$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: 20VcE++mUM2q/Brzd8BOFQDb1leUbcVypZrhZmw0X+I= Subject key identifier: E0:3F:F0:35:3E:C6:8A:6E:5B:F0:89:E3:1E:CF:8E:42:FD:A4:03:64 Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 288235E444A37BF95F45F4A1050B898E8EE7D29C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:19:22 +0000 Manifest this update: Mon 21 Sep 2026 10:14:22 +0000 Manifest next update: Tue 22 Sep 2026 11:02:22 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) 2: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: Ln0cuvmjY7CZwMCqVbS+DyDIKAIvcawSq7u+4dBHb6s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:82:35:e4:44:a3:7b:f9:5f:45:f4:a1:05:0b:89:8e:8e:e7:d2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Sep 21 10:14:22 2026 GMT Not After : Sep 22 11:02:22 2026 GMT Subject: CN=E03FF0353EC68A6E5BF089E31ECF8E42FDA40364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:43:5e:b9:f9:90:83:a4:b6:12:3e:c3:5a: e0:d3:17:8a:c6:1b:f1:10:a5:34:c4:64:3e:6f:41: b1:e7:45:3c:1f:77:38:81:d2:12:f4:dd:9f:5c:e9: 3b:26:86:f0:db:24:42:ef:e5:7a:c3:4c:e1:7c:27: 44:31:d0:43:ac:28:12:e0:eb:56:80:7d:55:97:9a: 5e:08:01:b2:0e:aa:3a:34:59:1c:f8:6b:96:86:fe: 2c:3e:5f:93:76:71:60:f7:5b:85:53:22:f8:02:29: ee:8e:c4:9e:ab:bb:31:5d:f7:03:d3:d6:ab:a8:09: 7d:ae:51:a2:2b:b4:68:41:18:a1:47:16:34:f5:29: 29:a5:4d:df:8e:a9:8b:d7:92:91:89:7f:7b:37:64: ff:8f:c8:d1:a4:fd:ec:54:a8:e5:9c:5b:3c:51:8a: c0:44:4b:45:e4:f8:87:15:0d:30:14:ce:61:cd:6d: c4:50:10:76:49:06:c9:5a:3c:aa:02:45:ef:09:c3: f5:49:4f:4e:5e:79:a9:df:dd:e4:8b:73:c5:9f:f9: e2:3c:e8:87:f9:76:a2:c1:8e:9d:fa:0f:76:19:62: 8b:c0:e0:1e:64:b1:61:37:50:b5:17:41:fd:7a:7b: bf:bd:7d:84:ea:a1:46:74:87:74:8b:fb:c0:36:5d: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3F:F0:35:3E:C6:8A:6E:5B:F0:89:E3:1E:CF:8E:42:FD:A4:03:64 X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:77:00:b6:de:f6:5d:90:ae:42:d9:e9:f4:1b:3c:00:c6:f5: ef:02:8c:b9:3f:20:4e:12:91:a7:97:8d:c2:b4:51:35:b4:14: 7f:c0:cf:18:66:b2:bd:dc:6f:d6:76:4a:a5:0e:b5:5f:43:17: 7b:81:d4:ec:08:d6:d3:e8:f0:c4:28:94:fa:14:10:63:77:bd: 2b:25:d6:a8:5c:16:61:f9:fe:1f:1c:92:2b:02:45:04:02:d0: 0f:54:2f:21:5d:f8:4c:58:0b:bd:32:49:d7:55:ce:9e:bd:f6: 4e:7a:5b:ec:86:0b:88:9b:71:ea:d8:a2:e7:50:8c:53:29:99: 0b:81:7e:45:39:18:6f:a9:48:73:6b:e8:c6:8c:93:9d:68:26: 36:e7:0e:f6:8b:34:e8:f9:8c:d6:94:b4:cb:bd:51:15:7b:d8: 33:80:3b:e4:7f:29:cf:7e:11:f5:ee:62:f0:05:b3:fd:13:75: 54:a0:c6:3b:19:3e:6e:0d:13:ad:41:59:30:56:0d:11:81:83: 23:0b:7e:d5:3b:38:fc:71:aa:2b:44:eb:f7:be:22:72:02:a8: 89:72:f5:a4:20:5d:10:15:e4:88:c5:d6:2d:5b:ce:fa:a7:61: c9:d2:3c:46:bf:87:07:a2:cd:96:a6:8b:e3:8c:e7:e1:be:38: 44:7e:37:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKII15ESje/lfRfShBQuJjo7n0pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjA5MjExMDE0MjJaFw0yNjA5MjIxMTAyMjJaMDMxMTAvBgNV BAMTKEUwM0ZGMDM1M0VDNjhBNkU1QkYwODlFMzFFQ0Y4RTQyRkRBNDAzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJENeufmQg6S2Ej7DWuDTF4rG G/EQpTTEZD5vQbHnRTwfdziB0hL03Z9c6TsmhvDbJELv5XrDTOF8J0Qx0EOsKBLg 61aAfVWXml4IAbIOqjo0WRz4a5aG/iw+X5N2cWD3W4VTIvgCKe6OxJ6ruzFd9wPT 1quoCX2uUaIrtGhBGKFHFjT1KSmlTd+OqYvXkpGJf3s3ZP+PyNGk/exUqOWcWzxR isBES0Xk+IcVDTAUzmHNbcRQEHZJBslaPKoCRe8Jw/VJT05eeanf3eSLc8Wf+eI8 6If5dqLBjp36D3YZYovA4B5ksWE3ULUXQf16e7+9fYTqoUZ0h3SL+8A2XevBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4D/wNT7Gim5b8InjHs+OQv2kA2QwHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG93ALbe9l2QrkLZ6fQbPADG9e8CjLk/IE4S kaeXjcK0UTW0FH/Azxhmsr3cb9Z2SqUOtV9DF3uB1OwI1tPo8MQolPoUEGN3vSsl 1qhcFmH5/h8ckisCRQQC0A9ULyFd+ExYC70ySddVzp699k56W+yGC4ibcerYoudQ jFMpmQuBfkU5GG+pSHNr6MaMk51oJjbnDvaLNOj5jNaUtMu9URV72DOAO+R/Kc9+ EfXuYvAFs/0TdVSgxjsZPm4NE61BWTBWDRGBgyMLftU7OPxxqitE6/e+InICqIly 9aQgXRAV5IjF1i1bzvqnYcnSPEa/hweizZami+OM5+G+OER+N1Y= -----END CERTIFICATE-----Generated at Mon Sep 21 17:50:29 2026 by rpki-client