$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft File: BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json) Hash identifier: apUPQDAKth3fvBmSiuj/p+Sd06EJFBx20zNhwyvL65c= Subject key identifier: F3:8A:2B:7A:72:BA:91:BD:30:A1:79:43:A1:F1:EA:D2:C1:93:5A:B3 Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62 Certificate issuer: /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462 Certificate serial: 7DEB2A49BA33310E1681F786ABA50B2847F3326C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:11:09 +0000 Manifest this update: Thu 17 Sep 2026 06:06:09 +0000 Manifest next update: Fri 18 Sep 2026 07:47:09 +0000 Files and hashes: 1: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=) 2: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: 4ks45U2rM8EeULwnjiIMgP5FawZdt4dj2i8IHVcbKlU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:eb:2a:49:ba:33:31:0e:16:81:f7:86:ab:a5:0b:28:47:f3:32:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462 Validity Not Before: Sep 17 06:06:09 2026 GMT Not After : Sep 18 07:47:09 2026 GMT Subject: CN=F38A2B7A72BA91BD30A17943A1F1EAD2C1935AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:fb:10:c9:f9:59:6c:cf:b6:fb:82:3d:fb: cf:54:38:50:d5:35:e8:b0:a0:db:60:8a:4d:88:9c: 61:3e:e2:97:c0:44:dc:70:7f:60:e6:0d:0f:f7:d1: 1f:16:c2:0e:e9:db:8e:32:14:36:9a:54:71:e4:63: 64:5b:12:9d:91:85:38:37:00:eb:75:d4:7a:b7:3c: 75:ce:75:88:c5:e4:a6:e9:1a:cb:ca:83:f5:87:60: 7a:00:48:f4:b7:e2:93:a0:36:62:9d:9b:48:ab:99: 4b:1a:25:98:da:2f:4e:a0:cd:dd:e1:d8:48:03:66: ae:90:21:cb:00:c3:c2:e3:46:8c:15:20:8c:a2:24: 8d:93:86:1a:fc:0c:65:25:36:ad:02:d6:97:6c:87: 01:a9:1b:60:1f:b4:4b:cb:9e:17:f7:d9:21:e7:25: c0:75:4b:56:f3:0c:89:57:a5:33:12:f3:16:18:51: 46:7f:b0:71:c2:08:b7:84:cb:16:57:32:d4:22:25: c1:42:72:aa:15:89:50:73:12:2f:d1:90:1f:6f:5b: 05:65:53:89:5e:6c:49:60:19:4d:4e:1b:9d:99:2c: d7:19:1a:e6:02:a1:5d:3d:9b:67:8a:55:db:68:c2: 7e:03:20:3f:4b:40:48:62:b5:a4:79:62:fc:0c:59: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8A:2B:7A:72:BA:91:BD:30:A1:79:43:A1:F1:EA:D2:C1:93:5A:B3 X509v3 Authority Key Identifier: keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d6:c9:05:f8:35:b2:c2:26:92:7e:5a:38:bc:f6:22:e6:cb: 1b:f7:57:7f:02:34:84:d4:60:42:0e:1a:b6:a6:69:b7:4f:32: 5a:43:10:05:9d:bf:84:f0:e6:41:84:12:98:9a:f1:64:68:bb: 6f:c1:1b:94:cc:9a:d5:f7:49:eb:4c:fe:ef:7e:44:dc:22:7d: f6:b4:2b:53:eb:72:ef:a9:03:fa:58:c8:43:e5:ed:c2:3f:05: 2d:03:8c:ae:38:c5:fc:dc:0c:5c:75:87:b3:8f:bc:1d:4d:b7: bf:36:8d:82:11:29:01:e4:d9:ff:6e:38:da:1f:31:0c:82:29: ea:a7:25:47:c0:eb:c5:c6:6f:1c:e1:4f:f5:09:ae:59:4a:cc: a2:b9:27:d2:ba:09:24:83:06:b6:bf:ee:e0:f1:f7:d2:c8:43: ff:b4:16:fe:95:99:94:34:fb:31:9f:6e:db:85:b6:84:70:68: 1b:86:6b:d8:36:0b:75:39:f3:ab:92:f9:79:d9:24:18:db:1f: cc:51:5c:f0:53:65:9f:a2:ed:a1:82:eb:11:e7:7f:59:8a:7e: 6e:f9:a4:a3:75:95:4a:e9:50:a5:6d:ec:a7:34:bc:2d:35:29: 1b:52:b1:3b:ee:48:a4:83:62:79:55:97:57:68:47:a0:21:0d: 54:c0:a6:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfesqSbozMQ4WgfeGq6ULKEfzMmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2 QjYyNDQ2MjAeFw0yNjA5MTcwNjA2MDlaFw0yNjA5MTgwNzQ3MDlaMDMxMTAvBgNV BAMTKEYzOEEyQjdBNzJCQTkxQkQzMEExNzk0M0ExRjFFQUQyQzE5MzVBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnhPsQyflZbM+2+4I9+89UOFDV NeiwoNtgik2InGE+4pfARNxwf2DmDQ/30R8Wwg7p244yFDaaVHHkY2RbEp2RhTg3 AOt11Hq3PHXOdYjF5KbpGsvKg/WHYHoASPS34pOgNmKdm0irmUsaJZjaL06gzd3h 2EgDZq6QIcsAw8LjRowVIIyiJI2Thhr8DGUlNq0C1pdshwGpG2AftEvLnhf32SHn JcB1S1bzDIlXpTMS8xYYUUZ/sHHCCLeEyxZXMtQiJcFCcqoViVBzEi/RkB9vWwVl U4lebElgGU1OG52ZLNcZGuYCoV09m2eKVdtown4DID9LQEhitaR5YvwMWQrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84orenK6kb0woXlDofHq0sGTWrMwHwYDVR0j BBgwFoAUvUmqYneXsqqFzT0LIXYkPWtiRGIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYzMTYxNjUtZGE1MC00NzNiLWJmN2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3 Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2QjYyNDQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDQ5QUE2Mjc3OTdCMkFBODVDRDNEMEIyMTc2MjQzRDZCNjI0 NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0 M0Q2QjYyNDQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvWyQX4NbLCJpJ+Wji89iLmyxv3V38CNITU YEIOGramabdPMlpDEAWdv4Tw5kGEEpia8WRou2/BG5TMmtX3SetM/u9+RNwiffa0 K1Prcu+pA/pYyEPl7cI/BS0DjK44xfzcDFx1h7OPvB1Nt782jYIRKQHk2f9uONof MQyCKeqnJUfA68XGbxzhT/UJrllKzKK5J9K6CSSDBra/7uDx99LIQ/+0Fv6VmZQ0 +zGfbtuFtoRwaBuGa9g2C3U586uS+XnZJBjbH8xRXPBTZZ+i7aGC6xHnf1mKfm75 pKN1lUrpUKVt7Kc0vC01KRtSsTvuSKSDYnlVl1doR6AhDVTAptQ= -----END CERTIFICATE-----Generated at Thu Sep 17 10:05:08 2026 by rpki-client