$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: oG+qVOBl6v8hhHi8pxsRc8oMfCbTPxaI+2dXCiOWQq0= Subject key identifier: 64:17:82:23:3E:F1:30:B9:F0:41:D6:11:90:3C:5C:69:D8:01:66:2C Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 3BA24735847AAC71CE7D1F84354E14F0F5E343A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: BE Signing time: Tue 22 Sep 2026 02:39:45 +0000 Manifest this update: Tue 22 Sep 2026 02:34:45 +0000 Manifest next update: Wed 23 Sep 2026 04:40:45 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) 2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: kKfGDMu9OkcHzdYEw8GtulIuE85zMxZdrJJJRXiQbKo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:40:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a2:47:35:84:7a:ac:71:ce:7d:1f:84:35:4e:14:f0:f5:e3:43:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Sep 22 02:34:45 2026 GMT Not After : Sep 23 04:40:45 2026 GMT Subject: CN=641782233EF130B9F041D611903C5C69D801662C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:12:f0:e6:8d:8c:bc:87:74:f2:fd:b0:a7: a4:9d:02:2f:13:43:53:12:bf:5c:65:0b:be:37:2c: 20:3d:00:4e:0f:ad:5a:63:30:ff:9e:95:06:7f:10: 8c:f2:48:c0:f7:bb:bf:db:2a:ac:f4:07:57:b1:f0: 97:63:1a:a1:d6:03:73:aa:bd:bf:26:0d:a2:ef:c3: a0:f8:94:be:89:35:62:25:22:eb:b2:93:20:1c:0a: cb:ce:dc:3a:54:20:3b:bb:aa:0b:aa:83:f3:7b:c1: b5:fc:9e:b6:8a:b5:ab:cf:3f:27:68:86:d7:b2:0e: 48:f9:9d:5e:2f:cd:df:88:81:d0:c1:3f:af:fc:26: 1d:f4:80:85:d3:60:0d:2d:34:63:46:63:42:e7:af: a1:4b:8b:13:d0:57:38:ae:99:9a:c5:41:43:cd:32: 54:44:0d:04:29:90:5a:19:27:d1:f7:da:d7:24:33: de:81:bc:c8:ea:87:35:42:10:ec:d9:d5:f2:d3:77: dc:7f:b4:0c:c9:ba:17:5a:34:27:cb:d6:fc:9b:53: 2c:b9:11:94:a3:42:1a:60:3e:da:fc:10:5c:27:20: b9:0f:6b:b2:e0:b5:55:ff:f7:5a:95:c6:2b:6f:c2: 80:d9:30:ca:12:60:6f:37:e6:d7:9b:9e:ac:b1:23: 6f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:17:82:23:3E:F1:30:B9:F0:41:D6:11:90:3C:5C:69:D8:01:66:2C X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6d:f1:ab:fa:0b:a4:72:8f:af:50:38:e8:83:90:fc:c2:59: 83:18:c8:2d:db:6a:72:37:ea:75:a9:20:f1:66:e7:11:52:cc: 4f:b1:52:50:98:08:b1:4c:8a:ca:53:13:89:8d:ce:f0:64:52: 2d:2f:24:9c:1b:88:61:b7:37:6a:30:a1:b4:10:9d:9d:f8:05: 92:5d:0c:23:66:43:ef:30:85:fd:25:d5:3e:f4:1b:af:4c:86: 02:fe:64:f0:ea:de:fa:29:64:16:2d:68:46:d3:dc:8e:ec:30: df:4b:2d:ea:09:e0:3e:fd:29:12:bc:bf:28:90:5b:80:5d:5a: 41:b4:25:ac:24:57:03:68:df:a5:78:f1:32:d7:51:6d:55:3f: 22:62:22:c5:e8:06:96:69:fb:59:6d:42:35:67:b7:3b:33:31: 92:12:15:0e:f8:db:d0:54:03:fe:31:f5:04:07:5f:38:7b:b2: 89:81:de:f4:70:2a:30:55:1e:3a:5a:50:48:98:3b:05:f4:fa: 37:c7:8e:90:55:d1:07:95:95:c2:b8:30:c1:77:cd:72:e8:1b: 50:96:7a:96:2f:d8:eb:70:86:f2:c2:09:54:d1:85:51:be:4c: 7b:b8:b2:e0:85:21:78:c3:af:5a:fa:4d:83:71:47:c3:97:a1: e7:a7:3b:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6JHNYR6rHHOfR+ENU4U8PXjQ6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA5MjIwMjM0NDVaFw0yNjA5MjMwNDQwNDVaMDMxMTAvBgNV BAMTKDY0MTc4MjIzM0VGMTMwQjlGMDQxRDYxMTkwM0M1QzY5RDgwMTY2MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStBLw5o2MvId08v2wp6SdAi8T Q1MSv1xlC743LCA9AE4PrVpjMP+elQZ/EIzySMD3u7/bKqz0B1ex8JdjGqHWA3Oq vb8mDaLvw6D4lL6JNWIlIuuykyAcCsvO3DpUIDu7qguqg/N7wbX8nraKtavPPydo hteyDkj5nV4vzd+IgdDBP6/8Jh30gIXTYA0tNGNGY0Lnr6FLixPQVziumZrFQUPN MlREDQQpkFoZJ9H32tckM96BvMjqhzVCEOzZ1fLTd9x/tAzJuhdaNCfL1vybUyy5 EZSjQhpgPtr8EFwnILkPa7LgtVX/91qVxitvwoDZMMoSYG835tebnqyxI281AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZBeCIz7xMLnwQdYRkDxcadgBZiwwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNt8av6C6Ryj69QOOiDkPzCWYMYyC3banI3 6nWpIPFm5xFSzE+xUlCYCLFMispTE4mNzvBkUi0vJJwbiGG3N2owobQQnZ34BZJd DCNmQ+8whf0l1T70G69MhgL+ZPDq3vopZBYtaEbT3I7sMN9LLeoJ4D79KRK8vyiQ W4BdWkG0JawkVwNo36V48TLXUW1VPyJiIsXoBpZp+1ltQjVntzszMZISFQ7429BU A/4x9QQHXzh7somB3vRwKjBVHjpaUEiYOwX0+jfHjpBV0QeVlcK4MMF3zXLoG1CW epYv2OtwhvLCCVTRhVG+THu4suCFIXjDr1r6TYNxR8OXoeenO7k= -----END CERTIFICATE-----Generated at Tue Sep 22 09:28:53 2026 by rpki-client