$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft File: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft (raw, json) Hash identifier: tSsBFgdsrFI0zUp5HPVHaurDPJXTv5LMWZ03DHMHMDY= Subject key identifier: BF:87:7B:43:BE:70:E3:7A:E4:BF:18:AB:36:F7:D3:73:46:6B:F5:F1 Authority key identifier: 0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE Certificate issuer: /CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Certificate serial: 1EAEC3D586D8EC24D42686314DAA1369A12D7490 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 15:43:02 +0000 Manifest this update: Wed 04 Nov 2026 15:38:02 +0000 Manifest next update: Thu 05 Nov 2026 16:27:02 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: 8ZFSRd4IMl+7UA1+qh6mSwLg2Ure6CZXxSWgxu+4aBo=) 2: 0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl (hash: RMBhwOwjnsedyQLktBqYBDqiZKxfBZBkCx+n1qFzdGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 16:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ae:c3:d5:86:d8:ec:24:d4:26:86:31:4d:aa:13:69:a1:2d:74:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE Validity Not Before: Nov 4 15:38:02 2026 GMT Not After : Nov 5 16:27:02 2026 GMT Subject: CN=BF877B43BE70E37AE4BF18AB36F7D373466BF5F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:0f:62:3f:59:4b:06:d4:18:b4:9a:a2:fa: a8:c5:66:4b:58:86:03:ef:10:0e:71:45:f1:0f:cf: f0:41:f8:9b:66:07:64:21:7b:c4:9e:4e:22:8d:67: 7a:ab:32:c4:d2:37:96:95:c4:6b:0f:04:01:5d:d7: 90:b9:1c:c1:96:97:7e:0b:3c:b9:d9:e3:b5:34:84: 6d:47:0f:e3:58:0d:89:ae:43:ab:9c:31:e9:e0:38: 3d:e9:9b:13:70:5a:69:1a:38:d8:4c:be:40:35:2b: d7:d9:28:82:bf:b1:ab:4b:e1:34:bd:c2:47:a4:06: 4a:17:a8:ec:cb:ec:9b:8b:a1:f5:bf:38:6d:ce:3b: 16:25:f6:de:19:66:2a:4b:f6:55:81:3e:ca:16:d7: c3:99:77:41:4a:43:5f:35:ce:48:e5:e1:01:28:d5: 1b:1a:9f:9f:da:76:53:22:26:21:9b:03:19:53:6c: d1:12:59:ea:b7:aa:81:58:02:68:b8:b8:c4:78:17: 02:ab:6f:e1:b6:16:5b:37:1a:01:13:5b:7a:c6:aa: 48:58:da:c3:8b:67:39:2c:f6:2a:04:ed:a1:4d:f2: a9:57:7e:8b:11:72:d2:93:3e:78:d9:28:f1:cb:78: f7:e1:a8:91:53:97:26:05:44:0d:7e:b8:8a:21:70: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:7B:43:BE:70:E3:7A:E4:BF:18:AB:36:F7:D3:73:46:6B:F5:F1 X509v3 Authority Key Identifier: keyid:0B:EF:C1:EC:59:3B:16:C7:9B:C5:60:0E:F5:81:3B:0C:C6:E2:48:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/0BEFC1EC593B16C79BC5600EF5813B0CC6E248BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e7:3e:10:9d:65:46:b9:8e:32:cf:f9:fb:d8:63:2e:41:c2: 98:a7:81:82:88:63:68:aa:7d:8e:8b:5d:fe:75:57:bd:bd:2f: 9c:db:5a:46:07:dc:5a:b4:d1:90:73:36:8e:dd:62:32:c5:50: 6e:4f:21:14:d7:a3:2e:43:be:fe:e6:46:eb:80:00:8d:c9:7e: 0d:ab:17:4c:5d:50:f0:38:3c:36:ac:b7:17:70:71:ee:74:da: 25:e4:e2:e1:96:0c:09:a2:7d:79:a9:82:49:f8:ad:56:db:46: 1f:31:b5:4b:dc:7d:53:0b:f2:3b:71:90:5b:95:c5:c8:d7:08: 01:7d:0a:b6:0f:20:d2:68:a6:95:75:8e:f8:94:74:3d:82:0a: 55:d7:71:9e:b2:04:88:a5:35:91:22:fd:4b:fc:f0:28:12:93: 40:81:4f:6b:33:f1:35:f7:94:50:73:ba:e6:2b:7c:e8:07:a2: 0d:3c:df:64:03:38:2a:6b:3a:44:c8:72:95:d4:43:53:43:9f: 5e:08:0c:a9:34:d4:30:31:92:77:8b:07:a7:59:8e:2a:e5:3e: 1c:d7:ea:42:5a:59:3e:63:4e:7b:0b:7a:8d:77:19:31:8e:0f: d4:26:27:1c:4a:2f:ee:a7:fe:5b:10:12:f7:8d:f1:8e:6a:78: 12:09:c7:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHq7D1YbY7CTUJoYxTaoTaaEtdJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNCMEND NkUyNDhCRTAeFw0yNjExMDQxNTM4MDJaFw0yNjExMDUxNjI3MDJaMDMxMTAvBgNV BAMTKEJGODc3QjQzQkU3MEUzN0FFNEJGMThBQjM2RjdEMzczNDY2QkY1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6A9iP1lLBtQYtJqi+qjFZktY hgPvEA5xRfEPz/BB+JtmB2Qhe8SeTiKNZ3qrMsTSN5aVxGsPBAFd15C5HMGWl34L PLnZ47U0hG1HD+NYDYmuQ6ucMengOD3pmxNwWmkaONhMvkA1K9fZKIK/satL4TS9 wkekBkoXqOzL7JuLofW/OG3OOxYl9t4ZZipL9lWBPsoW18OZd0FKQ181zkjl4QEo 1Rsan5/adlMiJiGbAxlTbNESWeq3qoFYAmi4uMR4FwKrb+G2Fls3GgETW3rGqkhY 2sOLZzks9ioE7aFN8qlXfosRctKTPnjZKPHLePfhqJFTlyYFRA1+uIohcDaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4d7Q75w43rkvxirNvfTc0Zr9fEwHwYDVR0j BBgwFoAUC+/B7Fk7FsebxWAO9YE7DMbiSL4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmQ4NzEzMDMtMDIxYS00YTBiLTllZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1 OTNCMTZDNzlCQzU2MDBFRjU4MTNCMENDNkUyNDhCRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQkVGQzFFQzU5M0IxNkM3OUJDNTYwMEVGNTgxM0IwQ0M2RTI0 OEJFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvMEJFRkMxRUM1OTNCMTZDNzlCQzU2MDBFRjU4MTNC MENDNkUyNDhCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrnPhCdZUa5jjLP+fvYYy5BwpingYKIY2iq fY6LXf51V729L5zbWkYH3Fq00ZBzNo7dYjLFUG5PIRTXoy5Dvv7mRuuAAI3Jfg2r F0xdUPA4PDastxdwce502iXk4uGWDAmifXmpgkn4rVbbRh8xtUvcfVML8jtxkFuV xcjXCAF9CrYPINJoppV1jviUdD2CClXXcZ6yBIilNZEi/Uv88CgSk0CBT2sz8TX3 lFBzuuYrfOgHog0832QDOCprOkTIcpXUQ1NDn14IDKk01DAxkneLB6dZjirlPhzX 6kJaWT5jTnsLeo13GTGOD9QmJxxKL+6n/lsQEveN8Y5qeBIJx+Y= -----END CERTIFICATE-----Generated at Thu Nov 5 05:15:38 2026 by rpki-client