$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: 9nE12AO9TAmlOWC/wjkF5f99PFnmNcu5TjHxNvR4V8A= Subject key identifier: A4:6E:72:8E:ED:26:16:E0:EB:DF:6E:D2:84:98:1D:14:5C:C6:91:0F Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 2A970F79A0C8FB046B84644D5A6E18D442557DD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 23:28:29 +0000 Manifest this update: Sat 14 Nov 2026 23:23:29 +0000 Manifest next update: Sun 15 Nov 2026 23:44:29 +0000 Files and hashes: 1: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: Bi9f8Nt3lFr7sYG9gcVqijiVnXObG/mVlZX4OmCKM8Q=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:97:0f:79:a0:c8:fb:04:6b:84:64:4d:5a:6e:18:d4:42:55:7d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Nov 14 23:23:29 2026 GMT Not After : Nov 15 23:44:29 2026 GMT Subject: CN=A46E728EED2616E0EBDF6ED284981D145CC6910F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:61:19:4f:88:94:da:c2:60:92:5f:72:68: d6:c6:e1:68:51:1f:27:1b:d4:ed:9c:f0:e4:4b:31: 93:dc:fd:ae:0f:23:79:f5:6c:9e:8f:3b:4f:e1:14: f5:1d:18:c8:ea:45:10:a4:1f:3e:c7:af:ff:45:89: 63:f6:0e:ff:0a:8b:fe:40:e9:95:cf:34:b1:4e:7b: a2:da:ef:76:8d:35:aa:64:8b:a6:f9:47:57:89:8c: b9:c8:dd:cd:23:a4:c0:c3:ca:ed:ca:97:cc:70:ce: 96:9c:06:6b:25:90:5d:80:ee:28:27:f0:1c:01:c3: 22:9e:99:b7:f5:7f:3a:21:44:d2:ab:a2:62:6a:85: 5e:e7:ff:94:99:94:bd:9e:c7:4a:d7:32:42:8a:87: 67:f4:55:a7:09:6c:46:9f:89:91:8f:45:fc:4b:55: ea:a9:1b:83:74:87:bb:37:6a:1c:a9:fd:3d:c4:f9: b9:0b:46:5f:e1:20:9d:02:63:df:7f:f1:32:1f:65: 76:f2:d4:74:ee:a0:f5:b4:79:39:d1:be:88:1e:78: a3:12:0b:c8:f5:54:ed:95:ca:5f:76:30:dc:ff:7e: 25:25:3f:89:69:a2:55:ed:73:cf:a9:aa:83:10:3e: 0e:1b:f7:f6:82:7a:9c:ae:58:90:2e:62:62:f4:7c: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6E:72:8E:ED:26:16:E0:EB:DF:6E:D2:84:98:1D:14:5C:C6:91:0F X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:12:f4:7d:e9:92:07:05:b9:78:58:7b:f9:d0:2e:c9:d5:15: ea:f9:41:0c:72:52:c6:43:c9:37:b7:69:d0:02:03:0e:27:47: 35:da:dd:dd:5e:08:68:29:df:40:c8:1c:bb:7b:bb:9a:b0:b0: d6:9d:e3:13:1e:af:a7:08:65:95:37:db:91:58:bd:b7:63:f8: 71:73:59:a1:b3:76:ed:ab:de:62:3f:96:d9:70:2c:d0:8b:13: 8f:61:aa:38:14:70:34:de:22:dc:c4:39:9f:ee:a1:ed:1a:a9: e1:a0:0e:4c:a7:5e:64:3a:f2:24:17:60:62:ea:84:a8:ec:1d: 4a:47:e6:bc:4e:cc:12:3d:39:2d:50:c2:a4:b7:48:26:83:4e: ae:36:3b:cd:d3:2c:73:2a:f8:32:2b:7b:77:92:f0:8b:f0:3a: d2:39:74:d3:d5:38:60:2c:f3:c6:b7:51:10:e9:94:bd:24:72: 59:55:11:47:b6:66:08:7b:04:dd:91:a3:69:a8:a0:c2:5e:c9: ef:04:e0:8b:c0:a8:fb:98:f3:f4:51:41:e8:ed:2d:d6:5b:e0: 59:ee:13:fa:21:0e:74:f3:ed:1c:0d:72:69:0d:a9:7e:da:96: bc:37:1d:a1:95:22:a0:e0:f6:63:21:02:f9:9e:5d:2b:b7:50: 63:cb:7f:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpcPeaDI+wRrhGRNWm4Y1EJVfdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjExMTQyMzIzMjlaFw0yNjExMTUyMzQ0MjlaMDMxMTAvBgNV BAMTKEE0NkU3MjhFRUQyNjE2RTBFQkRGNkVEMjg0OTgxRDE0NUNDNjkxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAmEZT4iU2sJgkl9yaNbG4WhR Hycb1O2c8ORLMZPc/a4PI3n1bJ6PO0/hFPUdGMjqRRCkHz7Hr/9FiWP2Dv8Ki/5A 6ZXPNLFOe6La73aNNapki6b5R1eJjLnI3c0jpMDDyu3Kl8xwzpacBmslkF2A7ign 8BwBwyKembf1fzohRNKromJqhV7n/5SZlL2ex0rXMkKKh2f0VacJbEafiZGPRfxL VeqpG4N0h7s3ahyp/T3E+bkLRl/hIJ0CY99/8TIfZXby1HTuoPW0eTnRvogeeKMS C8j1VO2Vyl92MNz/fiUlP4lpolXtc8+pqoMQPg4b9/aCepyuWJAuYmL0fOwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpG5yju0mFuDr327ShJgdFFzGkQ8wHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkS9H3pkgcFuXhYe/nQLsnVFer5QQxyUsZD yTe3adACAw4nRzXa3d1eCGgp30DIHLt7u5qwsNad4xMer6cIZZU325FYvbdj+HFz WaGzdu2r3mI/ltlwLNCLE49hqjgUcDTeItzEOZ/uoe0aqeGgDkynXmQ68iQXYGLq hKjsHUpH5rxOzBI9OS1QwqS3SCaDTq42O83TLHMq+DIre3eS8IvwOtI5dNPVOGAs 88a3URDplL0kcllVEUe2Zgh7BN2Ro2mooMJeye8E4IvAqPuY8/RRQejtLdZb4Fnu E/ohDnTz7RwNcmkNqX7alrw3HaGVIqDg9mMhAvmeXSu3UGPLf+s= -----END CERTIFICATE-----Generated at Sun Nov 15 10:27:39 2026 by rpki-client