$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: 2ZfgizUBjLcfnyFyW76EBog7yo5UfPS6E9NkVrWju8A= Subject key identifier: A0:56:1C:6E:D6:97:11:8D:EB:30:7A:A5:4E:17:89:DF:06:C1:B0:25 Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 4C6798616E12B4CCBD635C75E581DE2932EAB177 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:54:50 +0000 Manifest this update: Tue 02 Jun 2026 11:49:50 +0000 Manifest next update: Wed 03 Jun 2026 13:33:50 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) 2: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: TmTPpPiu7XQrYY2B5zNc1ZF2NbtsKnbRfyA21OZGlb4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 13:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:67:98:61:6e:12:b4:cc:bd:63:5c:75:e5:81:de:29:32:ea:b1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: Jun 2 11:49:50 2026 GMT Not After : Jun 3 13:33:50 2026 GMT Subject: CN=A0561C6ED697118DEB307AA54E1789DF06C1B025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8d:79:95:37:48:af:1d:0d:cb:60:f9:39:df: de:3c:41:3c:1b:6f:c1:e3:1c:84:20:cd:55:6c:80: dd:9e:15:15:a2:47:be:8e:ad:18:31:e2:da:4f:76: d2:89:0f:a6:55:77:36:37:0c:4c:14:a9:96:c0:21: 6a:41:bb:a8:f8:2e:a3:2a:b7:33:8f:5a:47:89:94: 2e:8f:56:ef:5a:44:be:a4:51:d1:2c:74:39:d7:f5: f7:31:f0:da:af:08:19:77:6a:4b:81:88:53:70:a0: 26:8e:35:99:17:c6:83:0a:cb:7b:c5:43:3c:b9:c4: 8b:ab:3c:b8:06:a6:26:2f:d1:92:ea:9b:38:58:37: d1:97:04:01:07:d6:8e:5e:ec:ac:4f:9b:c5:70:71: ad:cf:a5:19:77:d8:62:58:3e:ef:78:58:f1:51:49: e4:a3:59:68:23:b6:a2:37:9b:94:36:7b:da:f2:f1: 95:5e:48:b1:bb:f6:11:a7:98:45:af:5b:eb:02:9b: bc:0b:a3:53:ed:15:d1:66:e8:48:fa:15:e1:5f:ed: 13:25:87:b8:d5:47:80:16:42:42:ac:8e:d8:1c:0e: de:61:47:ee:d2:4b:28:c7:ab:bb:44:5f:0c:58:db: 44:3d:a7:d9:a2:b7:8a:ec:7f:fd:8b:7b:1b:c4:35: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:56:1C:6E:D6:97:11:8D:EB:30:7A:A5:4E:17:89:DF:06:C1:B0:25 X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:b2:fc:26:28:a7:b3:d1:08:d2:bb:7a:ee:92:fc:d4:29:1e: a9:c1:eb:dd:3f:f2:86:66:db:f5:b4:e5:74:c7:28:50:ca:d1: 7b:1b:cd:76:c4:15:a5:77:16:86:c9:7e:0e:3e:51:f8:19:3c: 26:17:69:e3:86:2a:09:be:a9:a8:35:fe:b8:28:9f:54:f0:82: 67:3c:a9:15:db:07:03:1c:d8:59:3f:00:16:e0:8c:7f:29:bf: 5a:1e:1f:c6:7b:c7:17:c8:20:86:88:04:3c:5f:95:60:7a:e5: f1:96:0f:8f:d2:bf:54:5e:0e:b0:5e:48:15:4d:ed:5f:e8:f1: 4e:82:0b:1f:6c:6e:a9:01:f5:ae:24:57:19:76:a4:8e:ee:cf: 27:ac:a9:05:10:4b:49:e2:59:07:c4:e9:9c:c5:42:f0:b1:e7: 6c:30:8d:0e:40:17:fc:6e:c3:19:0f:b1:5c:67:98:bd:df:8d: 5a:40:52:03:47:60:28:2a:c1:d0:0a:05:6b:46:50:98:23:e2: 2c:35:91:63:ea:5c:fe:2b:56:06:00:3c:c3:96:b6:00:b3:77: ae:03:dc:32:f2:90:66:ed:27:1f:32:0a:1c:2e:2e:f0:a7:d5: 48:2b:d7:6f:56:61:ef:2f:b9:24:79:d7:42:36:b0:b0:86:f3: 65:9f:8e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGeYYW4StMy9Y1x15YHeKTLqsXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA2MDIxMTQ5NTBaFw0yNjA2MDMxMzMzNTBaMDMxMTAvBgNV BAMTKEEwNTYxQzZFRDY5NzExOERFQjMwN0FBNTRFMTc4OURGMDZDMUIwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjXmVN0ivHQ3LYPk53948QTwb b8HjHIQgzVVsgN2eFRWiR76OrRgx4tpPdtKJD6ZVdzY3DEwUqZbAIWpBu6j4LqMq tzOPWkeJlC6PVu9aRL6kUdEsdDnX9fcx8NqvCBl3akuBiFNwoCaONZkXxoMKy3vF Qzy5xIurPLgGpiYv0ZLqmzhYN9GXBAEH1o5e7KxPm8Vwca3PpRl32GJYPu94WPFR SeSjWWgjtqI3m5Q2e9ry8ZVeSLG79hGnmEWvW+sCm7wLo1PtFdFm6Ej6FeFf7RMl h7jVR4AWQkKsjtgcDt5hR+7SSyjHq7tEXwxY20Q9p9mit4rsf/2LexvENcZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoFYcbtaXEY3rMHqlTheJ3wbBsCUwHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSy/CYop7PRCNK7eu6S/NQpHqnB690/8oZm 2/W05XTHKFDK0XsbzXbEFaV3FobJfg4+UfgZPCYXaeOGKgm+qag1/rgon1Twgmc8 qRXbBwMc2Fk/ABbgjH8pv1oeH8Z7xxfIIIaIBDxflWB65fGWD4/Sv1ReDrBeSBVN 7V/o8U6CCx9sbqkB9a4kVxl2pI7uzyesqQUQS0niWQfE6ZzFQvCx52wwjQ5AF/xu wxkPsVxnmL3fjVpAUgNHYCgqwdAKBWtGUJgj4iw1kWPqXP4rVgYAPMOWtgCzd64D 3DLykGbtJx8yChwuLvCn1Ugr129WYe8vuSR510I2sLCG82WfjiU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:45:07 2026 by rpki-client