$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: uCygADGZIyXFYgMbtKRw/zUHnd5f7yo6giCaMlMuysU= Subject key identifier: BF:5C:00:F6:28:DA:4E:E0:7A:17:91:3B:DD:4C:EB:D5:66:34:21:B1 Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 147FA4E4D2CC2AE79BE65784B4E198E9286ADD2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:19:02 +0000 Manifest this update: Tue 02 Jun 2026 23:14:02 +0000 Manifest next update: Thu 04 Jun 2026 00:33:02 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) 2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) 3: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: jsiaIKD88MQfmiCJesL81CaJ0gNvpAE3OIOU/CR55iA=) 4: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7f:a4:e4:d2:cc:2a:e7:9b:e6:57:84:b4:e1:98:e9:28:6a:dd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Jun 2 23:14:02 2026 GMT Not After : Jun 4 00:33:02 2026 GMT Subject: CN=BF5C00F628DA4EE07A17913BDD4CEBD5663421B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:90:c7:9c:33:19:cc:61:e3:c8:e7:9f:40:25: ba:cb:67:22:45:ff:56:ad:b6:4c:03:54:87:f5:e1: 28:49:a7:03:a8:9a:14:d8:79:26:ca:69:4a:07:6c: e8:d4:24:24:c5:2a:69:a5:8c:d2:dd:d0:8e:d7:74: ee:df:ba:99:c9:e9:c0:db:57:74:5f:a3:a3:0e:ac: ef:04:f6:5a:f2:e8:6d:f1:5f:db:87:02:ac:f6:21: b4:43:9e:99:69:76:20:6c:0d:1d:17:f6:1a:6a:f8: 2b:fa:20:6c:5a:59:14:5a:44:73:3a:cd:0f:eb:b0: cd:d9:7d:71:75:80:47:47:90:9c:4c:72:18:96:f9: 2a:54:9f:8d:53:47:e4:03:c3:25:6e:d2:6a:a8:96: 59:80:ef:0a:a2:2b:79:83:da:94:39:b6:2d:29:68: 92:59:01:c4:e6:f2:6d:4e:d8:b6:fb:97:17:3a:78: 95:b7:38:31:5d:24:de:3b:09:bb:22:e5:78:1d:85: 43:fb:21:43:9e:e2:56:c6:c7:bc:10:c6:f8:9e:14: ed:9c:8c:35:a0:3c:5e:97:43:80:c3:fe:43:39:4b: 87:d3:69:57:73:1a:9b:bd:a6:24:e6:83:e7:8e:15: 5f:8a:26:33:3d:95:8a:5f:60:3b:63:5b:d7:f2:82: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5C:00:F6:28:DA:4E:E0:7A:17:91:3B:DD:4C:EB:D5:66:34:21:B1 X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:47:6e:05:8e:98:e5:b5:9a:4b:cf:40:b8:c3:d9:e5:91:d8: 87:8e:9a:06:ca:85:64:7e:2f:34:12:87:40:f3:7e:9e:2a:b3: f6:24:1e:83:51:68:d0:2d:4b:aa:67:9d:7e:6a:bf:66:f9:97: 92:4b:b2:11:d6:79:36:cb:76:dc:cf:58:79:8d:55:e8:a5:3f: 08:af:f5:8f:ea:2f:51:3c:7e:49:eb:1e:e1:25:04:08:f4:e3: f4:77:36:6b:dc:1a:75:0d:bc:3c:79:d8:06:23:8a:c0:37:80: 1b:29:a1:ac:83:de:c8:7c:49:59:b4:52:6f:af:9e:79:31:7b: 97:ef:d8:8d:b1:86:df:4d:41:7e:9b:7d:26:29:a5:c8:2a:68: 0e:3b:44:7d:9b:71:ef:ed:83:77:cf:c2:c5:cf:dd:c5:32:ab: af:da:92:e4:b0:2e:50:ca:cd:37:3e:26:83:fd:de:ff:63:fb: 83:97:3e:cf:80:aa:0c:5b:ff:25:51:2d:b1:40:0d:31:fd:a0: 19:43:33:b7:4e:1a:e4:7f:51:14:b2:8d:98:70:82:1b:61:a2: 19:63:96:a7:cc:1b:ae:53:43:2f:15:46:56:0e:33:7d:88:6b: 7c:1f:d0:b1:22:be:78:17:8e:c9:92:46:c8:8b:81:0e:76:a0: 18:49:76:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFH+k5NLMKueb5leEtOGY6Shq3S8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA2MDIyMzE0MDJaFw0yNjA2MDQwMDMzMDJaMDMxMTAvBgNV BAMTKEJGNUMwMEY2MjhEQTRFRTA3QTE3OTEzQkRENENFQkQ1NjYzNDIxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkMecMxnMYePI559AJbrLZyJF /1attkwDVIf14ShJpwOomhTYeSbKaUoHbOjUJCTFKmmljNLd0I7XdO7fupnJ6cDb V3Rfo6MOrO8E9lry6G3xX9uHAqz2IbRDnplpdiBsDR0X9hpq+Cv6IGxaWRRaRHM6 zQ/rsM3ZfXF1gEdHkJxMchiW+SpUn41TR+QDwyVu0mqollmA7wqiK3mD2pQ5ti0p aJJZAcTm8m1O2Lb7lxc6eJW3ODFdJN47Cbsi5XgdhUP7IUOe4lbGx7wQxvieFO2c jDWgPF6XQ4DD/kM5S4fTaVdzGpu9piTmg+eOFV+KJjM9lYpfYDtjW9fygpMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1wA9ijaTuB6F5E73Uzr1WY0IbEwHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRHbgWOmOW1mkvPQLjD2eWR2IeOmgbKhWR+ LzQSh0Dzfp4qs/YkHoNRaNAtS6pnnX5qv2b5l5JLshHWeTbLdtzPWHmNVeilPwiv 9Y/qL1E8fknrHuElBAj04/R3NmvcGnUNvDx52AYjisA3gBspoayD3sh8SVm0Um+v nnkxe5fv2I2xht9NQX6bfSYppcgqaA47RH2bce/tg3fPwsXP3cUyq6/akuSwLlDK zTc+JoP93v9j+4OXPs+Aqgxb/yVRLbFADTH9oBlDM7dOGuR/URSyjZhwghthohlj lqfMG65TQy8VRlYOM32Ia3wf0LEivngXjsmSRsiLgQ52oBhJdgo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:28:22 2026 by rpki-client