$ rpki-client -vvvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: gZ3ZbOcRSS3ncxpkH8yCoTcd0u8yNcC8i57IPx/5f40= Subject key identifier: 69:05:4A:43:64:A4:8A:01:C9:47:BF:A2:D8:1B:DD:90:23:31:75:83 Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 534FA664FAE0D6A646C43FA08DAD35E39ECDB690 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 10:24:04 +0000 Manifest this update: Wed 23 Sep 2026 10:19:04 +0000 Manifest next update: Thu 24 Sep 2026 12:52:04 +0000 Files and hashes: 1: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: UG0btucQ9Zas3MtSrpj/8zCGLR3vcaYULJsiUkqMxJM=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) 3: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:4f:a6:64:fa:e0:d6:a6:46:c4:3f:a0:8d:ad:35:e3:9e:cd:b6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Sep 23 10:19:04 2026 GMT Not After : Sep 24 12:52:04 2026 GMT Subject: CN=69054A4364A48A01C947BFA2D81BDD9023317583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:2d:71:55:df:71:05:c7:34:2b:5a:35:92: 69:ba:7c:ea:da:8f:e4:7b:96:cf:f3:7b:cc:13:00: ba:e1:20:23:de:e8:f9:06:06:49:e8:81:bc:29:5c: 13:c9:7d:36:32:69:f1:b5:bd:14:c2:41:99:44:1a: ab:ac:19:b6:3b:9e:3d:16:59:23:89:08:d0:96:30: 4f:18:d2:33:6e:15:1b:ff:e7:37:1e:48:f7:68:38: 55:35:c1:79:47:b8:0d:75:ed:86:a8:49:48:7f:77: cd:43:a2:b7:65:da:e4:00:a5:48:e9:c3:44:e5:5b: 96:97:72:8e:25:36:1b:44:fe:61:13:d7:bd:4d:36: 69:90:56:6e:7b:ee:1f:07:c2:7a:46:7f:c2:9f:ef: 61:e5:71:b7:af:e1:76:43:a7:aa:71:26:72:59:df: 9d:94:96:26:0c:ce:31:02:71:70:b5:cd:47:fa:13: fb:2d:da:f3:c3:2e:6c:50:6b:b5:cc:56:6a:4d:93: 4e:96:bf:2b:fb:2c:78:a1:c2:99:24:a2:55:93:fc: 42:a6:7c:ea:a5:e8:90:98:09:3a:b5:ff:18:a8:4d: 77:5c:34:98:d5:40:a0:64:77:5c:5c:50:7e:8b:4c: 5e:f1:7b:ee:a1:1b:4b:b7:6a:23:73:0c:48:2e:1e: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:05:4A:43:64:A4:8A:01:C9:47:BF:A2:D8:1B:DD:90:23:31:75:83 X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ab:69:f7:e4:cc:d5:5a:59:13:ac:84:db:65:16:d2:28:af: f1:6e:d1:f5:2a:76:13:21:13:51:06:92:c1:90:5d:37:20:11: 87:62:6e:ca:89:fa:c3:6a:ec:ff:29:b4:3d:15:fa:05:79:df: 5e:7b:dc:73:3f:36:88:a3:11:d4:94:fd:85:f4:4f:8b:38:fa: 0b:95:33:bf:2a:96:ef:37:83:59:a8:4f:bc:fa:9b:4d:b8:d8: 64:4f:f7:11:e6:2f:f6:ff:da:1b:e2:96:4a:f4:98:cd:1a:0c: 79:0b:50:db:73:4f:fd:31:d7:8e:19:47:d4:2e:01:72:26:cf: 66:cb:c2:0c:f8:dd:8a:38:fc:8f:6b:19:9f:a2:1b:76:6d:12: c1:30:87:f6:71:16:56:6a:9a:ef:e8:17:a3:f4:b4:20:c3:eb: e6:53:f0:dd:83:a0:44:9a:eb:b7:f7:04:56:ed:c1:63:8f:f4: 33:53:28:3f:b2:1f:68:f8:1a:1a:30:ca:28:1f:b7:b3:d1:b1: 0a:d5:31:b6:37:32:1a:fa:ed:fb:41:b6:cf:f0:2d:bc:7c:76: 58:86:b3:e1:40:b0:d9:43:aa:74:96:56:cb:58:bf:d3:b7:8f: 06:b0:c5:1a:88:b3:f4:dc:d0:16:89:af:73:47:c3:4e:be:1f: 64:2b:f5:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0+mZPrg1qZGxD+gja01457NtpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjA5MjMxMDE5MDRaFw0yNjA5MjQxMjUyMDRaMDMxMTAvBgNV BAMTKDY5MDU0QTQzNjRBNDhBMDFDOTQ3QkZBMkQ4MUJERDkwMjMzMTc1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2sS1xVd9xBcc0K1o1kmm6fOra j+R7ls/ze8wTALrhICPe6PkGBknogbwpXBPJfTYyafG1vRTCQZlEGqusGbY7nj0W WSOJCNCWME8Y0jNuFRv/5zceSPdoOFU1wXlHuA117YaoSUh/d81Dordl2uQApUjp w0TlW5aXco4lNhtE/mET171NNmmQVm577h8HwnpGf8Kf72Hlcbev4XZDp6pxJnJZ 352UliYMzjECcXC1zUf6E/st2vPDLmxQa7XMVmpNk06Wvyv7LHihwpkkolWT/EKm fOql6JCYCTq1/xioTXdcNJjVQKBkd1xcUH6LTF7xe+6hG0u3aiNzDEguHjbRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQVKQ2SkigHJR7+i2BvdkCMxdYMwHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWraffkzNVaWROshNtlFtIor/Fu0fUqdhMh E1EGksGQXTcgEYdibsqJ+sNq7P8ptD0V+gV531573HM/NoijEdSU/YX0T4s4+guV M78qlu83g1moT7z6m0242GRP9xHmL/b/2hvilkr0mM0aDHkLUNtzT/0x144ZR9Qu AXImz2bLwgz43Yo4/I9rGZ+iG3ZtEsEwh/ZxFlZqmu/oF6P0tCDD6+ZT8N2DoESa 67f3BFbtwWOP9DNTKD+yH2j4Ghowyigft7PRsQrVMbY3Mhr67ftBts/wLbx8dliG s+FAsNlDqnSWVstYv9O3jwawxRqIs/Tc0BaJr3NHw06+H2Qr9b4= -----END CERTIFICATE-----Generated at Wed Sep 23 23:46:58 2026 by rpki-client