$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: McWthmdADPQVU83KnjcOw97QCkOE66n/eCo6z2i6oG8= Subject key identifier: 12:53:3F:13:96:39:2C:90:8D:85:40:78:3E:5F:CB:BB:2C:6D:52:01 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 5575B8F12D083C072B6DFDDCD2A8CC37F12B0D67 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 14:55:29 +0000 Manifest this update: Sun 02 Aug 2026 14:50:29 +0000 Manifest next update: Mon 03 Aug 2026 16:38:29 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) 2: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: asBzDBuSsrGIDb4RRyQ+zjv8od+7O2lVwO5B+uXQ0Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 16:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:75:b8:f1:2d:08:3c:07:2b:6d:fd:dc:d2:a8:cc:37:f1:2b:0d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: Aug 2 14:50:29 2026 GMT Not After : Aug 3 16:38:29 2026 GMT Subject: CN=12533F1396392C908D8540783E5FCBBB2C6D5201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:64:d4:8a:90:2c:33:6e:e5:db:ec:7d:27: 0a:f6:48:0e:6c:6b:ca:1a:74:af:6d:4c:9f:34:d2: ce:97:8d:af:51:cd:7f:ba:d2:e3:11:e4:13:14:27: e7:b9:ec:7f:94:f0:58:04:bc:72:ea:d0:de:b7:d8: fd:7c:68:bd:6c:d0:43:9e:a5:9d:0c:68:93:da:df: 54:63:68:89:20:96:5a:f8:7c:9a:ea:5e:aa:41:dd: ca:83:d9:7e:27:af:dd:72:ab:e7:56:6a:a6:15:fb: d8:5a:28:f3:85:4a:5b:ef:92:a1:b2:ea:56:56:d4: 50:2f:50:48:99:49:f5:5c:70:6f:8c:42:61:54:2b: 16:d9:38:d4:38:3b:f4:f8:b6:0b:73:9d:d4:10:1c: c5:bb:69:24:24:68:b3:79:c7:79:2f:31:13:36:11: a7:e6:cd:a0:2e:6c:17:99:3f:7f:6d:0e:79:9c:7f: 82:cc:a5:bb:c0:24:b4:32:aa:c2:93:b1:7a:b7:13: f2:3f:9a:63:87:19:40:3f:2b:b0:8d:4c:ee:b8:58: 1b:c1:ad:e2:9e:58:6a:d6:25:7e:73:5a:9d:27:db: de:8a:43:a1:83:57:cf:11:ca:e6:28:0f:66:23:a5: 8c:25:07:1b:4e:74:24:70:6d:61:4b:d0:bd:07:93: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:3F:13:96:39:2C:90:8D:85:40:78:3E:5F:CB:BB:2C:6D:52:01 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:57:34:65:9c:90:bf:29:31:4c:f3:e0:3a:ff:31:c7:de:1e: 72:73:52:3f:a3:69:0e:be:b5:f5:1c:22:d4:3b:df:19:d8:3e: eb:95:16:47:40:73:bc:34:55:f0:e3:a8:05:0e:9d:bb:cf:9d: ac:28:61:1f:58:ce:c2:b4:ab:53:8f:f3:ad:68:bd:6a:b8:0a: da:cd:c0:2c:f1:c6:8a:ac:94:28:32:67:c2:e9:ec:ec:d9:c3: a0:17:ef:13:a0:e9:03:85:5e:e5:4d:27:e7:02:cc:73:6e:68: f8:ef:8d:0f:87:e7:ab:b2:3d:e2:ce:9b:80:5a:23:9a:3a:22: f7:3f:57:00:51:62:b5:00:42:5d:07:cf:b0:96:1a:11:fd:e4: 05:ec:dc:07:f5:d7:c5:ab:62:f5:8d:e9:1f:87:95:20:e9:52: 7a:d6:97:c3:ad:cd:05:ff:c7:f4:36:e7:fb:00:0f:67:c6:f5: 49:b1:dc:97:89:11:71:a1:d9:07:95:41:fa:c5:37:9b:8d:16: e0:8e:3f:bc:f9:ee:df:0e:31:17:e2:99:f8:8c:a1:e9:fb:5a: 9c:43:6b:4d:a8:d4:c9:11:17:86:0b:ef:1b:cc:dc:2b:d7:f5: 37:0c:61:b2:e0:b5:b8:0c:68:bd:1b:a3:8d:03:ac:03:bd:9d: f3:18:09:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXW48S0IPAcrbf3c0qjMN/ErDWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA4MDIxNDUwMjlaFw0yNjA4MDMxNjM4MjlaMDMxMTAvBgNV BAMTKDEyNTMzRjEzOTYzOTJDOTA4RDg1NDA3ODNFNUZDQkJCMkM2RDUyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbJmTUipAsM27l2+x9Jwr2SA5s a8oadK9tTJ800s6Xja9RzX+60uMR5BMUJ+e57H+U8FgEvHLq0N632P18aL1s0EOe pZ0MaJPa31RjaIkgllr4fJrqXqpB3cqD2X4nr91yq+dWaqYV+9haKPOFSlvvkqGy 6lZW1FAvUEiZSfVccG+MQmFUKxbZONQ4O/T4tgtzndQQHMW7aSQkaLN5x3kvMRM2 EafmzaAubBeZP39tDnmcf4LMpbvAJLQyqsKTsXq3E/I/mmOHGUA/K7CNTO64WBvB reKeWGrWJX5zWp0n296KQ6GDV88RyuYoD2YjpYwlBxtOdCRwbWFL0L0Hk877AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUElM/E5Y5LJCNhUB4Pl/LuyxtUgEwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRXNGWckL8pMUzz4Dr/McfeHnJzUj+jaQ6+ tfUcItQ73xnYPuuVFkdAc7w0VfDjqAUOnbvPnawoYR9YzsK0q1OP861ovWq4CtrN wCzxxoqslCgyZ8Lp7OzZw6AX7xOg6QOFXuVNJ+cCzHNuaPjvjQ+H56uyPeLOm4Ba I5o6Ivc/VwBRYrUAQl0Hz7CWGhH95AXs3Af118WrYvWN6R+HlSDpUnrWl8OtzQX/ x/Q25/sAD2fG9Umx3JeJEXGh2QeVQfrFN5uNFuCOP7z57t8OMRfimfiMoen7WpxD a02o1MkRF4YL7xvM3CvX9TcMYbLgtbgMaL0bo40DrAO9nfMYCeU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:32 2026 by rpki-client