$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: G3OuuDnFBJHWDzXPeZJ9GcLxTMxPYFfF3t9cLyDelPg= Subject key identifier: 54:45:45:B7:5D:82:98:E0:DB:66:03:65:97:A1:77:77:FF:7B:40:4D Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 2FE7E27EAF167DEC17136A0A6A44B0B35AD9D902 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 16:49:37 +0000 Manifest this update: Wed 04 Nov 2026 16:44:37 +0000 Manifest next update: Thu 05 Nov 2026 17:03:37 +0000 Files and hashes: 1: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) 2: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 3: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: 1rtJ9DBLsCZGIRhyC72MXwB2Yj4FYQU1kEtJlHzv9Y8=) 4: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e7:e2:7e:af:16:7d:ec:17:13:6a:0a:6a:44:b0:b3:5a:d9:d9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Nov 4 16:44:37 2026 GMT Not After : Nov 5 17:03:37 2026 GMT Subject: CN=544545B75D8298E0DB66036597A17777FF7B404D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3c:31:ee:43:e7:66:44:5d:f1:cd:cf:52:62: 7d:99:b6:2f:18:d0:ef:e1:4c:e8:7c:5b:1a:81:65: 8f:9c:0a:c3:59:7c:1c:34:fd:15:ab:8e:1f:26:cc: 20:a3:b8:38:a6:7f:6c:25:8f:2f:fa:e2:84:4f:77: 08:0a:5c:aa:3e:2b:64:d7:da:3a:0f:70:eb:e4:20: 87:93:f2:c5:6a:77:de:88:55:45:fc:4c:10:29:4a: 72:ed:4e:d0:79:c6:80:46:22:ae:a8:89:03:42:06: b4:bb:d8:82:93:0f:34:79:46:e2:82:18:ce:75:e0: 3e:e9:86:03:ae:71:16:e9:6f:3d:89:be:86:b6:21: 3d:9b:0b:62:cb:69:5c:d6:9f:bd:45:5c:2b:1d:62: 4b:a1:38:b7:ce:a5:88:2d:cd:64:45:90:73:54:af: 09:91:dd:84:84:49:82:12:66:b9:34:c8:6d:99:a7: 83:94:4a:d1:14:bd:4f:c5:cb:01:79:32:6f:68:8b: aa:cc:91:07:81:e5:12:b0:26:b6:01:10:fe:79:f7: 70:f4:c0:cb:33:d5:bc:53:33:cd:46:4c:69:23:a4: 74:0b:97:cd:c1:a2:c1:1d:d5:ba:33:39:59:2e:14: 68:46:d3:48:c2:c5:0e:6b:33:35:b2:1a:85:de:37: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:45:45:B7:5D:82:98:E0:DB:66:03:65:97:A1:77:77:FF:7B:40:4D X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:ff:36:29:e5:36:c1:dd:ab:f3:f8:4a:cc:b9:02:5a:39: 13:0c:ce:4f:cf:77:8a:09:bf:a3:ac:28:35:d7:ae:41:58:71: ae:f4:74:12:40:f5:7b:3b:04:74:e9:eb:94:eb:80:6c:d8:c0: 59:7e:58:48:17:f7:44:79:31:5f:43:90:d2:f2:20:57:8b:9c: f7:e8:9b:4c:85:90:48:3b:5d:f6:32:22:45:d3:b7:e3:db:da: 87:70:6c:44:30:b5:70:a2:3c:4d:58:e7:66:91:75:54:06:c8: a8:21:b7:d7:03:0b:30:14:85:9a:1c:18:f0:86:e8:e0:f7:ca: 78:ec:cb:7c:55:0d:75:de:fc:62:e2:62:3e:be:f5:95:97:86: 33:fa:4d:02:96:02:e5:81:0c:9c:47:fc:e5:e2:b3:c0:53:23: 04:c7:9c:af:9e:ec:e1:33:ce:83:bb:d0:0a:87:19:4e:dd:72: 76:7c:25:da:d7:8a:08:94:b7:76:33:6a:15:fa:6f:cb:f4:d9: f0:ae:8d:f7:88:4a:31:34:dd:db:cf:be:32:89:6e:d3:c4:80: 44:9c:61:33:d6:16:2e:75:75:9c:34:75:7f:66:5e:6e:4b:70: 92:d0:2c:25:40:7c:d7:4e:22:2c:6a:ac:73:3f:eb:b0:b9:ea: 2e:7d:85:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+fifq8WfewXE2oKakSws1rZ2QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjExMDQxNjQ0MzdaFw0yNjExMDUxNzAzMzdaMDMxMTAvBgNV BAMTKDU0NDU0NUI3NUQ4Mjk4RTBEQjY2MDM2NTk3QTE3Nzc3RkY3QjQwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwPDHuQ+dmRF3xzc9SYn2Zti8Y 0O/hTOh8WxqBZY+cCsNZfBw0/RWrjh8mzCCjuDimf2wljy/64oRPdwgKXKo+K2TX 2joPcOvkIIeT8sVqd96IVUX8TBApSnLtTtB5xoBGIq6oiQNCBrS72IKTDzR5RuKC GM514D7phgOucRbpbz2Jvoa2IT2bC2LLaVzWn71FXCsdYkuhOLfOpYgtzWRFkHNU rwmR3YSESYISZrk0yG2Zp4OUStEUvU/FywF5Mm9oi6rMkQeB5RKwJrYBEP5593D0 wMsz1bxTM81GTGkjpHQLl83BosEd1bozOVkuFGhG00jCxQ5rMzWyGoXeNxhfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVEVFt12CmODbZgNll6F3d/97QE0wHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGv/zYp5TbB3avz+ErMuQJaORMMzk/Pd4oJ v6OsKDXXrkFYca70dBJA9Xs7BHTp65TrgGzYwFl+WEgX90R5MV9DkNLyIFeLnPfo m0yFkEg7XfYyIkXTt+Pb2odwbEQwtXCiPE1Y52aRdVQGyKght9cDCzAUhZocGPCG 6OD3ynjsy3xVDXXe/GLiYj6+9ZWXhjP6TQKWAuWBDJxH/OXis8BTIwTHnK+e7OEz zoO70AqHGU7dcnZ8JdrXigiUt3YzahX6b8v02fCujfeISjE03dvPvjKJbtPEgESc YTPWFi51dZw0dX9mXm5LcJLQLCVAfNdOIixqrHM/67C56i59hYk= -----END CERTIFICATE-----Generated at Thu Nov 5 01:16:44 2026 by rpki-client