$ rpki-client -vvvf rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft File: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft (raw, json) Hash identifier: VTyYU5JZ4E0TT/y7ELtVKSIuYimCrxffuJzmGfBjMYY= Subject key identifier: 37:65:02:6D:AF:C6:63:23:A6:B6:E4:2C:99:97:51:22:D3:1D:DE:22 Authority key identifier: B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 Certificate issuer: /CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Certificate serial: 273AB6AAB879CEC861A142047B13D55041B6536B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft Manifest number: CF Signing time: Mon 05 Oct 2026 12:29:11 +0000 Manifest this update: Mon 05 Oct 2026 12:24:11 +0000 Manifest next update: Tue 06 Oct 2026 12:29:11 +0000 Files and hashes: 1: B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl (hash: wZ+CK5Bk9LybpEPmhJ+K+uumrbbzp4eKclyNsbxOraI=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: xM4nPkfrKQ/KWF8+Mu6GtG7DRliUUO1OiNjm+6857dQ=) 3: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: XBcafkxD6M3SvFYGO48/RaxEmuX/AwJyNlM1io7xsgc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 12:29:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3a:b6:aa:b8:79:ce:c8:61:a1:42:04:7b:13:d5:50:41:b6:53:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4 Validity Not Before: Oct 5 12:24:11 2026 GMT Not After : Oct 6 12:29:11 2026 GMT Subject: CN=3765026DAFC66323A6B6E42C99975122D31DDE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:c8:86:16:d0:2a:92:33:00:dc:51:50:a3: 1e:31:88:47:cc:38:3e:69:30:6b:e2:d5:97:f0:03: 1c:6f:91:b5:31:7d:88:9c:e5:da:70:9a:d1:c1:fe: e9:50:33:02:36:c6:e5:ac:f0:e2:2a:05:98:a5:eb: 7b:49:b7:5f:12:55:98:c3:69:1e:cf:f5:78:e3:4f: a9:dc:20:a5:65:1c:46:70:20:b3:42:0d:cd:58:67: 01:cb:98:56:e3:8f:09:6e:2e:84:e1:ff:c1:e7:6a: b2:13:08:a1:a3:13:37:05:c7:f4:1d:90:a5:26:85: 6d:db:79:20:fd:39:49:92:07:ea:fa:21:f1:95:b0: 48:92:e5:36:36:72:bb:bf:0b:8f:4f:0e:8e:fe:5f: 6f:c1:49:d2:14:20:e7:61:c8:ce:78:4a:14:9d:85: b8:aa:ee:53:51:06:07:4a:fc:d3:47:cd:27:a9:f3: 34:43:9e:04:4e:8d:92:a0:e1:f4:f4:5a:da:e9:f4: bc:41:fb:29:07:4d:04:bb:a8:94:ff:39:6d:3b:4d: 1c:52:90:79:a7:8b:f2:d7:34:6d:0c:97:18:61:0c: 37:c6:37:27:d6:9d:b5:67:8e:30:6b:72:c2:44:53: bd:73:d0:80:7b:5d:09:07:29:17:5b:7e:a9:4c:6e: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:65:02:6D:AF:C6:63:23:A6:B6:E4:2C:99:97:51:22:D3:1D:DE:22 X509v3 Authority Key Identifier: keyid:B0:BF:B6:6B:C0:AE:9B:A6:A8:FA:29:C8:B0:33:8C:97:7C:DD:A9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/B0BFB66BC0AE9BA6A8FA29C8B0338C977CDDA9E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4f:75:3e:3e:18:62:c5:8b:63:48:72:d0:4e:18:2e:db:0d: 5d:a0:58:a7:29:e6:99:ff:d7:69:c5:5d:df:54:31:3d:9f:a2: 82:21:1c:20:fe:93:0d:03:4a:70:e1:c7:6b:c8:7e:53:80:2b: d1:34:f6:50:33:88:9d:5b:23:08:94:04:56:9f:7d:46:6b:69: 09:0b:7e:e0:c1:8a:a7:f6:f8:23:1d:87:61:59:50:eb:ba:0e: 66:90:ae:b1:7c:89:03:e1:45:ac:8c:5c:dc:31:5d:fc:73:52: 66:d6:f1:1d:d2:17:33:7a:6b:5b:b0:15:9f:0b:fa:48:ab:c2: 88:fc:ca:be:82:1c:11:1f:80:1e:9f:5b:4c:1d:be:89:61:be: 00:68:59:e2:09:6b:35:dc:27:ff:4a:01:ac:b9:b0:55:b3:6e: 14:09:5e:c9:34:97:b0:cd:37:5a:3f:49:f9:bd:4d:96:cf:ee: b2:db:c2:11:48:a1:82:a1:e6:10:2c:3b:ac:55:be:c5:85:7c: 55:df:25:69:c5:89:9a:70:e5:70:9b:45:b6:92:ab:54:8b:98: b1:41:a7:f5:e1:65:fe:57:4d:ec:aa:97:9d:fe:63:7e:57:99: 2e:f3:2d:22:42:58:b4:c6:75:f0:82:85:df:a5:bb:42:78:43: 8d:dc:8f:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzq2qrh5zshhoUIEexPVUEG2U2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3 Q0REQTlFNDAeFw0yNjEwMDUxMjI0MTFaFw0yNjEwMDYxMjI5MTFaMDMxMTAvBgNV BAMTKDM3NjUwMjZEQUZDNjYzMjNBNkI2RTQyQzk5OTc1MTIyRDMxRERFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI6ciGFtAqkjMA3FFQox4xiEfM OD5pMGvi1ZfwAxxvkbUxfYic5dpwmtHB/ulQMwI2xuWs8OIqBZil63tJt18SVZjD aR7P9XjjT6ncIKVlHEZwILNCDc1YZwHLmFbjjwluLoTh/8HnarITCKGjEzcFx/Qd kKUmhW3beSD9OUmSB+r6IfGVsEiS5TY2cru/C49PDo7+X2/BSdIUIOdhyM54ShSd hbiq7lNRBgdK/NNHzSep8zRDngROjZKg4fT0Wtrp9LxB+ykHTQS7qJT/OW07TRxS kHmni/LXNG0MlxhhDDfGNyfWnbVnjjBrcsJEU71z0IB7XQkHKRdbfqlMbtcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN2UCba/GYyOmtuQsmZdRItMd3iIwHwYDVR0j BBgwFoAUsL+2a8Cum6ao+inIsDOMl3zdqeQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Mjc3MjdjM2UtOWMxYS00NmRlLWEyYjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJD MEFFOUJBNkE4RkEyOUM4QjAzMzhDOTc3Q0REQTlFNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMEJGQjY2QkMwQUU5QkE2QThGQTI5QzhCMDMzOEM5NzdDRERB OUU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvQjBCRkI2NkJDMEFFOUJBNkE4RkEyOUM4QjAzMzhD OTc3Q0REQTlFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVPdT4+GGLFi2NIctBOGC7bDV2gWKcp5pn/ 12nFXd9UMT2fooIhHCD+kw0DSnDhx2vIflOAK9E09lAziJ1bIwiUBFaffUZraQkL fuDBiqf2+CMdh2FZUOu6DmaQrrF8iQPhRayMXNwxXfxzUmbW8R3SFzN6a1uwFZ8L +kirwoj8yr6CHBEfgB6fW0wdvolhvgBoWeIJazXcJ/9KAay5sFWzbhQJXsk0l7DN N1o/Sfm9TZbP7rLbwhFIoYKh5hAsO6xVvsWFfFXfJWnFiZpw5XCbRbaSq1SLmLFB p/XhZf5XTeyql53+Y35XmS7zLSJCWLTGdfCChd+lu0J4Q43cj0w= -----END CERTIFICATE-----Generated at Tue Oct 6 01:25:47 2026 by rpki-client