$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: 36v4DRoygvLzzQxBejBOTtbMdG1kqInmiLSCAyDkcEg= Subject key identifier: 85:9C:5E:39:B0:C2:80:45:91:88:45:E2:1B:82:4E:0D:95:48:B5:58 Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 15044258987307D5BD519693CEF58B0FD5269403 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 19:13:56 +0000 Manifest this update: Sat 26 Sep 2026 19:08:56 +0000 Manifest next update: Sun 27 Sep 2026 21:09:56 +0000 Files and hashes: 1: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: crOOV8ibZFE5ENUCUB5u/a24qLJppbzftdMdWNh8aMQ=) 2: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) 3: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:04:42:58:98:73:07:d5:bd:51:96:93:ce:f5:8b:0f:d5:26:94:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: Sep 26 19:08:56 2026 GMT Not After : Sep 27 21:09:56 2026 GMT Subject: CN=859C5E39B0C28045918845E21B824E0D9548B558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:f4:5e:84:75:23:2a:6b:35:fe:eb:43:d2: f6:4b:2c:00:71:e9:aa:29:75:50:ca:c3:a9:aa:b4: a8:91:3e:59:2f:42:ff:6b:c3:c5:ec:5e:9f:25:75: 20:1b:98:e7:a0:28:67:c5:14:7a:44:53:a4:71:72: 07:47:32:40:da:ae:e1:26:3b:ae:02:ef:bf:99:06: cf:4f:8b:ac:28:9c:1e:1e:49:e5:5e:2a:c8:be:ce: 68:2d:83:6a:d9:8e:c8:96:62:5b:e1:e7:3f:bb:5f: 14:34:d6:0a:3a:0e:25:ee:15:16:d4:13:3a:b5:9b: 2a:8e:1f:a6:18:e3:40:26:9f:36:9a:44:26:d4:be: 1a:97:62:cf:76:2a:31:a0:c9:a8:84:bc:cb:f6:f4: 6c:bb:4e:ee:c4:c8:7a:d2:8e:f3:0c:01:dd:d2:c9: f0:b5:b6:01:70:a2:a3:6c:df:5c:4e:a8:72:f4:c5: 6a:b9:1d:0b:f6:59:16:a3:23:c9:9e:69:fc:1a:e4: 71:d8:32:dd:b8:89:6f:aa:71:94:82:b4:3a:90:67: d0:70:e8:9d:b4:62:cd:f4:34:bd:72:7a:1a:b9:a6: a4:c1:7e:b6:64:0e:9e:86:93:e7:15:64:19:df:d6: 23:f1:73:53:fe:a8:44:23:7d:fe:f2:c0:77:3a:e7: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:5E:39:B0:C2:80:45:91:88:45:E2:1B:82:4E:0D:95:48:B5:58 X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:15:26:46:dc:33:f8:e8:b0:24:41:f4:b8:04:90:8e:e1:0f: f2:94:47:58:a3:19:b5:a3:06:74:61:12:90:eb:46:db:40:cc: be:dc:42:ad:52:4c:04:fd:ca:a1:5b:bf:14:68:6b:53:5d:e8: 4a:3f:58:a8:f8:ec:08:1b:08:22:e4:17:7c:e8:91:db:fb:b2: bf:9d:df:d6:c3:1b:6b:ee:30:90:7d:84:72:08:bf:6e:e8:96: 1a:e1:fa:ba:52:a8:0f:a4:bf:b1:57:52:cb:54:1d:1d:dc:71: a3:51:69:cc:c7:42:f7:d1:da:0e:b1:f6:5c:0e:37:d2:74:14: 8a:f8:73:80:03:f5:dd:80:06:d6:73:c9:2a:80:00:6e:74:7d: 41:c6:a9:07:9b:b3:34:ba:2c:0a:9b:d2:01:ec:51:d2:63:ed: 59:d1:ff:08:6a:73:e1:23:11:79:42:bb:7e:e4:79:b0:ec:4b: 09:13:be:15:b8:d8:10:0d:b5:a7:3d:46:47:61:1e:cc:6c:5f: 4a:cb:f5:f3:03:89:77:8b:94:02:b7:e1:8d:80:72:83:8b:cf: 74:f5:b8:a7:17:96:1a:88:97:93:81:18:ab:6a:51:29:d3:a9: d9:2d:c3:15:93:a0:97:01:49:88:74:8c:b6:c6:b4:3c:4b:8d: 3d:33:08:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQRCWJhzB9W9UZaTzvWLD9UmlAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA5MjYxOTA4NTZaFw0yNjA5MjcyMTA5NTZaMDMxMTAvBgNV BAMTKDg1OUM1RTM5QjBDMjgwNDU5MTg4NDVFMjFCODI0RTBEOTU0OEI1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdPRehHUjKms1/utD0vZLLABx 6aopdVDKw6mqtKiRPlkvQv9rw8XsXp8ldSAbmOegKGfFFHpEU6RxcgdHMkDaruEm O64C77+ZBs9Pi6wonB4eSeVeKsi+zmgtg2rZjsiWYlvh5z+7XxQ01go6DiXuFRbU Ezq1myqOH6YY40AmnzaaRCbUvhqXYs92KjGgyaiEvMv29Gy7Tu7EyHrSjvMMAd3S yfC1tgFwoqNs31xOqHL0xWq5HQv2WRajI8meafwa5HHYMt24iW+qcZSCtDqQZ9Bw 6J20Ys30NL1yehq5pqTBfrZkDp6Gk+cVZBnf1iPxc1P+qEQjff7ywHc650iVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZxeObDCgEWRiEXiG4JODZVItVgwHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8VJkbcM/josCRB9LgEkI7hD/KUR1ijGbWj BnRhEpDrRttAzL7cQq1STAT9yqFbvxRoa1Nd6Eo/WKj47AgbCCLkF3zokdv7sr+d 39bDG2vuMJB9hHIIv27olhrh+rpSqA+kv7FXUstUHR3ccaNRaczHQvfR2g6x9lwO N9J0FIr4c4AD9d2ABtZzySqAAG50fUHGqQebszS6LAqb0gHsUdJj7VnR/whqc+Ej EXlCu37kebDsSwkTvhW42BANtac9RkdhHsxsX0rL9fMDiXeLlAK34Y2AcoOLz3T1 uKcXlhqIl5OBGKtqUSnTqdktwxWToJcBSYh0jLbGtDxLjT0zCAs= -----END CERTIFICATE-----Generated at Sun Sep 27 01:54:56 2026 by rpki-client