$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: KZAwgIHachxIAJ30drdvZylx+W7Bw7rOrwJz3KkZGwA= Subject key identifier: 8A:9A:A8:60:06:AB:CD:BF:AE:08:A6:B3:F9:E3:7D:20:DF:20:E2:1C Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 58348BA69AB29A4B2D86E9D888FAB5948628A367 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:09:33 +0000 Manifest this update: Thu 24 Sep 2026 03:04:33 +0000 Manifest next update: Fri 25 Sep 2026 06:38:33 +0000 Files and hashes: 1: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: 7Jsb6vg96ovo/5DplwZvR6x8IIJWj1KgZyLJHOvvwRw=) 2: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:34:8b:a6:9a:b2:9a:4b:2d:86:e9:d8:88:fa:b5:94:86:28:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Sep 24 03:04:33 2026 GMT Not After : Sep 25 06:38:33 2026 GMT Subject: CN=8A9AA86006ABCDBFAE08A6B3F9E37D20DF20E21C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:45:ac:e1:40:8a:5c:bf:18:a2:7b:b1:da: 56:1a:1d:6b:07:18:e2:1e:3f:8f:69:aa:a3:73:26: 4c:84:3e:44:52:0c:aa:be:56:17:89:dc:aa:16:9b: 5a:38:44:be:31:f1:63:a2:09:8c:12:d1:65:65:d4: 1b:0a:7f:bb:8f:ab:06:e4:43:ad:00:91:9d:75:5d: 66:2f:7e:2d:53:7a:80:d7:76:cf:00:24:9c:12:83: b4:38:b7:44:27:45:d2:5d:dc:08:18:ef:27:d2:86: f6:eb:cc:cc:02:bf:7d:25:15:db:16:9c:92:86:7b: 1b:f8:8a:58:ef:44:1e:30:66:4a:40:ae:8d:80:03: bb:49:b2:81:ee:ee:4e:8a:cd:61:a7:a4:3c:bf:81: 60:1b:f6:aa:53:1b:52:e2:63:29:56:36:46:07:40: f9:97:4a:b1:4b:8e:07:87:35:12:0d:bf:8b:4e:1e: 48:ca:37:7f:ee:17:4e:56:5e:50:43:c1:14:cd:99: 46:f6:72:df:a1:f2:80:35:b0:55:d8:dc:17:7f:08: 4e:1e:7e:19:1c:a7:22:b2:7c:21:5b:f4:5b:1c:18: 3b:75:49:e6:55:b0:c8:c6:92:62:e7:09:a7:07:f3: ec:8d:99:9c:1c:58:79:0d:e0:98:b7:b7:56:17:ae: 8d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9A:A8:60:06:AB:CD:BF:AE:08:A6:B3:F9:E3:7D:20:DF:20:E2:1C X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:96:cf:b9:3e:77:dd:20:e1:a6:1b:2f:9f:fb:fa:7b:54:1c: 2d:14:2e:13:7b:22:f1:2c:08:92:2a:8c:17:89:14:40:0c:00: 1a:b5:d4:ea:b6:9c:b2:fb:f1:ec:1d:77:b5:b5:03:9b:e0:f4: fb:2b:29:9b:eb:d9:03:f1:13:16:be:33:8c:42:66:77:0e:97: 72:fb:67:95:e0:77:3d:cb:83:e3:9d:ee:86:3f:7e:56:71:cc: de:06:9d:33:fe:a6:ec:aa:d4:a7:18:0b:9e:ed:29:42:0d:a1: b2:0e:dd:11:4f:77:e3:fb:31:f3:bb:fd:d9:de:65:6e:9a:9e: c8:1f:b7:de:38:2a:16:59:73:07:93:f3:bf:9f:e9:85:8b:93: 08:a7:41:3a:cc:48:8b:cf:b7:3a:d1:52:a4:ae:6b:e8:58:b2: 05:67:05:8f:39:d4:01:0d:38:b4:8b:c2:3c:5c:6e:3d:0b:43: 77:68:cf:28:bf:e6:1f:31:4d:96:8f:8a:4e:da:ef:92:c8:a7: 08:fc:17:53:a9:54:17:0c:81:1b:d9:35:10:f6:4f:9f:88:02: 08:52:80:31:69:54:e7:28:59:3e:bf:75:f7:48:e3:f3:9e:cb: 21:20:90:df:79:d6:cd:cd:47:b6:4c:36:a8:bf:96:3f:a8:24: 3d:04:c3:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDSLppqymksthunYiPq1lIYoo2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA5MjQwMzA0MzNaFw0yNjA5MjUwNjM4MzNaMDMxMTAvBgNV BAMTKDhBOUFBODYwMDZBQkNEQkZBRTA4QTZCM0Y5RTM3RDIwREYyMEUyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMH0Ws4UCKXL8Yonux2lYaHWsH GOIeP49pqqNzJkyEPkRSDKq+VheJ3KoWm1o4RL4x8WOiCYwS0WVl1BsKf7uPqwbk Q60AkZ11XWYvfi1TeoDXds8AJJwSg7Q4t0QnRdJd3AgY7yfShvbrzMwCv30lFdsW nJKGexv4iljvRB4wZkpAro2AA7tJsoHu7k6KzWGnpDy/gWAb9qpTG1LiYylWNkYH QPmXSrFLjgeHNRINv4tOHkjKN3/uF05WXlBDwRTNmUb2ct+h8oA1sFXY3Bd/CE4e fhkcpyKyfCFb9FscGDt1SeZVsMjGkmLnCacH8+yNmZwcWHkN4Ji3t1YXro2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUipqoYAarzb+uCKaz+eN9IN8g4hwwHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiWz7k+d90g4aYbL5/7+ntUHC0ULhN7IvEs CJIqjBeJFEAMABq11Oq2nLL78ewdd7W1A5vg9PsrKZvr2QPxExa+M4xCZncOl3L7 Z5Xgdz3Lg+Od7oY/flZxzN4GnTP+puyq1KcYC57tKUINobIO3RFPd+P7MfO7/dne ZW6ansgft944KhZZcweT87+f6YWLkwinQTrMSIvPtzrRUqSua+hYsgVnBY851AEN OLSLwjxcbj0LQ3dozyi/5h8xTZaPik7a75LIpwj8F1OpVBcMgRvZNRD2T5+IAghS gDFpVOcoWT6/dfdI4/OeyyEgkN951s3NR7ZMNqi/lj+oJD0Ew+c= -----END CERTIFICATE-----Generated at Thu Sep 24 13:59:12 2026 by rpki-client