$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: rusUfs6q0ogKfJoBRKZ/2PY905rCbQrDBCZU1TofcnM= Subject key identifier: 19:84:A2:CB:50:72:72:C1:55:86:EE:A8:2A:69:9F:ED:54:0D:04:E7 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 79022F133AF1443B5C7202C321BECE7A58B4007B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 23:14:21 +0000 Manifest this update: Fri 25 Sep 2026 23:09:21 +0000 Manifest next update: Sun 27 Sep 2026 00:02:21 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: X1E4zdbeVfNocOrWejtmuZrpNY2aBKcNeRzshZXXblw=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:02:2f:13:3a:f1:44:3b:5c:72:02:c3:21:be:ce:7a:58:b4:00:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Sep 25 23:09:21 2026 GMT Not After : Sep 27 00:02:21 2026 GMT Subject: CN=1984A2CB507272C15586EEA82A699FED540D04E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:ae:14:cb:f0:52:5d:20:b0:7c:58:c6:01: 58:5b:49:95:01:41:0b:76:dc:21:be:1a:76:90:5e: 54:5d:4b:26:55:69:b7:c0:ec:be:ac:e9:be:e9:a1: 02:27:e2:ad:c2:d4:50:c4:e0:6e:6d:1d:9a:c1:7f: a5:d9:57:a8:b1:bc:05:15:87:37:64:ee:54:0f:b9: a0:47:ab:1f:92:75:56:ec:4f:91:5e:47:91:e0:36: 90:02:93:1c:81:c4:67:a5:39:f9:15:39:64:0e:94: 52:ee:c5:cb:c3:e1:34:37:0f:b4:96:19:66:1e:37: 2d:e5:4e:88:5f:41:dd:5d:02:75:91:31:ac:0a:44: 69:90:ec:55:24:0c:d2:49:75:65:20:92:d5:53:f8: c5:20:a3:fb:b4:cb:4e:1b:a7:cb:82:51:c8:11:9f: cd:9e:a7:76:9f:86:a6:f0:55:1b:c6:3c:18:d8:24: 7d:32:b0:cd:00:69:fe:9c:87:4f:bb:b6:e2:d5:1a: b8:de:1d:28:80:ce:9b:05:5a:a8:8c:b6:70:db:97: 0f:9c:cc:f6:e9:a5:45:ac:0d:97:05:0a:c7:2d:17: fa:8d:27:15:8e:51:6b:44:81:be:e4:44:3c:be:84: 16:69:97:bf:ea:ce:b2:83:59:9e:ac:0e:d5:58:c3: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:84:A2:CB:50:72:72:C1:55:86:EE:A8:2A:69:9F:ED:54:0D:04:E7 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b9:a5:02:c0:26:e2:c7:b3:0b:99:5f:dd:9f:bf:97:bc:d1: f6:ee:93:b5:80:97:2f:e9:c1:8b:9a:69:f2:92:04:ad:80:8e: c3:bf:a9:ba:60:f3:28:7d:a7:f4:00:8e:0b:6d:c4:8a:d1:76: 65:48:01:97:15:2f:c8:27:b1:f3:d6:04:b2:b2:55:98:d7:26: 53:28:45:09:4a:6f:4d:2d:1a:72:f9:32:5a:76:90:e5:d5:ee: 2d:ae:0d:81:26:d1:58:c6:39:ed:ed:b8:c6:37:71:62:f2:18: 2b:f9:35:d7:35:e0:fa:ef:b0:00:80:6d:94:56:e1:8a:06:86: 48:1d:bc:99:45:c2:c5:a2:8e:c1:12:65:25:ba:28:86:cb:e9: 48:35:1d:d8:02:55:de:0f:8e:73:aa:d8:eb:6f:49:a8:b6:80: 89:09:3f:1c:f1:76:e6:d4:90:b5:c5:34:4b:1d:29:33:a8:93: fd:a6:9b:ee:cb:47:2a:fd:2e:fd:c5:5d:97:54:57:fc:7d:32: 32:de:70:75:21:af:d1:70:2c:e4:e7:2c:fc:83:21:04:8d:46: ec:21:f4:b7:1c:81:85:8f:5e:1b:20:08:ce:1f:c8:0b:2b:ab: e0:32:e9:24:4f:70:d4:db:ad:24:03:c4:42:b4:31:2d:c8:2b: 0b:14:a8:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQIvEzrxRDtccgLDIb7Oeli0AHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA5MjUyMzA5MjFaFw0yNjA5MjcwMDAyMjFaMDMxMTAvBgNV BAMTKDE5ODRBMkNCNTA3MjcyQzE1NTg2RUVBODJBNjk5RkVENTQwRDA0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxt64Uy/BSXSCwfFjGAVhbSZUB QQt23CG+GnaQXlRdSyZVabfA7L6s6b7poQIn4q3C1FDE4G5tHZrBf6XZV6ixvAUV hzdk7lQPuaBHqx+SdVbsT5FeR5HgNpACkxyBxGelOfkVOWQOlFLuxcvD4TQ3D7SW GWYeNy3lTohfQd1dAnWRMawKRGmQ7FUkDNJJdWUgktVT+MUgo/u0y04bp8uCUcgR n82ep3afhqbwVRvGPBjYJH0ysM0Aaf6ch0+7tuLVGrjeHSiAzpsFWqiMtnDblw+c zPbppUWsDZcFCsctF/qNJxWOUWtEgb7kRDy+hBZpl7/qzrKDWZ6sDtVYw/d/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYSiy1BycsFVhu6oKmmf7VQNBOcwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGa5pQLAJuLHswuZX92fv5e80fbuk7WAly/p wYuaafKSBK2AjsO/qbpg8yh9p/QAjgttxIrRdmVIAZcVL8gnsfPWBLKyVZjXJlMo RQlKb00tGnL5Mlp2kOXV7i2uDYEm0VjGOe3tuMY3cWLyGCv5Ndc14PrvsACAbZRW 4YoGhkgdvJlFwsWijsESZSW6KIbL6Ug1HdgCVd4PjnOq2OtvSai2gIkJPxzxdubU kLXFNEsdKTOok/2mm+7LRyr9Lv3FXZdUV/x9MjLecHUhr9FwLOTnLPyDIQSNRuwh 9LccgYWPXhsgCM4fyAsrq+Ay6SRPcNTbrSQDxEK0MS3IKwsUqNU= -----END CERTIFICATE-----Generated at Sat Sep 26 04:10:08 2026 by rpki-client