$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: 0TIPwRLro63eANdzbVpnw1akC/XuGWbgj4ohcW/pxPo= Subject key identifier: 78:67:68:8B:0D:52:D1:1C:7E:A8:53:3F:2A:27:D9:BD:86:20:47:9C Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 0319CC74906FA57E9ABDB5B3349685B63AEF74E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 01:28:38 +0000 Manifest this update: Thu 18 Jun 2026 01:23:38 +0000 Manifest next update: Fri 19 Jun 2026 04:04:38 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: 9lFAfD6NnXm2gqdlqjVEyhp045u6D6uNTTy40K6kWL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:19:cc:74:90:6f:a5:7e:9a:bd:b5:b3:34:96:85:b6:3a:ef:74:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Jun 18 01:23:38 2026 GMT Not After : Jun 19 04:04:38 2026 GMT Subject: CN=7867688B0D52D11C7EA8533F2A27D9BD8620479C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:e6:1a:cd:8d:ee:4c:68:be:41:9e:db:cb: a3:e1:5c:e0:ad:51:eb:3a:a3:07:55:50:d4:97:c1: e1:9a:ad:5a:98:95:29:3b:90:df:b0:da:90:b0:24: 1f:9d:34:20:d7:0c:ad:78:58:86:ea:79:02:59:85: a4:83:d9:e2:df:80:04:10:b2:b9:fb:6b:b0:1d:bf: eb:e3:3a:13:54:da:17:a1:17:c9:99:43:87:2f:89: a1:9e:aa:52:3c:10:2a:95:22:b0:82:53:07:3f:bd: cf:e2:78:9f:fe:db:b7:78:59:b4:91:f7:f1:15:cc: 70:bf:53:dc:62:4e:94:61:86:11:dd:b9:4e:20:0e: a1:6b:cb:c7:46:a3:5e:52:33:0c:69:63:06:3a:3e: 1b:da:33:0f:2e:43:f8:4c:c2:44:7e:c7:e5:ba:ee: f1:2b:e9:e4:d8:39:58:76:3a:bc:86:b7:98:7e:cb: 1e:6f:be:e2:10:e7:c9:15:5f:dd:09:20:ac:30:85: 93:62:fb:bd:cd:4a:96:49:36:88:5a:d1:a7:7e:f1: cb:2a:58:a9:c4:59:cd:79:2f:1e:d1:64:1f:7c:a2: f3:28:96:12:e2:c2:3a:e7:fa:f9:55:59:bc:7b:03: 07:fc:50:1c:41:ed:fd:bf:3b:77:71:a0:b3:2d:63: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:67:68:8B:0D:52:D1:1C:7E:A8:53:3F:2A:27:D9:BD:86:20:47:9C X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f7:5c:8b:eb:10:bc:7c:99:b7:6e:1f:10:2b:36:3a:48:e4: 14:8d:79:0e:99:06:72:70:d5:10:9b:5f:0c:f0:a2:e5:89:88: f1:3b:ef:ce:c7:57:4e:f1:27:23:15:cd:0f:be:c4:99:7c:8e: f9:fa:19:b7:9d:c2:33:da:d7:e4:13:62:2e:6f:f5:35:85:c2: 56:ee:45:a6:e7:79:cd:e5:16:94:e6:a4:1e:24:cf:f2:62:8a: 4a:5c:18:47:d7:8f:84:3a:6b:04:a6:51:1a:e4:8a:ff:4d:be: dc:ae:be:4d:f9:57:d3:06:9a:bb:c1:58:07:dd:fb:d2:35:e2: 62:cc:fa:ec:32:32:fe:87:8f:bf:9e:ef:14:cc:fb:c8:da:ba: 96:a5:5b:0e:10:21:a5:6a:63:41:8d:44:64:82:3f:9f:2f:4a: e5:12:c7:1c:3e:2d:36:d2:2e:1d:50:7c:b3:cf:26:97:d3:60: 04:4d:9d:4f:bb:f8:4d:8a:8d:c2:a3:42:ad:48:26:20:ea:2f: e3:59:ca:c1:b5:19:ae:c4:32:60:54:16:ee:b3:71:13:64:20: 16:a0:43:ab:be:1e:ac:5a:7f:f1:0d:79:68:b2:db:e1:38:41: 7c:18:6b:e4:df:50:8b:b4:ed:58:3b:12:62:ee:b5:07:5b:59: 59:ee:0f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxnMdJBvpX6avbWzNJaFtjrvdOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA2MTgwMTIzMzhaFw0yNjA2MTkwNDA0MzhaMDMxMTAvBgNV BAMTKDc4Njc2ODhCMEQ1MkQxMUM3RUE4NTMzRjJBMjdEOUJEODYyMDQ3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8teYazY3uTGi+QZ7by6PhXOCt Ues6owdVUNSXweGarVqYlSk7kN+w2pCwJB+dNCDXDK14WIbqeQJZhaSD2eLfgAQQ srn7a7Adv+vjOhNU2hehF8mZQ4cviaGeqlI8ECqVIrCCUwc/vc/ieJ/+27d4WbSR 9/EVzHC/U9xiTpRhhhHduU4gDqFry8dGo15SMwxpYwY6PhvaMw8uQ/hMwkR+x+W6 7vEr6eTYOVh2OryGt5h+yx5vvuIQ58kVX90JIKwwhZNi+73NSpZJNoha0ad+8csq WKnEWc15Lx7RZB98ovMolhLiwjrn+vlVWbx7Awf8UBxB7f2/O3dxoLMtY8hFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeGdoiw1S0Rx+qFM/KifZvYYgR5wwHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj3XIvrELx8mbduHxArNjpI5BSNeQ6ZBnJw 1RCbXwzwouWJiPE7787HV07xJyMVzQ++xJl8jvn6GbedwjPa1+QTYi5v9TWFwlbu Rabnec3lFpTmpB4kz/JiikpcGEfXj4Q6awSmURrkiv9Nvtyuvk35V9MGmrvBWAfd +9I14mLM+uwyMv6Hj7+e7xTM+8jaupalWw4QIaVqY0GNRGSCP58vSuUSxxw+LTbS Lh1QfLPPJpfTYARNnU+7+E2KjcKjQq1IJiDqL+NZysG1Ga7EMmBUFu6zcRNkIBag Q6u+Hqxaf/ENeWiy2+E4QXwYa+TfUIu07Vg7EmLutQdbWVnuD/w= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:09 2026 by rpki-client