$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft File: BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json) Hash identifier: O1woNXSQyZxdGp372GyTq2IRmeVAiKcsF7nK0MC5Bpc= Subject key identifier: 20:CE:0C:1E:AF:E2:3F:AB:CD:A8:5C:31:E3:69:83:EB:8D:ED:F1:52 Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Certificate serial: 09472F1EA6D551AA9A845600CD5CCD3FDBC7053E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 17:22:08 +0000 Manifest this update: Thu 24 Sep 2026 17:17:08 +0000 Manifest next update: Fri 25 Sep 2026 20:54:08 +0000 Files and hashes: 1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: kYhCD17CR0YWsRlPcDtpLXKaXafvvkUXc/ijFee15YQ=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:47:2f:1e:a6:d5:51:aa:9a:84:56:00:cd:5c:cd:3f:db:c7:05:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Validity Not Before: Sep 24 17:17:08 2026 GMT Not After : Sep 25 20:54:08 2026 GMT Subject: CN=20CE0C1EAFE23FABCDA85C31E36983EB8DEDF152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:1f:6d:ef:e6:5d:c9:4e:0c:10:af:73:10: a4:15:4d:4f:85:d3:df:57:d6:73:ff:92:82:10:63: 85:e9:63:74:a8:1d:f1:fa:c9:81:c0:5f:0f:e7:84: b2:b4:d8:1d:ac:29:82:6d:90:c1:3c:1d:df:fb:c4: 87:a7:77:82:58:2b:e1:b9:b9:e0:b4:2a:e2:e6:33: d4:31:e3:a1:2d:53:7a:0b:56:e8:ac:f4:2a:4e:02: 15:be:de:d2:4b:05:d7:17:8a:39:1d:04:e1:8d:f8: 77:63:40:9c:d7:dd:51:95:91:97:d8:56:ca:4d:09: 2b:7a:b1:22:05:6f:fe:38:1f:9e:ef:6f:a9:98:96: f4:f4:5e:1d:8f:96:b7:5b:62:63:6d:89:e9:51:7d: 4f:43:f6:f4:6b:a6:2e:b3:7e:3a:ec:95:c8:37:7a: 5c:42:f6:cb:60:4c:13:fa:f9:78:de:bb:5c:bd:df: 7a:c2:33:d9:74:07:8b:f5:26:74:e6:84:20:e1:f2: 45:eb:31:7f:e9:aa:dc:f4:38:06:e4:99:3d:1f:bf: 25:1f:97:92:0e:cf:8e:3c:8c:3e:cf:5d:c9:27:fd: d7:5c:ae:9f:da:2a:47:bc:d8:77:e2:a5:60:e3:87: 5d:76:5f:9d:fe:15:f8:9a:63:01:d4:14:7a:96:ce: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:0C:1E:AF:E2:3F:AB:CD:A8:5C:31:E3:69:83:EB:8D:ED:F1:52 X509v3 Authority Key Identifier: keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:9e:3e:a1:47:3b:88:0b:af:c3:4d:63:6e:33:e0:19:86:25: b0:4c:44:3b:d1:e7:59:43:da:0f:ba:63:5a:9d:8b:5d:79:da: fa:44:41:f1:b3:f5:8e:45:64:86:f1:68:e0:9d:b2:ef:82:52: f9:fb:f9:02:db:be:54:6e:e7:03:57:89:de:28:08:a3:ef:f0: fd:00:ef:d2:34:f9:6f:c8:e3:5d:c3:3d:9c:75:8b:c4:0e:e0: 23:cc:04:da:f3:4f:4a:bb:62:3f:94:2b:3f:58:fe:61:a2:53: 78:5d:ea:65:f3:9f:fa:8f:dd:fb:a3:67:ae:89:eb:10:de:76: f0:a8:37:77:6f:5b:4c:64:b4:4d:34:2d:cc:15:da:2e:c7:f6: bb:80:e7:92:6e:48:5d:db:35:43:b5:3a:ad:1c:ca:df:6d:86: 69:11:1e:1c:d6:6a:10:2d:e6:c3:f4:63:ce:93:4d:ed:b8:d3: 3a:b6:f9:48:e3:df:6e:fd:a3:a4:8c:53:65:e1:39:83:50:80: cd:50:d5:49:62:8d:53:79:d7:75:97:9e:93:05:88:78:fb:bf: c4:32:4c:ee:4e:a6:3d:49:3f:f8:dd:82:8b:02:12:a2:9a:96: 4e:36:b8:66:16:40:4f:0b:6f:4d:ef:4a:77:4c:a0:8c:13:19: 0b:ea:2a:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUcvHqbVUaqahFYAzVzNP9vHBT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRF NTgxMjAzQjAeFw0yNjA5MjQxNzE3MDhaFw0yNjA5MjUyMDU0MDhaMDMxMTAvBgNV BAMTKDIwQ0UwQzFFQUZFMjNGQUJDREE4NUMzMUUzNjk4M0VCOERFREYxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGR9t7+ZdyU4MEK9zEKQVTU+F 099X1nP/koIQY4XpY3SoHfH6yYHAXw/nhLK02B2sKYJtkME8Hd/7xIend4JYK+G5 ueC0KuLmM9Qx46EtU3oLVuis9CpOAhW+3tJLBdcXijkdBOGN+HdjQJzX3VGVkZfY VspNCSt6sSIFb/44H57vb6mYlvT0Xh2PlrdbYmNtielRfU9D9vRrpi6zfjrslcg3 elxC9stgTBP6+Xjeu1y933rCM9l0B4v1JnTmhCDh8kXrMX/pqtz0OAbkmT0fvyUf l5IOz448jD7PXckn/ddcrp/aKke82HfipWDjh112X53+FfiaYwHUFHqWzh4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIM4MHq/iP6vNqFwx42mD643t8VIwHwYDVR0j BBgwFoAUv4HseMyKYfz/cahiMhpSBOWBIDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg2OGNmMjItZDAyOS00NWUyLTllMjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhD QzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRFNTgxMjAzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjgxRUM3OENDOEE2MUZDRkY3MUE4NjIzMjFBNTIwNEU1ODEy MDNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUy MDRFNTgxMjAzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGePqFHO4gLr8NNY24z4BmGJbBMRDvR51lD 2g+6Y1qdi1152vpEQfGz9Y5FZIbxaOCdsu+CUvn7+QLbvlRu5wNXid4oCKPv8P0A 79I0+W/I413DPZx1i8QO4CPMBNrzT0q7Yj+UKz9Y/mGiU3hd6mXzn/qP3fujZ66J 6xDedvCoN3dvW0xktE00LcwV2i7H9ruA55JuSF3bNUO1Oq0cyt9thmkRHhzWahAt 5sP0Y86TTe240zq2+Ujj3279o6SMU2XhOYNQgM1Q1UlijVN513WXnpMFiHj7v8Qy TO5Opj1JP/jdgosCEqKalk42uGYWQE8Lb03vSndMoIwTGQvqKsQ= -----END CERTIFICATE-----Generated at Thu Sep 24 22:55:47 2026 by rpki-client