$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: HhS/YQwazcTl7BDNCp3M9bzgWKdP91UKasfdRVqRGZM= Subject key identifier: 03:BA:27:08:E6:EE:DA:A1:43:4D:29:0E:5B:18:1C:47:08:A9:8B:5E Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 5CC0329E982E4E05131A24E6BB8BCBC0C89BDB0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 20:31:40 +0000 Manifest this update: Mon 20 Jul 2026 20:26:40 +0000 Manifest next update: Tue 21 Jul 2026 23:47:40 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) 2: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: 4XIyqZF78rU5LtwqGU6v+Eq1oEmoABYZbVfH/ooNNmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:47:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c0:32:9e:98:2e:4e:05:13:1a:24:e6:bb:8b:cb:c0:c8:9b:db:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: Jul 20 20:26:40 2026 GMT Not After : Jul 21 23:47:40 2026 GMT Subject: CN=03BA2708E6EEDAA1434D290E5B181C4708A98B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b9:d0:cb:61:3b:d7:0a:56:8f:3d:d9:61:b8: b3:89:1d:23:c0:b4:ec:30:79:99:9a:a4:7e:cd:d5: 46:b3:f8:53:63:3c:27:f6:8e:4a:c9:f6:66:83:58: 5a:3a:ac:fb:46:5c:3f:33:00:00:61:39:0d:7c:53: 84:79:6c:59:e7:d0:c4:ab:a4:9c:15:21:c5:48:5b: 96:00:87:cd:65:73:12:55:9e:7a:73:81:79:d6:86: f7:ab:d4:3f:32:d3:bd:1f:5b:a8:e0:2c:28:6b:5c: 6d:e4:04:e4:ec:3a:8a:8d:3b:13:36:7a:cd:9d:81: 94:7f:ec:b0:ad:11:6d:b3:de:a5:36:c9:72:28:b2: 93:37:12:fb:c3:b8:98:13:f6:02:2c:9d:54:76:fd: 77:c4:9b:d0:15:6d:f6:d9:43:ee:f3:af:65:30:ac: 9e:fd:ec:5a:58:cc:7d:27:6a:3d:2d:13:86:24:ea: 70:55:3f:8e:68:e5:50:1c:c5:ae:75:a8:1d:d3:6e: 26:32:4b:ea:c9:c6:9b:2b:35:fc:4c:9f:2a:11:bb: 66:6b:ef:e2:e1:63:29:70:e0:9c:6d:06:a3:73:f4: b8:f4:83:9b:97:67:17:3a:9b:ca:fb:8f:48:d2:87: 82:f1:c2:22:46:c1:6b:be:63:6e:a7:0b:9f:ee:98: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BA:27:08:E6:EE:DA:A1:43:4D:29:0E:5B:18:1C:47:08:A9:8B:5E X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:26:44:3f:3e:67:77:87:b6:d0:df:2f:df:1c:51:85:ef:d7: 4c:62:09:a7:ae:02:20:0e:b4:b6:e3:39:8c:ed:db:e2:06:25: 68:65:37:40:5c:28:92:58:6a:c7:17:ea:ab:04:14:c2:61:cf: 6a:f0:c5:46:2d:dc:ca:37:7a:08:60:f8:1e:2c:f7:32:b4:65: 83:09:88:e3:96:85:b3:b6:16:78:4a:17:93:17:60:66:fe:49: 32:54:69:a8:c1:44:96:a2:4b:7b:64:31:c8:e6:3c:36:aa:35: b6:e6:82:a8:f1:b5:41:d6:ca:ca:88:28:c9:94:70:fa:c8:03: 7d:85:0d:13:40:fd:75:27:85:20:b3:68:a8:cd:a7:67:4f:16: 24:cf:3d:5b:bc:70:7b:cb:84:59:cf:33:d6:f4:66:fa:df:0c: 0d:89:9b:3e:10:1c:01:43:0e:a6:5b:bf:31:38:ea:89:f6:69: 0e:b1:99:cd:00:97:17:1d:fc:6d:45:c7:a9:70:d1:3f:b5:d3: a3:24:50:a0:22:92:63:42:60:0a:ca:fc:4e:33:98:1c:45:e6: 50:e7:81:ab:99:43:9a:50:76:87:25:0a:41:32:64:f3:97:10: 9f:09:a3:b9:ef:c5:f0:37:d7:bf:4c:a7:a7:5a:0a:2d:00:a1: 89:2c:2b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMAynpguTgUTGiTmu4vLwMib2wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA3MjAyMDI2NDBaFw0yNjA3MjEyMzQ3NDBaMDMxMTAvBgNV BAMTKDAzQkEyNzA4RTZFRURBQTE0MzREMjkwRTVCMTgxQzQ3MDhBOThCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRudDLYTvXClaPPdlhuLOJHSPA tOwweZmapH7N1Uaz+FNjPCf2jkrJ9maDWFo6rPtGXD8zAABhOQ18U4R5bFnn0MSr pJwVIcVIW5YAh81lcxJVnnpzgXnWhver1D8y070fW6jgLChrXG3kBOTsOoqNOxM2 es2dgZR/7LCtEW2z3qU2yXIospM3EvvDuJgT9gIsnVR2/XfEm9AVbfbZQ+7zr2Uw rJ797FpYzH0naj0tE4Yk6nBVP45o5VAcxa51qB3TbiYyS+rJxpsrNfxMnyoRu2Zr 7+LhYylw4JxtBqNz9Lj0g5uXZxc6m8r7j0jSh4LxwiJGwWu+Y26nC5/umMB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7onCObu2qFDTSkOWxgcRwipi14wHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMmRD8+Z3eHttDfL98cUYXv10xiCaeuAiAO tLbjOYzt2+IGJWhlN0BcKJJYascX6qsEFMJhz2rwxUYt3Mo3eghg+B4s9zK0ZYMJ iOOWhbO2FnhKF5MXYGb+STJUaajBRJaiS3tkMcjmPDaqNbbmgqjxtUHWysqIKMmU cPrIA32FDRNA/XUnhSCzaKjNp2dPFiTPPVu8cHvLhFnPM9b0ZvrfDA2Jmz4QHAFD DqZbvzE46on2aQ6xmc0Alxcd/G1Fx6lw0T+106MkUKAikmNCYArK/E4zmBxF5lDn gauZQ5pQdoclCkEyZPOXEJ8Jo7nvxfA3179Mp6daCi0AoYksK/E= -----END CERTIFICATE-----Generated at Tue Jul 21 06:40:51 2026 by rpki-client