$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: QbDxIwjcNclHtf7RVVtIMa0bhJf7Ch2y1nPB+vy0VpQ= Subject key identifier: 68:EC:C2:EF:7F:69:71:13:4D:75:42:48:C1:A8:DF:40:0B:78:02:89 Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 59C6F7DC21F5FD05296067996BCFA139AF792C47 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:39:47 +0000 Manifest this update: Mon 21 Sep 2026 02:34:47 +0000 Manifest next update: Tue 22 Sep 2026 05:56:47 +0000 Files and hashes: 1: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) 2: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) 4: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: BvoByCTTik9zY2A6yYgu55F+87+olEpXt88MbOoPyY0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c6:f7:dc:21:f5:fd:05:29:60:67:99:6b:cf:a1:39:af:79:2c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Sep 21 02:34:47 2026 GMT Not After : Sep 22 05:56:47 2026 GMT Subject: CN=68ECC2EF7F6971134D754248C1A8DF400B780289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:08:86:0e:52:80:41:0e:2a:5c:3c:c0:72: 1a:f9:eb:5e:32:d0:83:7a:f7:c4:5b:67:4a:c3:76: fd:7f:1e:bb:5f:ec:0d:c9:4d:47:a8:20:49:15:81: c7:86:a1:56:e0:7c:d7:b0:67:06:78:16:9b:2d:63: 5c:17:85:aa:33:a2:c1:c4:b3:35:dd:fe:f9:68:28: 23:a1:53:1c:19:cd:6e:d0:97:9d:0d:3a:a5:25:23: 98:ef:28:03:ad:f2:2d:76:b7:ef:4e:6b:61:9f:ce: 4d:d5:90:80:32:fc:03:79:6d:63:22:62:36:f2:c2: 70:a9:be:e8:6e:5c:51:65:61:f6:28:db:30:90:d9: 3c:c4:b4:1a:aa:16:b2:b3:85:4b:26:10:9c:ec:b0: 5d:f4:3d:01:25:65:d1:4c:32:65:28:a6:b7:c3:a2: 3f:fc:f0:36:4d:3b:f5:78:7e:1d:29:91:53:bf:f5: b7:9c:3e:2e:5e:ed:69:be:51:63:dd:7f:dd:93:db: 36:fe:15:ad:a7:d1:07:2e:77:4e:c3:ac:ed:08:46: 8c:9d:4f:76:02:af:b8:48:2f:36:2c:8e:ed:a6:72: 88:cc:27:de:af:18:b4:a5:3e:0d:e3:37:77:27:c4: 57:96:e7:f6:bb:9b:ba:8a:df:15:67:d6:5c:a7:31: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EC:C2:EF:7F:69:71:13:4D:75:42:48:C1:A8:DF:40:0B:78:02:89 X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:58:35:c8:28:f8:e0:03:21:e1:57:fe:bf:2e:50:dd:d4:a0: 4d:42:5c:53:09:97:f5:ee:9a:82:df:70:92:99:27:77:8d:47: f9:56:07:d8:39:58:e5:83:8a:d6:9b:3c:b9:67:ee:49:79:b9: 38:9c:bd:95:fd:91:35:0c:f4:48:82:b5:a8:3a:29:7a:9e:eb: 8f:f2:ed:c0:5f:ff:1c:c6:61:17:ca:fa:68:51:8e:11:13:0c: f9:10:cc:be:5d:68:ad:12:d3:5f:d4:91:84:4d:0f:c5:1c:a9: 2e:14:e9:01:c1:24:e2:b3:95:3b:e4:42:e2:a8:16:ab:17:4a: b6:57:27:55:ea:ac:e7:39:f8:45:2a:59:eb:dd:3c:3f:14:27: 3b:74:49:2a:10:b5:6b:80:7b:90:ac:cf:d6:8f:37:4d:7a:2b: f0:38:06:6e:e4:78:97:db:17:43:bd:b8:df:8a:96:46:a7:b0: 79:c2:99:44:73:cd:b7:0a:4d:15:88:20:b0:93:11:fa:53:45: 7f:9f:39:48:e4:a1:0e:00:2a:bd:ce:ec:1f:45:d4:a1:c8:2c: d1:ca:d3:35:94:29:d4:05:4c:18:32:af:df:25:61:a6:79:86: 14:8e:9b:5c:0c:1c:10:ec:77:17:66:7d:f0:48:8c:0a:4b:64: e8:64:dc:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWcb33CH1/QUpYGeZa8+hOa95LEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA5MjEwMjM0NDdaFw0yNjA5MjIwNTU2NDdaMDMxMTAvBgNV BAMTKDY4RUNDMkVGN0Y2OTcxMTM0RDc1NDI0OEMxQThERjQwMEI3ODAyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq1QiGDlKAQQ4qXDzAchr5614y 0IN698RbZ0rDdv1/Hrtf7A3JTUeoIEkVgceGoVbgfNewZwZ4FpstY1wXhaozosHE szXd/vloKCOhUxwZzW7Ql50NOqUlI5jvKAOt8i12t+9Oa2Gfzk3VkIAy/AN5bWMi YjbywnCpvuhuXFFlYfYo2zCQ2TzEtBqqFrKzhUsmEJzssF30PQElZdFMMmUoprfD oj/88DZNO/V4fh0pkVO/9becPi5e7Wm+UWPdf92T2zb+Fa2n0Qcud07DrO0IRoyd T3YCr7hILzYsju2mcojMJ96vGLSlPg3jN3cnxFeW5/a7m7qK3xVn1lynMbZ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaOzC739pcRNNdUJIwajfQAt4AokwHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNYNcgo+OADIeFX/r8uUN3UoE1CXFMJl/Xu moLfcJKZJ3eNR/lWB9g5WOWDitabPLln7kl5uTicvZX9kTUM9EiCtag6KXqe64/y 7cBf/xzGYRfK+mhRjhETDPkQzL5daK0S01/UkYRND8UcqS4U6QHBJOKzlTvkQuKo FqsXSrZXJ1XqrOc5+EUqWevdPD8UJzt0SSoQtWuAe5Csz9aPN016K/A4Bm7keJfb F0O9uN+KlkansHnCmURzzbcKTRWIILCTEfpTRX+fOUjkoQ4AKr3O7B9F1KHILNHK 0zWUKdQFTBgyr98lYaZ5hhSOm1wMHBDsdxdmffBIjApLZOhk3Gk= -----END CERTIFICATE-----Generated at Mon Sep 21 16:59:53 2026 by rpki-client