$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: 2Epw7HOW+pUZYlB/CG0R8IhzZjr1oDqkDehIwT+M7Vk= Subject key identifier: DF:87:A1:0A:49:A4:AD:1A:10:67:CC:43:EE:1B:CB:60:57:93:C9:4B Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 52B73335A69536697E2C3290ED42F3B3B126A6DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 18:58:37 +0000 Manifest this update: Sat 26 Sep 2026 18:53:37 +0000 Manifest next update: Sun 27 Sep 2026 19:10:37 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) 2: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: ezcBQUFxT+8MP11k3COk+Bgoz/4jtCgNpjQddrXOUgE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b7:33:35:a6:95:36:69:7e:2c:32:90:ed:42:f3:b3:b1:26:a6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: Sep 26 18:53:37 2026 GMT Not After : Sep 27 19:10:37 2026 GMT Subject: CN=DF87A10A49A4AD1A1067CC43EE1BCB605793C94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:fa:0e:0c:99:77:21:08:30:e3:31:6c:bb: 66:97:2a:80:47:17:d8:fa:06:1b:68:83:2d:14:11: b1:08:fd:80:52:22:33:da:4d:4b:b8:30:a4:35:db: 11:69:43:86:ba:3e:a9:53:82:d2:75:0f:a7:36:69: 49:81:4b:39:e0:d0:c3:c7:c0:8a:65:d5:70:b5:5b: b5:56:22:0c:ba:db:9a:35:91:8c:99:3d:c1:07:18: a6:97:94:35:47:97:54:34:a9:cb:70:cb:19:b5:cc: 87:60:b6:72:4f:4e:e4:d1:28:54:1e:02:fa:51:46: 4d:c0:79:95:d5:fa:c2:06:38:82:7a:42:6c:82:19: a7:82:98:0c:3a:e9:16:16:42:c6:5e:1f:76:87:19: 62:7e:87:46:e1:5a:74:ae:1e:f9:8e:3f:ca:bb:be: a3:cc:6b:f0:98:36:cf:c7:04:64:b5:30:48:66:53: 63:83:a5:12:31:96:ea:b7:99:1f:70:c6:d1:9f:52: 30:02:71:64:db:f6:ee:f3:80:e5:ca:a9:50:0e:57: 89:96:1e:69:ad:a1:c6:e6:34:f2:d1:f1:f3:8e:99: 77:b3:c3:9f:c6:03:d0:55:1a:77:32:ec:10:d4:e5: d1:eb:a4:9e:5f:47:99:aa:fa:6f:bb:d7:b3:7b:2b: 0b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:A1:0A:49:A4:AD:1A:10:67:CC:43:EE:1B:CB:60:57:93:C9:4B X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:17:61:d6:ac:bd:d5:7f:8d:8d:dd:db:ca:a6:26:ac:ff:50: cc:bb:02:4c:30:a6:0a:85:68:66:04:47:0c:46:75:27:ee:09: ae:b1:42:12:91:55:26:ce:4c:9a:b9:17:3b:9c:41:ef:4c:49: f5:6c:5f:87:92:93:7d:0e:af:e4:a5:22:55:43:f4:5b:10:c6: 08:e0:ee:3a:70:f3:4c:07:c3:e9:01:6b:f7:8d:fb:ff:3a:7d: 9c:3f:2d:29:fb:86:bd:b0:7d:fd:5c:e0:2c:14:6c:8b:06:3d: 41:63:c7:d4:8f:e9:f7:d6:97:11:ee:d5:eb:52:64:77:c6:25: 30:9d:4a:91:26:4b:de:2f:fe:2b:a8:23:8f:3d:c9:2d:58:b0: 6d:29:ee:83:f0:31:71:cb:f2:ef:e1:6c:af:8e:6f:56:1c:08: ac:1b:ba:62:8e:3a:da:1a:32:62:a9:92:a8:5c:12:f1:98:be: 44:20:89:7f:c2:5f:9c:92:69:41:bb:4f:b2:52:25:73:41:66: 36:30:3e:e8:f7:5b:4a:5d:c5:7f:75:8a:64:6b:d3:22:a6:81: bf:38:ab:84:19:94:d3:51:80:f0:48:64:37:c4:dd:06:ee:52: 08:23:5f:40:2e:0d:1f:92:75:e4:39:b8:46:e7:22:bd:68:65: dd:f5:f6:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrczNaaVNml+LDKQ7ULzs7EmptowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA5MjYxODUzMzdaFw0yNjA5MjcxOTEwMzdaMDMxMTAvBgNV BAMTKERGODdBMTBBNDlBNEFEMUExMDY3Q0M0M0VFMUJDQjYwNTc5M0M5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQvoODJl3IQgw4zFsu2aXKoBH F9j6Bhtogy0UEbEI/YBSIjPaTUu4MKQ12xFpQ4a6PqlTgtJ1D6c2aUmBSzng0MPH wIpl1XC1W7VWIgy625o1kYyZPcEHGKaXlDVHl1Q0qctwyxm1zIdgtnJPTuTRKFQe AvpRRk3AeZXV+sIGOIJ6QmyCGaeCmAw66RYWQsZeH3aHGWJ+h0bhWnSuHvmOP8q7 vqPMa/CYNs/HBGS1MEhmU2ODpRIxluq3mR9wxtGfUjACcWTb9u7zgOXKqVAOV4mW HmmtocbmNPLR8fOOmXezw5/GA9BVGncy7BDU5dHrpJ5fR5mq+m+717N7KwsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34ehCkmkrRoQZ8xD7hvLYFeTyUswHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUXYdasvdV/jY3d28qmJqz/UMy7AkwwpgqF aGYERwxGdSfuCa6xQhKRVSbOTJq5FzucQe9MSfVsX4eSk30Or+SlIlVD9FsQxgjg 7jpw80wHw+kBa/eN+/86fZw/LSn7hr2wff1c4CwUbIsGPUFjx9SP6ffWlxHu1etS ZHfGJTCdSpEmS94v/iuoI489yS1YsG0p7oPwMXHL8u/hbK+Ob1YcCKwbumKOOtoa MmKpkqhcEvGYvkQgiX/CX5ySaUG7T7JSJXNBZjYwPuj3W0pdxX91imRr0yKmgb84 q4QZlNNRgPBIZDfE3QbuUggjX0AuDR+SdeQ5uEbnIr1oZd319vk= -----END CERTIFICATE-----Generated at Sun Sep 27 10:37:46 2026 by rpki-client