D7A6A1A855EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:15:71:80:d4:0c:ce:31:ac:ef:3e:57:17: 8d:aa:73:58:b7:da:48:d2:e9:1a:68:30:c2:9a:2e: 46:98:0f:30:fb:d6:eb:c7:c1:6c:44:f4:86:10:fb: 10:76:8e:cc:cc:02:3f:9e:27:dd:e4:b4:71:a2:e8: 8b:7e:3f:38:95:7d:b6:cb:f1:c1:5e:b7:03:1f:26: bd:7a:19:40:67:1f:37:46:18:00:2d:06:46:b8:99: 1e:ed:d2:43:6d:89:56:47:6b:a6:b5:19:7b:9e:20: d5:60:f1:09:d4:2d:35:01:b1:03:ea:74:06:b5:5c: bd:ef:62:63:f2:bf:ab:3d:b3:03:e6:e0:43:5c:6d: 86:a8:22:4d:c4:3e:09:34:b0:6b:4a:0c:ec:3b:9f: 0b:ec:0a:2e:06:69:41:ca:92:83:3b:72:1c:3f:31: 59:b7:58:30:14:00:32:36:69:52:8e:eb:3c:4e:a0: 36:4e:0d:77:90:ea:af:92:54:6f:b7:fd:24:42:55: 1b:79:eb:29:92:bb:1d:0f:bd:99:d5:d5:22:39:73: 61:fc:ac:0d:d1:df:ff:24:99:d4:71:e6:34:5f:17: d9:97:16:0d:81:38:59:fb:3a:b9:64:ba:a0:d1:45: 0e:ed:a1:aa:95:53:2f:e9:8e:4e:bb:58:7f:fd:69: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4E:CF:47:1E:80:72:1C:A1:7B:43:25:CC:62:D7:A6:A1:A8:55:EB X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:52:f1:31:e7:08:8c:d9:9f:ad:65:5b:b6:fe:6c:e0:2e:09: c1:e4:98:b7:78:79:3d:55:51:1d:d8:55:91:12:2d:43:79:c4: 15:02:ec:4f:50:7a:61:24:eb:39:40:22:6c:00:f1:77:4c:ad: 63:ff:c0:53:27:d6:c0:5a:3a:cb:d5:04:d1:24:51:53:c9:9f: 3d:25:20:5e:ff:77:73:57:64:8c:fe:bf:df:ef:a9:aa:68:31: 3c:35:11:e2:d6:9d:47:9e:e1:0f:23:d7:92:fe:81:69:f6:e0: 82:2b:5b:7a:a7:14:9d:c8:ab:9c:25:ea:c4:c4:f1:38:80:b4: d0:78:f8:96:b5:7c:75:fe:93:e8:96:b7:26:7b:0c:1b:d6:38: 8f:f9:e6:44:c9:a3:b9:86:c5:54:6d:18:a2:06:ca:83:7d:d3: df:a0:2d:02:36:fe:c5:5d:9d:4d:73:1e:56:e4:24:90:8b:d9: 88:c2:9f:2f:29:02:2c:12:b0:a8:6c:a8:a1:b9:6a:c6:28:c6: de:f0:e9:09:fc:c8:f2:f6:69:18:22:0f:49:cb:22:41:31:e9: de:55:b3:91:8c:47:57:18:b6:23:64:79:9e:0b:aa:8b:0d:6d: 21:0d:c3:3b:4d:49:c5:39:48:ea:38:12:86:d3:62:ee:b5:51: e6:65:9d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVf7X/CD47qXMT9JE9X+6zjBIub8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjA5MjMyMjM0MDNaFw0yNjA5MjUwMDE2MDNaMDMxMTAvBgNV BAMTKEJCNEVDRjQ3MUU4MDcyMUNBMTdCNDMyNUNDNjJEN0E2QTFBODU1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56hVxgNQMzjGs7z5XF42qc1i3 2kjS6RpoMMKaLkaYDzD71uvHwWxE9IYQ+xB2jszMAj+eJ93ktHGi6It+PziVfbbL 8cFetwMfJr16GUBnHzdGGAAtBka4mR7t0kNtiVZHa6a1GXueINVg8QnULTUBsQPq dAa1XL3vYmPyv6s9swPm4ENcbYaoIk3EPgk0sGtKDOw7nwvsCi4GaUHKkoM7chw/ MVm3WDAUADI2aVKO6zxOoDZODXeQ6q+SVG+3/SRCVRt56ymSux0PvZnV1SI5c2H8 rA3R3/8kmdRx5jRfF9mXFg2BOFn7OrlkuqDRRQ7toaqVUy/pjk67WH/9adyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu07PRx6Achyhe0MlzGLXpqGoVeswHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRS8THnCIzZn61lW7b+bOAuCcHkmLd4eT1V UR3YVZESLUN5xBUC7E9QemEk6zlAImwA8XdMrWP/wFMn1sBaOsvVBNEkUVPJnz0l IF7/d3NXZIz+v9/vqapoMTw1EeLWnUee4Q8j15L+gWn24IIrW3qnFJ3Iq5wl6sTE 8TiAtNB4+Ja1fHX+k+iWtyZ7DBvWOI/55kTJo7mGxVRtGKIGyoN909+gLQI2/sVd nU1zHlbkJJCL2YjCny8pAiwSsKhsqKG5asYoxt7w6Qn8yPL2aRgiD0nLIkEx6d5V s5GMR1cYtiNkeZ4LqosNbSENwztNScU5SOo4EobTYu61UeZlnXA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:28:07 2026 by rpki-client