$ rpki-client -vvvf rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft File: BD49AA627797B2AA85CD3D0B2176243D6B624462.mft (raw, json) Hash identifier: ICLVjmPEo9qJJr0Q7VrcMxzHP46r+AP06M/bTr/4xJ4= Subject key identifier: 5B:4D:10:60:8D:47:7E:4B:7F:39:5D:D2:06:FA:A2:D8:99:7F:1F:C2 Authority key identifier: BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62 Certificate issuer: /CN=BD49AA627797B2AA85CD3D0B2176243D6B624462 Certificate serial: 635E6ABF6B350669F6C092378112B26EB3B6337B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 18:12:56 +0000 Manifest this update: Fri 25 Sep 2026 18:07:56 +0000 Manifest next update: Sat 26 Sep 2026 19:33:56 +0000 Files and hashes: 1: BD49AA627797B2AA85CD3D0B2176243D6B624462.crl (hash: fyNJSbpJZY0FJqzwJ84OZRZVqZAG/hOGmFgjH2+scgk=) 2: 3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (hash: KRxP1QVR72dMNAQENQZE70vpWpEv6vQ6dhAVnSqGThE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5e:6a:bf:6b:35:06:69:f6:c0:92:37:81:12:b2:6e:b3:b6:33:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD49AA627797B2AA85CD3D0B2176243D6B624462 Validity Not Before: Sep 25 18:07:56 2026 GMT Not After : Sep 26 19:33:56 2026 GMT Subject: CN=5B4D10608D477E4B7F395DD206FAA2D8997F1FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:1e:0f:e5:ae:f7:04:d2:61:67:d8:f0:5b: 5b:7e:92:8d:bf:45:ea:d4:c7:38:12:ec:d4:0b:7d: 46:dd:e6:10:49:26:9e:e5:81:7e:35:3f:05:ed:ac: 88:53:f1:c8:ec:1c:27:8f:1b:2b:2b:e5:8e:aa:d8: 15:d3:7e:bf:d1:03:f5:fa:05:65:84:95:a2:ba:08: 8a:56:5c:e2:5f:a6:44:ac:cc:10:94:c8:2a:27:cf: 25:ad:1d:8e:e8:86:da:9f:4f:8b:24:d5:5a:28:23: ea:0e:9e:aa:65:1a:bf:ae:ed:cf:7e:de:07:10:6d: 41:ea:d0:0a:9f:f8:b2:4a:0d:29:3d:77:44:4f:dd: af:fc:6c:ca:0f:78:d6:1a:bf:e5:f8:1d:7c:ac:7f: 9b:5d:ee:cd:a9:6e:1e:04:6c:c4:3e:37:9e:e1:79: 5e:80:cc:c4:b1:bd:6b:54:ce:4b:8d:a3:22:5a:32: 22:63:cd:20:a0:42:8f:2e:08:98:98:c2:0f:e7:17: 68:3e:56:98:91:32:88:f1:ce:4a:b8:21:01:4c:c6: 4d:cc:8f:64:35:db:a2:54:12:18:a3:a6:e0:1a:b6: f0:53:4d:d6:61:3a:b1:2c:e2:3e:44:ff:91:4d:39: 37:83:a0:fe:40:71:47:9c:2d:b0:43:5d:ef:73:d7: ec:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4D:10:60:8D:47:7E:4B:7F:39:5D:D2:06:FA:A2:D8:99:7F:1F:C2 X509v3 Authority Key Identifier: keyid:BD:49:AA:62:77:97:B2:AA:85:CD:3D:0B:21:76:24:3D:6B:62:44:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD49AA627797B2AA85CD3D0B2176243D6B624462.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/BD49AA627797B2AA85CD3D0B2176243D6B624462.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fa:18:b1:ff:63:dd:d9:42:90:ee:35:94:84:e9:56:21:ad: fd:3d:42:6d:7e:20:e7:2a:b8:bc:56:62:84:29:0a:dc:7f:67: f1:45:13:04:1a:af:3e:bd:17:0c:06:d6:94:fe:53:90:7a:b7: b7:9f:ed:36:45:09:6c:b1:75:63:d6:41:ec:c2:c3:67:c7:52: 67:3e:df:97:e3:71:a9:be:33:23:c0:a4:08:13:ba:5c:41:b1: de:45:86:8a:12:f0:3c:63:6e:9f:48:e7:32:92:f5:47:85:8d: 9b:e2:76:40:b8:09:40:6a:e1:27:d7:9b:ff:0e:9e:52:85:bb: df:3d:5f:1a:8b:f7:fd:89:f2:04:d8:56:6b:dd:75:65:87:c6: 4b:f4:8a:e9:1e:8f:e3:af:fb:da:a7:f4:fd:33:ce:b9:c9:0d: df:62:fe:9c:2c:98:1f:7f:4a:60:16:dc:69:72:5c:19:2d:94: fd:8c:3a:45:60:e1:51:96:5b:fe:18:b0:01:55:4f:04:ff:98: 1c:1a:86:20:39:b0:93:5b:0c:7e:0d:56:c3:45:0a:4d:d8:22: c2:c0:00:20:07:5a:c2:2d:8b:ba:c4:c7:a9:e4:ae:14:91:97: 28:b1:15:25:a9:27:dd:b5:93:fa:ff:7e:12:3e:f3:32:9e:d3: d7:66:66:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY15qv2s1Bmn2wJI3gRKybrO2M3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2 QjYyNDQ2MjAeFw0yNjA5MjUxODA3NTZaFw0yNjA5MjYxOTMzNTZaMDMxMTAvBgNV BAMTKDVCNEQxMDYwOEQ0NzdFNEI3RjM5NUREMjA2RkFBMkQ4OTk3RjFGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI9B4P5a73BNJhZ9jwW1t+ko2/ RerUxzgS7NQLfUbd5hBJJp7lgX41PwXtrIhT8cjsHCePGysr5Y6q2BXTfr/RA/X6 BWWElaK6CIpWXOJfpkSszBCUyConzyWtHY7ohtqfT4sk1VooI+oOnqplGr+u7c9+ 3gcQbUHq0Aqf+LJKDSk9d0RP3a/8bMoPeNYav+X4HXysf5td7s2pbh4EbMQ+N57h eV6AzMSxvWtUzkuNoyJaMiJjzSCgQo8uCJiYwg/nF2g+VpiRMojxzkq4IQFMxk3M j2Q126JUEhijpuAatvBTTdZhOrEs4j5E/5FNOTeDoP5AcUecLbBDXe9z1+xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW00QYI1Hfkt/OV3SBvqi2Jl/H8IwHwYDVR0j BBgwFoAUvUmqYneXsqqFzT0LIXYkPWtiRGIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzYzMTYxNjUtZGE1MC00NzNiLWJmN2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3 Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0M0Q2QjYyNDQ2Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDQ5QUE2Mjc3OTdCMkFBODVDRDNEMEIyMTc2MjQzRDZCNjI0 NDYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzYzMTYxNjUtZGE1MC00NzNiLWJm N2MtYzc3ZWJhYmM2ZDBiLzAvQkQ0OUFBNjI3Nzk3QjJBQTg1Q0QzRDBCMjE3NjI0 M0Q2QjYyNDQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJn6GLH/Y93ZQpDuNZSE6VYhrf09Qm1+IOcq uLxWYoQpCtx/Z/FFEwQarz69FwwG1pT+U5B6t7ef7TZFCWyxdWPWQezCw2fHUmc+ 35fjcam+MyPApAgTulxBsd5FhooS8Dxjbp9I5zKS9UeFjZvidkC4CUBq4SfXm/8O nlKFu989XxqL9/2J8gTYVmvddWWHxkv0iukej+Ov+9qn9P0zzrnJDd9i/pwsmB9/ SmAW3GlyXBktlP2MOkVg4VGWW/4YsAFVTwT/mBwahiA5sJNbDH4NVsNFCk3YIsLA ACAHWsIti7rEx6nkrhSRlyixFSWpJ921k/r/fhI+8zKe09dmZh8= -----END CERTIFICATE-----Generated at Fri Sep 25 23:48:57 2026 by rpki-client