$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: r/PqCRaHSdBJur/iKRLANNkYD1DTys/tzDYFDko0KV4= Subject key identifier: F9:F4:39:81:3D:21:65:91:C3:B6:97:FD:FA:C6:20:F7:7A:9E:CE:C2 Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 7D4EE54BD7A9AC5F10BDE26CE2CB0E4A2CE00D74 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: BF Signing time: Wed 23 Sep 2026 01:07:32 +0000 Manifest this update: Wed 23 Sep 2026 01:02:32 +0000 Manifest next update: Thu 24 Sep 2026 04:16:32 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: dh3Ymr8C6VA52NPQ5TJoXA5kOzdf+We1YIfW/KSIIIw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 04:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:e5:4b:d7:a9:ac:5f:10:bd:e2:6c:e2:cb:0e:4a:2c:e0:0d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Sep 23 01:02:32 2026 GMT Not After : Sep 24 04:16:32 2026 GMT Subject: CN=F9F439813D216591C3B697FDFAC620F77A9ECEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:78:0f:b6:23:76:8d:f0:a9:e9:89:d0:84:8f: 28:28:c8:05:e2:7c:e8:f5:98:84:97:88:a4:10:d4: 8d:a8:34:07:a4:b4:43:63:3c:52:b7:f1:10:01:43: bf:ff:51:6d:fa:fb:b2:e4:7c:88:fa:2d:01:74:b7: e1:40:a3:d0:c5:da:80:9f:f0:60:76:cf:73:3b:09: c7:88:7f:7b:fc:5b:61:d2:f5:0a:d3:38:3e:4c:b3: 0b:be:9e:38:1a:f6:7a:7c:09:1d:f3:c2:be:40:9b: 0a:11:83:af:32:61:b7:84:eb:e7:d0:60:8c:e2:91: 34:c8:90:66:e6:b1:e8:06:4a:bf:8b:62:8f:c2:26: 3b:69:23:58:41:39:23:e3:c3:cf:fd:26:82:0d:1f: dc:b3:1e:67:2a:72:23:e8:e7:9a:22:74:2e:88:dc: 53:16:cf:a2:52:f9:78:df:c6:17:c6:26:35:e1:8a: 42:05:74:7d:c8:66:00:9e:bf:47:ef:e5:c5:95:40: 5f:16:5e:18:57:43:a8:8b:42:b5:71:c1:16:3e:92: 9c:b1:bf:3e:29:42:75:1d:e0:1f:2e:11:88:21:62: fb:32:88:b0:17:f3:b3:fe:30:ed:1c:44:a1:b9:22: f2:ab:b9:a4:05:b6:1b:1a:70:a4:b2:8b:89:45:d7: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:39:81:3D:21:65:91:C3:B6:97:FD:FA:C6:20:F7:7A:9E:CE:C2 X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4d:5f:b2:8c:5a:8e:b0:33:2c:ae:34:e2:87:50:6f:02:18: 1b:d7:5d:63:91:bd:bd:42:c1:b4:5f:7c:8a:78:e2:cb:f3:14: 59:5d:d8:5e:a8:ed:bc:47:81:49:36:00:5d:78:d4:2b:5f:50: d8:37:24:fd:21:16:dc:f5:c5:3c:64:d9:a0:7b:02:5f:e6:c5: 1f:fd:fc:51:8c:33:79:63:81:5f:ed:1d:4c:d2:ae:f1:7b:63: 90:9d:af:e2:17:fa:c4:d5:a5:66:d9:3f:de:ce:19:0b:ff:e8: c9:57:eb:1f:d9:d5:f0:8c:7c:5a:36:e7:18:e2:69:50:0b:0f: 91:eb:e3:eb:10:24:e1:ce:b1:04:fe:6e:5d:20:91:8f:12:d3: 9a:90:9e:0a:44:31:a3:e5:a7:21:82:02:e8:26:31:40:0b:52: 76:e7:07:04:2b:7c:0f:6f:3e:e2:1c:2e:c6:3a:2d:cb:c2:66: 7a:27:fe:b5:c4:73:ca:dc:19:fd:94:ab:00:c5:54:75:d1:2d: fd:d2:64:cf:63:eb:86:99:79:74:af:50:eb:1e:5b:b4:ee:23: fa:39:67:3a:52:6e:aa:47:d3:6b:db:97:c4:98:03:e0:73:14: 4c:18:b7:41:9e:67:88:7f:a9:69:00:c7:97:59:3d:31:6a:dc: f1:ec:92:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfU7lS9eprF8QveJs4ssOSizgDXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA5MjMwMTAyMzJaFw0yNjA5MjQwNDE2MzJaMDMxMTAvBgNV BAMTKEY5RjQzOTgxM0QyMTY1OTFDM0I2OTdGREZBQzYyMEY3N0E5RUNFQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdeA+2I3aN8KnpidCEjygoyAXi fOj1mISXiKQQ1I2oNAektENjPFK38RABQ7//UW36+7LkfIj6LQF0t+FAo9DF2oCf 8GB2z3M7CceIf3v8W2HS9QrTOD5Mswu+njga9np8CR3zwr5AmwoRg68yYbeE6+fQ YIzikTTIkGbmsegGSr+LYo/CJjtpI1hBOSPjw8/9JoINH9yzHmcqciPo55oidC6I 3FMWz6JS+XjfxhfGJjXhikIFdH3IZgCev0fv5cWVQF8WXhhXQ6iLQrVxwRY+kpyx vz4pQnUd4B8uEYghYvsyiLAX87P+MO0cRKG5IvKruaQFthsacKSyi4lF14WxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+fQ5gT0hZZHDtpf9+sYg93qezsIwHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5NX7KMWo6wMyyuNOKHUG8CGBvXXWORvb1C wbRffIp44svzFFld2F6o7bxHgUk2AF141CtfUNg3JP0hFtz1xTxk2aB7Al/mxR/9 /FGMM3ljgV/tHUzSrvF7Y5Cdr+IX+sTVpWbZP97OGQv/6MlX6x/Z1fCMfFo25xji aVALD5Hr4+sQJOHOsQT+bl0gkY8S05qQngpEMaPlpyGCAugmMUALUnbnBwQrfA9v PuIcLsY6LcvCZnon/rXEc8rcGf2UqwDFVHXRLf3SZM9j64aZeXSvUOseW7TuI/o5 ZzpSbqpH02vbl8SYA+BzFEwYt0GeZ4h/qWkAx5dZPTFq3PHskvo= -----END CERTIFICATE-----Generated at Wed Sep 23 21:35:22 2026 by rpki-client