$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: BTpm/TybUQ2o9NUv37DJ9ON6+MygcfFwoOTFdWESSVM= Subject key identifier: A2:89:4D:C5:AA:18:54:75:04:59:DF:E1:1D:54:22:8A:76:76:AE:75 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 488FFCD5D8A2BD1CEC9D6C44C4A64B1A7A0B51C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 21:10:27 +0000 Manifest this update: Wed 04 Nov 2026 21:05:27 +0000 Manifest next update: Fri 06 Nov 2026 01:01:27 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: VRj+/8joFxYQsDdv9H0U9i3krLoZwgG4n9yulVSeuo8=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8f:fc:d5:d8:a2:bd:1c:ec:9d:6c:44:c4:a6:4b:1a:7a:0b:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Nov 4 21:05:27 2026 GMT Not After : Nov 6 01:01:27 2026 GMT Subject: CN=A2894DC5AA1854750459DFE11D54228A7676AE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:74:d7:9d:c0:ec:a5:da:d9:76:78:3b:40: 98:1e:2d:6e:19:5f:e0:4b:46:53:6e:a5:02:78:b5: 20:e9:37:46:7f:f6:72:b2:f9:a9:0e:87:67:61:bf: 7e:79:bb:25:1e:0b:e1:10:9e:e0:e4:80:b6:f3:ad: 66:83:87:91:fd:57:8e:5f:a3:e1:d8:e9:49:2b:85: ff:79:07:38:a7:06:7c:7b:fc:6e:16:00:29:29:e2: 9e:7f:25:6c:0b:16:8f:bd:6b:46:8d:8a:17:7d:ee: d7:93:f7:24:40:b9:c4:fd:44:1f:81:6e:97:79:e7: 05:64:b9:33:61:2a:3c:1e:c7:0d:13:09:96:bb:48: 5d:cb:c3:da:12:1b:30:0b:ac:2f:f6:2a:e1:dd:a9: b1:f4:29:8b:21:cc:07:5e:09:b1:4e:8f:a3:d2:c7: 93:64:a8:15:97:d7:29:f8:41:84:d4:cd:79:5e:db: a7:78:82:39:5d:e7:c0:8e:9b:b0:c0:30:94:15:0d: bc:6c:77:6c:45:bc:b3:74:96:c9:03:73:f1:ec:0d: 0a:83:68:ca:5e:b6:fc:2e:9f:2d:fd:1c:a9:4b:09: 35:15:ee:02:93:d2:31:2b:08:4c:a4:43:fa:89:14: 3d:50:6e:ff:79:60:f2:33:2a:1c:8a:03:77:a5:68: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:89:4D:C5:AA:18:54:75:04:59:DF:E1:1D:54:22:8A:76:76:AE:75 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:aa:5c:52:03:d5:27:a4:df:fe:40:e7:a3:f3:f7:4a:6e: c3:59:e7:80:20:c4:26:d6:88:42:42:d6:86:e6:d7:fb:26:2a: 44:08:ad:74:17:d0:a7:9b:a0:39:91:29:41:e3:24:07:03:fa: 94:38:60:79:30:ac:ab:33:47:4e:e9:6b:32:a4:83:f0:00:a4: 38:25:b7:c0:1d:e7:e9:2e:41:c6:b6:b7:25:d8:ce:79:1b:d6: 62:14:d3:aa:68:3b:1c:37:c3:bb:4e:38:db:09:45:3b:38:bc: 9c:a1:4f:e6:ec:f2:14:57:2c:05:2e:26:05:9b:02:ba:68:a4: cc:cc:52:fa:b2:22:97:a7:8c:f5:2a:e8:80:33:0e:c7:6d:29: 98:9f:15:5c:57:8b:8e:eb:28:e9:10:29:9b:68:5a:65:06:89: 4a:8c:57:d3:e8:0f:c5:21:90:ec:b1:10:4c:10:d6:25:06:83: ac:90:51:b0:1f:16:30:27:c7:8c:e2:ef:27:98:ba:36:18:4e: c8:42:40:9f:b6:0a:ca:08:d4:15:d4:b0:f1:e2:f3:a6:b4:be: 20:1f:7b:b4:ba:51:f5:43:58:e4:f6:c1:83:c0:a8:4c:8d:32: 57:9c:41:fc:da:e7:64:86:19:08:92:2d:21:33:87:e0:dd:a1: e4:ca:36:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSI/81diivRzsnWxExKZLGnoLUcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjExMDQyMTA1MjdaFw0yNjExMDYwMTAxMjdaMDMxMTAvBgNV BAMTKEEyODk0REM1QUExODU0NzUwNDU5REZFMTFENTQyMjhBNzY3NkFFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0nTXncDspdrZdng7QJgeLW4Z X+BLRlNupQJ4tSDpN0Z/9nKy+akOh2dhv355uyUeC+EQnuDkgLbzrWaDh5H9V45f o+HY6Ukrhf95BzinBnx7/G4WACkp4p5/JWwLFo+9a0aNihd97teT9yRAucT9RB+B bpd55wVkuTNhKjwexw0TCZa7SF3Lw9oSGzALrC/2KuHdqbH0KYshzAdeCbFOj6PS x5NkqBWX1yn4QYTUzXle26d4gjld58COm7DAMJQVDbxsd2xFvLN0lskDc/HsDQqD aMpetvwuny39HKlLCTUV7gKT0jErCEykQ/qJFD1Qbv95YPIzKhyKA3elaHZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoolNxaoYVHUEWd/hHVQiinZ2rnUwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAbqlxSA9UnpN/+QOej8/dKbsNZ54AgxCbW iEJC1obm1/smKkQIrXQX0KeboDmRKUHjJAcD+pQ4YHkwrKszR07pazKkg/AApDgl t8Ad5+kuQca2tyXYznkb1mIU06poOxw3w7tOONsJRTs4vJyhT+bs8hRXLAUuJgWb ArpopMzMUvqyIpenjPUq6IAzDsdtKZifFVxXi47rKOkQKZtoWmUGiUqMV9PoD8Uh kOyxEEwQ1iUGg6yQUbAfFjAnx4zi7yeYujYYTshCQJ+2CsoI1BXUsPHi86a0viAf e7S6UfVDWOT2wYPAqEyNMlecQfza52SGGQiSLSEzh+DdoeTKNqg= -----END CERTIFICATE-----Generated at Thu Nov 5 17:28:29 2026 by rpki-client