$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft File: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft (raw, json) Hash identifier: 9A5Al7jTsZ/7hDZv02LWaRbYDhCunjR7CWQi2274NSE= Subject key identifier: A1:BC:07:71:5D:42:1D:05:69:93:9D:86:CA:15:07:9A:C8:E3:70:78 Authority key identifier: BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 Certificate issuer: /CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Certificate serial: 421291986952671A477A5657CF0E9325A745930B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 16:44:48 +0000 Manifest this update: Wed 16 Sep 2026 16:39:48 +0000 Manifest next update: Thu 17 Sep 2026 18:12:48 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: mYfhWrz3MT+qqqLGfCs8+XgkHC16IXPVoilIEywQD9M=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: gyzRwVYpqU4mnepZ71f/6TVQnZaQ09Xw/5PO0EoRtpw=) 3: BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl (hash: ZI3gPbzab32uYKVyQq/dOaAuuyWNNgYydje7PG758+0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:12:91:98:69:52:67:1a:47:7a:56:57:cf:0e:93:25:a7:45:93:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710 Validity Not Before: Sep 16 16:39:48 2026 GMT Not After : Sep 17 18:12:48 2026 GMT Subject: CN=A1BC07715D421D0569939D86CA15079AC8E37078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:d7:3b:ad:79:70:8b:1c:5f:a4:97:b7:92: 31:8b:b8:66:bf:70:d1:02:31:86:92:43:ef:b8:a8: ba:69:4f:19:fa:53:ba:02:74:93:ac:07:f7:24:ca: ef:05:9f:2c:8c:1c:ea:ed:5b:67:a3:72:5b:e0:01: 6b:2a:5b:b5:67:19:d1:9a:56:c9:39:1b:46:b9:9a: d5:a0:a8:b9:6d:cd:b1:42:0d:a4:41:9d:66:9f:b3: 37:9f:73:22:d6:e8:a1:02:fb:15:b7:35:f8:f3:9c: 58:81:44:23:07:b7:ef:01:48:2e:87:d2:ec:23:da: b1:29:a4:68:52:25:21:c8:63:a4:ae:db:51:f0:8f: e9:55:88:92:2b:f0:cd:0b:d2:41:19:15:2b:f4:d7: 96:7e:0f:fd:2c:00:0f:22:62:14:68:0b:82:f9:48: d8:21:00:f7:32:5c:dc:c1:e6:dc:dc:4f:c9:e1:09: d8:e1:01:a2:8c:b3:c9:c1:75:c3:5d:36:9c:4f:6e: 57:8b:b9:7e:47:22:2b:a5:3f:22:44:50:f1:db:a2: 1b:c4:57:5d:a6:dd:5a:65:c3:02:de:3f:83:0f:c6: 2f:28:68:0a:c7:81:3f:a5:0d:e1:c5:e8:3e:04:90: ec:5e:0b:94:3a:bc:f8:4e:d4:0b:34:d3:db:12:3b: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BC:07:71:5D:42:1D:05:69:93:9D:86:CA:15:07:9A:C8:E3:70:78 X509v3 Authority Key Identifier: keyid:BF:4E:FC:4E:BC:0B:95:9D:AB:2C:A7:6A:EB:9D:9C:30:17:FF:C7:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/BF4EFC4EBC0B959DAB2CA76AEB9D9C3017FFC710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:bf:ec:ed:a5:b7:62:3f:cc:79:65:ef:d4:0a:83:c5:07:df: c3:c0:a0:60:66:53:6a:18:fb:f3:04:a1:7e:4c:30:46:15:fd: 90:48:f1:45:24:45:82:9d:5a:3b:3d:2c:0c:6b:a7:8e:50:f5: bd:6f:20:a0:cb:a4:45:f8:7e:e3:3f:0f:51:44:fc:c2:08:cf: c8:74:d6:60:88:79:8e:03:78:2c:06:a7:8f:d7:0b:42:5f:21: 6f:e9:f7:ab:5d:5c:15:b4:e4:0d:20:a2:ea:eb:ff:25:6b:3e: 65:a7:34:94:e7:c9:41:1e:2a:04:d1:0e:c3:3d:e3:c9:cb:78: 0f:52:99:20:ee:46:de:92:bd:63:d6:a7:d5:c2:c3:b9:e9:77: fa:8c:01:5a:ca:21:0a:6e:37:7e:39:f6:ae:fe:85:31:6a:66: 95:cb:ef:b0:63:7e:c9:1e:ab:a1:ba:30:64:23:fd:c4:89:da: 0f:c5:b3:78:8b:62:fd:39:ad:5b:f4:ad:9e:37:7b:f6:da:35: 98:f9:4d:94:d8:da:bc:ad:ce:21:6d:95:10:03:9e:2b:51:c2: 68:0f:35:c9:3a:b2:a1:aa:3b:5b:a6:51:06:1f:86:81:0c:f7: 8a:2a:ba:d4:3d:63:e4:0f:46:8a:48:93:91:5a:08:60:b3:e2: 40:29:c0:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhKRmGlSZxpHelZXzw6TJadFkwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlDMzAx N0ZGQzcxMDAeFw0yNjA5MTYxNjM5NDhaFw0yNjA5MTcxODEyNDhaMDMxMTAvBgNV BAMTKEExQkMwNzcxNUQ0MjFEMDU2OTkzOUQ4NkNBMTUwNzlBQzhFMzcwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICNc7rXlwixxfpJe3kjGLuGa/ cNECMYaSQ++4qLppTxn6U7oCdJOsB/ckyu8FnyyMHOrtW2ejclvgAWsqW7VnGdGa Vsk5G0a5mtWgqLltzbFCDaRBnWafszefcyLW6KEC+xW3NfjznFiBRCMHt+8BSC6H 0uwj2rEppGhSJSHIY6Su21Hwj+lViJIr8M0L0kEZFSv015Z+D/0sAA8iYhRoC4L5 SNghAPcyXNzB5tzcT8nhCdjhAaKMs8nBdcNdNpxPbleLuX5HIiulPyJEUPHbohvE V12m3VplwwLeP4MPxi8oaArHgT+lDeHF6D4EkOxeC5Q6vPhO1As009sSO6+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUobwHcV1CHQVpk52GyhUHmsjjcHgwHwYDVR0j BBgwFoAUv078TrwLlZ2rLKdq652cMBf/xxAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVjZmQzZjUtODVkYS00OGE3LWI1MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVC QzBCOTU5REFCMkNBNzZBRUI5RDlDMzAxN0ZGQzcxMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjRFRkM0RUJDMEI5NTlEQUIyQ0E3NkFFQjlEOUMzMDE3RkZD NzEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvQkY0RUZDNEVCQzBCOTU5REFCMkNBNzZBRUI5RDlD MzAxN0ZGQzcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADC/7O2lt2I/zHll79QKg8UH38PAoGBmU2oY +/MEoX5MMEYV/ZBI8UUkRYKdWjs9LAxrp45Q9b1vIKDLpEX4fuM/D1FE/MIIz8h0 1mCIeY4DeCwGp4/XC0JfIW/p96tdXBW05A0gourr/yVrPmWnNJTnyUEeKgTRDsM9 48nLeA9SmSDuRt6SvWPWp9XCw7npd/qMAVrKIQpuN3459q7+hTFqZpXL77Bjfske q6G6MGQj/cSJ2g/Fs3iLYv05rVv0rZ43e/baNZj5TZTY2rytziFtlRADnitRwmgP Nck6sqGqO1umUQYfhoEM94oqutQ9Y+QPRopIk5FaCGCz4kApwHc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:54 2026 by rpki-client