$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft File: BF072074B801AFE1292270FB7A3E090A276EB893.mft (raw, json) Hash identifier: eliQJLP0jRpcC08B8LBwc+xMe1sHZHWEhXRXo/O/2mg= Subject key identifier: 1D:84:15:3B:A1:93:01:1A:A8:AE:BF:CE:FA:BC:85:C2:A0:C9:CC:E6 Authority key identifier: BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 Certificate issuer: /CN=BF072074B801AFE1292270FB7A3E090A276EB893 Certificate serial: 56CB0EBE3BA33ECB26777036315B01FE23D69BA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft Manifest number: FA Signing time: Wed 04 Nov 2026 10:56:44 +0000 Manifest this update: Wed 04 Nov 2026 10:51:44 +0000 Manifest next update: Thu 05 Nov 2026 13:59:44 +0000 Files and hashes: 1: 3231302e37392e3134312e302f32342d3234203d3e20313532303438.roa (hash: BKt7x+HSwXt0hFZm36Nu9CrkQ0Drly/dgK6bERbk3xk=) 2: BF072074B801AFE1292270FB7A3E090A276EB893.crl (hash: 4qP+ZHVV9yl+imfJx0R0dgDp9bEbfvLnJ3vshV5hdqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:cb:0e:be:3b:a3:3e:cb:26:77:70:36:31:5b:01:fe:23:d6:9b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF072074B801AFE1292270FB7A3E090A276EB893 Validity Not Before: Nov 4 10:51:44 2026 GMT Not After : Nov 5 13:59:44 2026 GMT Subject: CN=1D84153BA193011AA8AEBFCEFABC85C2A0C9CCE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:3e:62:df:f0:87:22:c4:d7:d6:9f:97:83: d0:e2:86:e1:86:0d:74:1a:34:b4:59:c4:02:0e:92: 32:d0:a9:81:63:14:04:0c:34:5f:cf:38:76:8c:8f: 4e:74:e3:56:05:32:fe:82:5b:3a:8d:a2:dc:99:e3: 15:14:cd:27:2e:0a:70:ff:58:45:53:75:4b:d1:73: 44:ac:7b:81:ca:7e:ad:f2:a6:11:c0:33:8c:a9:9d: 32:eb:cc:94:d1:91:88:53:97:34:89:32:2c:df:76: 50:b4:fb:2f:00:3f:95:07:30:c9:67:a6:e6:ce:b9: 8d:4b:d9:04:3f:c1:31:07:e3:da:4f:27:8f:1f:6b: b1:5d:1d:ab:df:13:d8:0b:54:f9:c0:16:2c:7a:05: 29:ae:94:9e:be:17:4d:be:e7:dc:1b:c7:0b:a8:76: 79:07:db:70:62:b3:56:09:c2:fe:05:55:80:d6:99: 6c:34:2f:e9:33:02:6a:65:b5:68:cf:f8:65:b3:32: e7:92:fa:8b:1e:c6:37:c9:86:ff:f1:32:1d:c4:2f: 09:a8:0a:d7:ff:32:71:f1:4c:99:37:79:48:a9:6a: 12:bf:da:dd:77:82:19:52:1a:1a:8e:56:d9:e9:fc: f9:77:3b:5f:85:5e:7d:a1:ee:f1:c2:7a:30:f7:82: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:84:15:3B:A1:93:01:1A:A8:AE:BF:CE:FA:BC:85:C2:A0:C9:CC:E6 X509v3 Authority Key Identifier: keyid:BF:07:20:74:B8:01:AF:E1:29:22:70:FB:7A:3E:09:0A:27:6E:B8:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF072074B801AFE1292270FB7A3E090A276EB893.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1cd7d29b-dd1c-41dd-beef-5642864e86ae/0/BF072074B801AFE1292270FB7A3E090A276EB893.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:84:36:2f:f1:90:54:d1:54:20:89:f2:e6:0e:1a:19:1e:67: 9d:de:a5:22:9f:66:7f:69:f0:c4:2c:24:54:dd:61:c1:77:d8: 9d:db:d6:36:7a:ea:95:5e:cf:24:eb:5c:a7:2d:15:a5:bc:17: 09:7b:22:62:42:f8:1b:5b:a1:10:37:31:92:43:70:1c:db:0c: 4f:63:bf:3e:b3:0e:36:db:df:54:55:7b:08:63:a4:b1:58:da: ce:68:2a:b8:52:be:03:65:cf:b8:0d:d5:17:75:f1:90:5a:16: 50:ad:71:01:35:69:f8:b2:80:f0:7f:17:40:fd:85:56:f0:87: ef:34:60:6c:eb:4e:07:c6:30:dd:6a:2e:77:6b:53:1a:c3:bf: c1:aa:1e:59:18:90:e6:2f:61:76:15:ad:60:61:44:12:49:6a: 58:e2:7b:07:55:ce:91:c9:6a:79:b4:ce:26:24:87:4a:d9:33: 6a:10:35:cd:01:db:76:46:86:8d:37:e3:b3:2b:c1:1c:13:da: 96:b4:aa:e1:33:b1:4f:02:82:13:b4:8d:5c:bb:de:25:66:3d: c9:94:7d:e1:bd:a3:5c:84:d0:b0:5d:cd:58:90:f6:68:02:7f: c4:7f:0d:a1:d9:b3:e9:da:36:00:77:ce:82:64:cb:dc:64:f0: 89:a3:4f:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVssOvjujPssmd3A2MVsB/iPWm6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEy NzZFQjg5MzAeFw0yNjExMDQxMDUxNDRaFw0yNjExMDUxMzU5NDRaMDMxMTAvBgNV BAMTKDFEODQxNTNCQTE5MzAxMUFBOEFFQkZDRUZBQkM4NUMyQTBDOUNDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl0D5i3/CHIsTX1p+Xg9DihuGG DXQaNLRZxAIOkjLQqYFjFAQMNF/POHaMj05041YFMv6CWzqNotyZ4xUUzScuCnD/ WEVTdUvRc0Sse4HKfq3yphHAM4ypnTLrzJTRkYhTlzSJMizfdlC0+y8AP5UHMMln pubOuY1L2QQ/wTEH49pPJ48fa7FdHavfE9gLVPnAFix6BSmulJ6+F02+59wbxwuo dnkH23Bis1YJwv4FVYDWmWw0L+kzAmpltWjP+GWzMueS+osexjfJhv/xMh3ELwmo Ctf/MnHxTJk3eUipahK/2t13ghlSGhqOVtnp/Pl3O1+FXn2h7vHCejD3gra3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYQVO6GTARqorr/O+ryFwqDJzOYwHwYDVR0j BBgwFoAUvwcgdLgBr+EpInD7ej4JCiduuJMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWNkN2QyOWItZGQxYy00MWRkLWJlZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRC ODAxQUZFMTI5MjI3MEZCN0EzRTA5MEEyNzZFQjg5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjA3MjA3NEI4MDFBRkUxMjkyMjcwRkI3QTNFMDkwQTI3NkVC ODkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNkN2QyOWItZGQxYy00MWRkLWJl ZWYtNTY0Mjg2NGU4NmFlLzAvQkYwNzIwNzRCODAxQUZFMTI5MjI3MEZCN0EzRTA5 MEEyNzZFQjg5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCENi/xkFTRVCCJ8uYOGhkeZ53epSKfZn9p 8MQsJFTdYcF32J3b1jZ66pVezyTrXKctFaW8Fwl7ImJC+BtboRA3MZJDcBzbDE9j vz6zDjbb31RVewhjpLFY2s5oKrhSvgNlz7gN1Rd18ZBaFlCtcQE1afiygPB/F0D9 hVbwh+80YGzrTgfGMN1qLndrUxrDv8GqHlkYkOYvYXYVrWBhRBJJaljiewdVzpHJ anm0ziYkh0rZM2oQNc0B23ZGho0347MrwRwT2pa0quEzsU8CghO0jVy73iVmPcmU feG9o1yE0LBdzViQ9mgCf8R/DaHZs+naNgB3zoJky9xk8ImjTwo= -----END CERTIFICATE-----Generated at Wed Nov 4 13:55:02 2026 by rpki-client