$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: 0yqeqvt/+zNjTMZUycAUMXneORL0Fv5rYDFicEew33M= Subject key identifier: 6A:3C:BD:FB:4B:E5:2C:07:29:37:94:F7:12:65:76:16:06:81:9C:C1 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 5F7F29555CDED97AECA7840EE34C98F6CBA85D04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: FA Signing time: Thu 05 Nov 2026 02:37:09 +0000 Manifest this update: Thu 05 Nov 2026 02:32:09 +0000 Manifest next update: Fri 06 Nov 2026 02:49:09 +0000 Files and hashes: 1: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: FNvpXtbo1kwBAAChntmanctdE84GbQYBuyQVhx8V6TI=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 02:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7f:29:55:5c:de:d9:7a:ec:a7:84:0e:e3:4c:98:f6:cb:a8:5d:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: Nov 5 02:32:09 2026 GMT Not After : Nov 6 02:49:09 2026 GMT Subject: CN=6A3CBDFB4BE52C07293794F71265761606819CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:d2:bd:10:7c:88:b9:0e:71:66:db:41:8f: 8c:2a:70:ac:df:05:a2:1a:6e:bf:e7:a2:a6:65:7f: 70:0a:4d:22:ba:5c:11:6f:82:cf:04:34:c3:4b:bc: c7:39:dd:d6:15:df:85:9c:c1:ed:69:bc:7c:ec:f3: 55:4d:01:36:1d:77:23:0f:5b:52:1f:67:5c:c4:ba: c9:d9:b8:ab:0d:8e:4e:28:af:17:d8:16:41:2b:46: 46:49:d6:99:74:1c:f2:af:ae:ea:87:64:49:f1:06: b0:04:f3:02:c3:08:1c:44:09:7a:2a:1a:0b:f7:ea: ab:c4:21:74:b8:e5:b6:52:4d:45:00:0e:46:e6:71: 76:8f:68:a1:f5:4e:ca:4a:f6:4e:d6:04:7c:00:b0: 79:c6:52:a8:2a:64:54:c8:65:43:64:4e:f0:f9:24: 74:2b:99:23:54:5c:ac:24:7d:e7:5b:ff:bf:4c:71: 88:a3:5d:80:ac:c2:be:68:cb:91:58:d3:48:61:01: c5:ed:d9:51:c2:5e:98:9c:7b:30:41:f4:77:60:02: 44:ab:2a:b1:7a:a2:a2:48:d1:6c:20:00:41:04:f2: 71:bd:0d:81:fd:a2:be:4b:62:5e:f1:96:11:de:a6: ab:2d:03:c2:85:76:d3:d0:5c:56:bb:54:5b:b9:d6: 81:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3C:BD:FB:4B:E5:2C:07:29:37:94:F7:12:65:76:16:06:81:9C:C1 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ec:68:46:3f:84:72:99:29:16:55:31:52:8a:65:ae:12:77: 49:15:0c:6f:f3:87:46:3f:fa:4e:95:d6:d6:02:2e:76:87:1e: 4c:be:31:fc:15:cf:ba:9c:0a:20:52:4e:8f:a5:26:66:ce:c2: ff:cb:95:83:eb:88:2b:7f:74:44:b6:6e:fc:4e:bd:c8:87:3a: cd:ee:17:72:04:93:48:95:8e:27:4c:4a:30:88:c2:7c:a4:21: ba:1c:1e:e4:e7:b7:ac:cb:4f:c2:98:0e:b0:a8:b5:9d:33:5d: 54:85:4a:f6:93:c0:54:eb:82:e0:d5:eb:33:5b:e7:b4:ea:ef: bb:5f:c4:c6:50:82:63:a1:3f:2e:78:86:0b:72:3c:01:e2:13: 5b:7f:97:c3:e7:d1:08:32:74:0b:c0:ef:b9:b6:80:01:4f:2c: 9b:b5:ff:08:5a:92:8d:bd:97:4b:a6:20:ad:4f:1c:32:37:7b: b7:28:9b:3b:bc:e9:29:ed:d0:84:8e:fa:3b:0e:8e:4e:0e:19: 56:d7:83:b9:b2:5a:38:6e:cd:d3:e8:07:8c:20:0b:dc:36:73: 82:32:34:70:75:c5:c3:28:87:dd:01:6a:5b:8b:e4:4d:45:c9: ff:3c:37:c4:ed:c5:49:83:45:19:97:0e:36:89:0d:6f:42:8f: d9:66:1a:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX38pVVze2Xrsp4QO40yY9suoXQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjExMDUwMjMyMDlaFw0yNjExMDYwMjQ5MDlaMDMxMTAvBgNV BAMTKDZBM0NCREZCNEJFNTJDMDcyOTM3OTRGNzEyNjU3NjE2MDY4MTlDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJN9K9EHyIuQ5xZttBj4wqcKzf BaIabr/noqZlf3AKTSK6XBFvgs8ENMNLvMc53dYV34Wcwe1pvHzs81VNATYddyMP W1IfZ1zEusnZuKsNjk4orxfYFkErRkZJ1pl0HPKvruqHZEnxBrAE8wLDCBxECXoq Ggv36qvEIXS45bZSTUUADkbmcXaPaKH1TspK9k7WBHwAsHnGUqgqZFTIZUNkTvD5 JHQrmSNUXKwkfedb/79McYijXYCswr5oy5FY00hhAcXt2VHCXpicezBB9HdgAkSr KrF6oqJI0WwgAEEE8nG9DYH9or5LYl7xlhHepqstA8KFdtPQXFa7VFu51oFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajy9+0vlLAcpN5T3EmV2FgaBnMEwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzsaEY/hHKZKRZVMVKKZa4Sd0kVDG/zh0Y/ +k6V1tYCLnaHHky+MfwVz7qcCiBSTo+lJmbOwv/LlYPriCt/dES2bvxOvciHOs3u F3IEk0iVjidMSjCIwnykIbocHuTnt6zLT8KYDrCotZ0zXVSFSvaTwFTrguDV6zNb 57Tq77tfxMZQgmOhPy54hgtyPAHiE1t/l8Pn0QgydAvA77m2gAFPLJu1/whako29 l0umIK1PHDI3e7comzu86Snt0ISO+jsOjk4OGVbXg7myWjhuzdPoB4wgC9w2c4Iy NHB1xcMoh90BaluL5E1Fyf88N8TtxUmDRRmXDjaJDW9Cj9lmGjo= -----END CERTIFICATE-----Generated at Thu Nov 5 18:42:52 2026 by rpki-client