$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: vPYl9HSl7UA9ueFT5Lfs0unW2tRtrQTPxksc2HJvyjI= Subject key identifier: DF:40:7B:30:D0:ED:20:04:5F:B7:69:9C:8B:C5:97:C1:F6:FF:FF:C6 Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 53EC7AEEF0D07FAED0B7922FD6C9FBE6E3D014F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 02:51:06 +0000 Manifest this update: Tue 03 Nov 2026 02:46:06 +0000 Manifest next update: Wed 04 Nov 2026 06:35:06 +0000 Files and hashes: 1: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: gzrtubp01aZ6EoWNhRH2OjDoELSVEo0xByOSmr+blAM=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 06:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ec:7a:ee:f0:d0:7f:ae:d0:b7:92:2f:d6:c9:fb:e6:e3:d0:14:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: Nov 3 02:46:06 2026 GMT Not After : Nov 4 06:35:06 2026 GMT Subject: CN=DF407B30D0ED20045FB7699C8BC597C1F6FFFFC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c7:d5:21:1e:29:1a:a3:23:fd:3b:b3:08:73: bc:b9:be:2e:76:ee:30:4f:36:28:a2:28:9c:05:6b: 46:e2:50:70:ba:99:19:3a:4b:43:7c:1b:9b:fe:b1: d1:33:da:c1:4e:4d:38:78:97:c2:37:75:7d:fb:2c: fd:e3:29:fd:27:ca:f3:1f:61:74:36:0a:aa:d3:1f: 9d:cd:40:f0:d4:1d:b4:a1:2f:7a:59:a0:90:ae:db: 29:c6:d6:2c:95:44:da:d1:3b:26:72:35:51:f5:e0: 80:20:5f:1c:3e:97:a2:dd:ec:bf:9e:43:c1:6b:50: 7c:33:ae:d6:9d:3a:54:12:27:93:f4:84:ed:d8:26: 1f:22:7b:33:21:f1:4f:d0:b0:b4:64:c5:55:cf:78: 76:44:de:59:9e:7a:cc:c4:a9:28:33:1c:fd:a6:ab: c8:86:d2:06:a5:a7:f9:40:87:8c:48:58:c6:7c:b3: e4:80:c4:a3:ea:69:1d:c5:c6:a0:21:90:82:3e:51: ee:7f:e7:7f:79:f5:82:35:b2:fe:90:8c:b9:3d:c4: 46:ee:3c:c9:e3:bf:ae:ab:19:c8:f2:90:1f:cb:b5: 24:b5:b5:a1:a4:c9:d2:37:c0:c6:a0:88:72:df:bd: 43:6f:d0:12:40:2b:a7:3a:79:5d:a9:22:98:e0:f7: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:7B:30:D0:ED:20:04:5F:B7:69:9C:8B:C5:97:C1:F6:FF:FF:C6 X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:32:25:f8:82:d4:6b:1f:5c:2a:13:b0:a8:d0:4e:37:a7:1a: 85:d4:62:4b:e2:20:bb:2a:b0:a3:ef:55:28:a3:10:76:e8:fb: 85:f1:83:e6:9c:d1:3b:29:96:34:38:a1:1e:27:3f:45:47:e9: 0a:9b:9a:fc:ff:ef:34:00:d3:62:86:07:00:f6:06:da:9f:4d: 16:d7:7a:e1:30:d8:cb:5a:ae:eb:f8:ab:f0:ef:a8:e3:83:1a: c2:74:b1:d8:a9:ca:c4:61:6a:02:98:9b:e0:38:a1:dd:61:ce: 00:c9:fd:60:4f:e6:c2:11:30:b4:21:42:cc:5d:5e:ad:50:dd: e1:a2:bc:df:5d:5a:c5:28:17:f2:86:e2:53:0d:69:34:a8:ff: 5e:74:38:8c:08:17:89:fa:49:4f:b2:9c:28:b0:f0:68:22:0e: a0:cb:45:b4:88:ee:b1:03:3e:e4:fd:6a:4e:04:5f:e2:48:9f: 8f:1f:3a:d3:01:db:0b:b8:4f:cb:65:03:8b:8c:df:98:3f:ac: 94:3f:71:78:53:4f:ff:d6:a7:19:d1:64:33:7f:00:20:e3:94: 28:5e:df:38:fa:b5:31:fe:27:90:50:54:24:fe:3d:7d:d6:7d: d7:80:9d:c6:6b:d0:c8:d9:c2:76:b0:26:2e:1e:b3:9c:29:19: 0d:63:d6:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+x67vDQf67Qt5Iv1sn75uPQFPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjExMDMwMjQ2MDZaFw0yNjExMDQwNjM1MDZaMDMxMTAvBgNV BAMTKERGNDA3QjMwRDBFRDIwMDQ1RkI3Njk5QzhCQzU5N0MxRjZGRkZGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUx9UhHikaoyP9O7MIc7y5vi52 7jBPNiiiKJwFa0biUHC6mRk6S0N8G5v+sdEz2sFOTTh4l8I3dX37LP3jKf0nyvMf YXQ2CqrTH53NQPDUHbShL3pZoJCu2ynG1iyVRNrROyZyNVH14IAgXxw+l6Ld7L+e Q8FrUHwzrtadOlQSJ5P0hO3YJh8iezMh8U/QsLRkxVXPeHZE3lmeeszEqSgzHP2m q8iG0galp/lAh4xIWMZ8s+SAxKPqaR3FxqAhkII+Ue5/53959YI1sv6QjLk9xEbu PMnjv66rGcjykB/LtSS1taGkydI3wMagiHLfvUNv0BJAK6c6eV2pIpjg9yHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30B7MNDtIARft2mci8WXwfb//8YwHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwyJfiC1GsfXCoTsKjQTjenGoXUYkviILsq sKPvVSijEHbo+4Xxg+ac0TspljQ4oR4nP0VH6Qqbmvz/7zQA02KGBwD2BtqfTRbX euEw2Mtaruv4q/DvqOODGsJ0sdipysRhagKYm+A4od1hzgDJ/WBP5sIRMLQhQsxd Xq1Q3eGivN9dWsUoF/KG4lMNaTSo/150OIwIF4n6SU+ynCiw8GgiDqDLRbSI7rED PuT9ak4EX+JIn48fOtMB2wu4T8tlA4uM35g/rJQ/cXhTT//WpxnRZDN/ACDjlChe 3zj6tTH+J5BQVCT+PX3WfdeAncZr0MjZwnawJi4es5wpGQ1j1nM= -----END CERTIFICATE-----Generated at Tue Nov 3 12:13:17 2026 by rpki-client