$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: eLrvAHVWrQ0eMQxF4ROcNRh7xvMZzs6c7Ou1igJRuQY= Subject key identifier: BB:A6:22:A5:DE:5E:D8:F8:A9:80:65:6F:B4:BE:B0:2F:5D:EC:F3:57 Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 3E2E8433F80D533DDB20B745C29A54443123173A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 06:40:54 +0000 Manifest this update: Mon 02 Nov 2026 06:35:54 +0000 Manifest next update: Tue 03 Nov 2026 09:11:54 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: 2oT0Qrp5+iL1CC8I3FPzUckIsVV09jdn0agXzrh/lIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 09:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2e:84:33:f8:0d:53:3d:db:20:b7:45:c2:9a:54:44:31:23:17:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Nov 2 06:35:54 2026 GMT Not After : Nov 3 09:11:54 2026 GMT Subject: CN=BBA622A5DE5ED8F8A980656FB4BEB02F5DECF357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:71:51:25:02:c7:39:96:91:bf:e0:87:13: 09:a7:ee:55:c0:6e:5e:01:54:6a:eb:9b:ba:b5:70: 12:11:6d:5b:9b:9e:c3:cc:ad:d7:90:fd:69:7a:b4: 51:58:de:78:65:bf:57:d0:c2:18:b6:b3:01:1c:66: 9c:33:97:3f:50:e3:f0:cd:69:c4:9f:47:6f:34:ee: eb:ea:1b:59:ec:24:1d:a4:01:bf:bf:2a:5c:21:2b: d5:89:fa:d8:ac:97:37:84:19:5c:25:a2:42:47:9b: 5b:65:69:ee:60:e4:71:bc:f7:ed:f3:22:c6:6d:d3: 8e:14:37:69:6b:60:f5:ef:98:4a:27:c3:e2:ee:90: 73:b8:2f:70:a3:d7:5a:81:62:e2:1f:c6:9d:42:9e: 37:40:a5:95:6d:5b:7f:aa:39:07:2f:db:8a:3e:c3: ce:13:35:be:23:58:65:16:aa:d5:4c:2a:f4:9e:df: ca:e2:30:b0:65:6b:6b:ed:b2:24:9e:40:8b:34:6e: 2c:b1:50:c7:92:8a:bd:cb:88:a3:ca:55:12:0d:1b: bd:f4:1a:c8:fd:28:67:a3:42:77:8e:73:08:e7:d6: e9:52:15:2e:ae:f7:ef:b5:5d:0e:3e:4d:2a:50:09: f2:ff:0c:60:ed:57:13:68:1c:16:97:58:7a:25:07: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A6:22:A5:DE:5E:D8:F8:A9:80:65:6F:B4:BE:B0:2F:5D:EC:F3:57 X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d6:a7:13:31:b7:12:7c:c7:98:c2:aa:b4:46:32:9f:a7:bb: 6a:4f:ac:ce:6b:b1:55:ad:09:15:da:6b:f5:ff:a1:01:82:35: 7f:0e:a6:95:9b:fe:c9:e5:fa:2b:bf:e7:1a:34:69:7f:5e:e4: cc:94:63:46:27:63:b0:b4:2a:1d:d0:a5:1a:1d:46:0d:4f:0b: 21:fa:70:8c:aa:ad:43:17:55:19:3f:63:bf:37:3b:86:c1:44: 65:9f:5b:af:79:a1:bb:72:90:ef:4c:b3:b4:e7:98:b4:f5:da: 4f:c1:4a:f3:64:17:bd:6c:74:01:11:13:c9:8c:0f:22:de:c1: 33:42:66:ef:aa:93:36:2a:85:e8:77:06:bc:5c:24:09:7a:f4: 6d:a2:56:fa:04:26:3f:5b:e6:fe:f6:fe:e9:81:b4:26:f1:3e: 90:0c:54:2a:af:e9:7d:4c:42:c5:cf:ca:52:8e:a5:f3:f8:58: ed:a2:35:0f:b6:b0:db:6f:86:6f:15:af:fb:dd:15:73:89:f3: 8e:50:e0:29:b2:ae:fe:46:e2:53:d9:29:bc:1c:d2:e7:c9:21: 5e:49:da:21:b8:6f:44:86:ba:eb:04:11:25:88:d3:f8:d2:83: bb:0d:f6:57:66:3f:12:c7:8d:c7:87:c2:72:bd:a5:8c:13:ab: 33:f4:76:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPi6EM/gNUz3bILdFwppURDEjFzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjExMDIwNjM1NTRaFw0yNjExMDMwOTExNTRaMDMxMTAvBgNV BAMTKEJCQTYyMkE1REU1RUQ4RjhBOTgwNjU2RkI0QkVCMDJGNURFQ0YzNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVfXFRJQLHOZaRv+CHEwmn7lXA bl4BVGrrm7q1cBIRbVubnsPMrdeQ/Wl6tFFY3nhlv1fQwhi2swEcZpwzlz9Q4/DN acSfR2807uvqG1nsJB2kAb+/KlwhK9WJ+tislzeEGVwlokJHm1tlae5g5HG89+3z IsZt044UN2lrYPXvmEonw+LukHO4L3Cj11qBYuIfxp1CnjdApZVtW3+qOQcv24o+ w84TNb4jWGUWqtVMKvSe38riMLBla2vtsiSeQIs0biyxUMeSir3LiKPKVRING730 Gsj9KGejQneOcwjn1ulSFS6u9++1XQ4+TSpQCfL/DGDtVxNoHBaXWHolB+AzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu6Yipd5e2PipgGVvtL6wL13s81cwHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjWpxMxtxJ8x5jCqrRGMp+nu2pPrM5rsVWt CRXaa/X/oQGCNX8OppWb/snl+iu/5xo0aX9e5MyUY0YnY7C0Kh3QpRodRg1PCyH6 cIyqrUMXVRk/Y783O4bBRGWfW695obtykO9Ms7TnmLT12k/BSvNkF71sdAERE8mM DyLewTNCZu+qkzYqheh3BrxcJAl69G2iVvoEJj9b5v72/umBtCbxPpAMVCqv6X1M QsXPylKOpfP4WO2iNQ+2sNtvhm8Vr/vdFXOJ845Q4Cmyrv5G4lPZKbwc0ufJIV5J 2iG4b0SGuusEESWI0/jSg7sN9ldmPxLHjceHwnK9pYwTqzP0dqk= -----END CERTIFICATE-----Generated at Mon Nov 2 21:13:26 2026 by rpki-client