$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: qucHt2qntEnyX5QAo8zMYxNMXo8G4Q1r8HCZXvoBCo4= Subject key identifier: 1C:3D:C6:CB:5D:0F:74:2C:79:F1:27:0D:43:C3:ED:CE:2F:83:B4:32 Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 46F47CA65B4A02D4165CE19F1773C83B6006D4C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: 0104 Signing time: Sat 14 Nov 2026 04:14:38 +0000 Manifest this update: Sat 14 Nov 2026 04:09:38 +0000 Manifest next update: Sun 15 Nov 2026 07:27:38 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: vD0tHrX5CFdMapquDepcNDCaYVj/a2SztDGDrZyOPx8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 07:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f4:7c:a6:5b:4a:02:d4:16:5c:e1:9f:17:73:c8:3b:60:06:d4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Nov 14 04:09:38 2026 GMT Not After : Nov 15 07:27:38 2026 GMT Subject: CN=1C3DC6CB5D0F742C79F1270D43C3EDCE2F83B432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:14:9a:12:b2:bc:4e:f6:0d:d0:25:66:2b:63: b5:5e:3f:8d:62:bd:86:44:93:f3:3f:fc:42:fc:5c: b6:8e:37:f4:18:14:2c:97:51:c3:d2:c1:eb:24:af: af:bb:f1:ab:47:0f:01:41:22:b1:92:c0:c3:5c:ad: 64:ec:a3:10:42:3c:68:ec:91:7d:68:50:22:67:80: 1c:2f:20:49:7a:6c:cb:71:3c:28:67:d3:52:30:ab: 3a:51:d5:23:b2:1c:44:13:fd:9b:34:16:38:04:67: 9b:47:d4:0c:b1:c9:ff:e3:41:c2:04:d3:27:7f:3d: b7:a8:40:04:43:4b:ea:07:03:0c:da:0f:e1:1d:25: a1:7f:4f:e1:e4:2a:17:43:98:a7:62:03:94:3c:e6: 20:87:75:39:c8:8b:cc:01:de:c1:56:e3:92:3b:5f: 17:c9:de:9a:f7:49:68:1d:b3:92:cb:1e:a9:dc:d4: c8:5c:bc:a9:42:86:c5:62:f1:16:29:28:df:18:ac: 05:2d:d3:ac:cd:1e:d5:bd:f9:d8:f5:23:5e:ec:6b: 76:0a:eb:f4:a4:82:8b:a7:9e:92:e9:40:01:63:1b: 06:22:18:af:5e:6e:ab:bd:83:a4:a5:d0:86:bb:3b: 9c:8b:47:93:18:87:a7:c5:1c:60:e1:b9:34:64:51: 81:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3D:C6:CB:5D:0F:74:2C:79:F1:27:0D:43:C3:ED:CE:2F:83:B4:32 X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:bd:5e:6b:da:8f:32:fb:49:f8:1a:a2:e5:08:62:b8:a1:0e: 11:dc:17:1f:57:9a:89:c7:af:14:50:ba:13:fc:c9:e1:1d:e0: 67:b6:ae:6e:e4:a4:79:ed:42:1e:66:dd:f9:2d:48:74:68:e6: 5b:60:2b:6d:21:de:d2:c9:1f:d9:4e:04:59:57:00:c9:3d:93: 7c:7a:9b:42:aa:db:5c:1e:ee:81:c5:7f:35:48:a0:6a:30:a7: 91:d5:28:f7:49:cc:10:90:65:5b:7d:77:10:aa:7e:42:7e:6e: dd:ff:45:3d:cc:f3:0a:64:55:a4:23:73:09:a5:8f:99:2c:c0: 5f:15:b3:9e:56:72:22:73:ad:ab:85:16:c5:83:dd:cf:fb:fd: 49:46:d2:cc:3e:32:f5:2a:4f:b1:bf:5e:1c:48:7a:24:68:50: 39:47:f6:1a:94:0a:9d:f0:a9:c6:eb:18:79:0b:30:ee:81:49: ef:42:b0:02:88:04:c1:cb:2c:1d:85:85:18:9c:b5:d7:89:6e: b0:b9:e5:9d:9e:d2:4e:29:29:df:24:9d:45:b4:b5:2e:0a:1c: 1e:a7:a5:f1:55:db:d3:5d:81:b4:ea:6e:f2:a5:cd:b1:4a:39: c8:17:4b:20:10:1a:60:ae:96:2c:03:7a:d8:86:98:58:10:54: 76:24:0f:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvR8pltKAtQWXOGfF3PIO2AG1MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjExMTQwNDA5MzhaFw0yNjExMTUwNzI3MzhaMDMxMTAvBgNV BAMTKDFDM0RDNkNCNUQwRjc0MkM3OUYxMjcwRDQzQzNFRENFMkY4M0I0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFJoSsrxO9g3QJWYrY7VeP41i vYZEk/M//EL8XLaON/QYFCyXUcPSweskr6+78atHDwFBIrGSwMNcrWTsoxBCPGjs kX1oUCJngBwvIEl6bMtxPChn01IwqzpR1SOyHEQT/Zs0FjgEZ5tH1Ayxyf/jQcIE 0yd/PbeoQARDS+oHAwzaD+EdJaF/T+HkKhdDmKdiA5Q85iCHdTnIi8wB3sFW45I7 XxfJ3pr3SWgds5LLHqnc1MhcvKlChsVi8RYpKN8YrAUt06zNHtW9+dj1I17sa3YK 6/SkgounnpLpQAFjGwYiGK9ebqu9g6Sl0Ia7O5yLR5MYh6fFHGDhuTRkUYGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHD3Gy10PdCx58ScNQ8Ptzi+DtDIwHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMW9XmvajzL7SfgaouUIYrihDhHcFx9XmonH rxRQuhP8yeEd4Ge2rm7kpHntQh5m3fktSHRo5ltgK20h3tLJH9lOBFlXAMk9k3x6 m0Kq21we7oHFfzVIoGowp5HVKPdJzBCQZVt9dxCqfkJ+bt3/RT3M8wpkVaQjcwml j5kswF8Vs55WciJzrauFFsWD3c/7/UlG0sw+MvUqT7G/XhxIeiRoUDlH9hqUCp3w qcbrGHkLMO6BSe9CsAKIBMHLLB2FhRictdeJbrC55Z2e0k4pKd8knUW0tS4KHB6n pfFV29NdgbTqbvKlzbFKOcgXSyAQGmCuliwDetiGmFgQVHYkD4k= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:20 2026 by rpki-client