$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft File: BFD581C2B0FE16E5707177C62A9085855EA69732.mft (raw, json) Hash identifier: Pj6yRoEAuXwTQLD35TCpwcigFKff+9aF+G6/XtNDtjk= Subject key identifier: FC:07:D0:52:02:1C:5A:C6:68:9C:5C:C8:CC:48:C6:9D:6A:BA:6E:64 Authority key identifier: BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 Certificate issuer: /CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Certificate serial: 42E3C70FD439FA121526C36FDFC86A9D7D1459EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 16:44:48 +0000 Manifest this update: Wed 16 Sep 2026 16:39:48 +0000 Manifest next update: Thu 17 Sep 2026 20:27:48 +0000 Files and hashes: 1: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: dbSeVRgHxaR0jbOUpL55jnd+rDmGq29zPSafv5i7sa4=) 2: BFD581C2B0FE16E5707177C62A9085855EA69732.crl (hash: ym1EQ8CeISkE1c0wzrGCBJMoKfR/4ylmS3YVDWWK34w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e3:c7:0f:d4:39:fa:12:15:26:c3:6f:df:c8:6a:9d:7d:14:59:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFD581C2B0FE16E5707177C62A9085855EA69732 Validity Not Before: Sep 16 16:39:48 2026 GMT Not After : Sep 17 20:27:48 2026 GMT Subject: CN=FC07D052021C5AC6689C5CC8CC48C69D6ABA6E64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:8c:7c:22:9d:a9:0c:b8:3b:68:d6:3e:86: 50:ad:ab:de:04:14:24:df:8c:65:4f:31:4a:bc:ff: d2:11:94:a7:e6:c6:dc:0e:6b:ae:8f:27:5c:20:ff: d9:a8:d6:32:93:7b:9d:1a:47:c4:c5:85:9c:52:2d: c3:98:5c:9e:c7:32:71:7b:98:99:8e:cb:09:d9:bb: ce:0d:6b:fc:fb:19:a9:28:ab:33:ec:1f:46:66:f8: 25:cc:61:8e:3a:aa:24:ab:cb:09:fc:f9:b5:62:83: a8:12:7d:3c:ec:9d:94:85:1e:9e:71:d3:6d:ff:9a: 81:bd:d2:1f:20:1f:8f:2b:10:d6:95:a5:45:be:d5: a7:3f:cb:5b:c9:dd:9f:28:92:1c:c5:b1:e0:7c:e1: 15:52:63:b0:b8:1c:f0:6d:aa:1d:c6:be:5e:68:7b: 13:e8:9c:95:9d:0f:02:9d:40:1d:7a:6a:df:68:28: 18:7d:08:f0:41:52:49:78:6c:61:70:ff:2b:1a:bc: 2c:be:14:4c:45:3d:b9:71:e7:20:47:e2:60:2d:9d: 62:42:32:52:2d:65:e5:f8:3a:85:32:82:0a:65:74: c0:9d:a0:86:df:c5:d9:c0:6d:b3:70:aa:61:78:b1: f4:0c:57:b8:19:ea:32:7f:82:c2:07:3c:ae:6f:36: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:07:D0:52:02:1C:5A:C6:68:9C:5C:C8:CC:48:C6:9D:6A:BA:6E:64 X509v3 Authority Key Identifier: keyid:BF:D5:81:C2:B0:FE:16:E5:70:71:77:C6:2A:90:85:85:5E:A6:97:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BFD581C2B0FE16E5707177C62A9085855EA69732.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/BFD581C2B0FE16E5707177C62A9085855EA69732.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:54:1f:31:6f:51:cd:7b:26:df:d2:75:c6:46:1e:3a:d1:c0: c2:3e:63:6e:06:c0:f2:44:b0:ec:6d:d0:16:e9:16:ef:7b:3d: 10:16:86:d5:fe:be:b5:cd:8d:f2:a3:bb:45:71:14:52:98:31: 01:1b:2e:45:4c:7b:5f:db:8d:6b:5a:d9:11:82:a4:01:e6:4a: 52:c4:ee:03:7b:eb:af:b8:cd:79:72:4b:39:d7:4f:e8:ac:26: 52:86:98:1b:02:7c:0a:49:ca:5c:b1:6a:26:7e:7b:88:13:48: 56:30:ef:70:d4:27:1f:51:61:04:4d:2c:82:8c:f4:02:6c:ea: 42:01:65:71:b2:2f:f8:12:64:a6:5b:c9:3a:49:95:4f:70:ea: 92:68:38:d7:a5:23:93:13:e3:70:a0:4a:7e:aa:06:70:48:0b: 29:b9:ad:86:d6:43:ef:26:f8:4d:04:36:1e:c3:cc:19:b2:c4: 9b:27:db:4a:7c:37:c2:17:e1:7f:0d:6f:2e:66:35:b5:e9:d2: 91:1a:25:37:8a:1e:f0:68:ce:90:4b:8f:3a:e9:eb:32:c8:f4: 36:f7:37:26:76:61:30:25:93:62:27:a6:07:6a:3b:78:66:09: c2:ca:a0:63:0f:47:3f:e8:34:3f:0b:eb:8e:5d:d8:a9:70:f6: b5:d1:da:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuPHD9Q5+hIVJsNv38hqnX0UWeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1 RUE2OTczMjAeFw0yNjA5MTYxNjM5NDhaFw0yNjA5MTcyMDI3NDhaMDMxMTAvBgNV BAMTKEZDMDdEMDUyMDIxQzVBQzY2ODlDNUNDOENDNDhDNjlENkFCQTZFNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1ox8Ip2pDLg7aNY+hlCtq94E FCTfjGVPMUq8/9IRlKfmxtwOa66PJ1wg/9mo1jKTe50aR8TFhZxSLcOYXJ7HMnF7 mJmOywnZu84Na/z7GakoqzPsH0Zm+CXMYY46qiSrywn8+bVig6gSfTzsnZSFHp5x 023/moG90h8gH48rENaVpUW+1ac/y1vJ3Z8okhzFseB84RVSY7C4HPBtqh3Gvl5o exPonJWdDwKdQB16at9oKBh9CPBBUkl4bGFw/ysavCy+FExFPblx5yBH4mAtnWJC MlItZeX4OoUyggpldMCdoIbfxdnAbbNwqmF4sfQMV7gZ6jJ/gsIHPK5vNuerAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AfQUgIcWsZonFzIzEjGnWq6bmQwHwYDVR0j BBgwFoAUv9WBwrD+FuVwcXfGKpCFhV6mlzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTk3YzY4MmEtNDQ4Yi00MGUyLWE4OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJC MEZFMTZFNTcwNzE3N0M2MkE5MDg1ODU1RUE2OTczMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRkQ1ODFDMkIwRkUxNkU1NzA3MTc3QzYyQTkwODU4NTVFQTY5 NzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvQkZENTgxQzJCMEZFMTZFNTcwNzE3N0M2MkE5MDg1 ODU1RUE2OTczMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtUHzFvUc17Jt/SdcZGHjrRwMI+Y24GwPJE sOxt0BbpFu97PRAWhtX+vrXNjfKju0VxFFKYMQEbLkVMe1/bjWta2RGCpAHmSlLE 7gN766+4zXlySznXT+isJlKGmBsCfApJylyxaiZ+e4gTSFYw73DUJx9RYQRNLIKM 9AJs6kIBZXGyL/gSZKZbyTpJlU9w6pJoONelI5MT43CgSn6qBnBICym5rYbWQ+8m +E0ENh7DzBmyxJsn20p8N8IX4X8Nby5mNbXp0pEaJTeKHvBozpBLjzrp6zLI9Db3 NyZ2YTAlk2InpgdqO3hmCcLKoGMPRz/oND8L645d2Klw9rXR2oc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:57:32 2026 by rpki-client