$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: yJ0ZujnzKEDHkAC4r61K80Y/HBF4d6xW6mXaXI1ebEg= Subject key identifier: 86:FD:46:37:55:05:7D:74:70:EC:2D:58:D7:08:36:DE:EA:75:8F:3C Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 2E178BF7DE97ED436547203524B88BC81653B824 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 06:06:44 +0000 Manifest this update: Sun 15 Nov 2026 06:01:44 +0000 Manifest next update: Mon 16 Nov 2026 06:55:44 +0000 Files and hashes: 1: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: IbWSZSs+XSBZcCoB+pG4WVX1siWkurovV/oYux+LjCo=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 06:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:17:8b:f7:de:97:ed:43:65:47:20:35:24:b8:8b:c8:16:53:b8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: Nov 15 06:01:44 2026 GMT Not After : Nov 16 06:55:44 2026 GMT Subject: CN=86FD463755057D7470EC2D58D70836DEEA758F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:1f:f7:6d:53:8c:42:00:c0:4a:e2:b3:54: 8c:7b:1a:8c:ab:e8:36:6d:78:5c:26:95:cd:16:a7: 17:ad:1f:66:1e:0f:3d:e1:a5:ac:de:ed:33:f8:fb: ae:0d:c4:6d:c5:e4:2e:66:2d:14:53:21:b8:87:be: 68:bd:6c:b9:ab:ad:a8:68:b2:06:86:c5:14:06:1b: 22:7f:fd:13:20:f3:ea:3a:ef:13:43:51:d6:5b:dc: 70:de:06:15:be:15:e7:58:1b:75:df:34:06:93:b7: 9f:f4:b2:26:9f:02:82:5e:89:5c:88:c0:31:2c:0c: 13:2b:e7:2c:54:18:18:bb:0a:e6:e7:97:f7:26:f9: 93:75:82:33:54:d0:07:1b:df:12:db:14:69:e4:ca: 87:24:8d:da:91:8c:78:b1:fb:c6:7a:e6:37:5d:ea: 3e:c8:b3:c6:8d:9a:25:c7:12:4a:0c:0c:3d:ed:e1: ea:a3:b3:2e:79:c9:ab:3d:9f:e8:77:3d:f1:f3:03: 68:41:06:cd:75:24:7f:d8:3b:d7:aa:0c:8f:82:eb: 02:5c:38:36:6c:78:19:83:af:3e:84:fc:8f:f0:1c: c7:33:95:65:57:6b:48:8e:8e:ff:a1:11:ac:2e:11: 58:02:9c:76:07:3b:f4:40:3b:32:aa:57:8c:2e:43: e2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FD:46:37:55:05:7D:74:70:EC:2D:58:D7:08:36:DE:EA:75:8F:3C X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ed:7a:5f:90:bb:5b:f7:46:2c:21:15:60:37:da:bb:ea:cf: 4d:cc:8a:18:b6:17:41:ff:79:86:f6:aa:2b:82:12:c5:f7:9c: 03:fe:9f:6a:a3:1a:54:8e:fc:17:7f:e4:95:1e:45:b9:de:87: a1:48:d8:74:0d:62:04:8e:2c:1a:92:a3:c3:db:db:9a:b7:32: 68:b8:ee:f7:e1:96:d6:b8:4d:f7:83:92:5a:40:4d:ab:84:ab: 76:c7:bc:9b:16:52:92:73:2b:ed:72:38:e3:26:51:b0:38:a8: 0a:32:a6:55:96:40:4d:93:58:96:80:75:33:11:d4:63:ea:bf: 93:92:2b:7e:ee:1c:a5:9c:ff:e7:45:2b:ad:c3:f3:bb:01:ed: 8d:e5:d8:f8:3b:98:e5:aa:3c:54:d2:b9:eb:f0:0f:16:4d:15: 33:c6:74:a4:10:b3:b6:e3:7f:a6:60:3b:b9:bf:e2:bd:fa:9f: 4a:ce:ae:14:49:82:65:01:c6:96:08:df:43:db:26:d1:70:b2: bd:c4:dd:f7:30:c3:30:61:c5:e9:3b:47:ce:a2:bc:5b:cd:8a: 4e:7e:94:05:d3:57:b0:e6:cc:23:0b:c9:12:8c:18:d5:97:c7: ca:c1:fa:89:25:72:9a:30:2b:a4:58:65:76:e0:b2:35:72:d9: 8f:1c:d0:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULheL996X7UNlRyA1JLiLyBZTuCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjExMTUwNjAxNDRaFw0yNjExMTYwNjU1NDRaMDMxMTAvBgNV BAMTKDg2RkQ0NjM3NTUwNTdENzQ3MEVDMkQ1OEQ3MDgzNkRFRUE3NThGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CB/3bVOMQgDASuKzVIx7Goyr 6DZteFwmlc0WpxetH2YeDz3hpaze7TP4+64NxG3F5C5mLRRTIbiHvmi9bLmrraho sgaGxRQGGyJ//RMg8+o67xNDUdZb3HDeBhW+FedYG3XfNAaTt5/0siafAoJeiVyI wDEsDBMr5yxUGBi7Cubnl/cm+ZN1gjNU0Acb3xLbFGnkyockjdqRjHix+8Z65jdd 6j7Is8aNmiXHEkoMDD3t4eqjsy55yas9n+h3PfHzA2hBBs11JH/YO9eqDI+C6wJc ODZseBmDrz6E/I/wHMczlWVXa0iOjv+hEawuEVgCnHYHO/RAOzKqV4wuQ+INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhv1GN1UFfXRw7C1Y1wg23up1jzwwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADztel+Qu1v3RiwhFWA32rvqz03Mihi2F0H/ eYb2qiuCEsX3nAP+n2qjGlSO/Bd/5JUeRbneh6FI2HQNYgSOLBqSo8Pb25q3Mmi4 7vfhlta4TfeDklpATauEq3bHvJsWUpJzK+1yOOMmUbA4qAoyplWWQE2TWJaAdTMR 1GPqv5OSK37uHKWc/+dFK63D87sB7Y3l2Pg7mOWqPFTSuevwDxZNFTPGdKQQs7bj f6ZgO7m/4r36n0rOrhRJgmUBxpYI30PbJtFwsr3E3fcwwzBhxek7R86ivFvNik5+ lAXTV7DmzCMLyRKMGNWXx8rB+oklcpowK6RYZXbgsjVy2Y8c0P4= -----END CERTIFICATE-----Generated at Sun Nov 15 20:56:07 2026 by rpki-client