$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: 5Pvb09ZFdZxK+kFrkDbpR4ZKwvX4EL+8PUIoHYOAjaQ= Subject key identifier: 71:60:4F:99:9A:49:7A:76:A0:B4:D5:4E:64:FC:85:45:A0:A4:83:64 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 75372512D85CBCAD9BE3DAC73CE919D45498B404 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:48:09 +0000 Manifest this update: Thu 17 Sep 2026 07:43:09 +0000 Manifest next update: Fri 18 Sep 2026 07:54:09 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) 2: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: H1eDRGrxWxv5YNBnFiYUuopTrbuTLyG+tQoJfjuXCjU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:37:25:12:d8:5c:bc:ad:9b:e3:da:c7:3c:e9:19:d4:54:98:b4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Sep 17 07:43:09 2026 GMT Not After : Sep 18 07:54:09 2026 GMT Subject: CN=71604F999A497A76A0B4D54E64FC8545A0A48364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3c:67:02:81:4f:dd:77:89:31:66:0f:d3:45: ab:e8:cc:9d:5f:60:4d:ad:1c:76:90:9d:ee:ed:6a: 5e:e9:ac:23:e5:ae:2d:a1:bc:b9:ff:c9:db:6a:ef: ab:fa:7e:b0:79:31:b3:3f:b4:ef:d7:59:d2:4a:89: 62:58:1e:c3:c5:65:93:d5:c4:ea:da:fc:17:ba:dd: ea:7f:72:e2:89:e6:13:d0:6b:93:5b:a5:15:69:e8: 87:9d:4b:17:48:ce:33:ca:b8:92:1e:90:62:75:97: 64:12:59:9a:f3:c3:a0:6d:95:8d:d4:c6:80:04:86: a9:e7:c9:cd:ed:ba:16:1a:0f:40:6d:01:7d:1f:be: ed:2f:9f:f2:bc:c5:eb:7e:f0:18:29:62:1f:1c:4b: a9:66:b8:2f:54:91:02:5c:52:50:e0:ac:05:87:37: 1f:6e:6a:b7:0b:79:5f:6f:ed:9c:76:50:bb:b9:77: 06:a8:15:f6:c8:a1:94:08:30:ba:7f:48:38:30:61: b3:48:7a:cf:1a:c7:6b:9d:a2:08:52:de:40:02:12: ac:7f:12:be:b3:16:36:ea:54:64:f0:3a:d2:da:3e: 0e:d3:48:f0:a1:1e:31:e8:b0:e5:75:fa:6b:9a:f6: cd:f6:14:ec:ee:a5:ea:23:ea:9a:3d:e9:8b:ab:7a: d2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:60:4F:99:9A:49:7A:76:A0:B4:D5:4E:64:FC:85:45:A0:A4:83:64 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:be:26:04:b2:5f:86:dc:83:38:8d:34:e1:3e:22:3d:7c:f4: 6b:0f:e2:21:b0:f0:bb:e0:d8:ec:6c:4a:be:74:86:88:f0:76: c4:8d:51:d1:b7:ce:76:b6:ff:b4:5e:b5:b9:0a:dc:e3:60:fe: f9:5d:24:32:14:94:35:bb:43:a9:28:1a:e8:23:7b:54:ce:07: ae:52:6b:bb:12:fc:34:3b:8d:fd:77:a7:5a:0c:26:95:b0:1d: b6:92:98:7a:7e:97:59:66:06:bf:ce:28:0a:bd:0f:b6:60:65: ea:c7:dc:60:d9:23:4b:49:b1:13:74:79:e0:7f:8c:a9:2c:fe: a2:e2:0d:d0:89:08:12:ac:1b:61:8d:e2:8c:0d:a3:c6:b5:ed: 25:c0:dc:84:58:f1:b0:63:be:4a:98:35:4a:58:51:20:c9:c2: 30:3f:43:56:3f:a1:06:1b:db:8b:d2:f0:ad:fe:12:a9:36:d5: 12:d6:ea:5e:a3:8f:be:b9:a3:3b:97:d4:52:f2:b9:bf:35:d7: b9:13:54:4e:65:90:e6:42:ac:ed:4a:06:d7:be:dd:c8:5e:77: 07:8e:17:50:57:9d:0a:d9:e3:c5:8e:e6:8d:94:d1:7e:2d:53: 9b:c3:4d:b1:bd:4c:20:4a:c0:2e:36:db:4a:49:40:b2:d9:cc: bb:ad:92:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdTclEthcvK2b49rHPOkZ1FSYtAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA5MTcwNzQzMDlaFw0yNjA5MTgwNzU0MDlaMDMxMTAvBgNV BAMTKDcxNjA0Rjk5OUE0OTdBNzZBMEI0RDU0RTY0RkM4NTQ1QTBBNDgzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPGcCgU/dd4kxZg/TRavozJ1f YE2tHHaQne7tal7prCPlri2hvLn/ydtq76v6frB5MbM/tO/XWdJKiWJYHsPFZZPV xOra/Be63ep/cuKJ5hPQa5NbpRVp6IedSxdIzjPKuJIekGJ1l2QSWZrzw6BtlY3U xoAEhqnnyc3tuhYaD0BtAX0fvu0vn/K8xet+8BgpYh8cS6lmuC9UkQJcUlDgrAWH Nx9uarcLeV9v7Zx2ULu5dwaoFfbIoZQIMLp/SDgwYbNIes8ax2udoghS3kACEqx/ Er6zFjbqVGTwOtLaPg7TSPChHjHosOV1+mua9s32FOzupeoj6po96YuretJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWBPmZpJenagtNVOZPyFRaCkg2QwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy+JgSyX4bcgziNNOE+Ij189GsP4iGw8Lvg 2OxsSr50hojwdsSNUdG3zna2/7RetbkK3ONg/vldJDIUlDW7Q6koGugje1TOB65S a7sS/DQ7jf13p1oMJpWwHbaSmHp+l1lmBr/OKAq9D7ZgZerH3GDZI0tJsRN0eeB/ jKks/qLiDdCJCBKsG2GN4owNo8a17SXA3IRY8bBjvkqYNUpYUSDJwjA/Q1Y/oQYb 24vS8K3+Eqk21RLW6l6jj765ozuX1FLyub8117kTVE5lkOZCrO1KBte+3chedweO F1BXnQrZ48WO5o2U0X4tU5vDTbG9TCBKwC4220pJQLLZzLutklk= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:59 2026 by rpki-client