$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: kNZblLHnd9ZTUr5iAvDCOAnAcVEekr49n6T1rnMKjHo= Subject key identifier: C9:68:37:14:99:67:39:3B:7B:DB:A6:AC:CD:D2:73:13:84:4D:86:BA Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 24A2E476833F9DA89CDA33F4E3EB47A30E69FD0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: F8 Signing time: Mon 02 Nov 2026 10:25:44 +0000 Manifest this update: Mon 02 Nov 2026 10:20:44 +0000 Manifest next update: Tue 03 Nov 2026 12:34:44 +0000 Files and hashes: 1: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) 2: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: sUnpKP+uVm9YQieEfnXHrSmFw/PUZYms2OGJE/fEKLM=) 3: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:a2:e4:76:83:3f:9d:a8:9c:da:33:f4:e3:eb:47:a3:0e:69:fd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Nov 2 10:20:44 2026 GMT Not After : Nov 3 12:34:44 2026 GMT Subject: CN=C96837149967393B7BDBA6ACCDD27313844D86BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:49:f5:f3:5d:d1:86:23:6d:b0:c8:58:61:43: c0:46:dc:5d:a8:ac:f7:9c:4f:44:7e:40:96:a2:32: 85:52:65:7c:2c:81:ea:ab:5b:dc:d8:bb:87:69:b4: 35:b4:c6:47:fb:19:54:c2:64:fb:96:0e:3c:21:b1: e4:ab:d2:d4:76:70:59:6e:bc:24:e7:a6:bf:b3:3f: ff:b7:5c:6e:55:00:14:a3:00:88:b1:ee:ca:e9:e2: b9:f4:9f:48:43:fa:bf:51:fb:04:dd:ac:5b:81:3e: e4:d9:fc:29:37:d8:04:b1:5b:dd:0c:3a:83:62:ae: a7:22:a4:aa:97:c8:0b:b7:00:51:aa:7c:b4:54:31: 52:f7:82:d3:8a:94:0e:67:3b:5b:07:bb:64:c9:ab: 54:37:ea:3b:8d:6f:59:03:57:9c:37:38:ff:09:da: ca:33:ba:9c:96:11:fe:c9:45:f7:ae:fa:84:ad:39: 05:39:59:86:b3:c9:08:d4:0f:9f:68:e9:5b:62:f9: 5a:ac:a7:06:65:1a:df:8e:24:e4:6f:3c:03:a1:8e: de:63:c3:f7:64:dd:a5:92:bb:5e:af:ee:81:17:5c: e8:6f:83:d2:02:77:42:5a:62:6a:a5:84:28:b0:92: d4:fb:94:8c:d2:c7:9a:a1:1a:2f:f2:3e:72:bb:6d: 01:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:68:37:14:99:67:39:3B:7B:DB:A6:AC:CD:D2:73:13:84:4D:86:BA X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1f:79:06:29:8a:db:49:3b:bc:6b:98:11:f3:fb:94:5c:53: c7:8c:0f:6f:46:48:72:d0:12:3e:b1:8f:cc:7c:4d:5d:fe:80: 47:ff:78:ba:14:84:92:39:da:94:d4:08:17:0e:43:0e:b8:b0: 8c:ca:e4:93:b5:33:48:4b:87:b2:d5:12:66:71:ae:57:fc:d4: 38:15:d0:ae:1b:a0:44:b5:6b:83:9c:57:e1:11:41:67:29:27: 44:9b:2b:38:b1:c0:4c:a0:bd:98:86:17:c0:05:c3:14:9f:a4: 07:23:3d:5f:2e:f7:cc:99:5a:b5:27:e8:6f:f8:2b:f2:08:ed: 0e:e9:df:fb:f1:5d:68:25:36:6b:73:38:a0:34:c7:1d:a5:5d: 69:ff:66:f7:ae:41:7a:45:c2:25:d4:94:38:46:92:84:1a:1a: 70:7a:9e:da:4b:04:c2:80:fc:80:71:3a:7a:bd:61:3f:71:9a: 55:99:bb:89:61:a6:df:71:b7:19:1e:e4:84:be:a9:4b:c9:a0: 47:96:02:ee:e3:30:66:63:70:b2:23:e8:d7:11:ab:a1:98:80: 72:e4:ce:bc:f0:d8:15:6c:09:8c:81:8b:f3:ef:00:80:0e:fb: cf:66:f5:2d:25:c9:35:3c:d9:cc:83:e2:c8:c0:9c:fc:35:a0: 33:6c:2f:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJKLkdoM/naic2jP04+tHow5p/Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjExMDIxMDIwNDRaFw0yNjExMDMxMjM0NDRaMDMxMTAvBgNV BAMTKEM5NjgzNzE0OTk2NzM5M0I3QkRCQTZBQ0NERDI3MzEzODQ0RDg2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSfXzXdGGI22wyFhhQ8BG3F2o rPecT0R+QJaiMoVSZXwsgeqrW9zYu4dptDW0xkf7GVTCZPuWDjwhseSr0tR2cFlu vCTnpr+zP/+3XG5VABSjAIix7srp4rn0n0hD+r9R+wTdrFuBPuTZ/Ck32ASxW90M OoNirqcipKqXyAu3AFGqfLRUMVL3gtOKlA5nO1sHu2TJq1Q36juNb1kDV5w3OP8J 2sozupyWEf7JRfeu+oStOQU5WYazyQjUD59o6Vti+VqspwZlGt+OJORvPAOhjt5j w/dk3aWSu16v7oEXXOhvg9ICd0JaYmqlhCiwktT7lIzSx5qhGi/yPnK7bQFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyWg3FJlnOTt726aszdJzE4RNhrowHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQfeQYpittJO7xrmBHz+5RcU8eMD29GSHLQ Ej6xj8x8TV3+gEf/eLoUhJI52pTUCBcOQw64sIzK5JO1M0hLh7LVEmZxrlf81DgV 0K4boES1a4OcV+ERQWcpJ0SbKzixwEygvZiGF8AFwxSfpAcjPV8u98yZWrUn6G/4 K/II7Q7p3/vxXWglNmtzOKA0xx2lXWn/ZveuQXpFwiXUlDhGkoQaGnB6ntpLBMKA /IBxOnq9YT9xmlWZu4lhpt9xtxke5IS+qUvJoEeWAu7jMGZjcLIj6NcRq6GYgHLk zrzw2BVsCYyBi/PvAIAO+89m9S0lyTU82cyD4sjAnPw1oDNsL6c= -----END CERTIFICATE-----Generated at Mon Nov 2 21:13:29 2026 by rpki-client