$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft File: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft (raw, json) Hash identifier: atUihARWKEKgxG+0wHA1Mc2ttreZH4b+pAOjzKYBzwY= Subject key identifier: FA:C9:D6:64:80:96:65:EA:62:E1:F7:63:68:27:73:FF:05:63:9B:94 Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB Certificate issuer: /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Certificate serial: 6A52E38126185DB72B06C48E5223A3E73F6AB98D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft Manifest number: EC Signing time: Mon 26 Oct 2026 03:36:30 +0000 Manifest this update: Mon 26 Oct 2026 03:31:30 +0000 Manifest next update: Tue 27 Oct 2026 06:32:30 +0000 Files and hashes: 1: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: lfMuEG6m1w+3L6wzJesoEfOVGjLJIPXAAFywmq7MUaw=) 2: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: 8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=) 3: B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl (hash: gmlhTw3vsqZqT6s5x0E0uZCIQtyyDQmx4nt8B8thOSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:52:e3:81:26:18:5d:b7:2b:06:c4:8e:52:23:a3:e7:3f:6a:b9:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB Validity Not Before: Oct 26 03:31:30 2026 GMT Not After : Oct 27 06:32:30 2026 GMT Subject: CN=FAC9D664809665EA62E1F763682773FF05639B94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:93:fd:28:e5:b2:d7:44:5f:0c:ec:df:86: 68:38:0b:5b:18:a5:8a:07:74:08:5d:3e:30:24:d6: b2:b9:58:c4:09:9c:e4:a4:50:15:bc:e2:37:15:28: 29:63:0d:4b:00:c1:99:80:96:91:f3:90:f8:36:ed: 0f:81:b3:eb:66:fc:70:81:1a:b0:88:6f:f6:75:d0: 05:a4:fc:f8:0b:28:7c:e3:14:b4:4e:11:05:8a:da: f9:d0:ea:46:60:19:e0:4a:1f:e6:51:0e:a7:d4:c5: d4:fd:a9:f5:17:19:4d:fc:4b:7c:66:25:4e:b9:76: ae:a3:8f:b9:56:92:46:65:b3:b9:47:d1:30:2f:6c: a0:e1:01:d8:b8:20:55:9a:9d:d8:c9:73:82:18:4f: ce:e5:36:cb:a3:38:f3:ec:84:c5:c8:f7:51:da:7e: 8f:88:15:60:0f:2a:3d:a2:0f:7c:6c:c2:51:3d:8a: 91:56:39:d6:3a:e7:ca:49:50:bf:70:4a:8d:9d:24: 6d:1c:76:09:d5:23:d6:01:44:e9:ff:9a:97:19:64: fd:12:e5:77:e5:d3:eb:25:e3:92:b9:d0:96:ae:18: 97:36:ff:9d:fc:b0:a3:fb:ab:1d:94:52:47:65:1c: f8:1d:2c:a2:bd:bb:8d:66:cd:12:24:e7:71:81:db: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C9:D6:64:80:96:65:EA:62:E1:F7:63:68:27:73:FF:05:63:9B:94 X509v3 Authority Key Identifier: keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b1:ea:c4:e5:ce:42:d5:fb:dc:3c:1c:b8:4a:07:b5:c3:a6: 1f:44:08:90:24:82:8e:fa:2f:7e:13:e3:ed:26:d3:6b:9f:6f: 62:33:84:66:6f:e6:6e:3d:1a:fd:17:18:6b:a7:d6:9f:e0:3a: 81:62:59:f8:e8:3f:7b:ab:12:00:4d:f8:a2:43:ae:4a:cc:42: cf:a7:6f:77:87:4c:92:46:cd:30:e7:bf:c6:c2:38:1f:5d:40: 8d:f7:48:c2:cc:82:ca:dd:4a:1b:8f:2d:3e:18:28:f0:c0:91: 07:b7:e1:98:49:f3:99:19:23:0d:b0:59:09:05:92:76:e0:b7: 79:76:6e:e8:1a:1c:61:70:4f:18:1f:ad:78:19:a1:93:55:58: d0:4b:17:4c:36:da:b4:20:6d:2f:a7:37:0f:aa:c6:3f:4e:0a: 85:a7:e8:53:fe:0f:fa:cd:c7:3e:f5:25:d8:91:c7:cb:e9:8e: a6:76:7f:a3:8b:e6:c5:44:8d:71:2f:70:5a:19:9e:36:af:ab: f5:74:d5:2b:18:85:d4:b0:32:ab:50:e1:42:51:5a:ef:0d:89: bd:25:05:bc:c6:89:b4:39:8d:69:51:3d:3a:9a:15:99:42:95: c8:78:04:44:3e:89:77:74:da:af:ad:15:9e:91:b6:fc:92:0e: 88:83:bb:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUalLjgSYYXbcrBsSOUiOj5z9quY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3 M0I4MDJCQjAeFw0yNjEwMjYwMzMxMzBaFw0yNjEwMjcwNjMyMzBaMDMxMTAvBgNV BAMTKEZBQzlENjY0ODA5NjY1RUE2MkUxRjc2MzY4Mjc3M0ZGMDU2MzlCOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8rZP9KOWy10RfDOzfhmg4C1sY pYoHdAhdPjAk1rK5WMQJnOSkUBW84jcVKCljDUsAwZmAlpHzkPg27Q+Bs+tm/HCB GrCIb/Z10AWk/PgLKHzjFLROEQWK2vnQ6kZgGeBKH+ZRDqfUxdT9qfUXGU38S3xm JU65dq6jj7lWkkZls7lH0TAvbKDhAdi4IFWandjJc4IYT87lNsujOPPshMXI91Ha fo+IFWAPKj2iD3xswlE9ipFWOdY658pJUL9wSo2dJG0cdgnVI9YBROn/mpcZZP0S 5Xfl0+sl45K50JauGJc2/538sKP7qx2UUkdlHPgdLKK9u41mzRIk53GB2xlfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+snWZICWZepi4fdjaCdz/wVjm5QwHwYDVR0j BBgwFoAUsR1SY33Mtn+OmdrYDYLF4nO4ArswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmZhM2NmZjctMmFhMS00NGRmLTkxNGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3 RENDQjY3RjhFOTlEQUQ4MEQ4MkM1RTI3M0I4MDJCQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMTFENTI2MzdEQ0NCNjdGOEU5OURBRDgwRDgyQzVFMjczQjgw MkJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQjExRDUyNjM3RENDQjY3RjhFOTlEQUQ4MEQ4MkM1 RTI3M0I4MDJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKx6sTlzkLV+9w8HLhKB7XDph9ECJAkgo76 L34T4+0m02ufb2IzhGZv5m49Gv0XGGun1p/gOoFiWfjoP3urEgBN+KJDrkrMQs+n b3eHTJJGzTDnv8bCOB9dQI33SMLMgsrdShuPLT4YKPDAkQe34ZhJ85kZIw2wWQkF knbgt3l2bugaHGFwTxgfrXgZoZNVWNBLF0w22rQgbS+nNw+qxj9OCoWn6FP+D/rN xz71JdiRx8vpjqZ2f6OL5sVEjXEvcFoZnjavq/V01SsYhdSwMqtQ4UJRWu8Nib0l BbzGibQ5jWlRPTqaFZlClch4BEQ+iXd02q+tFZ6RtvySDoiDuwM= -----END CERTIFICATE-----Generated at Mon Oct 26 09:00:16 2026 by rpki-client