$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: 75031TtUhZuB+hZd3Gz0GFznM1PbLwY7dTauYQ8EQv0= Subject key identifier: BD:C4:E9:D8:91:67:39:89:CA:D0:76:2A:08:D4:31:81:1E:E3:22:CC Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 64A411B6B7C955FCDB0EF4C7E15ACC0FC3B0CC74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 02:51:11 +0000 Manifest this update: Mon 02 Nov 2026 02:46:11 +0000 Manifest next update: Tue 03 Nov 2026 04:37:11 +0000 Files and hashes: 1: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 3: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: Oc8lirTAOgUGOq0Aj+ZVdMPKVOlzVpy7BXAnRG/Sqls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 04:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:a4:11:b6:b7:c9:55:fc:db:0e:f4:c7:e1:5a:cc:0f:c3:b0:cc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Nov 2 02:46:11 2026 GMT Not After : Nov 3 04:37:11 2026 GMT Subject: CN=BDC4E9D891673989CAD0762A08D431811EE322CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:ab:b5:d8:3e:76:18:d3:91:c9:1f:49:78: 87:f0:6f:3a:12:ec:4c:be:20:e2:34:50:87:50:0f: 35:65:16:7f:26:73:54:64:34:75:7d:dc:49:98:91: 50:e8:d6:74:53:28:28:67:91:12:ea:55:c4:7d:7f: 8d:5f:0a:c0:7c:cc:08:c3:e4:99:ee:8d:66:9b:21: 09:9b:a7:8f:02:b9:23:02:95:f9:de:7c:c8:81:2b: 4e:f4:ec:2b:54:70:6d:89:62:be:8c:e2:1f:85:86: c2:70:55:15:d9:42:e6:6d:f6:b9:30:62:28:58:79: ff:da:25:51:2f:06:c5:0e:0d:c9:b1:ea:6e:56:b7: 3e:d0:b7:a8:f5:ab:af:09:66:fd:40:14:a2:d3:82: 7d:c8:2d:4b:2f:df:46:5d:ca:ae:ca:42:90:4f:73: 35:78:55:94:c8:ef:88:7f:6e:d2:1c:59:eb:6a:8e: 74:cb:49:75:6c:f8:bb:5c:c2:00:eb:b6:b7:ca:ff: 58:3d:61:05:f5:ee:1b:68:93:c2:02:d9:80:1f:5d: 70:00:b4:70:74:b4:10:d9:a3:ca:f5:f4:b5:7e:78: 6e:de:ef:cb:10:9c:03:ad:41:ab:43:2b:98:85:7d: 8f:21:6c:f7:5f:4d:90:41:72:9c:6e:bc:be:d9:1b: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C4:E9:D8:91:67:39:89:CA:D0:76:2A:08:D4:31:81:1E:E3:22:CC X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e4:8e:05:8f:1b:7c:5b:cd:b6:73:0c:b7:47:fd:05:9d:73: bb:5c:f8:28:ef:a8:1b:89:fa:71:30:bd:6d:00:85:20:25:9b: ae:3f:67:16:a2:16:dd:99:77:3e:57:85:5c:01:fa:7c:ea:d2: 7f:b8:92:de:0b:d3:8c:fd:7b:e5:1b:36:99:e5:7e:e3:06:e6: 48:70:6d:c1:4b:77:63:4b:6d:4a:f4:b5:13:a7:74:fb:40:28: 91:14:28:fd:27:16:62:53:53:d0:49:91:c0:05:3b:bc:c4:44: 70:8b:e1:d9:7d:97:14:6c:b8:c1:eb:d9:00:e5:ea:04:9f:e7: ae:ca:37:5b:9b:fa:d3:ae:26:7e:5d:7a:0a:fc:a0:e4:5c:ef: 62:ef:f9:75:f6:15:b9:2d:ef:3b:56:8e:53:39:ca:dc:6a:35: f8:14:41:f2:42:0c:bb:30:79:b3:c9:30:b4:72:e5:0e:81:43: 24:cd:ef:4c:44:84:d0:e3:5b:a9:f0:a9:c4:d9:7c:45:1c:a4: 6f:d9:f9:ea:34:f3:aa:a9:3a:8c:00:fc:48:df:da:80:47:d1: 3f:ed:d9:4d:dc:7c:9e:aa:44:67:88:ff:c7:5f:2c:ca:54:80: b6:4c:bd:85:21:0c:48:b2:1d:6d:b7:2b:20:1a:de:24:ea:0a: 19:aa:02:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZKQRtrfJVfzbDvTH4VrMD8OwzHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjExMDIwMjQ2MTFaFw0yNjExMDMwNDM3MTFaMDMxMTAvBgNV BAMTKEJEQzRFOUQ4OTE2NzM5ODlDQUQwNzYyQTA4RDQzMTgxMUVFMzIyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN86u12D52GNORyR9JeIfwbzoS 7Ey+IOI0UIdQDzVlFn8mc1RkNHV93EmYkVDo1nRTKChnkRLqVcR9f41fCsB8zAjD 5JnujWabIQmbp48CuSMClfnefMiBK0707CtUcG2JYr6M4h+FhsJwVRXZQuZt9rkw YihYef/aJVEvBsUODcmx6m5Wtz7Qt6j1q68JZv1AFKLTgn3ILUsv30Zdyq7KQpBP czV4VZTI74h/btIcWetqjnTLSXVs+LtcwgDrtrfK/1g9YQX17htok8IC2YAfXXAA tHB0tBDZo8r19LV+eG7e78sQnAOtQatDK5iFfY8hbPdfTZBBcpxuvL7ZG3OtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcTp2JFnOYnK0HYqCNQxgR7jIswwHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbkjgWPG3xbzbZzDLdH/QWdc7tc+CjvqBuJ +nEwvW0AhSAlm64/ZxaiFt2Zdz5XhVwB+nzq0n+4kt4L04z9e+UbNpnlfuMG5khw bcFLd2NLbUr0tROndPtAKJEUKP0nFmJTU9BJkcAFO7zERHCL4dl9lxRsuMHr2QDl 6gSf567KN1ub+tOuJn5degr8oORc72Lv+XX2Fbkt7ztWjlM5ytxqNfgUQfJCDLsw ebPJMLRy5Q6BQyTN70xEhNDjW6nwqcTZfEUcpG/Z+eo086qpOowA/Ejf2oBH0T/t 2U3cfJ6qRGeI/8dfLMpUgLZMvYUhDEiyHW23KyAa3iTqChmqAhk= -----END CERTIFICATE-----Generated at Mon Nov 2 16:30:16 2026 by rpki-client