$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: oTJb+DSfGMCZptlCVvJo26upunZj0HgU+1Tps7Irm6I= Subject key identifier: 09:75:67:7B:DB:14:AB:84:4F:49:52:6D:B9:F0:BD:3C:77:6F:DE:0B Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 260A227B2FDA17342B9C8FDEF68F58FAB3ED99F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 13:32:42 +0000 Manifest this update: Thu 24 Sep 2026 13:27:42 +0000 Manifest next update: Fri 25 Sep 2026 14:05:42 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) 2: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: pTxo9DbqJqX8zskVErs3EMygHPjpB0+NsP38Yrq65hY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0a:22:7b:2f:da:17:34:2b:9c:8f:de:f6:8f:58:fa:b3:ed:99:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: Sep 24 13:27:42 2026 GMT Not After : Sep 25 14:05:42 2026 GMT Subject: CN=0975677BDB14AB844F49526DB9F0BD3C776FDE0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:e4:b4:9f:11:cc:6d:b7:a4:1a:ca:9d:f3: 97:28:57:9a:a9:7a:43:8c:63:e1:80:58:af:78:a7: 16:0c:46:69:5a:ed:3a:ea:28:35:b3:c1:b1:ea:15: ab:50:17:cb:84:e8:52:01:31:b3:e2:61:d0:9e:fb: 24:56:36:d6:6a:b7:5b:8a:d5:ba:ae:1f:11:a0:c6: 45:f7:98:a0:8d:7b:e8:16:17:d9:27:8f:0f:84:8d: 13:b0:70:c9:63:35:6c:13:23:e7:e3:0b:17:4b:41: 07:b7:ae:e5:07:10:7b:5c:0e:52:1d:73:46:c6:e2: e9:c2:e1:a5:20:d7:f8:68:b1:e5:86:ab:d8:d7:39: 3c:95:b0:5b:5a:00:5e:f6:00:39:63:ca:fc:ee:9c: ee:87:a4:1e:b4:9f:75:58:11:09:b4:a5:04:fd:d3: f3:3c:89:1a:c9:6e:12:c9:66:3a:b1:35:87:0c:c4: 46:7d:6b:fc:ed:d1:1f:ab:cd:b1:ab:eb:67:9d:ab: 48:c7:64:a2:e9:dd:e8:3e:2d:fd:62:64:07:aa:bd: b2:c2:fd:50:db:78:dd:24:31:c9:85:fd:aa:0e:8a: 54:38:d6:fa:82:20:5c:a2:29:de:1b:a2:d3:cb:3f: 07:54:4b:3c:aa:47:ce:6b:c6:a5:18:dc:d8:24:76: 21:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:75:67:7B:DB:14:AB:84:4F:49:52:6D:B9:F0:BD:3C:77:6F:DE:0B X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b5:4f:ad:5c:57:88:a7:58:74:da:b5:93:4e:31:62:e5:f5: d2:05:f9:ae:1f:cb:e7:3d:84:62:4e:08:fb:ba:b6:94:d7:4b: ef:1b:a4:ab:24:93:5e:aa:74:74:af:f3:6b:c0:68:df:86:27: d8:15:4f:e9:00:15:91:bf:0c:6c:cf:89:c9:33:b3:0b:b3:50: c9:c7:7b:2e:9d:00:c0:6a:3c:34:bc:21:34:8f:7a:d9:45:3f: b3:44:8a:ee:e4:0f:39:71:46:63:0a:85:66:bf:e6:c7:9d:5a: ba:f9:b8:c3:9f:f5:9e:50:5e:18:4c:c2:1c:ef:fe:aa:35:8f: d5:00:c1:c7:7d:09:45:3a:9c:27:ed:e1:a8:da:de:51:10:fd: 4a:b8:8c:e3:e7:4a:73:cd:ba:03:e4:3b:23:50:47:c0:77:fe: 4c:d1:c8:15:a8:68:1e:6e:32:67:82:89:c4:ac:73:4c:6d:4d: 41:2f:fd:9a:d1:b0:32:33:b8:50:fb:a3:0a:40:51:41:f5:d7: b5:95:bb:9b:35:ba:8c:05:2d:c0:bd:c9:71:5b:4d:8a:f5:3e: a8:ab:9d:51:f7:f2:8a:4d:89:a8:d6:ae:37:03:5a:7a:4d:3b: f4:85:0d:69:ec:30:b3:51:cc:72:4c:1a:a4:29:85:c6:fa:64: 0f:6e:ab:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgoiey/aFzQrnI/e9o9Y+rPtmfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA5MjQxMzI3NDJaFw0yNjA5MjUxNDA1NDJaMDMxMTAvBgNV BAMTKDA5NzU2NzdCREIxNEFCODQ0RjQ5NTI2REI5RjBCRDNDNzc2RkRFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxAOS0nxHMbbekGsqd85coV5qp ekOMY+GAWK94pxYMRmla7TrqKDWzwbHqFatQF8uE6FIBMbPiYdCe+yRWNtZqt1uK 1bquHxGgxkX3mKCNe+gWF9knjw+EjROwcMljNWwTI+fjCxdLQQe3ruUHEHtcDlId c0bG4unC4aUg1/hoseWGq9jXOTyVsFtaAF72ADljyvzunO6HpB60n3VYEQm0pQT9 0/M8iRrJbhLJZjqxNYcMxEZ9a/zt0R+rzbGr62edq0jHZKLp3eg+Lf1iZAeqvbLC /VDbeN0kMcmF/aoOilQ41vqCIFyiKd4botPLPwdUSzyqR85rxqUY3NgkdiFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCXVne9sUq4RPSVJtufC9PHdv3gswHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALC1T61cV4inWHTatZNOMWLl9dIF+a4fy+c9 hGJOCPu6tpTXS+8bpKskk16qdHSv82vAaN+GJ9gVT+kAFZG/DGzPickzswuzUMnH ey6dAMBqPDS8ITSPetlFP7NEiu7kDzlxRmMKhWa/5sedWrr5uMOf9Z5QXhhMwhzv /qo1j9UAwcd9CUU6nCft4aja3lEQ/Uq4jOPnSnPNugPkOyNQR8B3/kzRyBWoaB5u MmeCicSsc0xtTUEv/ZrRsDIzuFD7owpAUUH117WVu5s1uowFLcC9yXFbTYr1Pqir nVH38opNiajWrjcDWnpNO/SFDWnsMLNRzHJMGqQphcb6ZA9uq/Y= -----END CERTIFICATE-----Generated at Fri Sep 25 03:38:03 2026 by rpki-client