$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: EXeLZfOzmKoUZPN8lM5qbCpZHnerPU1uSJ6yLuHx8kc= Subject key identifier: 4D:7F:FA:98:32:70:9E:29:9B:22:32:25:72:43:BD:16:5C:96:FC:AB Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 0CADFA0076D79CDE9BF1F1FF24178D36F402FA8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: 3B Signing time: Sun 14 Jun 2026 21:48:36 +0000 Manifest this update: Sun 14 Jun 2026 21:43:36 +0000 Manifest next update: Tue 16 Jun 2026 01:03:36 +0000 Files and hashes: 1: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: 9PLYgWT31Cbr05H/sLEHQumifHGEoZP9Ograk3nYgJ4=) 2: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) 3: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 01:03:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ad:fa:00:76:d7:9c:de:9b:f1:f1:ff:24:17:8d:36:f4:02:fa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: Jun 14 21:43:36 2026 GMT Not After : Jun 16 01:03:36 2026 GMT Subject: CN=4D7FFA9832709E299B2232257243BD165C96FCAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:e3:8c:cd:50:c7:c0:1f:a7:38:43:98:9b: 6d:37:d8:ce:f9:a2:8f:a0:14:2e:ea:6a:e2:bf:06: a1:ea:8f:ae:ee:2a:38:79:65:0a:ba:d5:db:ed:90: 36:1f:48:16:32:d9:bc:2c:99:7e:f7:c5:bc:02:1e: 85:7e:67:b0:bc:9d:15:b5:90:d6:11:9f:58:0d:79: cf:3c:35:b5:21:20:96:9d:44:18:8e:ed:30:81:e0: d3:d9:cd:80:d5:75:84:35:0e:71:bf:92:8d:50:91: c3:96:fe:87:c2:a9:f8:38:99:58:80:a1:87:96:bc: eb:6d:e6:b9:44:e8:0f:f5:cd:15:3c:60:a0:cb:f4: 95:97:9a:50:38:8c:df:61:82:83:03:83:94:6b:11: 34:ad:47:c0:28:56:37:45:af:85:8f:c0:7b:6a:c6: 8a:33:3b:09:1f:77:40:ec:bf:b5:2f:d2:81:63:7c: 66:3e:f8:1a:ec:49:94:4f:2e:c9:fb:4e:ab:b2:6d: 94:da:7d:12:a9:60:13:b1:5e:74:d5:2e:89:3b:46: 51:eb:1f:72:93:a5:6a:96:c5:64:19:4b:dd:cd:d1: 98:f2:b1:82:f6:07:c0:69:03:b3:e1:cb:4c:fc:d1: 1f:2c:41:9b:fb:99:0b:60:ed:1c:74:c7:bc:f2:4a: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7F:FA:98:32:70:9E:29:9B:22:32:25:72:43:BD:16:5C:96:FC:AB X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:5a:49:a6:32:85:e4:2b:02:35:82:8a:ac:58:b9:ef:62:6a: 3e:99:cc:38:74:d6:e9:af:89:13:be:23:61:2f:79:ae:35:af: 77:dc:c7:71:99:96:20:5c:d4:1b:0d:4f:c3:a6:df:2c:6d:74: 48:73:ba:af:16:00:42:1a:41:1a:5c:6a:dd:b0:4d:4d:81:04: 20:d8:c4:55:bd:05:97:f3:75:fa:3d:16:b2:8d:35:a7:d9:cf: 33:67:94:e4:df:93:ab:c0:5f:e5:17:2e:75:f8:d4:e6:cc:e1: a8:aa:00:35:4b:17:ba:27:57:e7:d5:f6:c7:d6:c8:45:57:4c: 11:cc:a4:8f:ba:32:51:fc:e1:22:ad:8e:03:16:03:28:c4:bf: 36:d0:56:c8:81:dc:d4:f4:51:64:54:9b:61:b7:17:fb:c1:34: 4b:df:65:2f:23:36:cc:4b:32:43:df:7c:04:0c:95:8d:4c:7e: 95:cc:92:12:51:d6:e3:cb:50:63:d0:ac:c5:b4:9e:75:af:10: 66:55:98:05:ed:70:26:48:8a:5e:98:9c:37:ab:b3:c3:43:5d: ae:a8:2d:66:43:0a:27:0d:84:1b:b4:6e:31:1f:74:a5:db:f6: 8e:4d:98:28:b6:9d:6a:f0:45:05:d5:75:02:98:0a:75:c8:6b: 36:3a:a8:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDK36AHbXnN6b8fH/JBeNNvQC+owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA2MTQyMTQzMzZaFw0yNjA2MTYwMTAzMzZaMDMxMTAvBgNV BAMTKDREN0ZGQTk4MzI3MDlFMjk5QjIyMzIyNTcyNDNCRDE2NUM5NkZDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6eOMzVDHwB+nOEOYm2032M75 oo+gFC7qauK/BqHqj67uKjh5ZQq61dvtkDYfSBYy2bwsmX73xbwCHoV+Z7C8nRW1 kNYRn1gNec88NbUhIJadRBiO7TCB4NPZzYDVdYQ1DnG/ko1QkcOW/ofCqfg4mViA oYeWvOtt5rlE6A/1zRU8YKDL9JWXmlA4jN9hgoMDg5RrETStR8AoVjdFr4WPwHtq xoozOwkfd0Dsv7Uv0oFjfGY++BrsSZRPLsn7TquybZTafRKpYBOxXnTVLok7RlHr H3KTpWqWxWQZS93N0ZjysYL2B8BpA7Phy0z80R8sQZv7mQtg7Rx0x7zySjONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTX/6mDJwnimbIjIlckO9FlyW/KswHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFaSaYyheQrAjWCiqxYue9iaj6ZzDh01umv iRO+I2Evea41r3fcx3GZliBc1BsNT8Om3yxtdEhzuq8WAEIaQRpcat2wTU2BBCDY xFW9BZfzdfo9FrKNNafZzzNnlOTfk6vAX+UXLnX41ObM4aiqADVLF7onV+fV9sfW yEVXTBHMpI+6MlH84SKtjgMWAyjEvzbQVsiB3NT0UWRUm2G3F/vBNEvfZS8jNsxL MkPffAQMlY1MfpXMkhJR1uPLUGPQrMW0nnWvEGZVmAXtcCZIil6YnDers8NDXa6o LWZDCicNhBu0bjEfdKXb9o5NmCi2nWrwRQXVdQKYCnXIazY6qJw= -----END CERTIFICATE-----Generated at Mon Jun 15 14:12:39 2026 by rpki-client