$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: LEL2x3MXScpbNYL/qJaUww/dq9aB9lwLuaQ3u+2MD70= Subject key identifier: EA:6E:FC:52:01:6B:B4:97:58:77:6D:C9:DF:DA:18:EB:C9:11:E9:5B Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 323723F7F707252FF70E0A172E319FE0A69433E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:27:10 +0000 Manifest this update: Sun 20 Sep 2026 20:22:09 +0000 Manifest next update: Mon 21 Sep 2026 23:33:09 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: QMTQ/D/gIxCZ5DSGYabybKeF4AVRKX8eGVK5tjHi89c=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:37:23:f7:f7:07:25:2f:f7:0e:0a:17:2e:31:9f:e0:a6:94:33:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Sep 20 20:22:09 2026 GMT Not After : Sep 21 23:33:09 2026 GMT Subject: CN=EA6EFC52016BB49758776DC9DFDA18EBC911E95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:a0:1d:55:cf:ea:58:f6:e4:8d:d5:6d:40: 1b:dc:cf:30:b4:c3:17:4c:3d:ee:57:93:3e:7b:c1: 15:ab:8b:91:ca:c8:e2:c1:a6:75:ea:a4:e5:f2:4b: e9:26:b7:21:93:c9:e1:29:80:8d:85:e6:76:65:aa: 6c:21:a0:b3:8e:01:c6:0f:e3:0d:94:86:b9:76:1b: 3d:6e:a3:7d:dd:a3:2d:0c:1b:b5:61:ca:93:5f:c3: 27:e1:4c:b5:13:6e:d3:d5:85:28:33:ef:ee:59:ce: 19:33:a9:53:a2:67:1d:e1:54:7f:66:2b:68:5c:fc: a8:cf:1f:75:fd:e0:f6:e0:15:f8:1e:30:7e:4f:8c: f5:a9:d8:47:6a:9c:4c:98:79:ad:53:a7:37:51:da: cc:86:14:79:6d:f1:66:ff:ca:de:4d:e2:cf:48:9f: a5:de:d5:f9:c3:32:d3:4e:7d:11:63:51:ae:29:44: e0:3b:5c:c8:74:2c:7b:e3:d2:34:b1:ee:b6:ba:47: 29:29:dc:e2:9b:36:76:5f:27:de:1d:af:f9:7c:68: 85:c4:df:3b:3f:eb:f5:b3:9d:6e:de:ed:f7:95:ca: 85:b4:52:df:5c:85:bf:fc:cf:3c:29:5f:a7:d0:20: d4:66:e1:53:25:7e:98:5c:9e:95:a2:7e:c1:fa:24: 9a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6E:FC:52:01:6B:B4:97:58:77:6D:C9:DF:DA:18:EB:C9:11:E9:5B X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:68:5e:86:60:ec:79:6d:d2:ae:f9:a0:e2:39:95:82:fd:af: 34:59:f1:a1:53:03:17:ef:d4:4a:bf:a6:06:a4:68:ec:74:ed: eb:b4:5c:d1:72:76:2e:ea:7a:dc:73:d0:bf:a3:ee:4a:96:b3: 96:86:76:53:14:fc:f1:ba:51:b8:af:11:ed:8f:bd:fc:c4:0c: 27:ba:e3:26:e9:c3:aa:e4:77:55:3a:3b:f9:0b:76:5f:d2:d4: 0e:69:4d:17:45:6d:af:4e:20:77:30:92:e5:63:88:94:a9:7c: e8:5d:71:01:4a:d5:05:e9:e1:ac:1e:f5:4f:e3:80:b9:58:28: 94:4c:9e:38:d4:34:90:97:b5:73:c2:c8:ad:07:52:f3:82:85: 20:96:45:76:2c:f4:84:fa:c2:e8:d3:0f:ad:2a:38:76:8e:65: 18:bd:ca:6c:f2:60:f4:79:24:4d:fa:c2:a2:bd:6e:66:34:6f: 68:57:c8:44:7d:26:81:10:d0:7e:b5:3f:15:a8:af:a8:bb:0f: c9:53:72:2a:f6:ed:92:4e:40:72:16:b0:de:cc:44:e1:98:e3: 9d:cc:fd:47:36:7e:f2:b5:5c:96:f0:5c:e1:08:88:16:41:b2: 7d:9c:09:75:86:b5:b5:bd:ac:57:61:ad:7f:8e:9f:83:e1:99: eb:f3:60:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjcj9/cHJS/3DgoXLjGf4KaUM+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA5MjAyMDIyMDlaFw0yNjA5MjEyMzMzMDlaMDMxMTAvBgNV BAMTKEVBNkVGQzUyMDE2QkI0OTc1ODc3NkRDOURGREExOEVCQzkxMUU5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHFKAdVc/qWPbkjdVtQBvczzC0 wxdMPe5Xkz57wRWri5HKyOLBpnXqpOXyS+kmtyGTyeEpgI2F5nZlqmwhoLOOAcYP 4w2Uhrl2Gz1uo33doy0MG7VhypNfwyfhTLUTbtPVhSgz7+5ZzhkzqVOiZx3hVH9m K2hc/KjPH3X94PbgFfgeMH5PjPWp2EdqnEyYea1TpzdR2syGFHlt8Wb/yt5N4s9I n6Xe1fnDMtNOfRFjUa4pROA7XMh0LHvj0jSx7ra6Rykp3OKbNnZfJ94dr/l8aIXE 3zs/6/WznW7e7feVyoW0Ut9chb/8zzwpX6fQINRm4VMlfphcnpWifsH6JJoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6m78UgFrtJdYd23J39oY68kR6VswHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpoXoZg7Hlt0q75oOI5lYL9rzRZ8aFTAxfv 1Eq/pgakaOx07eu0XNFydi7qetxz0L+j7kqWs5aGdlMU/PG6UbivEe2PvfzEDCe6 4ybpw6rkd1U6O/kLdl/S1A5pTRdFba9OIHcwkuVjiJSpfOhdcQFK1QXp4awe9U/j gLlYKJRMnjjUNJCXtXPCyK0HUvOChSCWRXYs9IT6wujTD60qOHaOZRi9ymzyYPR5 JE36wqK9bmY0b2hXyER9JoEQ0H61PxWor6i7D8lTcir27ZJOQHIWsN7MROGY453M /Uc2fvK1XJbwXOEIiBZBsn2cCXWGtbW9rFdhrX+On4PhmevzYBc= -----END CERTIFICATE-----Generated at Mon Sep 21 10:54:37 2026 by rpki-client