$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: 4aQ2cd1QcDafEhuLrh4YRyyV/PzT6ZGjNxwFu2JMlDw= Subject key identifier: F6:EE:27:58:BE:6B:BB:C8:7D:86:05:61:1D:4D:95:5F:9D:F9:EB:7E Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 4C758A4483C2F9999FEFDC506C9CE2A3B3FD672D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 15:30:53 +0000 Manifest this update: Mon 21 Sep 2026 15:25:53 +0000 Manifest next update: Tue 22 Sep 2026 18:09:53 +0000 Files and hashes: 1: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) 2: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: 0k/CV34Snmyruy+2DFiYXqEX1u1AEt8X/SYYAu968lE=) 3: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:75:8a:44:83:c2:f9:99:9f:ef:dc:50:6c:9c:e2:a3:b3:fd:67:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Sep 21 15:25:53 2026 GMT Not After : Sep 22 18:09:53 2026 GMT Subject: CN=F6EE2758BE6BBBC87D8605611D4D955F9DF9EB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:34:7e:7b:a9:2c:f7:af:b1:45:97:ed:d3: ea:00:15:e0:0d:e8:92:ca:e8:a0:10:7f:0b:6c:ef: bd:0c:f5:3b:50:35:2f:cc:7d:5c:1a:01:4f:70:19: 59:a0:ae:e2:00:87:85:4b:b2:3f:21:41:37:7b:29: d4:c9:97:39:1a:93:5b:c9:ab:0d:9b:de:8a:a0:c8: f2:02:48:e0:58:33:03:13:88:97:5b:47:38:e8:48: 57:f1:0f:7c:d5:f4:78:be:78:ff:79:f7:d9:5f:8a: 4f:e3:16:61:36:e8:9f:e7:41:cf:aa:54:c9:f7:7c: dc:4d:e9:9b:6a:ed:c7:e0:81:72:8a:e5:64:1d:c3: ed:6a:c9:be:1e:b1:94:e2:a6:f0:7c:d9:56:d3:8e: 77:38:fa:5b:6c:f5:73:e1:18:1c:26:20:02:1c:54: b4:97:49:a0:05:48:3d:bb:14:18:d5:dc:16:88:5b: 4e:ee:c2:e6:15:ba:df:4b:9b:7f:66:21:b5:b0:da: 3d:7b:d4:7e:0b:be:00:d5:67:09:54:9c:38:49:f9: da:0d:6b:ac:34:da:ea:86:ec:cb:08:82:9b:e9:91: c7:cd:e9:87:82:a5:de:e0:cd:93:78:a3:f6:30:1a: 33:17:64:c6:0c:dd:e3:21:5c:9f:09:e9:1d:c3:2f: e4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:27:58:BE:6B:BB:C8:7D:86:05:61:1D:4D:95:5F:9D:F9:EB:7E X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:42:f0:da:1e:80:4a:2d:49:05:d8:12:28:af:55:85:de:bf: c4:14:15:e6:c0:b4:16:89:1d:a4:f3:10:d6:a7:73:3b:a1:cb: 4e:e3:ec:57:50:1e:fd:98:86:10:78:bb:b9:d3:bc:62:92:1f: d2:da:9c:f3:30:73:90:b4:89:1b:0b:6e:4e:28:49:77:26:f5: 9e:b9:04:71:3f:0d:b7:32:c0:51:a5:a1:e2:66:12:99:23:00: 36:8e:e9:8a:15:90:3f:8e:09:9d:fa:70:64:41:68:58:5a:c9: d0:89:63:04:3d:0c:53:a7:ca:6f:72:41:13:5a:29:89:1b:c9: b0:2b:8f:1b:f9:93:08:ca:87:2d:97:54:d0:af:46:b1:fc:51: 89:02:ba:27:80:fc:ae:38:60:de:52:11:32:aa:5f:17:44:0c: fe:d0:0f:ff:7e:f9:ac:5b:70:36:34:7e:bf:b2:85:42:ad:91: 7c:07:9f:68:d9:f9:ae:9d:be:ab:95:b1:76:ac:e3:50:18:86: 86:36:10:f5:4f:81:6c:9c:4b:bc:d7:a2:3c:10:00:9c:19:97: 1c:1d:2f:b6:3a:80:c2:e4:61:4b:82:c3:7a:fd:cd:74:15:fd: a3:2b:62:41:81:59:1e:4a:5d:2f:7c:ca:f0:4a:e8:05:a8:20: 85:da:9e:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHWKRIPC+Zmf79xQbJzio7P9Zy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjA5MjExNTI1NTNaFw0yNjA5MjIxODA5NTNaMDMxMTAvBgNV BAMTKEY2RUUyNzU4QkU2QkJCQzg3RDg2MDU2MTFENEQ5NTVGOURGOUVCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KDR+e6ks96+xRZft0+oAFeAN 6JLK6KAQfwts770M9TtQNS/MfVwaAU9wGVmgruIAh4VLsj8hQTd7KdTJlzkak1vJ qw2b3oqgyPICSOBYMwMTiJdbRzjoSFfxD3zV9Hi+eP9599lfik/jFmE26J/nQc+q VMn3fNxN6Ztq7cfggXKK5WQdw+1qyb4esZTipvB82VbTjnc4+lts9XPhGBwmIAIc VLSXSaAFSD27FBjV3BaIW07uwuYVut9Lm39mIbWw2j171H4LvgDVZwlUnDhJ+doN a6w02uqG7MsIgpvpkcfN6YeCpd7gzZN4o/YwGjMXZMYM3eMhXJ8J6R3DL+RVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9u4nWL5ru8h9hgVhHU2VX535634wHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlC8NoegEotSQXYEiivVYXev8QUFebAtBaJ HaTzENanczuhy07j7FdQHv2YhhB4u7nTvGKSH9LanPMwc5C0iRsLbk4oSXcm9Z65 BHE/DbcywFGloeJmEpkjADaO6YoVkD+OCZ36cGRBaFhaydCJYwQ9DFOnym9yQRNa KYkbybArjxv5kwjKhy2XVNCvRrH8UYkCuieA/K44YN5SETKqXxdEDP7QD/9++axb cDY0fr+yhUKtkXwHn2jZ+a6dvquVsXas41AYhoY2EPVPgWycS7zXojwQAJwZlxwd L7Y6gMLkYUuCw3r9zXQV/aMrYkGBWR5KXS98yvBK6AWoIIXanqE= -----END CERTIFICATE-----Generated at Tue Sep 22 06:56:48 2026 by rpki-client