$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft File: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft (raw, json) Hash identifier: DpYAKceA/xJMBAUYGODZiWqQJHydhRy3exOojuisr40= Subject key identifier: B7:D6:AF:30:16:7F:7A:19:F3:3D:36:23:0F:5B:AC:BA:62:54:47:11 Authority key identifier: BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B Certificate issuer: /CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Certificate serial: 408B76FF8DF5D59B7A191486F52277BC89B107CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 07:23:04 +0000 Manifest this update: Sat 24 Oct 2026 07:18:04 +0000 Manifest next update: Sun 25 Oct 2026 10:28:04 +0000 Files and hashes: 1: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: AEf/X0jl+J5qRkbIOztsgP/hb8T9iNj2UH5fWBvBTds=) 2: BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl (hash: c/KeEYtEtELkzn2ZuutkEvLYLWekDYGKR42DVRryaaU=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: vB3DIDOP6XaDT6CdgqU/+W3bKEm4+0cWx6zG+evFV/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 10:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8b:76:ff:8d:f5:d5:9b:7a:19:14:86:f5:22:77:bc:89:b1:07:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B Validity Not Before: Oct 24 07:18:04 2026 GMT Not After : Oct 25 10:28:04 2026 GMT Subject: CN=B7D6AF30167F7A19F33D36230F5BACBA62544711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:10:56:d8:76:ae:26:90:83:e6:57:ff:a2:8d: 96:19:4c:f5:d4:78:02:5e:89:d4:f9:fc:99:97:f4: 69:d3:75:f8:8a:34:51:44:69:2e:32:78:dc:df:87: 62:26:8a:75:5f:ed:a9:67:24:a8:f6:c6:97:44:c8: c7:45:5d:d0:ac:8c:2f:85:82:1f:e5:7a:bf:48:8c: c6:6c:e0:28:5c:dd:b3:70:10:26:91:f5:d4:c5:f8: d9:77:1f:1e:b9:d1:28:26:6d:23:bb:91:1c:6e:28: 09:4f:54:ef:cb:72:d5:6a:15:ee:b9:08:ff:19:73: 62:ae:fe:82:69:3d:f5:f1:5b:b5:49:43:c0:8a:8c: dc:88:ee:62:c9:a8:c5:66:86:76:dd:a5:ea:ae:c1: 6b:5e:33:70:fc:87:86:23:31:3b:9f:3f:64:dd:2f: 2a:cd:f6:38:23:0e:42:38:83:8f:d0:0f:32:d7:d0: 76:07:65:e9:d2:f8:8b:75:aa:88:ad:25:ff:89:1e: 12:fd:dd:bf:6f:04:0f:1f:e1:cc:ba:a9:4f:6d:64: 8a:e6:2b:70:22:c1:50:7d:c3:06:bd:a8:d6:34:0d: 76:28:8c:ee:26:ef:48:4a:dc:64:c4:ac:88:74:bf: 81:88:fa:61:a1:c4:c6:6d:8c:d0:c9:ad:23:c3:46: 88:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D6:AF:30:16:7F:7A:19:F3:3D:36:23:0F:5B:AC:BA:62:54:47:11 X509v3 Authority Key Identifier: keyid:BF:6B:A9:B0:F2:3F:8F:69:A8:77:28:D6:76:9C:72:69:D3:A3:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/BF6BA9B0F23F8F69A87728D6769C7269D3A3CC2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:ee:64:bb:af:04:8c:42:fa:c4:be:f9:0b:6a:9d:f2:15:6f: 6f:1f:3d:4c:bc:75:8c:63:57:66:73:68:25:4f:a2:53:4c:3c: c9:e3:11:ab:fa:b1:0d:e0:7b:16:c8:6a:42:5d:a3:c8:7c:62: bf:07:b5:72:cd:a3:d5:a1:5d:eb:24:1d:0e:62:70:02:68:17: b2:ec:43:a7:f2:77:39:a6:7a:be:a6:1c:ed:c7:c4:39:9a:7b: 28:47:af:59:95:1a:12:79:46:5c:09:0b:20:5c:71:04:1d:85: 3e:4f:43:3c:79:f5:3f:5f:57:73:b7:8e:41:8e:8c:c9:2d:5a: 63:70:4a:ab:99:df:69:b2:61:58:e2:0c:90:50:5e:79:22:c3: 43:16:b3:4a:3e:bc:d2:68:02:f6:e0:d0:04:be:2c:8e:58:bf: 2c:87:2a:0d:34:92:57:67:d4:5d:f1:bd:3c:8c:97:5f:b3:b3: 34:20:d7:32:cd:62:e9:51:b2:82:8e:c1:b2:20:62:2f:b7:19: 5f:d1:97:1a:0c:a2:ae:ab:3f:0e:54:bd:81:c2:7d:e1:0f:f8: 0c:61:2a:c2:81:72:69:f1:ad:ca:9a:92:ab:2e:cd:3e:01:99: 6f:05:da:12:9b:34:fa:40:fd:fe:0d:3b:30:58:ad:66:65:dc: a8:23:f7:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQIt2/4311Zt6GRSG9SJ3vImxB8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlE M0EzQ0MyQjAeFw0yNjEwMjQwNzE4MDRaFw0yNjEwMjUxMDI4MDRaMDMxMTAvBgNV BAMTKEI3RDZBRjMwMTY3RjdBMTlGMzNEMzYyMzBGNUJBQ0JBNjI1NDQ3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EFbYdq4mkIPmV/+ijZYZTPXU eAJeidT5/JmX9GnTdfiKNFFEaS4yeNzfh2IminVf7alnJKj2xpdEyMdFXdCsjC+F gh/ler9IjMZs4Chc3bNwECaR9dTF+Nl3Hx650SgmbSO7kRxuKAlPVO/LctVqFe65 CP8Zc2Ku/oJpPfXxW7VJQ8CKjNyI7mLJqMVmhnbdpequwWteM3D8h4YjMTufP2Td LyrN9jgjDkI4g4/QDzLX0HYHZenS+It1qoitJf+JHhL93b9vBA8f4cy6qU9tZIrm K3AiwVB9wwa9qNY0DXYojO4m70hK3GTErIh0v4GI+mGhxMZtjNDJrSPDRoijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt9avMBZ/ehnzPTYjD1usumJURxEwHwYDVR0j BBgwFoAUv2upsPI/j2modyjWdpxyadOjzCswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGQ4Y2RmNWEtYjlhNy00NDY5LWE2NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBG MjNGOEY2OUE4NzcyOEQ2NzY5QzcyNjlEM0EzQ0MyQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjZCQTlCMEYyM0Y4RjY5QTg3NzI4RDY3NjlDNzI2OUQzQTND QzJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvQkY2QkE5QjBGMjNGOEY2OUE4NzcyOEQ2NzY5Qzcy NjlEM0EzQ0MyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLuZLuvBIxC+sS++QtqnfIVb28fPUy8dYxj V2ZzaCVPolNMPMnjEav6sQ3gexbIakJdo8h8Yr8HtXLNo9WhXeskHQ5icAJoF7Ls Q6fydzmmer6mHO3HxDmaeyhHr1mVGhJ5RlwJCyBccQQdhT5PQzx59T9fV3O3jkGO jMktWmNwSquZ32myYVjiDJBQXnkiw0MWs0o+vNJoAvbg0AS+LI5YvyyHKg00kldn 1F3xvTyMl1+zszQg1zLNYulRsoKOwbIgYi+3GV/RlxoMoq6rPw5UvYHCfeEP+Axh KsKBcmnxrcqakqsuzT4BmW8F2hKbNPpA/f4NOzBYrWZl3Kgj99k= -----END CERTIFICATE-----Generated at Sun Oct 25 03:22:16 2026 by rpki-client