$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft File: BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json) Hash identifier: 6UsGE/WT47k7rA8XLTrDuYDafRicY2WGuQGKFnf6rlo= Subject key identifier: CF:94:42:B1:9F:1C:A0:61:DB:11:CA:5E:C7:8F:15:0F:F3:42:FC:89 Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62 Certificate issuer: /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462 Certificate serial: 6E06534DC2D3361AA2FFC48A62AD34E6748DA138 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 11:52:07 +0000 Manifest this update: Sun 01 Nov 2026 11:47:07 +0000 Manifest next update: Mon 02 Nov 2026 11:52:07 +0000 Files and hashes: 1: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: 9RL2/IWbIWWPq1LcDLRRn/QatsTzUr6my8mHo/pdNTQ=) 2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 11:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:06:53:4d:c2:d3:36:1a:a2:ff:c4:8a:62:ad:34:e6:74:8d:a1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462 Validity Not Before: Nov 1 11:47:07 2026 GMT Not After : Nov 2 11:52:07 2026 GMT Subject: CN=CF9442B19F1CA061DB11CA5EC78F150FF342FC89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:cf:2e:bd:34:2a:cc:d4:ce:62:d7:b0:1a: 04:e6:7d:40:c0:ff:38:fd:b7:53:29:86:d4:c2:9d: 9b:6f:43:57:0f:15:f5:98:ea:44:50:39:0b:65:c3: 10:f6:77:39:48:8b:1b:ef:49:71:a7:ee:23:84:fb: b4:a0:94:65:33:5d:2f:ca:c1:be:ed:40:b9:45:f8: 3a:75:29:e7:db:c7:6a:a3:d8:34:45:94:43:00:1e: c3:63:78:70:c5:e4:de:32:e6:68:db:c1:96:02:d2: 73:7e:50:f8:dd:ec:fe:1e:f8:17:58:f6:48:28:a5: fc:c5:4c:88:53:2e:3f:34:5f:62:b7:d2:f8:b1:ba: 26:ee:22:b5:a1:4a:9e:48:45:df:f5:42:64:79:01: 3c:eb:95:4c:4b:6f:11:63:84:1f:3e:76:c6:e4:30: 50:57:e5:e4:5b:98:a4:9e:6a:e5:3d:1b:68:c8:32: 93:17:bf:4e:33:cf:b7:30:9f:a0:7c:36:29:52:16: ae:b3:81:bf:0d:bd:b4:a1:82:f6:70:08:49:ce:5d: e5:71:ae:11:f4:05:8a:da:fa:38:fb:60:c0:76:18: de:c4:3b:57:b3:22:c0:a5:16:11:89:f0:2d:81:be: ac:39:28:9a:64:02:4e:b6:1b:09:98:85:b8:bc:f7: 20:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:94:42:B1:9F:1C:A0:61:DB:11:CA:5E:C7:8F:15:0F:F3:42:FC:89 X509v3 Authority Key Identifier: keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a3:0d:6d:da:9e:4f:8e:0d:fc:d3:fe:fe:ea:2d:69:14:97: 7d:0b:bd:a6:ed:be:98:bd:69:4b:37:d9:da:91:38:27:08:fe: 59:52:a1:1a:cf:ad:99:7d:c7:a6:5f:d8:4d:78:d1:fe:23:88: be:e4:db:d4:35:8f:ee:d8:0b:24:44:8c:de:86:0d:ff:b1:d6: cb:8c:ea:64:c5:43:9e:aa:55:bd:ef:ff:fe:f7:68:1f:cf:79: f8:01:8f:2a:6e:89:63:1d:c7:92:7a:04:1d:fa:36:3c:76:f2: 9c:db:33:38:59:21:47:2d:f4:85:83:27:cb:3c:fa:19:fb:71: a5:91:cb:d0:52:5b:f5:48:70:27:d1:ec:48:a5:2b:77:d4:b9: d9:df:d7:2c:4b:81:4f:2e:a6:4f:6f:ea:b9:84:81:f6:50:a2: 78:15:d0:57:7d:92:8c:15:f5:14:68:38:7d:b5:71:b1:fb:80: 72:98:7b:d0:c4:48:48:3c:20:0e:3d:33:d3:be:44:d5:a8:b0: db:7d:ad:ca:66:40:c5:59:4f:06:e3:15:4d:6f:37:c6:c4:be: 7c:d4:6d:4a:88:a0:52:57:d5:40:cf:96:de:b9:0d:ce:8b:2c: fe:b0:d3:b8:72:e1:a3:b4:5c:f9:d9:f5:2b:c0:3e:03:03:d1: 58:c2:86:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbgZTTcLTNhqi/8SKYq005nSNoTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2 QjYyNDQ2MjAeFw0yNjExMDExMTQ3MDdaFw0yNjExMDIxMTUyMDdaMDMxMTAvBgNV BAMTKENGOTQ0MkIxOUYxQ0EwNjFEQjExQ0E1RUM3OEYxNTBGRjM0MkZDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnEs8uvTQqzNTOYtewGgTmfUDA /zj9t1MphtTCnZtvQ1cPFfWY6kRQOQtlwxD2dzlIixvvSXGn7iOE+7SglGUzXS/K wb7tQLlF+Dp1Kefbx2qj2DRFlEMAHsNjeHDF5N4y5mjbwZYC0nN+UPjd7P4e+BdY 9kgopfzFTIhTLj80X2K30vixuibuIrWhSp5IRd/1QmR5ATzrlUxLbxFjhB8+dsbk MFBX5eRbmKSeauU9G2jIMpMXv04zz7cwn6B8NilSFq6zgb8NvbShgvZwCEnOXeVx rhH0BYra+jj7YMB2GN7EO1ezIsClFhGJ8C2Bvqw5KJpkAk62GwmYhbi89yDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5RCsZ8coGHbEcpex48VD/NC/IkwHwYDVR0j BBgwFoAUvUmqYneXsqqFzT0LIXYkPWtiRGIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYzMTYxNjUtZGE1MC00NzNiLWJmN2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3 Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2QjYyNDQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDQ5QUE2Mjc3OTdCMkFBODVDRDNEMEIyMTc2MjQzRDZCNjI0 NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0 M0Q2QjYyNDQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIajDW3ank+ODfzT/v7qLWkUl30Lvabtvpi9 aUs32dqROCcI/llSoRrPrZl9x6Zf2E140f4jiL7k29Q1j+7YCyREjN6GDf+x1suM 6mTFQ56qVb3v//73aB/PefgBjypuiWMdx5J6BB36Njx28pzbMzhZIUct9IWDJ8s8 +hn7caWRy9BSW/VIcCfR7EilK3fUudnf1yxLgU8upk9v6rmEgfZQongV0Fd9kowV 9RRoOH21cbH7gHKYe9DESEg8IA49M9O+RNWosNt9rcpmQMVZTwbjFU1vN8bEvnzU bUqIoFJX1UDPlt65Dc6LLP6w07hy4aO0XPnZ9SvAPgMD0VjChl4= -----END CERTIFICATE-----Generated at Mon Nov 2 00:45:38 2026 by rpki-client