$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: GeREAXSMcP5i2uc5kaehq+x9TrXbok/V/N3WGSEU8/U= Subject key identifier: CB:D7:DC:EA:F9:D2:2F:9F:E5:75:48:2A:43:26:DB:DB:4F:9F:59:62 Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 1CD9A3546FC620B846DD9AEB53DCD74E13D63358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:07:05 +0000 Manifest this update: Tue 16 Jun 2026 23:02:05 +0000 Manifest next update: Thu 18 Jun 2026 02:36:05 +0000 Files and hashes: 1: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: vG3AELGuBiRSn6MiV9pQ+NWVGHjrDLuxpQcl7U2sLVk=) 2: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 4: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d9:a3:54:6f:c6:20:b8:46:dd:9a:eb:53:dc:d7:4e:13:d6:33:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Jun 16 23:02:05 2026 GMT Not After : Jun 18 02:36:05 2026 GMT Subject: CN=CBD7DCEAF9D22F9FE575482A4326DBDB4F9F5962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:74:ba:26:b7:d5:ee:97:bc:9b:0d:9e:5b:ee: ca:76:5f:80:9d:96:f4:f5:d1:d3:e5:85:21:9c:8c: 7e:03:cf:55:b9:57:8a:ab:9b:a0:94:67:2b:53:39: 7b:ff:09:f0:55:3d:8b:1c:ed:71:b0:44:68:4a:c5: 4d:99:38:7f:b7:fb:42:a9:f7:15:d8:08:2f:80:ff: a2:32:ca:65:21:c1:76:a0:bf:87:f7:a3:55:d8:08: a1:64:d5:1c:e6:c7:d0:3b:ab:94:a5:c9:36:b3:3c: e3:c5:82:9b:81:29:f7:09:66:b5:4a:e2:ab:a1:49: ed:ff:18:b0:e6:5b:0b:7e:c3:58:ed:6e:0b:6a:65: f7:30:a4:d1:86:e7:19:85:b5:f3:62:01:21:bf:a2: 02:7f:0a:2c:e9:e7:c7:36:36:29:9f:c3:72:ef:bb: dc:72:22:f2:a2:40:b2:30:94:b9:74:f1:69:f6:8b: 87:14:3c:2f:05:ff:0c:43:20:3d:15:ea:ed:04:32: 58:81:b8:ad:f6:ab:6a:f4:4d:a2:dd:b0:80:e7:e8: 94:39:59:1e:ad:85:6a:a9:0f:fe:ba:b7:8c:fb:27: e6:bf:4c:44:69:78:b0:f8:12:70:9a:32:ef:10:2d: 6b:f3:60:88:bf:71:02:72:c1:c1:e2:e7:12:02:f4: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D7:DC:EA:F9:D2:2F:9F:E5:75:48:2A:43:26:DB:DB:4F:9F:59:62 X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:44:5f:78:40:3e:a4:51:16:00:17:ac:ca:6b:3e:71:59:e4: 78:32:6f:aa:f7:a3:ab:82:f2:fe:2a:ca:06:0f:c2:ad:4b:21: cc:30:9c:8d:f8:8f:b6:1e:2e:75:e6:cb:c5:3a:4f:9f:1f:7f: ea:6e:0d:7f:98:87:d6:ba:b6:2c:ff:a2:bb:02:03:b9:9f:8f: 7c:3d:3b:33:5c:6f:6a:8d:b2:81:9d:3e:b3:be:52:70:72:a5: 2f:aa:54:ae:5e:ea:b2:2f:f8:5e:2e:21:13:95:70:35:a5:58: 97:8b:c0:3f:c8:47:04:bc:ce:e4:1c:7f:67:d7:49:8f:b6:4d: 76:06:4f:97:8d:d9:22:b2:a3:e8:3f:ec:f8:bf:fb:b2:26:8c: ba:af:33:70:dd:b4:7e:82:03:df:8b:a1:5c:9b:55:3d:97:78: 34:94:30:00:64:5e:03:49:01:c8:45:ef:13:68:b3:e8:bb:aa: 97:2c:13:de:f4:1d:dd:f6:4f:62:b4:43:20:ce:8e:58:d7:b2: 76:0f:04:22:34:fa:be:16:8a:0c:1a:23:b1:1a:08:64:49:a9: 21:de:0c:88:20:99:55:6d:de:60:7b:92:18:0d:0d:a6:cf:cb: f8:95:c7:33:bc:e8:57:17:ea:79:31:7c:4c:3a:f7:fd:4e:ce: dd:c6:cc:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHNmjVG/GILhG3ZrrU9zXThPWM1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA2MTYyMzAyMDVaFw0yNjA2MTgwMjM2MDVaMDMxMTAvBgNV BAMTKENCRDdEQ0VBRjlEMjJGOUZFNTc1NDgyQTQzMjZEQkRCNEY5RjU5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqdLomt9Xul7ybDZ5b7sp2X4Cd lvT10dPlhSGcjH4Dz1W5V4qrm6CUZytTOXv/CfBVPYsc7XGwRGhKxU2ZOH+3+0Kp 9xXYCC+A/6IyymUhwXagv4f3o1XYCKFk1Rzmx9A7q5SlyTazPOPFgpuBKfcJZrVK 4quhSe3/GLDmWwt+w1jtbgtqZfcwpNGG5xmFtfNiASG/ogJ/Cizp58c2Nimfw3Lv u9xyIvKiQLIwlLl08Wn2i4cUPC8F/wxDID0V6u0EMliBuK32q2r0TaLdsIDn6JQ5 WR6thWqpD/66t4z7J+a/TERpeLD4EnCaMu8QLWvzYIi/cQJywcHi5xIC9L3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy9fc6vnSL5/ldUgqQybb20+fWWIwHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpEX3hAPqRRFgAXrMprPnFZ5Hgyb6r3o6uC 8v4qygYPwq1LIcwwnI34j7YeLnXmy8U6T58ff+puDX+Yh9a6tiz/orsCA7mfj3w9 OzNcb2qNsoGdPrO+UnBypS+qVK5e6rIv+F4uIROVcDWlWJeLwD/IRwS8zuQcf2fX SY+2TXYGT5eN2SKyo+g/7Pi/+7ImjLqvM3DdtH6CA9+LoVybVT2XeDSUMABkXgNJ AchF7xNos+i7qpcsE970Hd32T2K0QyDOjljXsnYPBCI0+r4WigwaI7EaCGRJqSHe DIggmVVt3mB7khgNDabPy/iVxzO86FcX6nkxfEw69/1Ozt3GzIQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:17 2026 by rpki-client