$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: c6ZB3z9IboHgSszOxshhZrfVPX4v0mquTkuUhTDN4Aw= Subject key identifier: 84:5A:9D:1F:B0:CA:95:DC:93:D5:F3:68:A2:E9:AE:28:81:C6:65:82 Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 5E6950402EF640DDFDFA7EF3FFEA2A237E6BAE03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:08:27 +0000 Manifest this update: Mon 20 Jul 2026 22:03:27 +0000 Manifest next update: Tue 21 Jul 2026 22:29:27 +0000 Files and hashes: 1: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) 2: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: 1FM9zEQjRIZvjeZXCZJpJqgYP8Ra3G25R1EoMgOGEBY=) 3: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:50:40:2e:f6:40:dd:fd:fa:7e:f3:ff:ea:2a:23:7e:6b:ae:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Jul 20 22:03:27 2026 GMT Not After : Jul 21 22:29:27 2026 GMT Subject: CN=845A9D1FB0CA95DC93D5F368A2E9AE2881C66582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:cf:21:8a:46:09:c0:5f:a8:e7:b8:53:22: 66:50:12:ee:a3:9a:a3:5e:23:c5:0b:98:d9:6e:e9: d4:8d:8b:d4:b1:9e:12:61:0e:46:ce:4a:bf:07:39: b1:7e:d9:6c:d1:7e:c4:a7:12:3b:11:67:2d:17:a1: 0a:22:8f:4c:74:81:24:63:56:f0:78:aa:f6:67:7d: ed:71:6a:82:33:62:18:2b:a5:55:b4:6a:49:3e:ed: 23:77:81:83:a3:32:58:17:f0:6d:75:cc:8e:1f:3c: ab:ec:0f:68:48:8c:bd:36:a0:33:d7:52:b3:7e:56: a1:99:6b:c7:22:ce:81:e9:f6:57:e4:01:8f:27:82: 5e:d1:9d:c6:f7:69:8f:d2:40:bc:cd:04:31:61:b9: 71:06:53:e1:69:85:2b:1d:13:7f:1e:9f:94:76:1c: ae:ea:b8:78:61:97:57:2a:d6:6d:d8:5c:78:31:be: 89:20:15:07:7e:c5:88:10:01:dc:a6:cf:68:f5:6c: e1:8f:bf:0e:2e:e1:2a:0e:e9:bd:d2:ea:a2:cc:70: 2c:37:4f:fe:f8:9e:6c:fa:3b:3e:0c:d9:be:a6:5e: be:b0:b5:f7:e5:83:d6:73:a7:05:18:ef:1b:7a:1c: 10:cd:00:12:d7:ef:ef:63:ae:e7:28:af:63:a0:c9: 64:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5A:9D:1F:B0:CA:95:DC:93:D5:F3:68:A2:E9:AE:28:81:C6:65:82 X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:28:94:be:49:18:54:fb:96:91:ce:bc:88:e6:1a:b4:fe:0d: 17:49:81:d8:f1:74:c4:49:4e:c7:6e:0a:97:f2:60:4e:9f:b9: cd:df:c1:da:97:d3:14:8b:8b:37:bd:47:67:ad:6e:54:dc:f3: e6:22:07:33:c2:01:a4:b6:0d:c1:ac:36:5e:d6:16:d7:b1:f8: 29:2f:b5:aa:70:4a:49:d9:e9:cf:bd:59:f4:89:a1:95:19:66: ef:de:f6:70:30:7f:e3:de:e5:d7:16:e3:9d:d9:31:b6:b4:42: 6c:0e:0f:bd:94:d4:30:99:8b:58:5b:40:22:cf:09:21:d5:a7: f5:cb:0d:ca:aa:6e:fb:51:05:45:1f:80:08:21:04:14:b2:d1: 36:4e:3b:4d:4a:cb:c5:7a:df:74:a0:a3:3b:b9:f3:c6:db:20: 3e:69:57:db:55:b2:4c:6d:54:c5:5f:20:c0:00:a8:b7:a2:fa: 69:24:36:d8:57:d6:76:22:44:59:e5:4d:19:1c:58:dc:93:47: 9c:d7:42:1f:1c:5e:bf:4d:ac:db:d4:88:63:00:c2:00:e0:d0: ef:c2:c0:a6:b5:2f:c1:4c:d6:3f:b3:50:18:c4:ee:1e:7d:40: 64:20:91:dd:46:a1:e4:2b:22:4b:a8:21:7f:3c:0c:1e:25:fe: 47:56:34:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmlQQC72QN39+n7z/+oqI35rrgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjA3MjAyMjAzMjdaFw0yNjA3MjEyMjI5MjdaMDMxMTAvBgNV BAMTKDg0NUE5RDFGQjBDQTk1REM5M0Q1RjM2OEEyRTlBRTI4ODFDNjY1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbc8hikYJwF+o57hTImZQEu6j mqNeI8ULmNlu6dSNi9SxnhJhDkbOSr8HObF+2WzRfsSnEjsRZy0XoQoij0x0gSRj VvB4qvZnfe1xaoIzYhgrpVW0akk+7SN3gYOjMlgX8G11zI4fPKvsD2hIjL02oDPX UrN+VqGZa8cizoHp9lfkAY8ngl7Rncb3aY/SQLzNBDFhuXEGU+FphSsdE38en5R2 HK7quHhhl1cq1m3YXHgxvokgFQd+xYgQAdymz2j1bOGPvw4u4SoO6b3S6qLMcCw3 T/74nmz6Oz4M2b6mXr6wtfflg9ZzpwUY7xt6HBDNABLX7+9jrucor2OgyWTpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhFqdH7DKldyT1fNooumuKIHGZYIwHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEolL5JGFT7lpHOvIjmGrT+DRdJgdjxdMRJ TsduCpfyYE6fuc3fwdqX0xSLize9R2etblTc8+YiBzPCAaS2DcGsNl7WFtex+Ckv tapwSknZ6c+9WfSJoZUZZu/e9nAwf+Pe5dcW453ZMba0QmwOD72U1DCZi1hbQCLP CSHVp/XLDcqqbvtRBUUfgAghBBSy0TZOO01Ky8V633Sgozu588bbID5pV9tVskxt VMVfIMAAqLei+mkkNthX1nYiRFnlTRkcWNyTR5zXQh8cXr9NrNvUiGMAwgDg0O/C wKa1L8FM1j+zUBjE7h59QGQgkd1GoeQrIkuoIX88DB4l/kdWNN8= -----END CERTIFICATE-----Generated at Tue Jul 21 06:31:54 2026 by rpki-client