$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: HAzA8wLOJTdtTJdTiyQtLiKfnzpZnkxxXKYq0A97c60= Subject key identifier: 51:65:E0:87:EA:8D:D8:5F:6B:3A:6D:E1:4E:95:4F:65:7B:8C:CB:14 Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 7BA98F0C27335A751DF5BC914BA6FE1080340F4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 07:25:56 +0000 Manifest this update: Mon 21 Sep 2026 07:20:56 +0000 Manifest next update: Tue 22 Sep 2026 08:16:56 +0000 Files and hashes: 1: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 3: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: GOGtF0k6v82373F/s0WOWTMC1+qhChbYR8DETYVuSGA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a9:8f:0c:27:33:5a:75:1d:f5:bc:91:4b:a6:fe:10:80:34:0f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: Sep 21 07:20:56 2026 GMT Not After : Sep 22 08:16:56 2026 GMT Subject: CN=5165E087EA8DD85F6B3A6DE14E954F657B8CCB14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:79:fd:79:43:bf:27:81:11:7b:f5:1a:97: 37:16:fc:06:eb:66:d4:7d:2e:ab:af:71:69:0a:1f: 61:ba:ea:10:15:c7:12:61:dd:05:4d:90:35:70:ef: f9:a5:aa:8f:fd:3b:90:bc:a6:3e:bf:a0:4e:db:39: 23:2d:2c:96:9f:37:7e:b4:47:4b:e1:35:1a:c1:a0: 30:b1:99:49:ac:03:03:d2:65:e9:69:c7:84:82:bb: df:f0:43:35:85:10:c6:87:ae:2f:7d:b7:3f:92:a9: 03:df:cf:35:dc:60:a8:7b:fe:0e:62:e9:97:16:96: a7:e6:dd:65:e5:68:5a:d2:a0:2d:d2:e0:3c:86:14: 45:22:cc:e0:a1:06:54:01:e2:c9:68:b3:f5:1e:2b: b7:0b:53:92:aa:36:16:2e:c9:52:12:0c:eb:92:d7: a5:eb:58:08:63:fe:33:a6:80:be:06:0d:4c:60:a5: 14:28:f6:1b:e1:14:72:30:64:51:4e:c1:a6:f3:16: fe:b0:92:22:e7:1a:9e:ca:81:15:0a:7d:de:e8:d9: 87:26:6d:48:d8:82:53:ec:db:11:d3:34:fa:e0:a1: 76:36:01:67:03:a5:85:9a:0e:07:01:a6:c5:c5:b6: 61:42:de:33:22:8f:14:95:e2:a9:3f:0f:04:7f:ea: 45:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:65:E0:87:EA:8D:D8:5F:6B:3A:6D:E1:4E:95:4F:65:7B:8C:CB:14 X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d6:28:33:6c:0a:1b:6d:6d:fb:38:b6:8a:b7:0e:df:60:2b: a0:74:54:22:41:0a:12:c1:a9:da:2f:08:bc:f9:90:a7:36:27: ca:32:10:3c:a9:ad:ca:fe:55:2d:49:06:da:ca:07:0b:0e:91: 81:40:d5:5b:44:b6:05:67:d8:0f:ef:fe:01:d5:47:db:f1:c2: fe:97:ad:f6:ce:5d:04:00:75:5b:5c:c2:a3:03:72:d1:78:d2: 4e:c8:d4:1e:56:85:cb:6a:fc:cc:94:9c:bb:7b:8f:44:76:70: c4:8e:c3:2b:9c:e2:10:be:c8:db:db:f6:37:f2:e4:8b:87:9f: 47:a9:cd:c0:c5:1b:6e:39:ca:21:45:26:d3:0b:2a:5d:4f:52: a2:5b:df:9d:36:b8:1f:a1:75:2d:44:72:d6:6e:4a:81:f8:ab: fb:ae:ca:74:12:0b:2f:73:c4:a4:a2:3c:8a:34:48:7f:2b:7a: b8:44:41:45:66:5a:be:46:93:0b:87:fa:b3:f0:c0:52:14:09: c4:64:33:47:5c:8f:5a:34:32:b9:27:0c:d9:36:a0:0c:79:e2: 23:55:af:71:cc:e9:7f:53:05:81:31:49:d8:c7:c0:69:6f:c5: 38:bc:52:2b:d2:57:da:07:97:f1:74:0d:f6:93:c8:db:3c:19: 52:80:3a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6mPDCczWnUd9byRS6b+EIA0D08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjA5MjEwNzIwNTZaFw0yNjA5MjIwODE2NTZaMDMxMTAvBgNV BAMTKDUxNjVFMDg3RUE4REQ4NUY2QjNBNkRFMTRFOTU0RjY1N0I4Q0NCMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaU3n9eUO/J4ERe/UalzcW/Abr ZtR9LquvcWkKH2G66hAVxxJh3QVNkDVw7/mlqo/9O5C8pj6/oE7bOSMtLJafN360 R0vhNRrBoDCxmUmsAwPSZelpx4SCu9/wQzWFEMaHri99tz+SqQPfzzXcYKh7/g5i 6ZcWlqfm3WXlaFrSoC3S4DyGFEUizOChBlQB4slos/UeK7cLU5KqNhYuyVISDOuS 16XrWAhj/jOmgL4GDUxgpRQo9hvhFHIwZFFOwabzFv6wkiLnGp7KgRUKfd7o2Ycm bUjYglPs2xHTNPrgoXY2AWcDpYWaDgcBpsXFtmFC3jMijxSV4qk/DwR/6kXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWXgh+qN2F9rOm3hTpVPZXuMyxQwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDWKDNsChttbfs4toq3Dt9gK6B0VCJBChLB qdovCLz5kKc2J8oyEDyprcr+VS1JBtrKBwsOkYFA1VtEtgVn2A/v/gHVR9vxwv6X rfbOXQQAdVtcwqMDctF40k7I1B5Whctq/MyUnLt7j0R2cMSOwyuc4hC+yNvb9jfy 5IuHn0epzcDFG245yiFFJtMLKl1PUqJb3502uB+hdS1EctZuSoH4q/uuynQSCy9z xKSiPIo0SH8rerhEQUVmWr5GkwuH+rPwwFIUCcRkM0dcj1o0MrknDNk2oAx54iNV r3HM6X9TBYExSdjHwGlvxTi8UivSV9oHl/F0DfaTyNs8GVKAOkk= -----END CERTIFICATE-----Generated at Tue Sep 22 03:16:20 2026 by rpki-client