$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: NmQIEUUQ1usO14y7R35zvKEItqzdu4akFNsAfK6ZMus= Subject key identifier: E8:77:1F:DF:37:E1:86:6E:DB:E4:2B:1C:4A:EB:0C:62:F2:46:A9:90 Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 60F94626654581917109BE10B19DA79358882139 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: 69 Signing time: Sun 19 Jul 2026 15:56:32 +0000 Manifest this update: Sun 19 Jul 2026 15:51:32 +0000 Manifest next update: Mon 20 Jul 2026 19:31:32 +0000 Files and hashes: 1: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) 2: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 3: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) 4: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: RQaHnOc7F90VvsHj6zoKZSDP5fkSQyN1G+VRqGDKvBg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Jul 2026 19:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f9:46:26:65:45:81:91:71:09:be:10:b1:9d:a7:93:58:88:21:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Jul 19 15:51:32 2026 GMT Not After : Jul 20 19:31:32 2026 GMT Subject: CN=E8771FDF37E1866EDBE42B1C4AEB0C62F246A990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:4a:7a:22:17:9f:75:da:90:28:a0:80:9c: 10:84:a7:8e:87:81:30:e1:fb:9c:b2:27:bc:5f:d3: 88:53:91:11:47:90:92:58:04:66:8a:a8:d4:b7:ab: b9:13:3d:09:8e:96:58:0a:32:f1:e9:57:b4:96:bd: 49:ce:7a:b9:78:2a:ac:90:fa:0c:44:97:c0:cb:e6: 06:c0:83:42:95:82:a4:15:1a:08:bb:1a:9c:20:21: ca:22:32:b8:58:ca:4b:1b:67:2c:12:b6:30:8e:11: 8f:13:fb:dc:97:64:26:08:01:69:ac:f1:51:60:68: d9:35:b7:13:7d:02:3a:fd:10:25:ff:b4:46:84:1b: c3:9e:67:5c:68:f4:fc:1f:90:e9:6f:c9:f5:cb:fe: 5e:5a:d1:1a:27:de:5e:b0:5c:a6:f5:56:de:29:11: bd:a2:d3:b4:9e:a3:6e:b3:05:ec:a3:47:6f:74:2b: 70:cf:75:cb:9f:f7:14:7a:8a:8e:49:c4:0e:7a:bd: 74:45:e5:db:9e:18:b7:76:ca:53:57:9f:dc:e8:7e: 29:f3:d9:52:0b:21:d8:29:52:10:dc:76:0f:7b:88: 20:9d:de:c8:24:07:59:18:ca:0a:32:a3:48:9e:0c: 10:ce:7d:6d:e1:46:c9:12:90:9f:11:8b:1d:2d:44: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:77:1F:DF:37:E1:86:6E:DB:E4:2B:1C:4A:EB:0C:62:F2:46:A9:90 X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:36:a0:d6:54:0f:1d:7c:1d:63:a6:ad:3c:f5:ae:e9:97:57: 44:eb:a0:80:7f:04:42:16:ed:88:7a:f6:cb:e8:03:af:04:d4: 21:6e:05:07:63:18:c1:ba:3d:f3:27:aa:53:80:55:7c:23:7b: c5:cf:d5:7b:26:ed:35:f1:02:e8:55:ff:90:af:ee:4d:cf:57: 5f:25:93:c8:fd:e8:35:0c:04:f9:72:2a:78:e5:56:e2:c9:7c: 78:bc:52:5a:9d:4b:f4:5a:cc:7e:aa:84:0c:db:ab:96:12:cf: c7:6c:2e:19:56:99:e4:0b:2f:1c:74:94:3d:b0:18:4d:19:2e: c0:f4:48:a2:af:59:b3:95:79:85:a2:ae:c6:78:bc:aa:20:96: 32:f2:c7:d2:42:cd:25:26:22:26:4a:85:69:34:69:a3:23:d7: 97:84:28:1e:41:4d:1a:f4:e9:11:41:13:86:b9:e5:8c:6a:0d: 34:aa:8e:96:bd:db:70:61:83:b4:a3:5c:9e:86:4f:74:7d:9f: 35:0f:75:ff:bf:ad:e3:e2:72:9f:b4:be:a6:f3:d3:ca:25:b2: 8d:af:c6:f2:f8:bb:8d:d4:64:78:92:e4:72:2d:1b:da:27:80: 46:2b:4a:d8:2c:bb:62:0c:72:81:55:a6:09:5f:bc:b8:b3:2d: 1b:44:f6:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPlGJmVFgZFxCb4QsZ2nk1iIITkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA3MTkxNTUxMzJaFw0yNjA3MjAxOTMxMzJaMDMxMTAvBgNV BAMTKEU4NzcxRkRGMzdFMTg2NkVEQkU0MkIxQzRBRUIwQzYyRjI0NkE5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXdUp6IhefddqQKKCAnBCEp46H gTDh+5yyJ7xf04hTkRFHkJJYBGaKqNS3q7kTPQmOllgKMvHpV7SWvUnOerl4KqyQ +gxEl8DL5gbAg0KVgqQVGgi7GpwgIcoiMrhYyksbZywStjCOEY8T+9yXZCYIAWms 8VFgaNk1txN9Ajr9ECX/tEaEG8OeZ1xo9PwfkOlvyfXL/l5a0Ron3l6wXKb1Vt4p Eb2i07Seo26zBeyjR290K3DPdcuf9xR6io5JxA56vXRF5dueGLd2ylNXn9zofinz 2VILIdgpUhDcdg97iCCd3sgkB1kYygoyo0ieDBDOfW3hRskSkJ8Rix0tRKrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Hcf3zfhhm7b5CscSusMYvJGqZAwHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMk2oNZUDx18HWOmrTz1rumXV0TroIB/BEIW 7Yh69svoA68E1CFuBQdjGMG6PfMnqlOAVXwje8XP1Xsm7TXxAuhV/5Cv7k3PV18l k8j96DUMBPlyKnjlVuLJfHi8UlqdS/RazH6qhAzbq5YSz8dsLhlWmeQLLxx0lD2w GE0ZLsD0SKKvWbOVeYWirsZ4vKogljLyx9JCzSUmIiZKhWk0aaMj15eEKB5BTRr0 6RFBE4a55YxqDTSqjpa923Bhg7SjXJ6GT3R9nzUPdf+/rePicp+0vqbz08olso2v xvL4u43UZHiS5HItG9ongEYrStgsu2IMcoFVpglfvLizLRtE9kQ= -----END CERTIFICATE-----Generated at Mon Jul 20 04:49:26 2026 by rpki-client