$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: rev46Ph+9Ibf0nlC9Fb91fhT6EAjsmE4SLGVP32aylI= Subject key identifier: 9D:54:09:69:ED:7E:1A:33:1F:85:93:73:09:03:C0:A2:9C:A2:74:CE Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 4D326D5E9A7F105CF89B0412EE2C04AAD5489975 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: F9 Signing time: Mon 02 Nov 2026 10:00:14 +0000 Manifest this update: Mon 02 Nov 2026 09:55:14 +0000 Manifest next update: Tue 03 Nov 2026 10:07:14 +0000 Files and hashes: 1: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: vHOaUak33zEk844BAgOpx7LkdQvK6IebPYifkaNgUBQ=) 2: 3136302e3138372e3135302e302f32342d3234203d3e20313533313237.roa (hash: DNx0QLWpr1YneqLawB/18FpPinDAJ9roVaakfpCQ+z0=) 3: 3136302e3138372e3135312e302f32342d3234203d3e20313533313237.roa (hash: PY2cdm4cDThhK3Nzh3f/7vmBzsiNx5GQah9qgEoI//k=) 4: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:32:6d:5e:9a:7f:10:5c:f8:9b:04:12:ee:2c:04:aa:d5:48:99:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Nov 2 09:55:14 2026 GMT Not After : Nov 3 10:07:14 2026 GMT Subject: CN=9D540969ED7E1A331F8593730903C0A29CA274CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8d:0a:9a:d3:85:58:a9:04:66:f4:c2:06:90: 54:2d:f5:2e:3e:00:24:39:79:e3:dc:a9:8d:7c:a5: fa:7f:49:fe:8c:ed:d9:ea:72:62:ac:d1:7d:21:fe: 29:dc:a7:76:8c:1e:5a:96:35:c9:db:4f:f5:ec:f0: 79:c4:97:f6:6d:f8:47:75:1e:0a:0f:4c:ac:8b:84: 90:8e:fa:2a:1e:2d:4e:f7:5f:f6:f2:04:5f:96:57: 51:94:e1:3e:d7:a9:e7:a9:4c:1b:32:d1:8a:ef:f0: cf:d7:9f:71:3e:97:c0:46:44:68:85:1d:7e:91:ee: 42:9d:79:f4:76:7e:34:80:cb:78:fe:fe:2b:5f:6b: 35:57:27:4d:63:42:d5:52:65:fe:d6:91:d2:08:e9: c0:a7:26:0c:4b:aa:ae:4c:22:bb:2c:2d:f7:47:c2: d2:62:fd:58:8f:53:54:a4:66:9d:bf:97:3a:7f:5c: ec:87:82:f7:bf:f7:62:ff:5a:55:94:fd:b2:16:b4: 59:b7:f2:38:50:44:1d:9c:6a:1b:52:1a:98:7f:73: e4:89:64:fb:80:bb:ca:24:ba:a5:50:c0:db:6f:78: a4:1e:49:26:b0:e2:1a:b1:b3:b4:ae:da:32:9f:66: 97:ea:22:40:86:b7:bf:80:ea:52:ea:e1:5f:9f:0a: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:54:09:69:ED:7E:1A:33:1F:85:93:73:09:03:C0:A2:9C:A2:74:CE X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5f:02:c2:c9:35:24:87:a9:5e:13:ac:69:d7:a4:b9:0e:8b: 11:11:4f:b1:ee:ad:61:dc:d3:00:ab:68:6a:81:43:5d:81:45: 6b:d3:4d:15:7e:da:e5:01:5c:b7:59:73:ef:0c:fd:fc:96:bd: d0:d6:c3:fc:69:93:f9:50:ff:65:ef:bd:ac:be:40:29:b4:99: 30:cf:c0:d9:7f:47:1a:62:cd:5b:af:f0:63:92:7b:ea:a1:32: af:f4:c5:d6:2c:32:7e:9f:d6:8d:7b:5b:a0:a8:60:45:a5:51: 2e:71:7f:90:d6:ea:f4:dd:05:14:b0:32:a7:36:9a:5f:04:64: bd:a3:eb:e8:42:67:3b:45:c3:81:21:20:dc:51:b1:35:48:95: c0:c2:29:b4:06:31:89:c9:6a:34:36:53:74:a3:d1:1d:c1:48: 05:d5:67:81:ef:71:f7:2a:d3:28:c6:18:92:55:6a:e6:8b:bb: 47:88:fb:81:a7:ac:d0:f8:09:71:ed:3e:d8:6e:4d:09:f7:9b: f2:a9:df:c6:04:2b:2d:09:e0:35:53:14:3a:6b:70:6e:df:18: 98:0c:ee:d5:13:54:62:bb:10:c8:ab:ad:93:2e:93:48:5a:4b: 79:10:f9:a8:41:c9:0c:a8:4c:9a:0d:bd:66:52:f7:4e:af:6e: f9:6d:e0:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTJtXpp/EFz4mwQS7iwEqtVImXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjExMDIwOTU1MTRaFw0yNjExMDMxMDA3MTRaMDMxMTAvBgNV BAMTKDlENTQwOTY5RUQ3RTFBMzMxRjg1OTM3MzA5MDNDMEEyOUNBMjc0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+jQqa04VYqQRm9MIGkFQt9S4+ ACQ5eePcqY18pfp/Sf6M7dnqcmKs0X0h/incp3aMHlqWNcnbT/Xs8HnEl/Zt+Ed1 HgoPTKyLhJCO+ioeLU73X/byBF+WV1GU4T7XqeepTBsy0Yrv8M/Xn3E+l8BGRGiF HX6R7kKdefR2fjSAy3j+/itfazVXJ01jQtVSZf7WkdII6cCnJgxLqq5MIrssLfdH wtJi/ViPU1SkZp2/lzp/XOyHgve/92L/WlWU/bIWtFm38jhQRB2cahtSGph/c+SJ ZPuAu8okuqVQwNtveKQeSSaw4hqxs7Su2jKfZpfqIkCGt7+A6lLq4V+fCpM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnVQJae1+GjMfhZNzCQPAopyidM4wHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZfAsLJNSSHqV4TrGnXpLkOixERT7HurWHc 0wCraGqBQ12BRWvTTRV+2uUBXLdZc+8M/fyWvdDWw/xpk/lQ/2Xvvay+QCm0mTDP wNl/RxpizVuv8GOSe+qhMq/0xdYsMn6f1o17W6CoYEWlUS5xf5DW6vTdBRSwMqc2 ml8EZL2j6+hCZztFw4EhINxRsTVIlcDCKbQGMYnJajQ2U3Sj0R3BSAXVZ4Hvcfcq 0yjGGJJVauaLu0eI+4GnrND4CXHtPthuTQn3m/Kp38YEKy0J4DVTFDprcG7fGJgM 7tUTVGK7EMirrZMuk0haS3kQ+ahByQyoTJoNvWZS906vbvlt4AI= -----END CERTIFICATE-----Generated at Mon Nov 2 14:16:36 2026 by rpki-client