$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft File: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft (raw, json) Hash identifier: Jr3lflCcRMLlJhx/QcYw2hpYExnNp8AOBZyPmh6wERI= Subject key identifier: E3:DA:62:2A:81:96:D0:03:7F:EA:D2:CF:24:5D:14:95:86:22:51:6D Authority key identifier: BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 Certificate issuer: /CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Certificate serial: 58881EBCADC9707A9DD5F764C94FADEB00C70AF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft Manifest number: ED Signing time: Sun 25 Oct 2026 12:01:35 +0000 Manifest this update: Sun 25 Oct 2026 11:56:35 +0000 Manifest next update: Mon 26 Oct 2026 13:18:35 +0000 Files and hashes: 1: BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl (hash: 9RPWNYTuFQnsq2BrWWYe1AS/6uhiEHWniHksKgAWvQc=) 2: 3130332e37392e3233382e302f32342d3234203d3e20313336383431.roa (hash: j4uOmqabq0ad/AKZExp7hObnjfcRylodyVWsclS/JAc=) 3: 3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (hash: 7LZhS9gF2RnRR3LanDYLtZzM4vVV4n7zK69LJ+UkP8c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:88:1e:bc:ad:c9:70:7a:9d:d5:f7:64:c9:4f:ad:eb:00:c7:0a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103 Validity Not Before: Oct 25 11:56:35 2026 GMT Not After : Oct 26 13:18:35 2026 GMT Subject: CN=E3DA622A8196D0037FEAD2CF245D14958622516D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:9d:37:20:44:15:0b:ea:d1:99:bf:86:ea: 59:ec:13:fb:12:a2:d3:8d:a2:9b:43:c1:92:38:93: 20:86:aa:92:c4:1c:09:0f:c6:b9:4d:7b:80:c2:b6: 5b:f2:83:28:35:77:3d:89:05:70:bb:45:30:7a:b7: 1b:2b:13:b9:5b:d6:e3:98:19:5e:d3:43:1b:10:ad: 2e:40:05:51:2e:e6:bf:01:17:3e:60:30:65:47:b1: 3d:43:63:49:ff:10:99:6a:7f:2c:f2:66:66:de:5c: 64:e0:a6:a6:8e:f3:ab:f5:e7:11:69:45:17:88:82: 63:37:c8:57:3d:8c:ec:fa:e4:1d:22:2e:1e:38:bd: 77:44:96:fc:3d:e8:e2:c8:1a:cb:48:47:94:1d:8e: 23:50:52:1c:b4:7e:83:c6:4c:ba:2e:7a:c3:88:5b: 0a:cb:ee:cc:5b:94:6d:63:3b:99:bc:16:67:a9:d7: bf:2a:52:f9:b7:65:77:7a:b1:e7:93:b3:21:e0:2a: e9:76:e9:48:4a:b3:a7:ce:92:15:9c:06:d4:74:70: cb:92:b0:b5:93:9e:10:bc:68:80:ba:39:11:5c:8e: 2c:28:d2:36:d2:e8:d8:17:ff:24:7f:24:51:ba:d9: 7e:f5:31:ff:29:13:74:ed:a7:58:5c:5d:3b:af:98: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DA:62:2A:81:96:D0:03:7F:EA:D2:CF:24:5D:14:95:86:22:51:6D X509v3 Authority Key Identifier: keyid:BF:EF:30:6C:31:3A:6C:7B:19:46:97:CF:5A:5B:F6:FC:FF:8E:21:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/BFEF306C313A6C7B194697CF5A5BF6FCFF8E2103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bb:e5:0b:d5:eb:8e:5e:c8:d5:b8:ac:7a:a4:15:aa:64:31: 49:fe:38:82:b6:ff:7f:0c:0c:af:25:04:9e:3c:06:fb:a5:e5: e6:74:1f:dd:00:43:62:01:bd:77:4e:6e:d0:56:4c:6c:86:a9: 68:6c:10:19:fb:f6:07:8f:bb:93:54:4a:d6:93:ce:8c:4d:53: 24:ac:18:06:66:09:28:e8:2b:c0:c2:9d:d9:31:0b:a5:cf:f9: 9b:cd:12:84:36:01:dc:de:eb:1d:74:36:2d:7f:43:35:d4:89: 4c:15:bf:60:b0:5a:8a:92:92:7f:66:c8:58:af:a5:49:cb:a7: b9:99:d8:ab:19:54:11:d7:76:23:c8:b1:b1:55:9f:fb:b8:c9: 4f:3d:97:3f:fb:b1:39:e7:89:4b:bf:d2:4f:56:5e:68:33:e0: 4e:95:5a:75:bb:64:29:28:3a:51:21:3b:47:6c:6f:48:b6:95: 0f:f8:bb:6a:88:17:9e:b8:d3:2f:8c:75:ea:b8:df:cb:dc:20: 54:b2:ad:51:7f:ca:dd:0d:af:4a:a2:f7:57:0b:bb:a3:c9:33: 10:d0:22:4b:cf:be:e9:0e:63:9e:af:2c:c0:6b:45:87:6e:3e: dd:a4:20:4a:ec:c3:e2:a8:70:b5:fe:99:02:47:0f:dd:d3:4c: 48:67:9f:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIgevK3JcHqd1fdkyU+t6wDHCvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNG RjhFMjEwMzAeFw0yNjEwMjUxMTU2MzVaFw0yNjEwMjYxMzE4MzVaMDMxMTAvBgNV BAMTKEUzREE2MjJBODE5NkQwMDM3RkVBRDJDRjI0NUQxNDk1ODYyMjUxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSJ03IEQVC+rRmb+G6lnsE/sS otONoptDwZI4kyCGqpLEHAkPxrlNe4DCtlvygyg1dz2JBXC7RTB6txsrE7lb1uOY GV7TQxsQrS5ABVEu5r8BFz5gMGVHsT1DY0n/EJlqfyzyZmbeXGTgpqaO86v15xFp RReIgmM3yFc9jOz65B0iLh44vXdElvw96OLIGstIR5QdjiNQUhy0foPGTLouesOI WwrL7sxblG1jO5m8Fmep178qUvm3ZXd6seeTsyHgKul26UhKs6fOkhWcBtR0cMuS sLWTnhC8aIC6ORFcjiwo0jbS6NgX/yR/JFG62X71Mf8pE3Ttp1hcXTuvmDFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU49piKoGW0AN/6tLPJF0UlYYiUW0wHwYDVR0j BBgwFoAUv+8wbDE6bHsZRpfPWlv2/P+OIQMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDZkZjI2OTEtZGI2Mi00M2I5LThhNTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMz MTNBNkM3QjE5NDY5N0NGNUE1QkY2RkNGRjhFMjEwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRkVGMzA2QzMxM0E2QzdCMTk0Njk3Q0Y1QTVCRjZGQ0ZGOEUy MTAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDZkZjI2OTEtZGI2Mi00M2I5LThh NTctMGUwNmRhMWFjYzY0LzAvQkZFRjMwNkMzMTNBNkM3QjE5NDY5N0NGNUE1QkY2 RkNGRjhFMjEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABe75QvV645eyNW4rHqkFapkMUn+OIK2/38M DK8lBJ48Bvul5eZ0H90AQ2IBvXdObtBWTGyGqWhsEBn79gePu5NUStaTzoxNUySs GAZmCSjoK8DCndkxC6XP+ZvNEoQ2Adze6x10Ni1/QzXUiUwVv2CwWoqSkn9myFiv pUnLp7mZ2KsZVBHXdiPIsbFVn/u4yU89lz/7sTnniUu/0k9WXmgz4E6VWnW7ZCko OlEhO0dsb0i2lQ/4u2qIF5640y+Mdeq438vcIFSyrVF/yt0Nr0qi91cLu6PJMxDQ IkvPvukOY56vLMBrRYduPt2kIErsw+KocLX+mQJHD93TTEhnn18= -----END CERTIFICATE-----Generated at Mon Oct 26 02:19:33 2026 by rpki-client