$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: n6SveViA31CubfNDCGI7KJOYqdMOK2YuMfyvz6Jmrqg= Subject key identifier: E1:A1:D4:BA:4E:28:FB:16:1E:24:37:86:BE:F2:AD:3D:D3:D7:E0:39 Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 6936264F4BE774669C29E36F32FC339E0ED46CE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:06:04 +0000 Manifest this update: Thu 17 Sep 2026 06:01:04 +0000 Manifest next update: Fri 18 Sep 2026 08:55:04 +0000 Files and hashes: 1: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) 2: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: uKk4leBVHq65Zwtyfb2wzFGg3SVdZNAtohhYp+HOVOs=) 3: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:36:26:4f:4b:e7:74:66:9c:29:e3:6f:32:fc:33:9e:0e:d4:6c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: Sep 17 06:01:04 2026 GMT Not After : Sep 18 08:55:04 2026 GMT Subject: CN=E1A1D4BA4E28FB161E243786BEF2AD3DD3D7E039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f3:70:a9:4f:1d:88:c9:0b:d1:0b:ee:84:1a: ed:c7:5e:cf:f2:bd:45:3c:dd:dd:9b:87:bb:2c:99: 29:fe:65:7f:59:e1:6d:79:c3:34:66:6c:4a:04:ba: 8e:70:a1:b5:c1:29:3e:2b:f3:74:03:5f:80:5c:b4: 24:2e:f6:9f:1f:55:8d:64:21:19:0b:10:df:94:3f: 59:81:c9:07:75:9e:81:99:48:68:d8:d3:43:27:de: 5c:ea:3d:37:a0:f5:56:3a:ce:89:7e:e3:42:49:e0: e1:c5:b9:5b:4a:a0:97:f8:d5:46:d3:8d:d0:3a:c9: 34:99:5d:c5:76:f2:f1:e9:1b:21:22:a9:e1:38:eb: 23:0f:81:c6:73:9e:a4:9d:d9:8c:6f:ea:ef:24:84: d1:ed:58:56:0c:d7:9c:1d:c5:79:d7:d1:62:45:d8: 60:6d:df:b5:78:13:8b:a5:2d:bb:7b:e9:da:f4:89: 92:28:78:1d:09:78:a3:e6:55:f7:e4:d6:8c:e1:de: 28:55:88:a8:4c:81:00:28:8a:85:ed:8e:7f:db:00: 31:8e:87:9e:66:a8:60:b1:04:f6:f7:1a:42:68:76: 15:4e:29:87:b4:98:fc:6b:e7:d0:67:1b:67:1b:8c: c2:d0:cd:9d:32:4b:05:6a:d2:c7:34:b4:a0:a3:31: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A1:D4:BA:4E:28:FB:16:1E:24:37:86:BE:F2:AD:3D:D3:D7:E0:39 X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:27:0c:ec:46:d2:f2:58:db:eb:44:ff:fd:c1:b0:81:43:ca: 25:ea:87:35:8b:fa:c1:57:ec:97:ed:f1:a3:15:1b:24:02:1e: 26:64:32:7f:19:93:81:bd:d3:3c:60:23:30:06:69:b3:e2:81: 02:c8:31:cd:85:10:81:b0:4c:57:87:73:e8:ba:69:2b:f0:17: 46:fd:95:c0:85:3f:86:fa:c5:99:b4:ba:18:6a:b5:0b:66:a7: e4:de:ad:21:55:ac:69:76:73:81:be:90:a1:74:f9:41:c4:9c: fa:eb:de:e8:be:d0:23:b9:bb:c7:57:bc:6d:a1:fd:d1:d6:9f: 94:a6:d7:b2:32:e5:5b:ca:74:de:c1:8d:4e:c4:d4:3d:b8:cb: 06:bb:fe:77:28:d0:93:a8:ee:be:a1:45:28:87:e2:c7:3f:b6: 22:a7:9e:28:a9:66:f9:bc:cb:c9:50:82:4c:1f:e4:1c:23:68: 5a:88:b2:06:df:da:90:dd:ae:ee:e6:1e:b7:79:e7:c3:5a:81: f9:d1:d5:1d:20:d2:98:c8:b1:15:cb:87:7a:40:4f:ee:2e:99: 16:dc:0d:91:07:a2:14:25:a7:0e:9c:2a:93:0d:67:98:a0:d6: 54:ca:63:38:f7:b1:b5:3f:c0:a5:06:8d:6b:ed:65:45:0f:51: 65:b6:7c:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaTYmT0vndGacKeNvMvwzng7UbOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA5MTcwNjAxMDRaFw0yNjA5MTgwODU1MDRaMDMxMTAvBgNV BAMTKEUxQTFENEJBNEUyOEZCMTYxRTI0Mzc4NkJFRjJBRDNERDNEN0UwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC483CpTx2IyQvRC+6EGu3HXs/y vUU83d2bh7ssmSn+ZX9Z4W15wzRmbEoEuo5wobXBKT4r83QDX4BctCQu9p8fVY1k IRkLEN+UP1mByQd1noGZSGjY00Mn3lzqPTeg9VY6zol+40JJ4OHFuVtKoJf41UbT jdA6yTSZXcV28vHpGyEiqeE46yMPgcZznqSd2Yxv6u8khNHtWFYM15wdxXnX0WJF 2GBt37V4E4ulLbt76dr0iZIoeB0JeKPmVffk1ozh3ihViKhMgQAoioXtjn/bADGO h55mqGCxBPb3GkJodhVOKYe0mPxr59BnG2cbjMLQzZ0ySwVq0sc0tKCjMb0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4aHUuk4o+xYeJDeGvvKtPdPX4DkwHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADonDOxG0vJY2+tE//3BsIFDyiXqhzWL+sFX 7Jft8aMVGyQCHiZkMn8Zk4G90zxgIzAGabPigQLIMc2FEIGwTFeHc+i6aSvwF0b9 lcCFP4b6xZm0uhhqtQtmp+TerSFVrGl2c4G+kKF0+UHEnPrr3ui+0CO5u8dXvG2h /dHWn5Sm17Iy5VvKdN7BjU7E1D24ywa7/nco0JOo7r6hRSiH4sc/tiKnniipZvm8 y8lQgkwf5BwjaFqIsgbf2pDdru7mHrd558NagfnR1R0g0pjIsRXLh3pAT+4umRbc DZEHohQlpw6cKpMNZ5ig1lTKYzj3sbU/wKUGjWvtZUUPUWW2fCc= -----END CERTIFICATE-----Generated at Thu Sep 17 14:46:15 2026 by rpki-client