$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: BVNzdAiRWo7mGMhzGZzPtqZxKK3+K9gfZqlnw9gPsTY= Subject key identifier: 2A:A8:AB:FE:5E:B2:87:5D:CC:DE:E2:67:4D:B9:76:17:F0:B1:36:B3 Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 58F1F2216B0253D73AA3F04F295B78F8A2086B85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:22:22 +0000 Manifest this update: Tue 16 Jun 2026 23:17:22 +0000 Manifest next update: Wed 17 Jun 2026 23:44:22 +0000 Files and hashes: 1: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: hWNUOtNZfAfmUZDqNwAHlT54ShIqUH32gHxiFD2Y74U=) 2: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) 3: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f1:f2:21:6b:02:53:d7:3a:a3:f0:4f:29:5b:78:f8:a2:08:6b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Jun 16 23:17:22 2026 GMT Not After : Jun 17 23:44:22 2026 GMT Subject: CN=2AA8ABFE5EB2875DCCDEE2674DB97617F0B136B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:08:eb:b1:3e:91:98:bc:61:c3:14:c1:e1: 24:8c:1f:d0:59:42:c1:4a:d0:08:d3:ac:1b:a2:69: c8:f1:0b:3f:37:53:c4:51:c8:9d:98:2a:be:dc:a4: aa:46:63:d1:66:2b:9d:b0:a5:3d:c9:30:b5:72:fd: 52:3d:94:90:45:04:32:fd:2c:ab:67:2f:c1:35:9e: 52:e9:0e:ae:68:37:9e:b0:80:45:06:10:b5:e1:6a: ae:74:26:95:85:f0:94:4c:b3:e0:ff:c8:1c:3b:de: 8b:b6:13:a3:4a:7a:ef:c2:01:0c:50:7c:b8:ef:ac: 16:8e:a2:37:d1:29:39:4f:80:fc:0c:5b:ab:e9:7f: 35:aa:21:5e:43:4f:d2:89:9a:41:2e:5d:84:5f:92: df:fc:d5:65:8d:d8:a4:3a:84:df:7b:e4:bd:6b:a7: 01:b1:a9:9e:0a:ee:e4:9d:6e:8d:db:8a:97:c8:b8: c9:57:d5:e7:5d:2a:a5:af:8e:8a:6b:61:44:85:12: 7e:27:66:86:d5:c0:5d:5a:ea:01:1f:71:6d:3a:ff: f2:99:b1:c2:75:7d:1a:4f:46:ca:16:b2:b7:12:c5: bd:8a:f6:39:8c:5a:ac:14:8a:71:a0:19:bd:43:56: 1c:f6:70:b9:74:1f:73:06:7f:0a:40:e7:59:1c:53: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A8:AB:FE:5E:B2:87:5D:CC:DE:E2:67:4D:B9:76:17:F0:B1:36:B3 X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a8:32:8e:07:3b:28:05:83:dd:8c:a8:84:4f:41:ea:37:3f: 0b:fa:db:eb:5f:85:ec:78:63:af:6c:e1:74:1b:bf:b4:00:86: 39:14:c6:53:43:b2:8b:59:a2:34:d2:dd:b4:64:73:f5:f2:b6: 56:96:86:72:d8:e8:e0:84:e0:92:4b:ca:0d:0d:70:1b:44:15: af:3c:c8:e2:6f:14:ec:fb:58:fb:83:73:8a:62:19:27:1f:23: c3:3c:7d:4a:7e:56:be:64:d6:4b:fb:9d:05:72:37:8f:83:c1: 2a:da:d1:71:33:2a:4f:5e:a6:66:5c:ae:ea:e5:1b:bc:bb:a9: b4:a5:cd:ea:9c:b8:e0:99:63:35:a0:14:f3:95:c9:44:cd:f2: f7:9d:62:ec:b4:a0:fb:4d:67:e9:c3:16:b9:9f:9d:b3:8d:4a: 37:c3:9c:b5:21:0b:38:f4:a2:14:3e:45:a4:85:2d:26:aa:39: ff:3b:88:8e:cd:d8:be:e0:16:77:30:05:03:e0:83:6f:e8:e8: 76:be:7d:d1:d2:fe:8e:7b:48:70:bf:49:9c:8b:e3:fc:55:e6: 5d:dc:25:ab:da:a2:0f:2b:1f:45:f9:f8:ec:93:b3:e3:53:7e: cd:3e:3c:b4:1a:42:cd:84:64:bf:1e:d8:68:42:e1:67:0e:48: c1:dc:43:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPHyIWsCU9c6o/BPKVt4+KIIa4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjA2MTYyMzE3MjJaFw0yNjA2MTcyMzQ0MjJaMDMxMTAvBgNV BAMTKDJBQThBQkZFNUVCMjg3NURDQ0RFRTI2NzREQjk3NjE3RjBCMTM2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxgjrsT6RmLxhwxTB4SSMH9BZ QsFK0AjTrBuiacjxCz83U8RRyJ2YKr7cpKpGY9FmK52wpT3JMLVy/VI9lJBFBDL9 LKtnL8E1nlLpDq5oN56wgEUGELXhaq50JpWF8JRMs+D/yBw73ou2E6NKeu/CAQxQ fLjvrBaOojfRKTlPgPwMW6vpfzWqIV5DT9KJmkEuXYRfkt/81WWN2KQ6hN975L1r pwGxqZ4K7uSdbo3bipfIuMlX1eddKqWvjoprYUSFEn4nZobVwF1a6gEfcW06//KZ scJ1fRpPRsoWsrcSxb2K9jmMWqwUinGgGb1DVhz2cLl0H3MGfwpA51kcUxabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqir/l6yh13M3uJnTbl2F/CxNrMwHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6oMo4HOygFg92MqIRPQeo3Pwv62+tfhex4 Y69s4XQbv7QAhjkUxlNDsotZojTS3bRkc/XytlaWhnLY6OCE4JJLyg0NcBtEFa88 yOJvFOz7WPuDc4piGScfI8M8fUp+Vr5k1kv7nQVyN4+DwSra0XEzKk9epmZcrurl G7y7qbSlzeqcuOCZYzWgFPOVyUTN8vedYuy0oPtNZ+nDFrmfnbONSjfDnLUhCzj0 ohQ+RaSFLSaqOf87iI7N2L7gFncwBQPgg2/o6Ha+fdHS/o57SHC/SZyL4/xV5l3c Javaog8rH0X5+OyTs+NTfs0+PLQaQs2EZL8e2GhC4WcOSMHcQ20= -----END CERTIFICATE-----Generated at Wed Jun 17 09:43:14 2026 by rpki-client