$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: gpcRJYuleccQGmp3MionlVY96toJRuGlQU0l8ObGYm4= Subject key identifier: B5:B4:E5:76:33:50:AA:BC:D7:55:5F:A4:9A:E3:B0:96:23:12:98:2F Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 3911A694A45A1810DF77923E84CFE0B4899A2D3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 02:13:22 +0000 Manifest this update: Thu 24 Sep 2026 02:08:22 +0000 Manifest next update: Fri 25 Sep 2026 05:41:22 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) 2: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: LZuvpoRzOhwmB/1va/tye7Ft70Mq4qz1HEVUCExelpY=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:41:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:11:a6:94:a4:5a:18:10:df:77:92:3e:84:cf:e0:b4:89:9a:2d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Sep 24 02:08:22 2026 GMT Not After : Sep 25 05:41:22 2026 GMT Subject: CN=B5B4E5763350AABCD7555FA49AE3B0962312982F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:5d:75:ab:b4:4d:87:0c:b2:f6:85:e2:1b: b2:8c:ac:d8:f4:8a:e8:49:2b:d1:b1:cc:ab:9c:ff: ed:66:68:1a:23:18:9b:fd:15:57:a4:5a:e4:28:bd: 4b:20:21:c7:55:d1:a8:51:bb:5d:fe:3a:11:25:8e: c9:52:7b:28:8b:81:cb:d1:50:e3:4a:ca:57:42:83: 5e:fa:ef:ef:d0:67:3f:d7:24:aa:66:3d:9e:1e:06: 9c:ea:13:09:3d:4d:fe:e1:2c:e2:b1:4a:cd:4f:1f: 79:fa:29:78:db:d4:0d:37:5e:ab:66:a4:b2:82:89: 8a:87:7a:e1:8f:c8:42:25:78:a9:7e:04:a3:ef:04: b9:64:7e:87:83:0d:8f:7b:ef:f9:b6:5d:20:2c:bc: e6:8d:14:d6:98:ff:d0:50:be:74:5c:2c:f5:a8:a6: b2:80:47:b9:02:82:f3:b4:b3:1e:5e:6c:4d:87:af: 6f:8e:37:d1:73:cd:01:a6:62:b6:b8:cd:1b:2f:89: a4:e5:8a:52:c7:5d:98:b3:6d:e6:8d:fe:9c:21:5e: de:58:be:dc:78:c1:a5:61:2e:3c:76:ef:62:c9:99: 38:80:e9:9c:96:8b:19:88:50:b1:82:19:7f:14:6e: 99:4c:d1:21:c7:84:36:d2:2e:fb:c2:55:c9:64:db: 35:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B4:E5:76:33:50:AA:BC:D7:55:5F:A4:9A:E3:B0:96:23:12:98:2F X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2d:2a:16:37:bb:fc:a7:ec:c2:03:47:48:95:ed:35:ef:d0: 0b:c6:e8:8c:85:b3:56:1c:d5:f0:b2:89:2b:e2:e1:9b:7e:87: 29:44:cd:ff:cc:51:1e:32:07:d3:f1:f9:4b:10:0a:02:95:6f: 15:47:1c:42:b6:eb:50:c2:79:7b:db:02:90:76:f9:32:54:29: 4c:50:8a:c2:e2:d6:e6:17:ab:85:1d:c5:c1:66:a5:25:4e:1e: 04:2d:d9:85:0c:1d:f9:5d:d1:2d:96:c7:2d:83:29:45:0e:d3: 1c:44:a4:3c:c2:e9:25:a4:f7:5c:e8:a2:3c:94:2a:1d:a2:e6: 45:aa:ca:76:a4:e8:d6:05:9b:04:6d:da:b1:6b:fb:17:75:7e: 6a:af:94:1c:ac:2e:a3:e3:8d:e1:18:51:e2:d0:2a:3c:33:c1: 81:9b:e2:0d:03:ee:8d:82:11:da:d4:3d:ba:12:f0:ad:a9:19: cf:b0:1d:6a:d0:fc:26:bf:cf:67:9a:c4:b1:0b:7d:2d:d6:0c: 94:12:2a:9c:6e:75:3a:33:2f:e6:8e:ab:02:75:ba:ed:c4:e6: af:a6:fb:c7:0e:cb:5e:67:95:9f:d3:c3:44:14:a4:b2:63:20: cd:ed:cc:98:ce:81:5c:e0:8c:92:53:d8:52:21:b0:51:34:c8: 7d:c0:f4:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORGmlKRaGBDfd5I+hM/gtImaLT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA5MjQwMjA4MjJaFw0yNjA5MjUwNTQxMjJaMDMxMTAvBgNV BAMTKEI1QjRFNTc2MzM1MEFBQkNENzU1NUZBNDlBRTNCMDk2MjMxMjk4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpl11q7RNhwyy9oXiG7KMrNj0 iuhJK9GxzKuc/+1maBojGJv9FVekWuQovUsgIcdV0ahRu13+OhEljslSeyiLgcvR UONKyldCg1767+/QZz/XJKpmPZ4eBpzqEwk9Tf7hLOKxSs1PH3n6KXjb1A03Xqtm pLKCiYqHeuGPyEIleKl+BKPvBLlkfoeDDY977/m2XSAsvOaNFNaY/9BQvnRcLPWo prKAR7kCgvO0sx5ebE2Hr2+ON9FzzQGmYra4zRsviaTlilLHXZizbeaN/pwhXt5Y vtx4waVhLjx272LJmTiA6ZyWixmIULGCGX8UbplM0SHHhDbSLvvCVclk2zUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtbTldjNQqrzXVV+kmuOwliMSmC8wHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKItKhY3u/yn7MIDR0iV7TXv0AvG6IyFs1Yc 1fCyiSvi4Zt+hylEzf/MUR4yB9Px+UsQCgKVbxVHHEK261DCeXvbApB2+TJUKUxQ isLi1uYXq4UdxcFmpSVOHgQt2YUMHfld0S2Wxy2DKUUO0xxEpDzC6SWk91zoojyU Kh2i5kWqynak6NYFmwRt2rFr+xd1fmqvlBysLqPjjeEYUeLQKjwzwYGb4g0D7o2C EdrUPboS8K2pGc+wHWrQ/Ca/z2eaxLELfS3WDJQSKpxudTozL+aOqwJ1uu3E5q+m +8cOy15nlZ/Tw0QUpLJjIM3tzJjOgVzgjJJT2FIhsFE0yH3A9Kg= -----END CERTIFICATE-----Generated at Thu Sep 24 06:36:09 2026 by rpki-client