$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: CLbjU7g0tDkRXMkJQZkhqAxFhIJrnX4pLS2ow2fBt5c= Subject key identifier: B2:58:D0:3D:A3:FD:2F:FC:FB:45:C9:A9:B7:05:CD:DC:17:95:E1:FA Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 1FF1DF96107D9D3022A7873E69309895B2EF9A24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:58:25 +0000 Manifest this update: Tue 16 Jun 2026 19:53:25 +0000 Manifest next update: Wed 17 Jun 2026 20:49:25 +0000 Files and hashes: 1: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: 1nPwxO1ppyZ/1G5lejiCt+rBBmFyC2NuSLvciDunNfA=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f1:df:96:10:7d:9d:30:22:a7:87:3e:69:30:98:95:b2:ef:9a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: Jun 16 19:53:25 2026 GMT Not After : Jun 17 20:49:25 2026 GMT Subject: CN=B258D03DA3FD2FFCFB45C9A9B705CDDC1795E1FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:80:a6:3e:a7:42:93:70:ea:04:f7:28:f3:c6: e4:4a:32:7a:69:e1:9e:7d:36:11:cb:1a:2f:60:6a: 62:d3:89:86:64:04:f6:8f:34:b2:4b:f8:94:49:52: ac:78:bf:e2:27:6a:4a:05:2f:12:8b:0f:8f:87:6b: 8c:2e:e1:37:c0:5e:13:cb:b5:62:dd:85:78:de:dd: 9b:0c:16:81:76:f6:2d:5f:c4:c5:43:50:a2:c5:17: 8f:e0:61:54:f9:3f:1f:a8:48:c1:82:d8:d3:07:0c: 17:44:b1:d6:2f:f5:0c:31:cf:9c:5f:31:b0:c1:e4: b9:ee:0c:82:83:95:fb:b7:71:ea:53:42:64:42:a3: f8:3a:7c:54:2a:fb:f1:a9:ce:91:2d:06:c7:5d:1a: e4:a2:7a:43:97:18:79:83:11:39:05:5f:f5:ad:e4: d8:fb:be:e1:51:b4:d0:4b:e0:6e:e0:d1:da:09:ed: 5b:1a:cf:6e:62:0d:b6:c7:60:c2:f4:ec:8d:43:85: 99:43:9d:12:af:8c:55:ae:bd:9b:04:30:88:69:3e: 7f:df:e5:bb:f2:fa:d5:4b:0d:92:ef:6a:a0:da:f5: 87:52:e7:fd:0d:b1:2e:ba:6f:f6:32:34:ea:bc:15: 03:45:b5:a5:f3:55:43:48:d0:50:a9:50:4f:c0:0c: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:58:D0:3D:A3:FD:2F:FC:FB:45:C9:A9:B7:05:CD:DC:17:95:E1:FA X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:09:d4:44:75:bb:de:7f:52:71:fe:9b:6d:c9:be:c5:c1:8a: d7:b6:8c:2f:fb:fd:11:b7:4b:1e:b0:e9:46:e6:66:7e:56:49: 20:af:ea:a0:7b:79:92:50:7e:7e:56:7c:60:17:91:29:f0:4f: e1:f0:d4:e6:70:02:d6:ba:ae:d5:e3:92:f3:56:e9:d3:23:5b: 89:53:18:23:b7:3d:95:ef:43:9b:7b:49:c5:62:8f:ba:1c:06: a5:2e:e0:c6:65:14:8f:42:1d:06:69:0d:49:c1:7f:08:92:b9: 8e:92:b6:d3:54:e5:82:b4:36:50:06:99:26:8a:cf:b3:76:20: 93:33:10:2e:a2:62:25:ce:16:80:58:89:5b:db:be:ca:9f:41: 51:2e:1d:87:e8:a8:03:ca:ce:77:ae:91:fa:09:04:ad:1f:39: 89:f8:1b:63:df:a2:6a:8e:3d:6b:f0:f0:7c:30:b4:cd:40:e5: 52:08:7c:9f:68:2d:03:04:7c:f0:26:2d:2a:83:15:12:7d:af: e7:ae:dc:f8:98:29:70:fb:8e:3e:66:ca:c6:ad:26:47:40:8d: 45:64:8b:0d:b4:44:9d:4d:d6:06:36:69:b8:d3:d0:f8:88:8d: cb:a3:12:a0:ba:35:7b:b8:df:07:c8:84:be:66:fe:2c:e7:64: 3f:be:62:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/HflhB9nTAip4c+aTCYlbLvmiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA2MTYxOTUzMjVaFw0yNjA2MTcyMDQ5MjVaMDMxMTAvBgNV BAMTKEIyNThEMDNEQTNGRDJGRkNGQjQ1QzlBOUI3MDVDRERDMTc5NUUxRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmgKY+p0KTcOoE9yjzxuRKMnpp 4Z59NhHLGi9gamLTiYZkBPaPNLJL+JRJUqx4v+InakoFLxKLD4+Ha4wu4TfAXhPL tWLdhXje3ZsMFoF29i1fxMVDUKLFF4/gYVT5Px+oSMGC2NMHDBdEsdYv9Qwxz5xf MbDB5LnuDIKDlfu3cepTQmRCo/g6fFQq+/GpzpEtBsddGuSiekOXGHmDETkFX/Wt 5Nj7vuFRtNBL4G7g0doJ7Vsaz25iDbbHYML07I1DhZlDnRKvjFWuvZsEMIhpPn/f 5bvy+tVLDZLvaqDa9YdS5/0NsS66b/YyNOq8FQNFtaXzVUNI0FCpUE/ADN2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsljQPaP9L/z7RcmptwXN3BeV4fowHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0J1ER1u95/UnH+m23JvsXBite2jC/7/RG3 Sx6w6UbmZn5WSSCv6qB7eZJQfn5WfGAXkSnwT+Hw1OZwAta6rtXjkvNW6dMjW4lT GCO3PZXvQ5t7ScVij7ocBqUu4MZlFI9CHQZpDUnBfwiSuY6SttNU5YK0NlAGmSaK z7N2IJMzEC6iYiXOFoBYiVvbvsqfQVEuHYfoqAPKzneukfoJBK0fOYn4G2PfomqO PWvw8HwwtM1A5VIIfJ9oLQMEfPAmLSqDFRJ9r+eu3PiYKXD7jj5mysatJkdAjUVk iw20RJ1N1gY2abjT0PiIjcujEqC6NXu43wfIhL5m/iznZD++Yiw= -----END CERTIFICATE-----Generated at Wed Jun 17 11:31:02 2026 by rpki-client