$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft File: BF81EC78CC8A61FCFF71A862321A5204E581203B.mft (raw, json) Hash identifier: oFosISzSbJudkx/h2T7EfvFXaH757IfmefpIFN9C9Yo= Subject key identifier: 3A:10:6D:8E:B4:C7:43:8D:A5:64:F9:01:6F:BE:0F:07:1D:B8:1E:EC Authority key identifier: BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B Certificate issuer: /CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Certificate serial: 0CF48D3ED01A87EBB340FFAEACA0CB1B24E26D96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft Manifest number: EB Signing time: Sat 24 Oct 2026 20:19:27 +0000 Manifest this update: Sat 24 Oct 2026 20:14:27 +0000 Manifest next update: Sun 25 Oct 2026 22:46:27 +0000 Files and hashes: 1: BF81EC78CC8A61FCFF71A862321A5204E581203B.crl (hash: qQ85vnxBpOri3ZpqKWk4RuiqH/tr69YmXiY8dOgZgJM=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: cg2vG6vOlvaO0bKi1CGuJ7bUO4QcPh2Dxu7evpmyUN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f4:8d:3e:d0:1a:87:eb:b3:40:ff:ae:ac:a0:cb:1b:24:e2:6d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF81EC78CC8A61FCFF71A862321A5204E581203B Validity Not Before: Oct 24 20:14:27 2026 GMT Not After : Oct 25 22:46:27 2026 GMT Subject: CN=3A106D8EB4C7438DA564F9016FBE0F071DB81EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:30:d4:c6:63:65:63:88:c6:47:c8:de:9b:7c: 4c:58:7f:5e:3c:b6:84:3e:0a:eb:66:0f:6f:5b:eb: e5:5d:61:82:5d:81:b6:09:2f:42:a7:92:e7:f5:a1: e6:d4:85:c9:9a:bd:91:67:9f:72:6c:b6:a5:8b:34: 86:93:c8:e6:a0:53:8c:2b:14:5d:36:9a:4c:ab:11: bf:35:82:54:8a:bd:26:60:f0:8d:05:d5:3f:e1:6e: 31:3e:5e:c6:cc:31:06:2a:99:0d:d6:f9:1d:4f:81: 65:2f:a5:24:ba:0d:6c:b0:9d:37:f9:6f:65:27:a6: f4:a0:ac:94:3e:52:1b:96:91:80:bd:ea:dd:53:74: b5:38:51:8b:29:34:6e:d6:dd:56:5e:ac:88:2f:5d: 01:34:f8:23:d8:a7:b1:32:ff:59:23:5a:98:02:a9: bc:63:36:fc:ad:e8:21:fe:6b:53:df:af:e1:71:0c: fd:c2:4b:01:20:ed:4f:ba:33:57:80:47:1b:36:2f: 9f:d7:5d:5d:12:54:29:5f:63:e6:be:fd:9a:93:5f: 74:97:ec:04:94:c2:eb:b5:c2:9e:b7:6e:9c:6d:0e: f3:4d:3f:6d:ca:55:e2:73:07:da:e9:02:2d:53:77: f3:e3:16:df:c3:7a:e6:53:08:fd:a8:b2:71:20:e1: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:10:6D:8E:B4:C7:43:8D:A5:64:F9:01:6F:BE:0F:07:1D:B8:1E:EC X509v3 Authority Key Identifier: keyid:BF:81:EC:78:CC:8A:61:FC:FF:71:A8:62:32:1A:52:04:E5:81:20:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BF81EC78CC8A61FCFF71A862321A5204E581203B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/BF81EC78CC8A61FCFF71A862321A5204E581203B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c9:cd:9b:c1:ac:cd:94:c6:dc:aa:56:fe:5a:4e:8d:d5:d0: 47:9b:24:9f:06:41:c9:4a:48:bd:d5:46:a3:d9:be:fa:b6:d6: ca:f6:d7:9d:eb:f4:bc:b7:34:cb:39:8e:50:0b:8b:21:fc:8d: 85:51:dc:cb:a9:d1:e4:e6:64:92:ae:59:58:dc:8c:ce:bc:c8: b8:5f:a2:ca:dc:0c:55:a1:1b:4d:72:79:6a:8d:ab:ae:84:86: 09:56:7f:2f:1e:66:53:d3:00:32:46:54:b6:cc:54:34:f5:0e: 42:73:f1:4e:96:a1:2c:37:b7:26:9b:e7:db:ae:f8:2a:db:52: c9:d7:fd:5d:4e:b7:d3:ba:4f:df:df:15:b8:e7:20:55:c1:30: 43:ac:8a:19:d6:dc:82:9e:48:d5:33:86:3e:fd:62:a3:e4:93: 93:88:e9:87:13:6f:12:31:74:de:15:1c:88:b4:e4:a3:f7:23: a7:ee:5c:88:b0:bb:67:0b:d4:64:2b:29:20:39:41:9c:5c:b1: ff:48:7c:05:b3:a4:37:50:27:91:4f:78:5c:8f:07:09:1a:66: 7d:f5:61:40:d6:6a:80:af:ef:e1:0a:74:6d:b9:64:fe:d4:57: 7a:61:50:6d:9b:9c:51:20:d6:21:3a:8a:9c:de:e7:5a:75:ab: 0a:ea:68:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPSNPtAah+uzQP+urKDLGyTibZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRF NTgxMjAzQjAeFw0yNjEwMjQyMDE0MjdaFw0yNjEwMjUyMjQ2MjdaMDMxMTAvBgNV BAMTKDNBMTA2RDhFQjRDNzQzOERBNTY0RjkwMTZGQkUwRjA3MURCODFFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVMNTGY2VjiMZHyN6bfExYf148 toQ+CutmD29b6+VdYYJdgbYJL0Knkuf1oebUhcmavZFnn3JstqWLNIaTyOagU4wr FF02mkyrEb81glSKvSZg8I0F1T/hbjE+XsbMMQYqmQ3W+R1PgWUvpSS6DWywnTf5 b2UnpvSgrJQ+UhuWkYC96t1TdLU4UYspNG7W3VZerIgvXQE0+CPYp7Ey/1kjWpgC qbxjNvyt6CH+a1Pfr+FxDP3CSwEg7U+6M1eARxs2L5/XXV0SVClfY+a+/ZqTX3SX 7ASUwuu1wp63bpxtDvNNP23KVeJzB9rpAi1Td/PjFt/DeuZTCP2osnEg4Xd7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhBtjrTHQ42lZPkBb74PBx24HuwwHwYDVR0j BBgwFoAUv4HseMyKYfz/cahiMhpSBOWBIDswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDg2OGNmMjItZDAyOS00NWUyLTllMjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhD QzhBNjFGQ0ZGNzFBODYyMzIxQTUyMDRFNTgxMjAzQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRjgxRUM3OENDOEE2MUZDRkY3MUE4NjIzMjFBNTIwNEU1ODEy MDNCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvQkY4MUVDNzhDQzhBNjFGQ0ZGNzFBODYyMzIxQTUy MDRFNTgxMjAzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrJzZvBrM2UxtyqVv5aTo3V0EebJJ8GQclK SL3VRqPZvvq21sr2153r9Ly3NMs5jlALiyH8jYVR3Mup0eTmZJKuWVjcjM68yLhf osrcDFWhG01yeWqNq66EhglWfy8eZlPTADJGVLbMVDT1DkJz8U6WoSw3tyab59uu +CrbUsnX/V1Ot9O6T9/fFbjnIFXBMEOsihnW3IKeSNUzhj79YqPkk5OI6YcTbxIx dN4VHIi05KP3I6fuXIiwu2cL1GQrKSA5QZxcsf9IfAWzpDdQJ5FPeFyPBwkaZn31 YUDWaoCv7+EKdG25ZP7UV3phUG2bnFEg1iE6ipze51p1qwrqaB8= -----END CERTIFICATE-----Generated at Sun Oct 25 01:45:55 2026 by rpki-client