$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: u9iG+06x3PYD70IaGBNfnhUWqIlza/hLegY6/GbRPSY= Subject key identifier: 1D:2C:5F:C3:AB:03:C3:87:B6:A2:78:18:F1:16:1B:94:37:06:96:69 Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 167F8FACC2B4078917BA2952C8FD3682E58E7930 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: 2B Signing time: Wed 03 Jun 2026 01:36:41 +0000 Manifest this update: Wed 03 Jun 2026 01:31:41 +0000 Manifest next update: Thu 04 Jun 2026 02:39:41 +0000 Files and hashes: 1: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: +bYbNwOTVQmwxUuZA9gc2uo/IojaKt3wBxUXTAPEPFM=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Jun 2026 02:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:7f:8f:ac:c2:b4:07:89:17:ba:29:52:c8:fd:36:82:e5:8e:79:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Jun 3 01:31:41 2026 GMT Not After : Jun 4 02:39:41 2026 GMT Subject: CN=1D2C5FC3AB03C387B6A27818F1161B9437069669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:e8:63:67:87:3c:c4:1a:04:c8:81:89:7c: 9e:af:cf:05:9a:1a:0c:43:f4:0f:13:73:2d:82:46: 28:db:7b:ad:5b:20:a8:c9:73:e5:cf:03:f5:fe:a2: ef:c3:1c:be:60:d5:75:eb:37:4c:43:05:77:43:f1: e8:d8:bd:dd:73:28:58:af:76:55:84:24:fe:1e:35: e4:87:02:2a:04:98:2e:13:65:6d:9d:73:b0:f4:49: b1:6b:cf:33:30:5d:49:fb:0a:68:79:a6:bf:18:19: 42:36:ac:03:9d:f7:8a:a0:46:13:5e:c3:92:75:c7: 24:bd:55:bb:7f:7b:e5:78:1a:dd:cf:ef:94:f0:af: ed:40:44:0e:05:a1:a7:23:db:17:3d:dd:2f:59:d7: 86:a5:22:46:27:d5:e1:0e:ee:e6:90:9b:ef:c1:1a: dc:55:2a:7a:3e:1c:db:8c:07:5a:01:51:50:a1:be: 9d:3e:e5:b8:99:49:b6:ce:84:18:de:a5:31:18:45: fe:5b:5a:d5:e2:64:d3:35:2c:8b:af:4e:3f:0c:4b: 14:3c:14:3a:08:26:7b:67:87:fb:1c:df:5c:84:5a: b5:f7:28:07:da:ed:a5:87:5e:a4:33:42:0e:e5:51: f0:a5:3b:ee:da:aa:93:5d:25:73:db:63:28:78:2e: 6b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2C:5F:C3:AB:03:C3:87:B6:A2:78:18:F1:16:1B:94:37:06:96:69 X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:89:1c:d2:65:2d:ec:90:41:94:16:ac:0b:da:98:43:18:7b: 6d:1d:d1:79:ef:05:15:3f:6e:df:95:fc:98:86:06:c4:42:9b: 7a:84:68:cb:44:34:02:c2:04:82:20:71:37:08:75:d8:26:91: ba:b5:e4:c9:f7:4d:6a:cc:ef:b4:9e:fe:ca:ba:af:f8:2e:00: c3:53:f4:ff:7a:87:a8:38:a3:1b:88:3a:f0:7a:29:07:24:a4: 16:35:e7:f7:9c:61:21:65:00:8d:2b:69:98:6b:e6:22:38:e4: 0f:86:71:37:a6:ae:ac:34:37:56:a3:8b:1b:95:f2:bc:f2:24: cc:89:fd:1c:f3:3f:1d:7c:73:c3:98:c7:29:a1:ac:03:c7:b9: 6a:f4:6b:72:38:79:bb:84:e9:97:68:f9:c6:c8:c4:ec:a8:89: 3a:74:50:94:d2:16:7d:a5:8c:88:04:b9:19:4e:e6:c2:50:fe: 82:11:4a:c7:e2:6e:e0:ae:36:03:08:e1:87:30:ef:f6:16:25: 22:fe:e4:0c:e7:81:0c:a6:61:4f:0b:8a:8e:e3:0b:ec:5a:4e: d3:56:32:7f:ec:91:fa:3c:32:f8:54:02:98:95:94:10:80:a6: c8:60:e3:d2:81:81:4f:ea:8a:e7:0a:31:6b:40:eb:5e:ca:68: 69:20:1b:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFn+PrMK0B4kXuilSyP02guWOeTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjA2MDMwMTMxNDFaFw0yNjA2MDQwMjM5NDFaMDMxMTAvBgNV BAMTKDFEMkM1RkMzQUIwM0MzODdCNkEyNzgxOEYxMTYxQjk0MzcwNjk2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50ehjZ4c8xBoEyIGJfJ6vzwWa GgxD9A8Tcy2CRijbe61bIKjJc+XPA/X+ou/DHL5g1XXrN0xDBXdD8ejYvd1zKFiv dlWEJP4eNeSHAioEmC4TZW2dc7D0SbFrzzMwXUn7Cmh5pr8YGUI2rAOd94qgRhNe w5J1xyS9Vbt/e+V4Gt3P75Twr+1ARA4Foacj2xc93S9Z14alIkYn1eEO7uaQm+/B GtxVKno+HNuMB1oBUVChvp0+5biZSbbOhBjepTEYRf5bWtXiZNM1LIuvTj8MSxQ8 FDoIJntnh/sc31yEWrX3KAfa7aWHXqQzQg7lUfClO+7aqpNdJXPbYyh4LmsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHSxfw6sDw4e2ongY8RYblDcGlmkwHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKJHNJlLeyQQZQWrAvamEMYe20d0XnvBRU/ bt+V/JiGBsRCm3qEaMtENALCBIIgcTcIddgmkbq15Mn3TWrM77Se/sq6r/guAMNT 9P96h6g4oxuIOvB6KQckpBY15/ecYSFlAI0raZhr5iI45A+GcTemrqw0N1ajixuV 8rzyJMyJ/RzzPx18c8OYxymhrAPHuWr0a3I4ebuE6Zdo+cbIxOyoiTp0UJTSFn2l jIgEuRlO5sJQ/oIRSsfibuCuNgMI4Ycw7/YWJSL+5AzngQymYU8Lio7jC+xaTtNW Mn/skfo8MvhUApiVlBCApshg49KBgU/qiucKMWtA617KaGkgG74= -----END CERTIFICATE-----Generated at Wed Jun 3 04:07:54 2026 by rpki-client