$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft File: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft (raw, json) Hash identifier: ugSNWdYr8KSndWeUATAsG2NX5FgYLnyngKGiniNFvgM= Subject key identifier: 40:1D:C1:3B:93:7A:44:5F:A4:64:53:A5:A5:6E:FB:D4:24:AF:9D:D8 Authority key identifier: BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 Certificate issuer: /CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Certificate serial: 1DB74EFA7218AA351126A25A09B53A2F41A210B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 03:01:20 +0000 Manifest this update: Mon 02 Nov 2026 02:56:20 +0000 Manifest next update: Tue 03 Nov 2026 06:55:20 +0000 Files and hashes: 1: BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl (hash: 2/8qk/WFIrMOF9tXcuVpH6ztrhTpEByuibCYs9EvTjw=) 2: 3136302e32322e32322e302f32332d3234203d3e20313532383032.roa (hash: tDYsDAflbcBxokNCYrVdFRBBRfHA9s3JtNKf99TBDJ4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b7:4e:fa:72:18:aa:35:11:26:a2:5a:09:b5:3a:2f:41:a2:10:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC931780E6F09EFDED6D3FF83C9834528A99FAF6 Validity Not Before: Nov 2 02:56:20 2026 GMT Not After : Nov 3 06:55:20 2026 GMT Subject: CN=401DC13B937A445FA46453A5A56EFBD424AF9DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b4:e9:af:d8:a2:92:92:59:3c:0d:f6:9f:56: 0e:52:c6:67:01:d5:de:11:d5:15:31:a8:eb:f1:0d: 86:4e:63:e7:31:ed:d7:79:a0:e0:67:8c:23:9f:cb: 1b:2e:5b:64:eb:e5:97:41:13:d1:9f:79:75:9e:58: a0:7e:b8:99:a5:ff:91:d5:1f:61:37:af:a0:0e:ec: 52:37:2f:d1:82:71:01:49:2a:d7:c9:6c:74:3b:f2: 9f:01:63:03:9d:45:6b:ec:bf:4c:ae:d5:60:ee:0b: e0:a9:97:1d:95:1f:f0:61:4d:b3:30:68:7f:08:49: 8a:cd:31:00:94:3f:0d:1d:ab:2a:5e:ca:4e:45:18: a3:93:d2:36:38:3b:87:b6:7f:a1:e1:98:48:45:fe: eb:df:e0:e7:c9:6b:71:2b:d1:b2:20:ef:32:be:a2: e8:ce:c3:96:99:dd:fb:40:7f:40:48:e4:3a:2d:3a: d4:77:ec:d6:98:ef:04:71:c4:4b:9d:6c:86:88:5b: 1b:08:93:9a:b6:80:a2:e2:f5:ad:39:3f:3b:e2:ab: f3:48:d0:94:47:a5:0d:bb:f3:09:b4:9b:7e:ff:a9: d5:1f:f0:e3:82:18:9a:b1:f2:f4:a6:48:77:d3:56: 0f:ca:73:27:92:66:49:05:8a:2a:ed:af:9c:c3:c9: d1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1D:C1:3B:93:7A:44:5F:A4:64:53:A5:A5:6E:FB:D4:24:AF:9D:D8 X509v3 Authority Key Identifier: keyid:BC:93:17:80:E6:F0:9E:FD:ED:6D:3F:F8:3C:98:34:52:8A:99:FA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/0/BC931780E6F09EFDED6D3FF83C9834528A99FAF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8d:45:30:b3:b7:0c:65:96:5b:dd:8a:75:ce:d5:5a:bd:14: 05:0d:8c:6f:4a:30:91:92:85:98:7a:a3:f4:e9:e7:81:20:4a: ad:ce:1e:d2:dd:48:52:8b:dc:44:9b:7f:e5:71:ef:a4:f2:d1: 00:8a:e5:d2:1d:89:ce:e5:17:78:5b:31:78:44:67:f1:b2:b3: 94:75:ca:cd:c3:91:4d:9f:14:7e:67:79:18:3c:29:7e:6f:d0: f5:7a:44:07:12:6c:c0:c1:db:ec:f3:e5:62:9a:6a:ff:87:95: 46:ce:ee:9e:f6:0c:bd:ca:cf:ce:6e:e8:44:f5:e1:ae:c2:1a: 02:ce:39:40:65:e6:a3:9e:67:6a:c0:71:2a:b1:c6:2d:51:a3: f7:b8:bd:ac:8c:6b:21:48:2e:4a:bd:b0:eb:f6:d4:f1:6c:96: fb:75:de:23:c3:fc:7a:a0:a0:d0:2c:81:26:ff:65:78:92:ba: 73:69:4d:fc:23:9a:1c:34:fa:0d:97:02:ac:db:00:87:0e:5e: 38:45:c1:38:9e:2f:df:58:16:3d:68:f3:47:48:a8:b9:84:04: b9:63:2b:b0:2f:35:c8:d0:f7:48:22:29:05:e9:8e:58:6b:de: ad:db:07:c2:4b:53:d2:37:d3:63:94:fb:f2:10:c3:2d:a4:14: ac:30:9f:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbdO+nIYqjURJqJaCbU6L0GiELIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0NTI4 QTk5RkFGNjAeFw0yNjExMDIwMjU2MjBaFw0yNjExMDMwNjU1MjBaMDMxMTAvBgNV BAMTKDQwMURDMTNCOTM3QTQ0NUZBNDY0NTNBNUE1NkVGQkQ0MjRBRjlERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStOmv2KKSklk8DfafVg5SxmcB 1d4R1RUxqOvxDYZOY+cx7dd5oOBnjCOfyxsuW2Tr5ZdBE9GfeXWeWKB+uJml/5HV H2E3r6AO7FI3L9GCcQFJKtfJbHQ78p8BYwOdRWvsv0yu1WDuC+Cplx2VH/BhTbMw aH8ISYrNMQCUPw0dqypeyk5FGKOT0jY4O4e2f6HhmEhF/uvf4OfJa3Er0bIg7zK+ oujOw5aZ3ftAf0BI5DotOtR37NaY7wRxxEudbIaIWxsIk5q2gKLi9a05Pzviq/NI 0JRHpQ278wm0m37/qdUf8OOCGJqx8vSmSHfTVg/KcyeSZkkFiirtr5zDydHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQB3BO5N6RF+kZFOlpW771CSvndgwHwYDVR0j BBgwFoAUvJMXgObwnv3tbT/4PJg0UoqZ+vYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGY3ZDI4OTQtYzA3Ny00MjFjLWJjMWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBF NkYwOUVGREVENkQzRkY4M0M5ODM0NTI4QTk5RkFGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQzkzMTc4MEU2RjA5RUZERUQ2RDNGRjgzQzk4MzQ1MjhBOTlG QUY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzAvQkM5MzE3ODBFNkYwOUVGREVENkQzRkY4M0M5ODM0 NTI4QTk5RkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmNRTCztwxlllvdinXO1Vq9FAUNjG9KMJGS hZh6o/Tp54EgSq3OHtLdSFKL3ESbf+Vx76Ty0QCK5dIdic7lF3hbMXhEZ/Gys5R1 ys3DkU2fFH5neRg8KX5v0PV6RAcSbMDB2+zz5WKaav+HlUbO7p72DL3Kz85u6ET1 4a7CGgLOOUBl5qOeZ2rAcSqxxi1Ro/e4vayMayFILkq9sOv21PFslvt13iPD/Hqg oNAsgSb/ZXiSunNpTfwjmhw0+g2XAqzbAIcOXjhFwTieL99YFj1o80dIqLmEBLlj K7AvNcjQ90giKQXpjlhr3q3bB8JLU9I302OU+/IQwy2kFKwwn04= -----END CERTIFICATE-----Generated at Mon Nov 2 21:16:54 2026 by rpki-client