$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: UbELGTgYe/9Vt9MX0IW3I0R5sNlIl7PorD3IlQzEFFY= Subject key identifier: B6:7B:25:6F:E7:FA:BC:5F:CD:90:87:B4:70:14:91:72:1D:CA:46:F1 Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 5CBB857AA45DD4EE88B14361D00EECE4FDD1B32C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:34:03 +0000 Manifest this update: Wed 23 Sep 2026 14:29:03 +0000 Manifest next update: Thu 24 Sep 2026 18:22:03 +0000 Files and hashes: 1: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: bLc2yVijW907nCVcH7w8pnq1wdMVnQXPO7os64zPL0E=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 18:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bb:85:7a:a4:5d:d4:ee:88:b1:43:61:d0:0e:ec:e4:fd:d1:b3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Sep 23 14:29:03 2026 GMT Not After : Sep 24 18:22:03 2026 GMT Subject: CN=B67B256FE7FABC5FCD9087B4701491721DCA46F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:99:8b:36:4d:77:a1:4b:14:c3:1d:4d:df: 58:d6:ea:35:34:61:08:1e:0a:39:a6:e9:ed:ad:5f: 48:6a:ab:f6:75:7e:2a:ab:d3:fd:13:df:c7:e6:51: fa:65:0c:4c:3f:e4:03:4c:e6:29:28:c6:ee:d4:b5: ee:02:8c:dc:a5:b3:56:1b:90:9e:20:04:dd:27:de: bd:88:aa:80:18:38:48:73:1d:70:76:bf:b4:96:0a: 7b:e7:34:d3:c7:62:e4:51:c3:d3:d7:a5:5e:d5:f4: 41:cd:4e:d9:0d:01:03:6b:06:a5:50:57:19:97:91: 3e:e8:16:fd:e2:53:a6:c9:77:52:b7:01:57:97:c9: f9:a2:6b:d3:af:a9:40:c0:87:a8:57:a8:3e:b7:00: d2:27:c9:d1:a1:67:63:44:c9:5b:ac:04:8e:59:46: ea:1d:1f:72:cd:40:88:87:df:0c:f1:39:53:fb:de: 1d:f2:b9:dc:5e:98:30:75:d0:19:72:c8:38:0d:e3: ba:04:55:b9:c3:a4:eb:5c:d2:d2:d2:af:51:b4:f3: 27:ef:f6:3c:e4:55:ec:2e:c0:7e:05:3a:b8:ad:6b: b2:49:5c:7e:b0:83:aa:32:60:ed:6b:76:5d:3b:51: 79:39:66:e6:5a:05:cc:d8:86:20:a3:cc:98:c4:5a: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7B:25:6F:E7:FA:BC:5F:CD:90:87:B4:70:14:91:72:1D:CA:46:F1 X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:83:84:da:33:9e:37:eb:95:c5:84:2d:26:da:a3:8c:ef:67: 05:49:62:1e:ac:11:5f:ad:d4:d5:98:69:1f:89:c5:ff:33:95: e3:22:63:e1:56:7c:68:c9:d7:58:dd:1e:84:62:d4:33:32:0b: 38:ab:80:cd:82:40:d4:23:0b:1c:ce:c2:8d:30:17:d0:0c:ea: d4:22:18:86:f4:7a:df:8f:7c:0f:90:78:02:c7:6f:17:14:f5: 0c:bb:3f:b0:a6:0d:b8:ba:a2:a6:ba:3e:ed:56:0d:04:53:a7: b6:3e:36:88:3a:ad:a6:02:d0:a7:ae:dc:ee:5c:2e:63:5b:b1: 80:91:56:79:af:58:e5:92:f6:f1:ba:eb:62:4f:03:9d:16:43: 90:b0:e4:4b:fb:b0:39:ff:5e:03:8b:c2:66:46:7b:a7:96:09: b0:94:17:2b:83:e6:f8:63:9a:96:37:29:1f:4b:68:05:87:f7: cb:19:fd:84:78:a2:0f:3b:70:90:ff:98:bc:0a:ef:9c:f6:8f: 65:33:f0:af:bd:d9:3e:2b:19:19:a9:9a:78:b3:74:c0:c2:2f: ce:81:10:98:b0:0d:38:52:37:16:44:4d:ff:9b:64:4a:d7:18: e7:a2:f6:f9:62:e6:fc:47:51:0a:b1:8d:e6:8e:02:46:d0:df: 09:1f:d1:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLuFeqRd1O6IsUNh0A7s5P3RsywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA5MjMxNDI5MDNaFw0yNjA5MjQxODIyMDNaMDMxMTAvBgNV BAMTKEI2N0IyNTZGRTdGQUJDNUZDRDkwODdCNDcwMTQ5MTcyMURDQTQ2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGpmLNk13oUsUwx1N31jW6jU0 YQgeCjmm6e2tX0hqq/Z1fiqr0/0T38fmUfplDEw/5ANM5ikoxu7Ute4CjNyls1Yb kJ4gBN0n3r2IqoAYOEhzHXB2v7SWCnvnNNPHYuRRw9PXpV7V9EHNTtkNAQNrBqVQ VxmXkT7oFv3iU6bJd1K3AVeXyfmia9OvqUDAh6hXqD63ANInydGhZ2NEyVusBI5Z RuodH3LNQIiH3wzxOVP73h3yudxemDB10BlyyDgN47oEVbnDpOtc0tLSr1G08yfv 9jzkVewuwH4FOrita7JJXH6wg6oyYO1rdl07UXk5ZuZaBczYhiCjzJjEWjoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtnslb+f6vF/NkIe0cBSRch3KRvEwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmDhNoznjfrlcWELSbao4zvZwVJYh6sEV+t 1NWYaR+Jxf8zleMiY+FWfGjJ11jdHoRi1DMyCzirgM2CQNQjCxzOwo0wF9AM6tQi GIb0et+PfA+QeALHbxcU9Qy7P7CmDbi6oqa6Pu1WDQRTp7Y+Nog6raYC0Keu3O5c LmNbsYCRVnmvWOWS9vG662JPA50WQ5Cw5Ev7sDn/XgOLwmZGe6eWCbCUFyuD5vhj mpY3KR9LaAWH98sZ/YR4og87cJD/mLwK75z2j2Uz8K+92T4rGRmpmnizdMDCL86B EJiwDThSNxZETf+bZErXGOei9vli5vxHUQqxjeaOAkbQ3wkf0Qw= -----END CERTIFICATE-----Generated at Thu Sep 24 00:07:39 2026 by rpki-client