$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: G7b3CgtARovIgAnwfqqf/1JpNhTikE3mti9EF/qN77s= Subject key identifier: C5:69:93:F2:34:CF:88:CA:1A:A0:1A:CD:22:16:5B:27:B5:D9:EC:FA Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 71D96359FC0DB9C1F49831046A6CEB620D1E19EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 21:20:21 +0000 Manifest this update: Wed 16 Sep 2026 21:15:21 +0000 Manifest next update: Fri 18 Sep 2026 00:17:21 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: LgY0wfHg8BVTbcppUBwiX+5CXB7kIjOVRDD9+f3cgME=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:17:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d9:63:59:fc:0d:b9:c1:f4:98:31:04:6a:6c:eb:62:0d:1e:19:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Sep 16 21:15:21 2026 GMT Not After : Sep 18 00:17:21 2026 GMT Subject: CN=C56993F234CF88CA1AA01ACD22165B27B5D9ECFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:90:ae:14:8c:b6:1b:ae:78:89:ff:82:60:07: f3:b5:c8:c7:4b:68:eb:0f:e0:bc:b8:de:07:a6:dc: fc:0b:89:2b:fe:a3:32:4f:c7:06:40:b7:e2:c8:11: b5:14:b5:08:9b:c2:25:17:b6:68:b6:4b:0f:2d:b2: fc:e2:d3:8d:7f:65:df:59:82:01:02:42:58:76:c7: b2:97:87:7f:ea:7f:00:2b:81:ee:94:4a:02:43:a4: 07:9f:9a:fd:df:5f:75:71:51:55:49:2d:14:57:58: 4a:d5:09:c0:1c:92:61:e7:6d:0a:14:06:db:1c:3e: 72:51:64:ea:3e:03:4b:ef:f7:97:92:ad:7f:50:51: b7:c7:d0:d0:fa:ba:9a:19:49:71:1f:3a:12:e3:ed: ae:bc:31:39:cf:45:d3:f1:bf:e5:7a:09:79:20:01: 88:11:c2:dc:34:d8:17:ea:16:e7:0c:7c:b7:77:3f: 41:ea:ae:bb:8e:a7:bc:e8:19:8d:f3:b9:4e:78:dc: 76:53:dd:b8:27:ee:cb:4c:a8:dc:15:b9:03:93:e5: 7a:cc:13:64:c9:10:eb:0f:e0:f4:d0:65:31:a3:b3: d3:23:19:53:ad:77:bf:99:c1:e8:fe:08:e0:c8:39: 96:b2:0e:47:36:c6:6b:aa:a3:90:07:bd:c7:30:66: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:69:93:F2:34:CF:88:CA:1A:A0:1A:CD:22:16:5B:27:B5:D9:EC:FA X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:88:3b:d2:5a:13:b2:28:b9:bb:85:d1:bc:f5:71:1c:41:21: e4:a1:9e:5d:5f:57:55:88:28:49:3e:06:b2:ee:83:f1:be:36: 6d:4f:e9:d9:40:a6:a8:67:8a:91:01:d7:5a:06:a1:9c:71:56: 87:d4:d1:d7:64:bb:5b:76:10:fc:ba:1d:eb:b2:1a:66:23:9c: 13:df:be:16:b5:f2:15:25:96:02:37:0a:1c:91:67:b6:79:f7: 25:37:71:c9:56:03:ec:b4:14:2d:8f:39:0a:18:f1:c9:b6:88: 26:fd:cc:5b:93:fc:47:75:a1:49:84:a4:99:87:77:13:57:22: d9:1c:e2:24:8e:37:1f:08:da:02:6e:ec:8c:3b:53:f3:b5:e4: cf:08:33:db:96:30:b8:ec:5f:66:b7:1c:e6:73:82:8c:a9:d8: 0c:52:04:7f:ea:d5:fb:49:a8:7b:37:8d:ff:2f:11:b8:98:0a: 69:f1:83:c6:ba:2b:c6:b6:e0:2f:7a:bf:df:7f:a0:11:ce:d2: a4:8a:bd:e2:c9:ab:60:58:d8:b2:6e:36:ac:a3:45:ed:d9:4c: 54:c2:86:d0:27:ae:5d:87:17:0c:16:a9:4b:fa:66:11:8f:c1: 6d:70:ae:3e:50:ba:d4:7b:05:7b:21:ad:b7:0b:89:c8:7b:9a: 98:4e:fa:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcdljWfwNucH0mDEEamzrYg0eGeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA5MTYyMTE1MjFaFw0yNjA5MTgwMDE3MjFaMDMxMTAvBgNV BAMTKEM1Njk5M0YyMzRDRjg4Q0ExQUEwMUFDRDIyMTY1QjI3QjVEOUVDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxkK4UjLYbrniJ/4JgB/O1yMdL aOsP4Ly43gem3PwLiSv+ozJPxwZAt+LIEbUUtQibwiUXtmi2Sw8tsvzi041/Zd9Z ggECQlh2x7KXh3/qfwArge6USgJDpAefmv3fX3VxUVVJLRRXWErVCcAckmHnbQoU BtscPnJRZOo+A0vv95eSrX9QUbfH0ND6upoZSXEfOhLj7a68MTnPRdPxv+V6CXkg AYgRwtw02BfqFucMfLd3P0HqrruOp7zoGY3zuU543HZT3bgn7stMqNwVuQOT5XrM E2TJEOsP4PTQZTGjs9MjGVOtd7+Zwej+CODIOZayDkc2xmuqo5AHvccwZp+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxWmT8jTPiMoaoBrNIhZbJ7XZ7PowHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCIO9JaE7IoubuF0bz1cRxBIeShnl1fV1WI KEk+BrLug/G+Nm1P6dlApqhnipEB11oGoZxxVofU0ddku1t2EPy6HeuyGmYjnBPf vha18hUllgI3ChyRZ7Z59yU3cclWA+y0FC2POQoY8cm2iCb9zFuT/Ed1oUmEpJmH dxNXItkc4iSONx8I2gJu7Iw7U/O15M8IM9uWMLjsX2a3HOZzgoyp2AxSBH/q1ftJ qHs3jf8vEbiYCmnxg8a6K8a24C96v99/oBHO0qSKveLJq2BY2LJuNqyjRe3ZTFTC htAnrl2HFwwWqUv6ZhGPwW1wrj5QutR7BXshrbcLich7mphO+kk= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:19 2026 by rpki-client