$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: cT1lj9t2ugwp8o1rkbllpajxSXuHun0t9hMe+JqpSYo= Subject key identifier: E2:9F:20:C1:DC:ED:9F:74:F2:4F:78:E3:33:9A:81:3A:A3:19:83:3C Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 416A6C0BE7D48B4D15C1A49AA1E432E655DE8B1C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:54:24 +0000 Manifest this update: Tue 21 Jul 2026 02:49:24 +0000 Manifest next update: Wed 22 Jul 2026 06:19:24 +0000 Files and hashes: 1: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) 2: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) 3: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: w6cCcFdweM8OSg+NpXfJbTCNmsPSuB25zVvac9GJs7g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6a:6c:0b:e7:d4:8b:4d:15:c1:a4:9a:a1:e4:32:e6:55:de:8b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: Jul 21 02:49:24 2026 GMT Not After : Jul 22 06:19:24 2026 GMT Subject: CN=E29F20C1DCED9F74F24F78E3339A813AA319833C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:c1:ef:af:4b:f8:6f:e2:72:22:f9:c1:38: dc:0b:4d:5a:e0:be:27:ee:7d:88:1f:79:2c:02:68: 13:32:a9:71:be:6b:74:cc:75:bf:5b:c9:a7:5b:4a: 9a:4c:41:41:a9:c8:41:aa:1a:96:47:2c:5b:72:7f: f9:1b:e0:c0:e1:2d:05:f8:1d:b5:d3:fd:e1:b5:bc: de:c3:64:1e:03:0f:19:54:6a:90:ac:d4:a7:7c:e2: 8e:60:3f:9b:9e:1d:c5:38:59:75:68:fa:01:df:ed: cd:23:7f:e1:c3:16:06:c7:39:00:ef:57:17:ab:cf: 14:49:dd:da:fd:10:d7:69:a9:22:4b:46:5f:9e:db: 4e:1c:c7:f2:f6:25:a7:8c:61:4e:4f:23:24:76:c6: c0:f0:f3:2f:0a:13:3a:7c:97:e2:e0:c2:97:51:f9: 7d:08:06:41:c1:69:e5:d5:99:1f:95:36:07:7c:89: 53:92:21:68:0c:b9:fd:dd:56:1a:e8:b9:0b:56:33: 8f:3e:a7:98:de:55:9e:57:a1:05:3a:8a:1c:1f:cf: ea:24:6b:dc:78:55:98:16:d4:44:a3:82:40:cf:b6: 66:21:38:16:dd:62:df:12:c8:12:24:f4:98:28:ef: f5:93:25:57:d6:ab:81:7b:6f:3c:52:e6:4b:57:84: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9F:20:C1:DC:ED:9F:74:F2:4F:78:E3:33:9A:81:3A:A3:19:83:3C X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7e:27:d2:fd:67:53:b4:9a:ea:a9:4d:be:ad:b2:30:31:47: 6c:b3:1e:a4:a6:ed:a7:50:49:40:51:78:af:2a:73:45:af:97: ba:52:54:35:80:8c:e8:8b:d1:d3:f7:bd:73:53:5f:4a:bb:7f: 3b:f7:63:f8:39:d7:e3:6a:6a:a1:d5:2d:95:e3:75:72:1c:63: a1:53:38:0f:8d:65:26:7b:b3:0b:28:91:1f:9b:37:36:8f:0d: 71:0d:54:65:95:0d:c0:98:28:f2:58:a8:f9:11:d7:5e:00:9c: 39:43:71:5a:7e:5e:e8:88:57:71:93:6e:91:be:0b:bb:c1:a1: a9:ea:0a:94:97:3d:40:e8:32:1f:41:54:aa:55:60:44:4d:f5: 57:e3:4b:c9:ef:92:21:3d:9e:76:a4:eb:47:c5:d7:42:50:d9: 1a:79:bc:f5:91:a3:58:4c:d2:d4:97:82:c0:6a:52:f7:14:df: dd:20:5e:4f:2c:48:2d:1e:a5:f8:2a:f5:57:cc:1c:1c:e3:33: d9:f9:d3:7c:c5:e3:45:fa:7c:b1:09:0a:06:63:94:74:f1:68: 36:43:f6:56:57:00:83:87:ce:86:69:f9:28:3a:00:81:06:52: 9c:84:e1:f3:7d:dc:14:5d:0a:5c:c2:e7:c1:4f:86:b9:20:c2: 3d:c7:e8:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQWpsC+fUi00VwaSaoeQy5lXeixwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA3MjEwMjQ5MjRaFw0yNjA3MjIwNjE5MjRaMDMxMTAvBgNV BAMTKEUyOUYyMEMxRENFRDlGNzRGMjRGNzhFMzMzOUE4MTNBQTMxOTgzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiMHvr0v4b+JyIvnBONwLTVrg vifufYgfeSwCaBMyqXG+a3TMdb9byadbSppMQUGpyEGqGpZHLFtyf/kb4MDhLQX4 HbXT/eG1vN7DZB4DDxlUapCs1Kd84o5gP5ueHcU4WXVo+gHf7c0jf+HDFgbHOQDv VxerzxRJ3dr9ENdpqSJLRl+e204cx/L2JaeMYU5PIyR2xsDw8y8KEzp8l+LgwpdR +X0IBkHBaeXVmR+VNgd8iVOSIWgMuf3dVhrouQtWM48+p5jeVZ5XoQU6ihwfz+ok a9x4VZgW1ESjgkDPtmYhOBbdYt8SyBIk9Jgo7/WTJVfWq4F7bzxS5ktXhH53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4p8gwdztn3TyT3jjM5qBOqMZgzwwHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9+J9L9Z1O0muqpTb6tsjAxR2yzHqSm7adQ SUBReK8qc0Wvl7pSVDWAjOiL0dP3vXNTX0q7fzv3Y/g51+NqaqHVLZXjdXIcY6FT OA+NZSZ7swsokR+bNzaPDXENVGWVDcCYKPJYqPkR114AnDlDcVp+XuiIV3GTbpG+ C7vBoanqCpSXPUDoMh9BVKpVYERN9VfjS8nvkiE9nnak60fF10JQ2Rp5vPWRo1hM 0tSXgsBqUvcU390gXk8sSC0epfgq9VfMHBzjM9n503zF40X6fLEJCgZjlHTxaDZD 9lZXAIOHzoZp+Sg6AIEGUpyE4fN93BRdClzC58FPhrkgwj3H6Hc= -----END CERTIFICATE-----Generated at Tue Jul 21 08:13:42 2026 by rpki-client