$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: bm7oxwEtV/e8/uDDKyx8nMzX5mqYyhdg0jwvvmH9n/o= Subject key identifier: AF:B2:4D:27:73:36:1F:7B:38:E6:05:DD:5C:53:3D:FD:7B:83:9F:30 Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 23DEE033D565D85976E1C0DBE619BB69621E7FAD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: BD Signing time: Sun 20 Sep 2026 20:37:28 +0000 Manifest this update: Sun 20 Sep 2026 20:32:28 +0000 Manifest next update: Mon 21 Sep 2026 21:58:28 +0000 Files and hashes: 1: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) 2: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: f3TI53BQf+/I9g2rIQwlGsCh4/2p43xih0X/X0d/38w=) 3: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:de:e0:33:d5:65:d8:59:76:e1:c0:db:e6:19:bb:69:62:1e:7f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: Sep 20 20:32:28 2026 GMT Not After : Sep 21 21:58:28 2026 GMT Subject: CN=AFB24D2773361F7B38E605DD5C533DFD7B839F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:91:b3:e0:a8:eb:56:ce:10:60:96:37:df: 23:4b:9f:54:0b:b1:18:f2:19:ef:45:24:db:87:12: 46:b5:9f:ab:78:e8:e5:f6:df:48:88:af:4a:3e:af: 44:53:f2:78:1f:21:e6:42:31:04:db:22:95:f8:46: 27:e1:50:e6:85:f6:09:9f:ab:3a:ac:8b:65:39:94: f6:fe:24:52:f5:f8:f2:f5:2a:53:81:95:97:00:24: 96:6e:e2:5c:90:e8:89:aa:8f:33:7e:1e:5b:e4:ae: 22:8e:51:0f:9d:06:89:34:d2:cb:d1:03:34:f1:2a: 39:e5:d3:a9:58:a2:88:91:0d:a3:88:66:b0:33:2c: 83:6f:29:4d:95:fc:4d:91:43:24:1e:96:2d:90:e9: fd:fd:6e:f6:54:5d:4c:05:5a:4b:8a:35:d7:1b:7c: 94:6b:49:2d:66:e1:91:a8:13:65:ec:98:3a:fe:fb: 6c:72:1f:c7:0a:b7:08:36:44:c3:27:25:c5:25:ac: 3c:a8:90:17:6c:47:37:75:b6:04:26:f1:08:c7:83: dc:4b:64:bc:74:43:68:f8:4b:14:05:58:29:70:fb: 3f:36:5c:3c:14:b7:0c:e8:84:df:15:a7:d5:43:f1: 8a:1a:7b:e7:f5:23:e4:da:d8:39:9a:f6:af:09:39: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B2:4D:27:73:36:1F:7B:38:E6:05:DD:5C:53:3D:FD:7B:83:9F:30 X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:7c:e4:fe:65:71:c2:17:46:71:72:3b:e8:ee:c1:34:29:15: 04:93:29:82:f6:63:76:4e:ac:b0:63:70:7e:55:ee:02:a6:60: bb:ec:09:e1:2c:0d:3d:dd:cf:50:21:5d:25:eb:9b:02:c2:29: 6d:51:09:eb:81:6c:09:00:ee:13:38:96:db:18:36:90:68:b0: 66:fb:3e:64:78:2d:2e:e7:2b:21:1c:5a:e3:5c:a6:fd:71:88: 76:7d:09:34:38:d1:ac:1f:9c:4e:a5:86:4f:ee:32:94:df:2a: a2:28:09:10:74:19:20:93:be:08:02:3f:e4:d8:95:00:2d:70: f7:9e:7f:ee:cd:e5:8a:89:75:0e:e4:bd:fb:6b:47:2c:90:0f: 9b:ed:e6:e6:cf:86:90:4a:86:c9:2c:d5:a4:ee:88:b8:80:80: bc:b6:11:d7:c2:5d:33:6d:db:b8:68:bc:e0:2f:ce:36:37:69: 34:94:87:58:85:12:5c:e2:be:e6:2c:85:e4:7e:00:75:df:bd: 05:6a:3b:92:51:33:fd:7a:0c:d0:79:26:ed:a7:85:e2:43:63: 35:2a:7b:7d:ae:ec:6a:08:2d:50:22:13:f2:78:8e:65:5c:4d: 21:bc:ab:34:d8:5e:31:c3:cd:b2:fa:eb:37:d7:1a:21:24:e9: 9d:6a:62:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI97gM9Vl2Fl24cDb5hm7aWIef60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA5MjAyMDMyMjhaFw0yNjA5MjEyMTU4MjhaMDMxMTAvBgNV BAMTKEFGQjI0RDI3NzMzNjFGN0IzOEU2MDVERDVDNTMzREZEN0I4MzlGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OJGz4KjrVs4QYJY33yNLn1QL sRjyGe9FJNuHEka1n6t46OX230iIr0o+r0RT8ngfIeZCMQTbIpX4RifhUOaF9gmf qzqsi2U5lPb+JFL1+PL1KlOBlZcAJJZu4lyQ6ImqjzN+HlvkriKOUQ+dBok00svR AzTxKjnl06lYooiRDaOIZrAzLINvKU2V/E2RQyQeli2Q6f39bvZUXUwFWkuKNdcb fJRrSS1m4ZGoE2XsmDr++2xyH8cKtwg2RMMnJcUlrDyokBdsRzd1tgQm8QjHg9xL ZLx0Q2j4SxQFWClw+z82XDwUtwzohN8Vp9VD8Yoae+f1I+Ta2Dma9q8JOe/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr7JNJ3M2H3s45gXdXFM9/XuDnzAwHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADB85P5lccIXRnFyO+juwTQpFQSTKYL2Y3ZO rLBjcH5V7gKmYLvsCeEsDT3dz1AhXSXrmwLCKW1RCeuBbAkA7hM4ltsYNpBosGb7 PmR4LS7nKyEcWuNcpv1xiHZ9CTQ40awfnE6lhk/uMpTfKqIoCRB0GSCTvggCP+TY lQAtcPeef+7N5YqJdQ7kvftrRyyQD5vt5ubPhpBKhsks1aTuiLiAgLy2EdfCXTNt 27hovOAvzjY3aTSUh1iFElzivuYsheR+AHXfvQVqO5JRM/16DNB5Ju2nheJDYzUq e32u7GoILVAiE/J4jmVcTSG8qzTYXjHDzbL66zfXGiEk6Z1qYo4= -----END CERTIFICATE-----Generated at Mon Sep 21 09:31:58 2026 by rpki-client