$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: byDpcRV1o23/B5ScD1hJ2dwzO6Qq3nZG/AfXt1+q4M4= Subject key identifier: FD:0E:2C:89:CC:C0:93:09:88:CA:ED:5F:83:06:0A:13:B1:0A:C2:4E Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 148FBB913AAC0702A863CFEDA5F0C06FB49288A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: BC Signing time: Sun 20 Sep 2026 18:55:12 +0000 Manifest this update: Sun 20 Sep 2026 18:50:12 +0000 Manifest next update: Mon 21 Sep 2026 19:51:12 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: b3wrJBXUNib/Xg7UIVm1dqztkfp6laS7D9Vu6v0FjcE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8f:bb:91:3a:ac:07:02:a8:63:cf:ed:a5:f0:c0:6f:b4:92:88:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Sep 20 18:50:12 2026 GMT Not After : Sep 21 19:51:12 2026 GMT Subject: CN=FD0E2C89CCC0930988CAED5F83060A13B10AC24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ee:8e:f0:da:bd:c1:c4:f6:89:19:d7:8f:1e: 1d:86:81:01:ec:ed:b1:be:ba:5a:b3:7b:16:04:60: fa:86:21:be:48:5b:58:b2:c2:0a:7a:8c:95:98:b4: 93:e9:a9:cc:6b:3d:de:ec:28:c5:95:f5:ef:66:97: d1:3b:87:0d:2a:fb:aa:65:e7:cc:7d:e5:01:a8:d4: 30:c6:0f:44:fe:fc:1a:71:08:76:f1:c7:4c:a3:cc: d4:88:f4:80:fa:78:5b:07:d0:e5:60:db:c8:21:51: 29:b5:d3:bb:e9:fe:0c:70:29:9b:e3:25:d8:c1:2a: e5:db:1a:64:ff:06:b2:cb:88:e5:7d:ab:ff:b4:ec: 9d:44:99:52:ad:b8:b4:3c:30:4a:e3:00:6b:34:c4: 4c:74:f8:10:fe:bc:b2:3a:2f:06:a1:b9:c2:c1:9b: 34:71:69:8e:63:24:bd:e2:99:c1:79:58:ce:80:0e: 79:af:03:fe:9a:c8:f6:94:f0:38:f6:65:c2:75:fc: 98:f6:e1:f1:05:e9:30:78:5c:65:c0:9e:61:f8:4f: 71:b0:70:e0:d7:10:16:3b:98:b2:66:1f:b3:33:2e: 46:17:e2:c7:90:50:73:12:89:20:8a:7c:88:e7:ca: 41:0e:cd:0b:c1:aa:62:31:2e:04:a7:5f:c0:27:2f: 03:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0E:2C:89:CC:C0:93:09:88:CA:ED:5F:83:06:0A:13:B1:0A:C2:4E X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:ae:74:bc:5c:d4:be:31:5d:46:21:5e:87:04:71:2e:fb:66: 7f:73:9c:f8:43:86:b2:a7:26:05:62:98:57:7c:02:3b:6d:b0: 6e:56:00:b5:d9:69:1c:98:76:9d:29:88:5c:94:17:e0:73:00: 1d:83:60:96:5a:61:8b:c2:ef:08:a9:42:65:57:ad:bb:78:57: 90:9e:13:7a:c4:c9:35:74:2d:e3:e5:69:a9:fa:2b:85:a4:28: c8:4c:3e:45:e9:92:fe:33:27:43:77:48:76:0e:63:c3:29:ff: f6:81:46:73:f3:bc:0e:bb:ff:a5:19:db:a5:1b:38:ef:de:30: 48:97:2e:a3:f6:91:24:c9:fd:56:72:51:ce:b4:f2:9e:3f:8b: e1:8d:26:e9:7b:33:01:7b:92:a1:2e:1d:8c:b1:ee:ea:33:ad: 2c:63:6e:23:eb:3b:f3:3d:03:3e:fb:2a:67:89:02:da:d0:27: 15:7f:67:0b:81:f3:ba:ea:99:1f:4c:c4:e9:76:35:1b:57:41: 2d:32:a7:88:44:4c:e7:96:3a:5c:b0:1f:fc:e1:9d:36:7e:87: 84:74:96:dd:bb:7e:9b:cd:34:6c:65:aa:48:99:4b:43:bd:af: 0a:60:7f:ad:33:49:93:ac:a7:86:d1:c4:8f:ec:cc:4b:9c:0c: 1a:bc:00:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFI+7kTqsBwKoY8/tpfDAb7SSiKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA5MjAxODUwMTJaFw0yNjA5MjExOTUxMTJaMDMxMTAvBgNV BAMTKEZEMEUyQzg5Q0NDMDkzMDk4OENBRUQ1RjgzMDYwQTEzQjEwQUMyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS7o7w2r3BxPaJGdePHh2GgQHs 7bG+ulqzexYEYPqGIb5IW1iywgp6jJWYtJPpqcxrPd7sKMWV9e9ml9E7hw0q+6pl 58x95QGo1DDGD0T+/BpxCHbxx0yjzNSI9ID6eFsH0OVg28ghUSm107vp/gxwKZvj JdjBKuXbGmT/BrLLiOV9q/+07J1EmVKtuLQ8MErjAGs0xEx0+BD+vLI6LwahucLB mzRxaY5jJL3imcF5WM6ADnmvA/6ayPaU8Dj2ZcJ1/Jj24fEF6TB4XGXAnmH4T3Gw cODXEBY7mLJmH7MzLkYX4seQUHMSiSCKfIjnykEOzQvBqmIxLgSnX8AnLwPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Q4siczAkwmIyu1fgwYKE7EKwk4wHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiudLxc1L4xXUYhXocEcS77Zn9znPhDhrKn JgVimFd8AjttsG5WALXZaRyYdp0piFyUF+BzAB2DYJZaYYvC7wipQmVXrbt4V5Ce E3rEyTV0LePlaan6K4WkKMhMPkXpkv4zJ0N3SHYOY8Mp//aBRnPzvA67/6UZ26Ub OO/eMEiXLqP2kSTJ/VZyUc608p4/i+GNJul7MwF7kqEuHYyx7uozrSxjbiPrO/M9 Az77KmeJAtrQJxV/ZwuB87rqmR9MxOl2NRtXQS0yp4hETOeWOlywH/zhnTZ+h4R0 lt27fpvNNGxlqkiZS0O9rwpgf60zSZOsp4bRxI/szEucDBq8ADk= -----END CERTIFICATE-----Generated at Mon Sep 21 04:09:12 2026 by rpki-client