$ rpki-client -vvvf rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft File: BFD6A628A7E3273D48388984344C37C51116C61B.mft (raw, json) Hash identifier: USH5DtZuW0xdC5/dtQCNCdSSpa6kYwnfTF6axYr7uNk= Subject key identifier: 18:FA:98:BB:3F:15:90:AD:BC:5F:04:BE:94:FB:22:A4:9C:D5:BF:8B Authority key identifier: BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B Certificate issuer: /CN=BFD6A628A7E3273D48388984344C37C51116C61B Certificate serial: 07E892A1B1D2315304CAFC276084E1B02DC0983C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:53:18 +0000 Manifest this update: Thu 17 Sep 2026 03:48:18 +0000 Manifest next update: Fri 18 Sep 2026 03:57:18 +0000 Files and hashes: 1: BFD6A628A7E3273D48388984344C37C51116C61B.crl (hash: 7yqpnZ1hBDqX4rAvLzlT3CXdUldzOSHkZPIyTufb57w=) 2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: MOL2ae8rUjuxcgs3avsNvyuD8S+QfiOggevD7CfKMcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e8:92:a1:b1:d2:31:53:04:ca:fc:27:60:84:e1:b0:2d:c0:98:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD6A628A7E3273D48388984344C37C51116C61B Validity Not Before: Sep 17 03:48:18 2026 GMT Not After : Sep 18 03:57:18 2026 GMT Subject: CN=18FA98BB3F1590ADBC5F04BE94FB22A49CD5BF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:a7:ae:46:35:85:1b:83:4d:b3:66:83:b6: 54:c9:53:d8:b8:28:da:53:3c:2c:90:08:79:f3:59: c1:92:77:ca:e9:ef:5a:48:3c:4f:41:5a:b3:2b:b6: 70:2f:37:ee:f3:eb:df:9c:cb:22:8d:20:e4:7f:ec: 49:d8:21:df:73:02:9f:b3:89:9e:07:2d:48:ce:f6: 6f:8b:50:e9:8c:98:09:c6:4e:28:2c:70:5d:1b:61: ef:15:53:e6:a8:0a:20:5f:e4:48:06:c1:02:20:7b: 92:58:a4:73:52:62:bd:df:3e:04:c7:63:33:c1:3f: 78:e1:72:29:18:56:e5:06:25:2e:cf:fd:02:de:ed: b8:df:55:6e:68:e3:66:a5:1d:09:5a:e4:25:ca:ca: 11:6a:dd:3f:6e:a7:3c:c1:e0:c4:ee:7d:b9:5a:5f: 93:4f:23:de:00:d9:48:c5:47:37:1c:f3:22:c3:29: 19:b2:be:05:bf:ea:c0:7b:95:8c:91:e7:9a:b3:ad: 8e:1a:89:b5:7f:66:0d:46:18:e6:57:31:ee:77:7b: 04:06:e2:d7:72:74:86:85:5c:ef:78:b3:ff:56:e4: 36:1d:6e:f5:01:99:b1:8c:cc:24:b0:e5:86:76:57: ac:ea:5e:58:de:70:a8:cc:a2:8f:ba:2f:58:d5:fc: 13:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FA:98:BB:3F:15:90:AD:BC:5F:04:BE:94:FB:22:A4:9C:D5:BF:8B X509v3 Authority Key Identifier: keyid:BF:D6:A6:28:A7:E3:27:3D:48:38:89:84:34:4C:37:C5:11:16:C6:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD6A628A7E3273D48388984344C37C51116C61B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/BFD6A628A7E3273D48388984344C37C51116C61B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:41:4e:94:79:51:db:89:18:16:d3:78:ec:0b:9d:71:71:76: b4:49:9d:e5:62:4b:fc:dd:1d:ae:eb:d0:f4:b9:93:be:e9:fc: 52:df:1c:97:f5:c6:60:56:a0:2d:e6:72:a2:7f:7e:84:81:8a: ac:b2:82:d4:d8:63:d9:f0:e6:74:88:ff:e5:ae:74:07:e7:cf: 53:58:b7:78:35:35:82:2b:a3:f7:ba:a2:cd:af:bd:0a:d2:3c: 6d:d6:6e:5e:53:7c:31:15:38:40:7a:b9:cb:68:2e:43:64:98: 5b:66:97:86:9b:71:6f:bc:bc:31:8b:1b:ea:c1:c6:a1:16:8a: 31:ac:92:ef:4b:d2:5e:6f:15:72:79:aa:c7:85:58:b2:5a:eb: 99:94:fb:85:30:36:ec:a1:15:00:f0:a4:ae:23:43:2c:e3:44: 8b:05:8b:44:93:38:0d:30:cf:25:c3:70:fd:11:f5:7a:cc:83: 2f:61:13:2e:9c:d3:67:0c:d0:b8:5d:5c:54:96:b9:55:10:ef: db:64:a9:1c:cc:11:a0:a6:8f:31:14:cc:5b:34:87:e3:4b:dc: 3f:e4:0b:30:f0:53:93:ab:56:de:85:3a:25:00:fb:3d:51:ea: 73:0a:47:8d:dc:b9:8d:12:46:cf:be:b2:4e:68:48:84:c6:d5: a4:89:94:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+iSobHSMVMEyvwnYIThsC3AmDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUx MTE2QzYxQjAeFw0yNjA5MTcwMzQ4MThaFw0yNjA5MTgwMzU3MThaMDMxMTAvBgNV BAMTKDE4RkE5OEJCM0YxNTkwQURCQzVGMDRCRTk0RkIyMkE0OUNENUJGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WaeuRjWFG4NNs2aDtlTJU9i4 KNpTPCyQCHnzWcGSd8rp71pIPE9BWrMrtnAvN+7z69+cyyKNIOR/7EnYId9zAp+z iZ4HLUjO9m+LUOmMmAnGTigscF0bYe8VU+aoCiBf5EgGwQIge5JYpHNSYr3fPgTH YzPBP3jhcikYVuUGJS7P/QLe7bjfVW5o42alHQla5CXKyhFq3T9upzzB4MTufbla X5NPI94A2UjFRzcc8yLDKRmyvgW/6sB7lYyR55qzrY4aibV/Zg1GGOZXMe53ewQG 4tdydIaFXO94s/9W5DYdbvUBmbGMzCSw5YZ2V6zqXljecKjMoo+6L1jV/BO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPqYuz8VkK28XwS+lPsipJzVv4swHwYDVR0j BBgwFoAUv9amKKfjJz1IOImENEw3xREWxhswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFkOTdiNDAtYzAzMS00ZTViLTliNDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhB N0UzMjczRDQ4Mzg4OTg0MzQ0QzM3QzUxMTE2QzYxQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ2QTYyOEE3RTMyNzNENDgzODg5ODQzNDRDMzdDNTExMTZD NjFCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQkZENkE2MjhBN0UzMjczRDQ4Mzg4OTg0MzQ0QzM3 QzUxMTE2QzYxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1BTpR5UduJGBbTeOwLnXFxdrRJneViS/zd Ha7r0PS5k77p/FLfHJf1xmBWoC3mcqJ/foSBiqyygtTYY9nw5nSI/+WudAfnz1NY t3g1NYIro/e6os2vvQrSPG3Wbl5TfDEVOEB6uctoLkNkmFtml4abcW+8vDGLG+rB xqEWijGsku9L0l5vFXJ5qseFWLJa65mU+4UwNuyhFQDwpK4jQyzjRIsFi0STOA0w zyXDcP0R9XrMgy9hEy6c02cM0LhdXFSWuVUQ79tkqRzMEaCmjzEUzFs0h+NL3D/k CzDwU5OrVt6FOiUA+z1R6nMKR43cuY0SRs++sk5oSITG1aSJlFs= -----END CERTIFICATE-----Generated at Thu Sep 17 12:20:20 2026 by rpki-client