$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: BsXd1AbCXJNg8P5J/BktbD58pgPSsGkK93o6ErQtI9c= Subject key identifier: 32:AB:AC:59:41:60:65:0E:7A:3B:ED:BE:E9:34:1E:67:73:3B:34:6E Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 2D6C1D3611C285D8A21C1EF99C04DA704FD171EE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 18:06:02 +0000 Manifest this update: Tue 16 Jun 2026 18:01:02 +0000 Manifest next update: Wed 17 Jun 2026 18:41:02 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: TVVn0XwGkTMC9jy4iHwqHOOHoJGQNiw7RtF2WrrbNc0=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6c:1d:36:11:c2:85:d8:a2:1c:1e:f9:9c:04:da:70:4f:d1:71:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Jun 16 18:01:02 2026 GMT Not After : Jun 17 18:41:02 2026 GMT Subject: CN=32ABAC594160650E7A3BEDBEE9341E67733B346E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:84:5e:77:b5:c0:c8:66:23:31:3b:ef:9b: 2c:05:7d:a8:d2:b5:df:cc:0f:1f:a6:d6:e2:98:dd: 08:8a:9a:74:34:fa:b8:0e:54:f2:ce:34:08:0d:6f: 65:91:26:93:f5:a6:04:52:42:04:f0:e4:48:a5:82: 99:26:18:87:1b:c0:3e:c9:35:76:3f:4d:ce:45:51: 31:7f:19:2d:16:41:52:d9:d0:da:50:d8:1b:03:92: 10:13:fa:7f:bb:10:1e:3f:dc:9a:2b:cd:65:33:10: 3a:66:62:b8:d1:ca:18:83:1a:c6:3c:f9:3d:c1:d5: b0:b8:70:b7:74:1b:38:a9:61:d8:21:70:af:dc:41: 7b:b6:a5:31:cb:1e:ab:2e:ec:67:66:d5:5b:e1:e0: 57:56:73:e8:cc:fe:04:5c:13:23:c6:8f:45:b1:68: cf:cd:b0:cb:ae:df:9b:29:93:c4:ad:82:16:27:e0: d1:7d:c4:1f:f8:e0:3c:fb:7e:bf:8d:d7:89:aa:36: 14:a7:5b:e4:bc:53:e5:80:ed:18:62:4a:84:64:7e: 0d:f9:74:6f:30:aa:b0:5b:8e:6b:90:24:0a:8f:32: 3a:0d:47:0d:1c:6f:19:c8:65:0a:91:ad:d4:95:67: 20:8a:a4:46:a5:93:8c:bf:5b:85:5e:55:9c:4d:57: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AB:AC:59:41:60:65:0E:7A:3B:ED:BE:E9:34:1E:67:73:3B:34:6E X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ae:36:6b:0a:29:d6:47:72:08:ee:47:fa:c7:dd:bc:e9:0f: 3f:32:b4:ee:4e:7d:2a:b7:36:66:79:5b:0e:4e:0a:d8:06:0d: 84:98:a8:e1:18:1f:c6:0e:69:2c:9b:c9:b2:eb:ab:e6:56:59: bd:50:8b:fe:92:0c:b5:43:76:5c:8d:86:ca:ea:eb:8c:f3:8d: 35:08:75:a8:77:97:21:24:04:48:e0:d0:0f:8e:53:c8:d7:19: 17:f5:f0:f4:ad:85:9b:da:6b:c2:e7:f8:e7:47:70:ce:20:9e: ee:2c:a6:7b:09:62:bb:1d:d7:e7:1b:a3:4d:4f:02:71:33:e8: 31:e6:5a:50:7d:81:e5:2a:82:b5:db:d0:eb:3d:ad:37:ed:e2: 60:47:93:55:fa:dc:9b:55:59:e4:2d:dd:c5:a2:6b:a8:21:d9: 8a:cf:a0:14:21:c7:a7:1e:cd:cb:9c:03:6d:0f:da:c8:80:e2: ae:af:89:dc:40:04:57:a1:4e:ca:02:03:e5:ee:12:fe:35:61: 1b:d4:63:4b:df:72:5c:a3:a4:fd:bf:c9:98:6e:f8:05:9e:b5: 99:e8:27:a0:5a:4c:49:6c:38:ea:d3:29:95:62:df:19:fc:46: 4f:ff:15:e0:fe:1d:4a:06:79:14:70:e2:d2:52:e7:33:15:7f: e9:4e:db:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWwdNhHChdiiHB75nATacE/Rce4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA2MTYxODAxMDJaFw0yNjA2MTcxODQxMDJaMDMxMTAvBgNV BAMTKDMyQUJBQzU5NDE2MDY1MEU3QTNCRURCRUU5MzQxRTY3NzMzQjM0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2oRed7XAyGYjMTvvmywFfajS td/MDx+m1uKY3QiKmnQ0+rgOVPLONAgNb2WRJpP1pgRSQgTw5EilgpkmGIcbwD7J NXY/Tc5FUTF/GS0WQVLZ0NpQ2BsDkhAT+n+7EB4/3JorzWUzEDpmYrjRyhiDGsY8 +T3B1bC4cLd0GzipYdghcK/cQXu2pTHLHqsu7Gdm1Vvh4FdWc+jM/gRcEyPGj0Wx aM/NsMuu35spk8StghYn4NF9xB/44Dz7fr+N14mqNhSnW+S8U+WA7RhiSoRkfg35 dG8wqrBbjmuQJAqPMjoNRw0cbxnIZQqRrdSVZyCKpEalk4y/W4VeVZxNV5BBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMqusWUFgZQ56O+2+6TQeZ3M7NG4wHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiuNmsKKdZHcgjuR/rH3bzpDz8ytO5OfSq3 NmZ5Ww5OCtgGDYSYqOEYH8YOaSybybLrq+ZWWb1Qi/6SDLVDdlyNhsrq64zzjTUI dah3lyEkBEjg0A+OU8jXGRf18PSthZvaa8Ln+OdHcM4gnu4spnsJYrsd1+cbo01P AnEz6DHmWlB9geUqgrXb0Os9rTft4mBHk1X63JtVWeQt3cWia6gh2YrPoBQhx6ce zcucA20P2siA4q6vidxABFehTsoCA+XuEv41YRvUY0vfclyjpP2/yZhu+AWetZno J6BaTElsOOrTKZVi3xn8Rk//FeD+HUoGeRRw4tJS5zMVf+lO2xM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:16 2026 by rpki-client