$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: RKzcfHoBjfui//RZndU2J+C9MdU2vANnsSD5si1INnQ= Subject key identifier: 21:AA:96:19:0B:3E:8C:09:3C:35:14:8C:46:22:38:26:75:A0:3C:54 Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 1E2D10340954E9786B93DA25A5438110034DC163 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 15:23:07 +0000 Manifest this update: Sat 13 Jun 2026 15:18:07 +0000 Manifest next update: Sun 14 Jun 2026 15:54:07 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: XgFcAyklv+orhcn8LiSjOd+yA4b3mjCqePd0cLl0TAQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2d:10:34:09:54:e9:78:6b:93:da:25:a5:43:81:10:03:4d:c1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Jun 13 15:18:07 2026 GMT Not After : Jun 14 15:54:07 2026 GMT Subject: CN=21AA96190B3E8C093C35148C4622382675A03C54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7a:8d:c4:5b:e2:35:09:ef:6c:b2:6a:63:fd: cb:c2:39:4c:82:fc:74:82:e9:33:d5:69:dc:ed:60: 45:81:fa:d5:84:21:71:17:6c:c5:c1:f4:35:45:55: 27:b4:88:f4:d3:cd:d5:d3:32:57:9b:ba:bb:5c:6c: a8:70:fb:a7:7e:15:87:ff:90:22:19:a8:71:48:fa: 56:31:13:db:21:97:4e:96:36:c5:9c:c9:06:20:a3: cb:c9:8e:61:f1:cd:1b:7d:5c:03:d0:0d:1f:46:d7: 97:36:d0:63:df:9f:ce:8e:3c:03:e3:ee:aa:01:b8: 7f:da:a2:60:14:6b:35:3e:0c:88:5e:e8:07:bb:ab: 8e:75:f5:50:20:5a:c7:93:88:f0:00:52:16:e2:62: 3b:59:53:69:e6:16:8d:1f:7c:a8:ea:06:69:ff:a9: 55:62:df:29:37:62:25:9e:b1:1e:ab:ef:b2:ef:6c: e3:60:4e:18:01:8f:cc:1b:82:48:db:f0:6c:ef:f5: dc:37:67:6c:9d:84:53:18:b1:64:58:32:92:6d:fa: 82:29:8e:8c:2a:98:fb:73:d2:36:a0:78:82:17:61: 90:fa:78:89:6c:ed:05:91:fb:3d:36:77:9c:10:12: e3:ed:72:a2:a8:82:0e:84:96:f6:e8:8f:94:09:76: ac:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:AA:96:19:0B:3E:8C:09:3C:35:14:8C:46:22:38:26:75:A0:3C:54 X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f0:48:3e:13:57:eb:1c:2a:ac:ec:16:22:ae:05:20:00:30: 27:06:7f:ac:9f:36:c0:e7:d0:89:33:6a:f9:b7:14:78:e3:82: a0:9b:88:f4:54:b7:bc:cf:8d:15:38:3f:f2:35:6e:cf:0c:6a: a7:8d:05:9a:ce:4f:ca:25:a7:16:d0:96:fc:29:a8:8b:02:c9: 46:4c:76:7f:af:6e:c2:19:4d:56:26:ef:14:67:ba:59:fc:47: 6d:93:1f:fd:66:6e:5f:36:8f:e8:03:e7:64:5d:9b:be:28:35: 7a:75:67:00:81:3e:b7:58:03:e3:10:16:70:93:17:0b:55:14: e6:36:8d:79:96:2a:b7:e6:10:da:e3:94:16:73:f3:2f:9d:8d: 6a:19:73:65:4f:2d:51:b4:1c:bd:cf:d7:db:8f:60:37:76:48: 37:c2:77:5d:e0:d7:57:cc:0a:b2:2d:35:3e:b2:22:52:5c:89: b7:5d:64:9e:19:81:e4:de:10:62:88:bc:25:95:f6:11:eb:4b: d3:51:86:79:98:f4:09:2a:c5:3d:5c:96:3d:ed:da:ea:92:94: 73:f1:e3:07:e9:a2:b1:b1:64:39:d1:79:32:df:2f:ab:5f:7e: bb:48:b9:a6:42:0c:75:21:05:9b:30:ec:f9:ab:78:7f:62:87: 1d:14:9d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHi0QNAlU6Xhrk9olpUOBEANNwWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA2MTMxNTE4MDdaFw0yNjA2MTQxNTU0MDdaMDMxMTAvBgNV BAMTKDIxQUE5NjE5MEIzRThDMDkzQzM1MTQ4QzQ2MjIzODI2NzVBMDNDNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNeo3EW+I1Ce9ssmpj/cvCOUyC /HSC6TPVadztYEWB+tWEIXEXbMXB9DVFVSe0iPTTzdXTMleburtcbKhw+6d+FYf/ kCIZqHFI+lYxE9shl06WNsWcyQYgo8vJjmHxzRt9XAPQDR9G15c20GPfn86OPAPj 7qoBuH/aomAUazU+DIhe6Ae7q4519VAgWseTiPAAUhbiYjtZU2nmFo0ffKjqBmn/ qVVi3yk3YiWesR6r77LvbONgThgBj8wbgkjb8Gzv9dw3Z2ydhFMYsWRYMpJt+oIp jowqmPtz0jageIIXYZD6eIls7QWR+z02d5wQEuPtcqKogg6Elvboj5QJdqw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIaqWGQs+jAk8NRSMRiI4JnWgPFQwHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3wSD4TV+scKqzsFiKuBSAAMCcGf6yfNsDn 0Ikzavm3FHjjgqCbiPRUt7zPjRU4P/I1bs8MaqeNBZrOT8olpxbQlvwpqIsCyUZM dn+vbsIZTVYm7xRnuln8R22TH/1mbl82j+gD52Rdm74oNXp1ZwCBPrdYA+MQFnCT FwtVFOY2jXmWKrfmENrjlBZz8y+djWoZc2VPLVG0HL3P19uPYDd2SDfCd13g11fM CrItNT6yIlJcibddZJ4ZgeTeEGKIvCWV9hHrS9NRhnmY9AkqxT1clj3t2uqSlHPx 4wfporGxZDnReTLfL6tffrtIuaZCDHUhBZsw7PmreH9ihx0UnWs= -----END CERTIFICATE-----Generated at Sun Jun 14 02:22:55 2026 by rpki-client