$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: LelTXT7XXVIzX7cwb56Q64JTBd+i+0PyahEIMyeUlPg= Subject key identifier: 2D:65:37:B2:36:19:2B:4E:02:5F:5D:CE:6E:DE:A8:00:17:E7:2D:C4 Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 0BBDAEFC914CB613C49F7883D326CA0BBEA9C059 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 07:41:57 +0000 Manifest this update: Mon 02 Nov 2026 07:36:57 +0000 Manifest next update: Tue 03 Nov 2026 08:06:57 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) 2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: NSOpyATdPL42T/8N6BUDZuo7LKadEgLe/hORh4t3g6w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:bd:ae:fc:91:4c:b6:13:c4:9f:78:83:d3:26:ca:0b:be:a9:c0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Nov 2 07:36:57 2026 GMT Not After : Nov 3 08:06:57 2026 GMT Subject: CN=2D6537B236192B4E025F5DCE6EDEA80017E72DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f3:4e:a9:e5:53:b7:62:ad:34:02:6c:93:1b: c5:d1:e8:d5:35:48:09:9d:37:90:71:d7:93:68:09: 12:da:17:4c:b9:97:b2:f9:4a:4d:7d:3b:d6:f7:80: 88:b7:98:3f:0e:07:09:8e:fb:f6:07:0d:14:61:8d: 9c:ab:ef:ae:79:1f:8b:a0:e1:a0:04:aa:82:75:6e: 95:7e:d4:b1:af:20:43:12:ca:14:ea:59:bc:ce:eb: 3b:5c:28:9c:84:06:ed:bc:84:51:f5:d5:62:81:47: 2b:8a:8f:3b:a6:21:28:b1:9e:92:c8:84:18:d4:6b: 7b:2e:c2:b9:11:13:2c:f5:90:a1:a8:2c:25:7d:18: 75:f2:23:40:0b:6f:d5:c5:c2:38:96:bc:6e:ef:fd: 31:52:d9:12:ab:aa:83:8e:59:c4:28:f8:dc:ca:66: f7:4c:85:57:7c:a5:22:7b:54:38:24:3c:bf:fb:79: c8:4a:51:af:fa:34:56:61:a9:3f:bf:65:c2:6c:43: cc:0c:15:b1:07:24:75:49:40:7b:42:de:4d:b8:bb: fb:6a:61:f1:4a:3c:09:3f:a5:0d:fb:07:6e:3e:54: 8e:36:b9:f2:fb:46:f2:d8:ed:15:d2:2e:16:f0:9a: 27:2e:df:cd:1a:bd:4b:38:a7:3d:50:16:86:50:17: 74:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:65:37:B2:36:19:2B:4E:02:5F:5D:CE:6E:DE:A8:00:17:E7:2D:C4 X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b1:3b:34:65:67:f9:d5:e2:ac:d3:57:d1:1a:b6:5d:5a:77: cb:83:e8:04:fe:84:bd:3d:3e:9c:cb:02:c2:4c:49:f1:0c:a5: d0:cf:0e:12:33:c4:3a:ad:64:39:25:1b:4b:73:db:60:0e:6f: 92:58:2c:00:10:ce:4b:7a:8e:0b:07:93:34:9b:8e:74:a1:11: 07:ea:5c:07:83:19:b1:4e:a5:81:cd:19:16:ef:ac:9b:76:92: 49:d4:7a:c9:16:10:16:54:9d:5f:b8:c4:09:a8:3b:79:42:58: 0f:d6:25:2d:0a:cf:88:da:4d:e2:f3:46:87:4b:de:a7:15:36: 61:cb:e0:b9:35:2c:8a:78:95:17:97:26:88:ca:d2:a8:6b:03: 4d:99:8c:11:98:13:c2:12:e5:d5:07:b3:82:60:1a:bd:d2:a0: 25:b8:4a:5e:1f:26:e5:9b:a1:08:3e:43:85:8b:49:dd:11:12: 56:e0:52:64:5c:73:a6:5a:a8:e5:47:d4:84:a3:f6:d1:17:5f: 5c:2d:58:22:74:38:21:08:ad:d2:76:7e:27:8f:22:43:a5:10: 02:c3:30:c7:69:ca:63:0d:6c:39:5c:2b:56:38:e6:d4:03:85: 75:b4:30:c8:19:b0:a9:2f:f8:36:4d:6b:c1:4c:ed:99:77:60: 55:97:41:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC72u/JFMthPEn3iD0ybKC76pwFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjExMDIwNzM2NTdaFw0yNjExMDMwODA2NTdaMDMxMTAvBgNV BAMTKDJENjUzN0IyMzYxOTJCNEUwMjVGNURDRTZFREVBODAwMTdFNzJEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP806p5VO3Yq00AmyTG8XR6NU1 SAmdN5Bx15NoCRLaF0y5l7L5Sk19O9b3gIi3mD8OBwmO+/YHDRRhjZyr7655H4ug 4aAEqoJ1bpV+1LGvIEMSyhTqWbzO6ztcKJyEBu28hFH11WKBRyuKjzumISixnpLI hBjUa3suwrkREyz1kKGoLCV9GHXyI0ALb9XFwjiWvG7v/TFS2RKrqoOOWcQo+NzK ZvdMhVd8pSJ7VDgkPL/7echKUa/6NFZhqT+/ZcJsQ8wMFbEHJHVJQHtC3k24u/tq YfFKPAk/pQ37B24+VI42ufL7RvLY7RXSLhbwmicu380avUs4pz1QFoZQF3QzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWU3sjYZK04CX13Obt6oABfnLcQwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2xOzRlZ/nV4qzTV9Eatl1ad8uD6AT+hL09 PpzLAsJMSfEMpdDPDhIzxDqtZDklG0tz22AOb5JYLAAQzkt6jgsHkzSbjnShEQfq XAeDGbFOpYHNGRbvrJt2kknUeskWEBZUnV+4xAmoO3lCWA/WJS0Kz4jaTeLzRodL 3qcVNmHL4Lk1LIp4lReXJojK0qhrA02ZjBGYE8IS5dUHs4JgGr3SoCW4Sl4fJuWb oQg+Q4WLSd0RElbgUmRcc6ZaqOVH1ISj9tEXX1wtWCJ0OCEIrdJ2fiePIkOlEALD MMdpymMNbDlcK1Y45tQDhXW0MMgZsKkv+DZNa8FM7Zl3YFWXQXQ= -----END CERTIFICATE-----Generated at Mon Nov 2 22:32:19 2026 by rpki-client