$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft File: BACDD9DBC696965384EE99739EB6991320966120.mft (raw, json) Hash identifier: WarOg0ehK/0Lpns/QA4oSwbStmGIMjV2lRAOABif8R8= Subject key identifier: 63:FD:F8:AC:63:E1:CE:17:15:47:A2:91:03:DD:9E:26:E2:28:B2:BD Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 Certificate issuer: /CN=BACDD9DBC696965384EE99739EB6991320966120 Certificate serial: 482B68F39A385702028B581E36A5F2499F6320C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft Manifest number: EA Signing time: Sun 25 Oct 2026 05:02:31 +0000 Manifest this update: Sun 25 Oct 2026 04:57:31 +0000 Manifest next update: Mon 26 Oct 2026 05:06:31 +0000 Files and hashes: 1: BACDD9DBC696965384EE99739EB6991320966120.crl (hash: rZceKAvAhrmOBBtxGlYqm6pEOR8Wlm0drfBVZqTuHHc=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=) 3: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 05:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2b:68:f3:9a:38:57:02:02:8b:58:1e:36:a5:f2:49:9f:63:20:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120 Validity Not Before: Oct 25 04:57:31 2026 GMT Not After : Oct 26 05:06:31 2026 GMT Subject: CN=63FDF8AC63E1CE171547A29103DD9E26E228B2BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:bf:15:2c:75:ef:ef:b4:4c:c6:e2:1f:5f: 17:c4:ca:2b:2e:e1:9f:56:8d:f9:18:b6:2e:42:5a: 49:ae:35:ef:12:68:ad:34:81:7e:d4:86:34:66:a8: fd:01:73:89:e5:4e:2f:cb:10:54:c3:58:81:13:78: 62:c6:33:98:1e:b4:2e:63:02:59:7a:dc:a7:fc:7c: c9:3a:51:99:81:78:fd:b0:c8:4e:92:29:a8:4f:ca: 03:81:3e:18:62:a8:9c:8a:d0:92:96:97:6e:6e:06: 41:25:c3:df:8b:11:8e:0f:21:01:a5:48:77:a7:6d: 89:4d:cb:0a:d3:2b:be:b3:8f:f3:0c:67:b2:a6:da: f7:96:33:cb:7c:93:bd:e8:b4:eb:df:6d:00:22:21: 35:d8:d6:0d:e6:ef:b4:05:3f:97:f3:43:9d:15:00: 1f:17:b6:44:e6:32:2c:4f:a8:aa:6e:ca:80:3a:de: 65:ab:50:e5:e7:2d:b6:a3:df:dd:78:6b:6d:ee:6f: ea:a5:57:31:74:25:f0:42:d6:7c:69:0b:af:2a:3a: 21:ce:13:f0:78:c5:b3:85:23:f9:ee:20:41:d1:d1: 52:f1:b2:b9:a2:1f:19:1a:f9:ea:1f:de:86:43:4c: 31:aa:05:69:ca:93:0c:eb:dc:5c:72:32:d2:92:0f: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:F8:AC:63:E1:CE:17:15:47:A2:91:03:DD:9E:26:E2:28:B2:BD X509v3 Authority Key Identifier: keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:81:40:89:df:0e:68:cd:bf:aa:db:fe:22:35:b7:e7:c0:7d: 15:6f:30:4b:f2:9d:b4:49:a8:88:40:b3:6f:ad:5a:95:eb:ae: 68:69:70:d7:9b:e6:00:fa:d6:f0:de:40:86:82:fa:f2:c4:00: 3e:bf:1c:9b:3e:25:28:f1:59:ae:6f:ab:d7:92:2a:a2:00:bc: e7:e8:07:b0:31:b1:e9:3c:15:9c:cf:29:a5:bf:d8:f3:4e:62: 68:99:26:67:14:25:2f:5b:16:16:de:ed:e6:a5:e8:01:7c:54: a8:6d:4b:9d:5a:91:38:36:bb:f2:4c:7b:98:86:a1:87:7e:ef: 4f:37:55:c5:91:f3:7e:ef:2a:8a:75:6d:cf:11:68:52:f5:a1: 68:f9:37:c7:71:e0:f3:f5:6b:ea:28:53:34:3c:38:ea:10:00: 28:9f:31:dd:4a:1c:78:f9:05:48:0a:9c:ea:b5:7a:06:11:64: 97:b9:23:b3:bd:90:7d:c2:ff:7b:53:0d:83:54:9a:a3:49:95: 85:7d:c3:10:9e:4e:bc:cd:ce:28:0a:be:a8:a6:b3:66:39:57: 49:76:ab:61:b9:33:2a:f6:d5:77:17:c1:4c:3e:be:dd:57:a7: 57:83:ff:fa:f9:2c:de:c7:35:bc:2c:7d:14:e6:55:13:b3:01: b0:e3:ca:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCto85o4VwICi1geNqXySZ9jIMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5MTMy MDk2NjEyMDAeFw0yNjEwMjUwNDU3MzFaFw0yNjEwMjYwNTA2MzFaMDMxMTAvBgNV BAMTKDYzRkRGOEFDNjNFMUNFMTcxNTQ3QTI5MTAzREQ5RTI2RTIyOEIyQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1b78VLHXv77RMxuIfXxfEyisu 4Z9WjfkYti5CWkmuNe8SaK00gX7UhjRmqP0Bc4nlTi/LEFTDWIETeGLGM5getC5j All63Kf8fMk6UZmBeP2wyE6SKahPygOBPhhiqJyK0JKWl25uBkElw9+LEY4PIQGl SHenbYlNywrTK76zj/MMZ7Km2veWM8t8k73otOvfbQAiITXY1g3m77QFP5fzQ50V AB8XtkTmMixPqKpuyoA63mWrUOXnLbaj3914a23ub+qlVzF0JfBC1nxpC68qOiHO E/B4xbOFI/nuIEHR0VLxsrmiHxka+eof3oZDTDGqBWnKkwzr3FxyMtKSDxpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/34rGPhzhcVR6KRA92eJuIosr0wHwYDVR0j BBgwFoAUus3Z28aWllOE7plznraZEyCWYSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA4NzIwODYtODA1Yy00MGFhLTg3YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJD Njk2OTY1Mzg0RUU5OTczOUVCNjk5MTMyMDk2NjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUNERDlEQkM2OTY5NjUzODRFRTk5NzM5RUI2OTkxMzIwOTY2 MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5 MTMyMDk2NjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKBQInfDmjNv6rb/iI1t+fAfRVvMEvynbRJ qIhAs2+tWpXrrmhpcNeb5gD61vDeQIaC+vLEAD6/HJs+JSjxWa5vq9eSKqIAvOfo B7Axsek8FZzPKaW/2PNOYmiZJmcUJS9bFhbe7eal6AF8VKhtS51akTg2u/JMe5iG oYd+7083VcWR837vKop1bc8RaFL1oWj5N8dx4PP1a+ooUzQ8OOoQACifMd1KHHj5 BUgKnOq1egYRZJe5I7O9kH3C/3tTDYNUmqNJlYV9wxCeTrzNzigKvqims2Y5V0l2 q2G5Myr21XcXwUw+vt1Xp1eD//r5LN7HNbwsfRTmVROzAbDjyoc= -----END CERTIFICATE-----Generated at Sun Oct 25 19:49:58 2026 by rpki-client