$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: vvmy7MPRIW6WG32d5HH0ZP7xtY6Bw5LMZ3W4T/dBEWA= Subject key identifier: 9E:27:04:DA:57:6D:E2:90:08:C1:8A:5B:03:49:DE:C5:2D:B2:98:5D Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 44E5934AF9B73A566FA0227A751CECC4BAF97D4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 14:41:25 +0000 Manifest this update: Mon 02 Nov 2026 14:36:25 +0000 Manifest next update: Tue 03 Nov 2026 17:13:25 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: 7p4XuonBpgfF7Z5IUxKY4A2otlipbDoFwe21dl9hJQU=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e5:93:4a:f9:b7:3a:56:6f:a0:22:7a:75:1c:ec:c4:ba:f9:7d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Nov 2 14:36:25 2026 GMT Not After : Nov 3 17:13:25 2026 GMT Subject: CN=9E2704DA576DE29008C18A5B0349DEC52DB2985D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:a5:79:99:15:2a:53:d0:dd:8b:ad:f8:9e: 7d:3e:d1:c5:37:ca:e8:70:7a:5a:72:35:5f:2e:7b: 86:20:4e:06:b0:51:e2:23:35:2d:32:df:cd:90:ec: 55:dd:9c:57:77:d7:2d:e9:a9:77:7e:0c:db:da:c6: ac:48:dd:10:75:ee:89:dd:8d:cf:04:5c:27:34:f9: 8c:40:e7:d7:50:93:cd:19:2a:5e:51:7b:2b:1b:bd: 2b:20:98:c0:45:22:b0:8d:e4:c7:24:c9:5c:d1:7f: b8:9b:8e:52:2a:da:8b:f0:a4:67:68:34:81:b0:0b: c1:84:c5:80:6c:2f:77:c6:15:53:4e:35:37:2a:75: dc:80:9c:09:5f:f7:5d:bc:6d:c0:0f:dc:61:64:35: 2c:ec:10:6f:8e:34:77:3d:ab:1d:d7:ed:af:a6:82: 1c:a6:3c:99:5c:95:b6:51:6b:9a:d9:fc:ce:24:3a: 39:42:26:81:df:05:a5:88:6e:ba:bc:70:78:63:0a: cd:87:30:f9:f8:c5:b6:05:f1:cb:cd:9f:0a:b4:fd: 3a:eb:47:2e:a5:45:88:0b:e8:d8:00:83:84:75:92: 11:85:0e:b5:05:2a:8a:7d:75:b3:58:bf:b1:37:69: 7b:12:97:52:32:79:9e:eb:aa:e2:21:56:77:82:bd: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:27:04:DA:57:6D:E2:90:08:C1:8A:5B:03:49:DE:C5:2D:B2:98:5D X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:11:81:83:b4:d6:d3:d8:ee:aa:6e:65:a2:db:b9:3c:60:17: 95:c0:5a:82:35:02:17:06:25:5d:b1:ee:0d:0c:50:64:32:c5: 77:83:db:bc:a9:55:76:96:27:8d:4b:12:dc:40:1d:57:61:55: 4e:0a:48:ec:5a:3b:4c:c3:27:7f:4e:59:86:46:0f:a7:2c:d5: 24:78:1e:2e:33:f2:b5:75:48:e2:09:c1:8a:17:f2:5e:5c:e5: 44:8b:8d:c7:33:25:21:0b:b9:c1:1a:c1:16:d3:b2:f2:ce:5d: f8:1d:eb:a1:d2:d3:4d:e0:a8:37:38:af:0a:5d:52:9a:82:7f: 0f:e9:9d:5b:68:1a:59:c5:6e:94:62:8f:e3:6d:df:dd:33:52: db:1d:73:e3:6a:c0:d8:85:a7:33:bd:c2:0f:89:53:79:ee:e8: ba:4a:74:22:67:95:0f:5f:fa:b4:5f:d5:95:0f:38:4c:98:4d: ab:29:d9:d9:8e:7c:43:ab:3c:0b:5a:8b:6a:92:6a:6f:60:73: 54:14:67:56:56:4c:42:82:5d:e9:ad:75:5c:07:02:df:66:ba: 3f:5a:27:87:ea:09:6d:9f:1a:aa:6e:cf:79:89:92:01:79:c7: 37:c0:87:92:49:07:78:fc:65:4d:01:30:34:99:f1:d0:64:06: f9:98:fb:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROWTSvm3OlZvoCJ6dRzsxLr5fU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjExMDIxNDM2MjVaFw0yNjExMDMxNzEzMjVaMDMxMTAvBgNV BAMTKDlFMjcwNERBNTc2REUyOTAwOEMxOEE1QjAzNDlERUM1MkRCMjk4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3v6V5mRUqU9Ddi634nn0+0cU3 yuhwelpyNV8ue4YgTgawUeIjNS0y382Q7FXdnFd31y3pqXd+DNvaxqxI3RB17ond jc8EXCc0+YxA59dQk80ZKl5ReysbvSsgmMBFIrCN5MckyVzRf7ibjlIq2ovwpGdo NIGwC8GExYBsL3fGFVNONTcqddyAnAlf9128bcAP3GFkNSzsEG+ONHc9qx3X7a+m ghymPJlclbZRa5rZ/M4kOjlCJoHfBaWIbrq8cHhjCs2HMPn4xbYF8cvNnwq0/Trr Ry6lRYgL6NgAg4R1khGFDrUFKop9dbNYv7E3aXsSl1IyeZ7rquIhVneCvSdtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnicE2ldt4pAIwYpbA0nexS2ymF0wHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkRgYO01tPY7qpuZaLbuTxgF5XAWoI1AhcG JV2x7g0MUGQyxXeD27ypVXaWJ41LEtxAHVdhVU4KSOxaO0zDJ39OWYZGD6cs1SR4 Hi4z8rV1SOIJwYoX8l5c5USLjcczJSELucEawRbTsvLOXfgd66HS003gqDc4rwpd UpqCfw/pnVtoGlnFbpRij+Nt390zUtsdc+NqwNiFpzO9wg+JU3nu6LpKdCJnlQ9f +rRf1ZUPOEyYTasp2dmOfEOrPAtai2qSam9gc1QUZ1ZWTEKCXemtdVwHAt9muj9a J4fqCW2fGqpuz3mJkgF5xzfAh5JJB3j8ZU0BMDSZ8dBkBvmY+6w= -----END CERTIFICATE-----Generated at Mon Nov 2 22:11:52 2026 by rpki-client