$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: vqad7Ax0Ti3zZqgB/qMV0VMx5HtopvWlu7pUvw2x+Eo= Subject key identifier: 90:76:9D:81:3A:D2:E8:C3:67:85:70:71:62:C9:47:F7:DF:AB:90:E7 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 3AD9373D509607E52A3CA7AA3E43B8E28874D977 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 20:09:46 +0000 Manifest this update: Sat 14 Nov 2026 20:04:46 +0000 Manifest next update: Sun 15 Nov 2026 22:28:46 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: NuF8Hue80ShWNWoyw5YLAgWF+i1aUf7m1uQ2D2Wn9vQ=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d9:37:3d:50:96:07:e5:2a:3c:a7:aa:3e:43:b8:e2:88:74:d9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Nov 14 20:04:46 2026 GMT Not After : Nov 15 22:28:46 2026 GMT Subject: CN=90769D813AD2E8C36785707162C947F7DFAB90E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b6:2a:a6:63:dc:d0:0b:b0:ad:f4:6c:f3:83: ef:0b:93:ee:ae:bb:e7:fe:81:f3:e8:03:52:92:f7: f7:34:b8:d9:eb:f3:cc:e2:7f:0c:79:a4:00:b0:b0: 71:69:3a:6d:49:94:21:a7:d6:61:9f:10:a2:d1:ee: 64:5d:a7:ba:18:d9:59:7e:b4:fe:05:29:38:5a:9b: 09:34:66:da:e4:a6:fa:13:b6:c6:5d:39:73:a2:a7: cd:c0:75:cd:ea:a0:12:9d:47:a3:0a:50:79:af:c1: aa:f9:43:17:bf:43:8f:f9:99:86:17:f5:cc:1f:bf: a4:de:9c:a5:04:36:87:94:52:c6:8d:b8:db:4d:e7: aa:37:45:ea:dc:d4:3e:53:dd:61:12:07:0a:99:39: eb:3d:5c:a4:c6:34:e7:2f:6d:bc:f0:1d:44:ee:8a: 79:60:b2:57:b6:84:6d:42:f9:0a:36:3b:b6:f1:87: a0:26:a8:51:3a:96:cc:c3:c1:1a:35:97:8d:d8:df: 85:8d:bf:c2:1c:e8:0d:da:98:b5:a7:ea:2a:f2:5d: 5d:3b:b7:17:f9:ca:8a:0c:4b:22:16:90:85:27:91: 4a:33:08:bc:0a:0d:42:2e:73:c6:91:e2:a2:33:6f: 0d:e0:14:8b:d7:d8:d5:93:d8:32:36:51:bb:52:61: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:76:9D:81:3A:D2:E8:C3:67:85:70:71:62:C9:47:F7:DF:AB:90:E7 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:13:67:5f:2a:e4:3a:94:af:ce:20:ca:62:d2:2a:0d:1c:4f: d9:af:a3:a2:d1:61:01:9c:e9:b7:17:f6:0e:90:b1:0b:58:21: c2:1b:22:9d:1a:a3:0b:ca:83:01:54:ad:2d:01:f6:e7:b1:3b: d4:f6:1c:d3:90:24:bc:e4:cf:af:c7:fe:a1:42:58:3e:50:0a: d4:49:2e:f5:3a:89:b2:c4:3f:5d:7e:05:91:25:8c:f9:02:12: 4a:56:62:84:c2:a2:d8:2a:20:07:a8:64:60:2d:2a:bc:e2:31: 54:79:7f:a1:60:6b:09:03:d9:1c:b8:a0:8d:0e:d6:c0:a3:85: 42:28:f9:e4:a5:1c:b9:dd:4f:83:9e:b2:18:37:5c:1f:ac:11: 73:c4:0e:0c:32:b5:9c:10:86:7e:0e:61:f0:20:1d:a2:2e:66: 91:d4:18:71:1e:3d:6d:48:96:c9:17:cc:16:0c:58:47:a6:cf: 9d:01:bf:1e:03:64:1f:09:06:b6:5f:bd:34:65:92:11:22:e8: 8f:39:5d:ac:69:6e:12:f5:09:69:73:b8:3b:65:41:0c:5c:b5: a1:d6:cb:b7:2c:90:dc:53:44:47:5e:a8:1f:2d:c6:a4:b9:c7: 72:0a:55:f4:77:98:4b:e6:7f:ae:11:1d:3f:c9:09:7f:4f:8c: 31:53:02:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtk3PVCWB+UqPKeqPkO44oh02XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjExMTQyMDA0NDZaFw0yNjExMTUyMjI4NDZaMDMxMTAvBgNV BAMTKDkwNzY5RDgxM0FEMkU4QzM2Nzg1NzA3MTYyQzk0N0Y3REZBQjkwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtiqmY9zQC7Ct9Gzzg+8Lk+6u u+f+gfPoA1KS9/c0uNnr88zifwx5pACwsHFpOm1JlCGn1mGfEKLR7mRdp7oY2Vl+ tP4FKThamwk0ZtrkpvoTtsZdOXOip83Adc3qoBKdR6MKUHmvwar5Qxe/Q4/5mYYX 9cwfv6TenKUENoeUUsaNuNtN56o3Rerc1D5T3WESBwqZOes9XKTGNOcvbbzwHUTu inlgsle2hG1C+Qo2O7bxh6AmqFE6lszDwRo1l43Y34WNv8Ic6A3amLWn6iryXV07 txf5yooMSyIWkIUnkUozCLwKDUIuc8aR4qIzbw3gFIvX2NWT2DI2UbtSYdK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHadgTrS6MNnhXBxYslH99+rkOcwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFETZ18q5DqUr84gymLSKg0cT9mvo6LRYQGc 6bcX9g6QsQtYIcIbIp0aowvKgwFUrS0B9uexO9T2HNOQJLzkz6/H/qFCWD5QCtRJ LvU6ibLEP11+BZEljPkCEkpWYoTCotgqIAeoZGAtKrziMVR5f6FgawkD2Ry4oI0O 1sCjhUIo+eSlHLndT4Oeshg3XB+sEXPEDgwytZwQhn4OYfAgHaIuZpHUGHEePW1I lskXzBYMWEemz50Bvx4DZB8JBrZfvTRlkhEi6I85XaxpbhL1CWlzuDtlQQxctaHW y7cskNxTREdeqB8txqS5x3IKVfR3mEvmf64RHT/JCX9PjDFTAt4= -----END CERTIFICATE-----Generated at Sun Nov 15 01:07:32 2026 by rpki-client