$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: BhdLKvZpdirx4Rck6ASgwdnL6kmRNAj6Z/EBJizt+3s= Subject key identifier: 53:0E:E2:9E:51:C3:A1:0E:C8:6B:A1:A1:B1:BA:F1:B6:80:2F:79:81 Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 729DC86ECF59B32BB4EE6FB1176BE479D6117BF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: 0102 Signing time: Mon 09 Nov 2026 18:54:18 +0000 Manifest this update: Mon 09 Nov 2026 18:49:18 +0000 Manifest next update: Tue 10 Nov 2026 19:28:18 +0000 Files and hashes: 1: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) 2: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: 0Ac2OWbkIdyKhvL0Oo9MOjbMnRWxDsz7HuHPK/4r8cI=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 19:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9d:c8:6e:cf:59:b3:2b:b4:ee:6f:b1:17:6b:e4:79:d6:11:7b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Nov 9 18:49:18 2026 GMT Not After : Nov 10 19:28:18 2026 GMT Subject: CN=530EE29E51C3A10EC86BA1A1B1BAF1B6802F7981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:c2:18:5a:2b:a5:e3:76:6b:b8:6b:f0:47: 1c:2e:47:65:c1:10:9a:78:3b:67:c4:20:87:4c:ca: ec:1a:c2:d9:64:22:88:d6:f8:75:f5:39:c6:79:b9: 99:8e:c4:23:e8:3f:45:cc:0b:ee:79:39:32:65:14: a2:c8:8b:1b:b1:65:d6:b4:3b:fb:eb:85:0f:e7:f3: 6f:4b:ab:42:77:7b:e4:0e:c4:d1:77:c4:bc:4e:8b: 2c:a0:fa:cc:2c:fc:70:da:98:15:12:3a:2a:c2:6e: 58:de:b7:ab:4d:1f:84:66:39:bd:32:32:b4:4c:b6: 83:2a:65:64:11:ec:5b:b2:08:63:ba:52:a0:36:a3: 97:09:60:3e:1c:4a:dd:f9:2c:1a:32:58:79:b2:24: 93:e1:0c:22:b4:67:46:0c:c9:25:17:e8:4b:72:e0: 90:40:b5:c5:bd:a9:2e:9b:14:a1:9a:09:0b:48:53: 4a:50:e0:ad:e4:e3:7e:fa:e8:aa:9c:71:b5:a8:79: f1:cd:00:c4:f7:50:94:34:67:16:d7:98:72:b4:c7: 94:6c:1e:6b:a8:1e:84:d3:32:57:ab:d8:4e:b2:b4: 7a:3e:d6:2e:28:bf:79:89:20:62:85:00:d0:25:2f: 96:36:23:a9:68:27:ee:a1:e6:7f:0a:66:ce:a3:72: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0E:E2:9E:51:C3:A1:0E:C8:6B:A1:A1:B1:BA:F1:B6:80:2F:79:81 X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fc:57:59:ae:3e:61:d7:38:e0:83:88:76:ce:14:80:e1:f1: eb:a7:24:d4:8b:83:8b:40:20:77:c6:06:64:9b:f3:aa:7a:bc: 76:73:7c:23:d8:35:fe:00:3d:9c:aa:94:55:e8:45:d6:92:ad: ea:44:8b:c2:77:8e:80:8f:b7:b8:94:cc:b8:27:a1:78:46:ed: 50:88:73:55:b4:8e:38:22:73:6b:18:81:10:41:97:b5:1c:22: 26:b1:39:58:d1:aa:12:b2:7a:a8:d9:03:83:3e:87:82:57:9d: 52:67:69:08:46:53:3a:6a:2b:96:78:6f:2d:e7:6e:99:35:18: 65:0d:ac:6d:20:cd:01:e5:b9:80:96:42:6c:d0:ff:25:cd:69: f9:5e:b4:c5:8f:cd:f1:89:8e:7e:9e:fe:f9:3f:27:a2:49:01: 61:f6:97:56:02:db:6a:42:2b:2d:05:0e:65:64:4e:54:7b:76: 7e:b2:8f:1d:5a:61:2c:90:94:56:17:c5:4f:e9:29:d2:fe:a7: b5:86:9d:e9:cd:8d:64:28:9e:bd:f5:94:67:5c:f9:30:66:94: 21:86:7f:19:c7:7b:c3:6f:27:92:a6:0d:ea:07:44:44:c8:58: b3:67:a8:65:61:7c:9e:53:86:c9:39:3d:72:36:32:ea:3c:e9: 38:ce:53:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcp3Ibs9Zsyu07m+xF2vkedYRe/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjExMDkxODQ5MThaFw0yNjExMTAxOTI4MThaMDMxMTAvBgNV BAMTKDUzMEVFMjlFNTFDM0ExMEVDODZCQTFBMUIxQkFGMUI2ODAyRjc5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsMIYWiul43ZruGvwRxwuR2XB EJp4O2fEIIdMyuwawtlkIojW+HX1OcZ5uZmOxCPoP0XMC+55OTJlFKLIixuxZda0 O/vrhQ/n829Lq0J3e+QOxNF3xLxOiyyg+sws/HDamBUSOirCbljet6tNH4RmOb0y MrRMtoMqZWQR7FuyCGO6UqA2o5cJYD4cSt35LBoyWHmyJJPhDCK0Z0YMySUX6Ety 4JBAtcW9qS6bFKGaCQtIU0pQ4K3k43766KqccbWoefHNAMT3UJQ0ZxbXmHK0x5Rs HmuoHoTTMler2E6ytHo+1i4ov3mJIGKFANAlL5Y2I6loJ+6h5n8KZs6jcq7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUw7inlHDoQ7Ia6GhsbrxtoAveYEwHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD38V1muPmHXOOCDiHbOFIDh8eunJNSLg4tA IHfGBmSb86p6vHZzfCPYNf4APZyqlFXoRdaSrepEi8J3joCPt7iUzLgnoXhG7VCI c1W0jjgic2sYgRBBl7UcIiaxOVjRqhKyeqjZA4M+h4JXnVJnaQhGUzpqK5Z4by3n bpk1GGUNrG0gzQHluYCWQmzQ/yXNafletMWPzfGJjn6e/vk/J6JJAWH2l1YC22pC Ky0FDmVkTlR7dn6yjx1aYSyQlFYXxU/pKdL+p7WGnenNjWQonr31lGdc+TBmlCGG fxnHe8NvJ5KmDeoHRETIWLNnqGVhfJ5Thsk5PXI2Muo86TjOUy4= -----END CERTIFICATE-----Generated at Tue Nov 10 04:56:56 2026 by rpki-client