$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft File: BACDD9DBC696965384EE99739EB6991320966120.mft (raw, json) Hash identifier: ylcFoAZpcYNVi1XkzLtSKV3why4s57BBMNGA49xKT2c= Subject key identifier: 40:22:7C:DC:F8:05:EF:D2:DF:D6:13:3C:6D:DA:39:79:42:DA:02:55 Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 Certificate issuer: /CN=BACDD9DBC696965384EE99739EB6991320966120 Certificate serial: 50A0DE8675E4210ED9F7929BCCAB22B5BD18E73C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 22:03:21 +0000 Manifest this update: Wed 23 Sep 2026 21:58:21 +0000 Manifest next update: Fri 25 Sep 2026 00:35:21 +0000 Files and hashes: 1: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=) 2: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=) 3: BACDD9DBC696965384EE99739EB6991320966120.crl (hash: 5ucawh3VGcGL3QeJknfEBKZ79xVjmTcmq+SNwlX7ICQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a0:de:86:75:e4:21:0e:d9:f7:92:9b:cc:ab:22:b5:bd:18:e7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120 Validity Not Before: Sep 23 21:58:21 2026 GMT Not After : Sep 25 00:35:21 2026 GMT Subject: CN=40227CDCF805EFD2DFD6133C6DDA397942DA0255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:56:98:70:de:56:d7:e6:32:7b:3c:9f:4b:ee: 1f:8c:44:6c:1f:d3:3c:a5:14:a7:8d:9e:f9:31:87: 0c:6d:6f:e6:1b:de:29:40:4b:56:95:02:c9:16:72: 83:26:da:83:8c:c4:8d:f7:40:0d:fb:32:77:d4:86: 93:04:3f:8a:cd:fd:1d:4f:43:75:15:30:2e:83:cb: 56:6d:01:87:2e:ba:1b:ae:b5:7c:a0:7b:45:ec:05: 4f:89:64:08:9d:33:84:fd:75:50:d6:b2:c1:fe:66: c8:83:f7:33:c5:8a:7d:b2:ca:29:52:3b:cd:84:df: 70:4c:cc:7b:48:46:45:fb:7c:65:de:2d:bc:da:79: 78:19:e8:08:c2:7b:2b:c8:79:d9:c8:d1:05:f2:ae: c7:80:bb:55:c8:86:52:f5:ec:d4:dd:c9:c3:e4:2e: 7d:f5:cb:f1:43:3c:1a:8d:0e:f4:6b:b1:a7:89:be: 83:66:86:53:bc:da:b9:16:da:57:05:aa:3a:c6:41: dc:40:53:d3:79:07:a3:93:67:5d:3c:50:2b:e7:08: a6:5d:dc:dd:0b:5f:56:c5:01:0c:bb:6f:80:d1:ea: 0f:5e:c7:26:24:d3:07:fa:5b:95:70:7f:e8:4e:73: ef:f5:a6:b4:dd:f0:3e:40:fc:ef:0f:87:ea:7b:81: b3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:7C:DC:F8:05:EF:D2:DF:D6:13:3C:6D:DA:39:79:42:DA:02:55 X509v3 Authority Key Identifier: keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:db:f9:3b:e1:ff:76:f4:91:cc:73:3e:3f:02:85:21:b0:f9: 04:b5:5e:35:13:a0:1b:f6:3e:a5:b7:2c:f6:ab:4d:2d:5c:30: 1b:56:fd:24:7a:93:25:6e:0a:9e:5d:3f:85:50:0a:6a:a3:15: 3e:72:c2:32:bd:50:8e:64:b8:a1:46:df:61:d6:47:b9:0c:a0: 0f:1b:19:c9:6e:b4:ef:70:0b:59:b0:57:bb:19:2d:8a:44:2b: e0:59:a0:5f:79:a1:ec:c2:cb:34:21:b4:2b:b9:d1:43:27:3d: 30:34:66:6e:a5:7a:ea:2d:a8:52:7b:c7:01:55:0d:6f:08:34: 7d:3f:08:ab:06:66:d9:62:76:7a:14:0d:b4:06:5c:9c:9a:9c: bc:d8:1c:0f:01:40:66:ee:0b:21:fa:ae:57:0b:61:1f:e8:c6: 89:5d:50:00:62:a5:17:e9:2b:4c:0d:36:ce:04:7b:6a:d0:79: 6b:d0:b2:17:a7:3c:2f:7f:30:54:df:41:d4:82:b1:e1:89:29: 05:fc:b2:40:b1:e6:1b:88:47:37:c1:90:33:3a:3f:71:6b:ff: f2:83:75:12:7c:14:d1:e5:05:58:d9:e5:dc:1d:59:b2:ca:d2: 3d:d9:8c:6b:1a:46:56:bd:cd:44:03:bc:27:dd:ff:49:8a:75: 01:96:0e:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKDehnXkIQ7Z95KbzKsitb0Y5zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5MTMy MDk2NjEyMDAeFw0yNjA5MjMyMTU4MjFaFw0yNjA5MjUwMDM1MjFaMDMxMTAvBgNV BAMTKDQwMjI3Q0RDRjgwNUVGRDJERkQ2MTMzQzZEREEzOTc5NDJEQTAyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Vphw3lbX5jJ7PJ9L7h+MRGwf 0zylFKeNnvkxhwxtb+Yb3ilAS1aVAskWcoMm2oOMxI33QA37MnfUhpMEP4rN/R1P Q3UVMC6Dy1ZtAYcuuhuutXyge0XsBU+JZAidM4T9dVDWssH+ZsiD9zPFin2yyilS O82E33BMzHtIRkX7fGXeLbzaeXgZ6AjCeyvIednI0QXyrseAu1XIhlL17NTdycPk Ln31y/FDPBqNDvRrsaeJvoNmhlO82rkW2lcFqjrGQdxAU9N5B6OTZ108UCvnCKZd 3N0LX1bFAQy7b4DR6g9exyYk0wf6W5Vwf+hOc+/1prTd8D5A/O8Ph+p7gbOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQCJ83PgF79Lf1hM8bdo5eULaAlUwHwYDVR0j BBgwFoAUus3Z28aWllOE7plznraZEyCWYSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA4NzIwODYtODA1Yy00MGFhLTg3YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJD Njk2OTY1Mzg0RUU5OTczOUVCNjk5MTMyMDk2NjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUNERDlEQkM2OTY5NjUzODRFRTk5NzM5RUI2OTkxMzIwOTY2 MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5 MTMyMDk2NjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrb+Tvh/3b0kcxzPj8ChSGw+QS1XjUToBv2 PqW3LParTS1cMBtW/SR6kyVuCp5dP4VQCmqjFT5ywjK9UI5kuKFG32HWR7kMoA8b GclutO9wC1mwV7sZLYpEK+BZoF95oezCyzQhtCu50UMnPTA0Zm6leuotqFJ7xwFV DW8INH0/CKsGZtlidnoUDbQGXJyanLzYHA8BQGbuCyH6rlcLYR/oxoldUABipRfp K0wNNs4Ee2rQeWvQshenPC9/MFTfQdSCseGJKQX8skCx5huIRzfBkDM6P3Fr//KD dRJ8FNHlBVjZ5dwdWbLK0j3ZjGsaRla9zUQDvCfd/0mKdQGWDn4= -----END CERTIFICATE-----Generated at Thu Sep 24 00:42:02 2026 by rpki-client