$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: wZX/qQTT5hciL4ktnWlHh54WQLU6JHXycp0HOUdLqAo= Subject key identifier: B6:26:BB:DD:83:F6:14:C3:7C:CB:A1:B9:41:B0:E4:06:2E:2A:79:79 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 4ADCB36E8B09E2E80A847FE70EA267756177F627 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 06:40:16 +0000 Manifest this update: Thu 18 Jun 2026 06:35:16 +0000 Manifest next update: Fri 19 Jun 2026 09:24:16 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) 2: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: BDg4VvduqK9VueO3BC2E91peOYPlD0bq+mwaS7dxlVQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:dc:b3:6e:8b:09:e2:e8:0a:84:7f:e7:0e:a2:67:75:61:77:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Jun 18 06:35:16 2026 GMT Not After : Jun 19 09:24:16 2026 GMT Subject: CN=B626BBDD83F614C37CCBA1B941B0E4062E2A7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:e7:e5:8a:09:92:58:48:c7:b7:3c:fd:49: dc:61:12:74:a5:9c:fc:44:08:7d:92:51:a9:9b:3f: 2d:ab:3f:97:fb:76:88:86:a1:49:40:31:47:32:e7: f0:70:d9:9d:a8:25:54:99:12:2d:c9:fe:5a:24:94: 61:75:92:6f:ad:ed:e3:6b:5c:cc:26:93:82:21:60: 4c:48:0c:3b:d2:32:58:a3:86:70:7e:bd:c6:6c:63: 6c:03:f2:2a:5b:d5:8d:74:52:f2:9a:9c:3e:eb:28: ea:9f:af:c6:b2:f8:1b:8a:b6:e6:f5:16:8d:1b:99: f4:ec:46:91:e0:74:4f:17:10:d7:87:c8:ef:7e:cd: 2c:ec:cd:4e:4f:75:77:72:d1:cf:a7:86:8c:16:75: b0:88:84:bf:98:17:84:a9:aa:e1:05:f1:3c:f8:1a: ce:bd:b2:90:c5:8d:9c:49:c4:e2:ce:a4:bb:bd:41: 39:0a:88:d1:44:de:c7:a5:7e:d6:e4:6a:c8:33:c2: f0:c0:20:f1:7e:38:2f:d9:c7:84:be:e6:e4:7f:9d: 63:a1:35:5e:f9:86:b1:e2:9d:54:27:61:ee:c1:c7: 54:ca:ad:44:62:eb:1e:9a:89:91:e5:9c:7a:e7:d1: 95:c1:ef:83:ca:41:5e:84:51:41:d7:0c:ee:3f:a6: 4b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:26:BB:DD:83:F6:14:C3:7C:CB:A1:B9:41:B0:E4:06:2E:2A:79:79 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:82:c5:df:0f:71:51:21:44:16:d0:23:c2:6f:7e:2e:0b:57: bf:11:8a:74:28:40:13:d2:5e:5b:aa:c1:f8:15:65:c7:d3:23: 3c:d7:aa:4f:33:1f:fb:26:5b:02:16:4d:cf:b2:8f:ab:00:8a: 53:66:aa:ec:90:47:48:12:7b:b6:da:de:bf:d4:1d:62:b9:3b: a2:56:ba:35:c2:2a:b1:2a:7e:13:cf:b2:a7:54:22:2f:f9:f0: b0:81:fd:fd:82:c5:23:51:ee:77:9d:ba:d1:61:7e:02:7e:1d: c3:23:82:cd:f4:9e:d5:b6:d8:9c:2d:ab:b2:94:48:e8:b1:33: e2:a3:76:48:57:22:24:36:a3:ec:1e:3c:05:46:3c:e7:03:7a: 26:de:07:5a:9c:b8:9c:c1:3a:cf:e9:28:bf:3e:ee:0d:0a:da: 03:b0:ff:55:c7:0a:26:32:a0:af:76:5c:d2:78:86:92:62:c3: 96:78:b0:43:f3:2b:4d:9e:77:2b:6e:da:4a:b1:de:bd:46:b8: d2:8d:4a:ba:fd:4e:10:35:59:6c:8b:dc:85:77:57:6c:ff:b3: 4f:cf:02:a8:95:e6:ed:71:9d:1e:20:97:bf:a4:69:5a:00:30: 40:5d:3e:37:0d:26:5e:18:b1:67:b7:e5:f6:ce:64:cc:24:8f: 77:61:4c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStyzbosJ4ugKhH/nDqJndWF39icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA2MTgwNjM1MTZaFw0yNjA2MTkwOTI0MTZaMDMxMTAvBgNV BAMTKEI2MjZCQkREODNGNjE0QzM3Q0NCQTFCOTQxQjBFNDA2MkUyQTc5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9efligmSWEjHtzz9SdxhEnSl nPxECH2SUambPy2rP5f7doiGoUlAMUcy5/Bw2Z2oJVSZEi3J/loklGF1km+t7eNr XMwmk4IhYExIDDvSMlijhnB+vcZsY2wD8ipb1Y10UvKanD7rKOqfr8ay+BuKtub1 Fo0bmfTsRpHgdE8XENeHyO9+zSzszU5PdXdy0c+nhowWdbCIhL+YF4SpquEF8Tz4 Gs69spDFjZxJxOLOpLu9QTkKiNFE3selftbkasgzwvDAIPF+OC/Zx4S+5uR/nWOh NV75hrHinVQnYe7Bx1TKrURi6x6aiZHlnHrn0ZXB74PKQV6EUUHXDO4/pkvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtia73YP2FMN8y6G5QbDkBi4qeXkwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCCxd8PcVEhRBbQI8Jvfi4LV78RinQoQBPS XluqwfgVZcfTIzzXqk8zH/smWwIWTc+yj6sAilNmquyQR0gSe7ba3r/UHWK5O6JW ujXCKrEqfhPPsqdUIi/58LCB/f2CxSNR7nedutFhfgJ+HcMjgs30ntW22Jwtq7KU SOixM+KjdkhXIiQ2o+wePAVGPOcDeibeB1qcuJzBOs/pKL8+7g0K2gOw/1XHCiYy oK92XNJ4hpJiw5Z4sEPzK02edytu2kqx3r1GuNKNSrr9ThA1WWyL3IV3V2z/s0/P AqiV5u1xnR4gl7+kaVoAMEBdPjcNJl4YsWe35fbOZMwkj3dhTKA= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:54 2026 by rpki-client