$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft File: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft (raw, json) Hash identifier: KgwVKYS2Fg62Mil+3y/MA3meWZMdf2/2d19mVJZ1h0o= Subject key identifier: E3:60:0A:C4:6C:02:AE:C1:C6:33:FC:69:F4:45:CA:0D:F8:89:A2:96 Authority key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE Certificate issuer: /CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Certificate serial: 72552282BFF9208E06EB0D45793185D706F588EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:21:40 +0000 Manifest this update: Mon 21 Sep 2026 20:16:40 +0000 Manifest next update: Tue 22 Sep 2026 23:20:40 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: 8ZFSRd4IMl+7UA1+qh6mSwLg2Ure6CZXxSWgxu+4aBo=) 2: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl (hash: QgiYmkJ+r3AZPNCc0efLViCPhc1Kz1OFbDhpMl1p/38=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:55:22:82:bf:f9:20:8e:06:eb:0d:45:79:31:85:d7:06:f5:88:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Validity Not Before: Sep 21 20:16:40 2026 GMT Not After : Sep 22 23:20:40 2026 GMT Subject: CN=E3600AC46C02AEC1C633FC69F445CA0DF889A296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c7:b9:62:7c:4b:59:18:97:b0:97:dd:d9:6a: c2:bc:6e:15:86:84:d9:12:0d:59:16:51:33:6f:bd: eb:89:f4:2f:e5:b7:7f:0e:f8:30:40:21:8b:5e:80: d7:ff:27:53:26:19:83:6c:49:9a:61:43:2a:ca:51: 77:be:b4:0a:5c:b7:38:f6:b2:dd:a5:0b:a2:9a:5c: ea:b4:f7:55:97:2d:fe:55:21:2f:3e:bf:72:3c:00: 50:f4:59:cf:b6:c9:59:9e:0e:a1:24:8a:33:75:85: c6:50:42:06:8d:c1:78:10:5a:e1:a5:1e:1e:d8:22: 88:1f:58:59:5f:c8:3a:92:86:ef:b6:1e:a5:95:0a: 9b:6f:a4:30:1f:0f:70:ab:f0:5a:e6:c8:74:5d:61: 46:d6:31:62:d6:7e:bb:71:d3:fb:f7:92:7a:6b:0c: 20:a1:85:cf:69:e5:ad:8a:77:39:6b:a1:26:07:8c: 58:df:62:7e:88:ae:21:a5:5b:c6:84:28:c2:47:d4: 15:30:46:c7:7c:4b:b1:61:f5:c6:33:93:49:17:f6: 56:7b:c3:d9:f5:ab:7d:6e:dc:cd:45:e2:72:91:1f: 46:03:46:2e:df:0f:e1:d4:52:c5:8b:b1:02:45:3f: 53:33:b3:61:39:db:88:a4:e2:2a:f9:31:6f:5a:8a: 93:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:60:0A:C4:6C:02:AE:C1:C6:33:FC:69:F4:45:CA:0D:F8:89:A2:96 X509v3 Authority Key Identifier: keyid:0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a4:f4:04:f9:ce:a4:64:94:b8:51:97:18:2f:c2:c2:59:40: cb:87:26:49:17:d5:53:0b:95:bb:f6:80:2f:58:4f:6e:b7:a6: b5:a1:fe:53:e2:a9:12:28:48:0f:27:4b:7a:6b:a7:6e:9e:43: db:ee:04:3b:4c:84:f4:c1:2c:68:c3:89:0c:24:c0:df:8d:56: 42:25:f2:fc:38:7c:98:66:ea:6b:11:da:3c:91:07:0e:ac:43: 99:49:8e:33:91:d7:6a:65:0d:50:14:0c:4f:7d:ec:41:25:a1: bb:db:3e:37:5b:4c:85:6b:12:42:fb:96:3b:d5:c3:eb:55:db: aa:d0:18:60:e3:2f:31:02:a6:69:96:76:8d:bb:4c:fb:53:f0: 6c:e2:cf:37:f8:c3:dd:54:53:c2:35:5c:26:d6:37:51:40:0d: a4:5f:a7:95:47:0c:a4:71:1f:9c:d8:2b:bd:9d:2d:94:a1:8e: cc:5a:3c:bb:72:a2:a0:57:f9:f0:38:04:cf:42:cc:f2:53:62: 6c:38:c1:5d:74:9d:0d:31:3a:63:a6:e0:72:21:d0:b0:2f:bc: f0:bc:0a:4e:44:d4:d2:a3:a0:b0:b3:47:6a:58:41:84:18:43: 1d:ec:1f:a2:3e:f9:41:54:5f:73:23:90:56:7e:a1:1a:54:1f: 7f:37:d8:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUclUigr/5II4G6w1FeTGF1wb1iO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNCMEND NkUyNDhCRTAeFw0yNjA5MjEyMDE2NDBaFw0yNjA5MjIyMzIwNDBaMDMxMTAvBgNV BAMTKEUzNjAwQUM0NkMwMkFFQzFDNjMzRkM2OUY0NDVDQTBERjg4OUEyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdx7lifEtZGJewl93ZasK8bhWG hNkSDVkWUTNvveuJ9C/lt38O+DBAIYtegNf/J1MmGYNsSZphQyrKUXe+tApctzj2 st2lC6KaXOq091WXLf5VIS8+v3I8AFD0Wc+2yVmeDqEkijN1hcZQQgaNwXgQWuGl Hh7YIogfWFlfyDqShu+2HqWVCptvpDAfD3Cr8FrmyHRdYUbWMWLWfrtx0/v3knpr DCChhc9p5a2KdzlroSYHjFjfYn6IriGlW8aEKMJH1BUwRsd8S7Fh9cYzk0kX9lZ7 w9n1q31u3M1F4nKRH0YDRi7fD+HUUsWLsQJFP1Mzs2E524ik4ir5MW9aipMfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU42AKxGwCrsHGM/xp9EXKDfiJopYwHwYDVR0j BBgwFoAUC+/B7Fk7FsebxWAO9YE7DMbiSL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ4NzEzMDMtMDIxYS00YTBiLTllZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1 OTNCMTZDNzlCQzU2MDBFRjU4MTNCMENDNkUyNDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkVGQzFFQzU5M0IxNkM3OUJDNTYwMEVGNTgxM0IwQ0M2RTI0 OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNC MENDNkUyNDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuk9AT5zqRklLhRlxgvwsJZQMuHJkkX1VML lbv2gC9YT263prWh/lPiqRIoSA8nS3prp26eQ9vuBDtMhPTBLGjDiQwkwN+NVkIl 8vw4fJhm6msR2jyRBw6sQ5lJjjOR12plDVAUDE997EElobvbPjdbTIVrEkL7ljvV w+tV26rQGGDjLzECpmmWdo27TPtT8Gzizzf4w91UU8I1XCbWN1FADaRfp5VHDKRx H5zYK72dLZShjsxaPLtyoqBX+fA4BM9CzPJTYmw4wV10nQ0xOmOm4HIh0LAvvPC8 Ck5E1NKjoLCzR2pYQYQYQx3sH6I++UFUX3MjkFZ+oRpUH3832Ms= -----END CERTIFICATE-----Generated at Tue Sep 22 01:52:16 2026 by rpki-client