$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: HZuOGLkmN2KILQgVOTiqhi2Uf3rKNZ/OV5z6eoAa918= Subject key identifier: 02:C1:DE:9E:F5:31:FA:EA:81:8B:4B:DE:67:D0:F8:AF:D7:A4:05:CA Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 49DCF9A1B9D06F20707F8AE94983BE169E1D73B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 06:55:58 +0000 Manifest this update: Sun 02 Aug 2026 06:50:58 +0000 Manifest next update: Mon 03 Aug 2026 10:48:58 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: kgn8i0GMeeEALG1Oki2AsKKsUu8PN77kCmxDAgh47SY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:dc:f9:a1:b9:d0:6f:20:70:7f:8a:e9:49:83:be:16:9e:1d:73:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Aug 2 06:50:58 2026 GMT Not After : Aug 3 10:48:58 2026 GMT Subject: CN=02C1DE9EF531FAEA818B4BDE67D0F8AFD7A405CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:34:d9:f3:5e:9f:36:5d:83:fd:a1:cf:4f: 0f:df:a2:ad:67:72:f9:a2:d9:cd:d2:66:b9:42:b7: 50:85:8f:f7:f1:b8:0a:a1:f6:5d:d6:32:2f:fa:8d: bc:80:f6:69:7c:ee:13:01:e3:9e:aa:40:7d:a7:e0: 2b:21:0f:b2:8f:06:fa:7f:31:1a:ff:6a:99:b8:60: 37:c9:fe:37:4d:71:d6:f2:2e:50:bd:e5:aa:eb:26: 2d:92:a7:24:41:ff:05:bf:95:74:a0:48:11:b0:e8: 99:f5:39:dd:58:d8:b2:c2:4a:b1:93:53:37:a1:18: 77:c2:3e:b2:9d:fe:02:f8:9f:72:87:9f:59:4a:47: ae:83:67:4c:39:88:83:a3:66:30:ba:cc:ae:e3:2f: 5c:56:92:8a:ca:41:e7:97:24:c6:f7:c1:ff:ab:6a: 90:90:1b:2f:51:a3:f3:b5:87:e7:4f:1b:5d:6b:ef: 63:2d:c5:ef:08:ae:19:ea:8c:71:b7:d9:d2:5e:70: af:19:84:15:45:3c:8f:da:85:19:a4:ca:7a:69:17: ef:15:be:16:35:e4:a4:5e:2f:12:64:86:97:66:20: 7d:bd:c6:d6:8f:2b:61:ef:cd:7d:0d:ff:ef:04:02: 1e:29:f2:8f:2c:8b:4f:0b:c6:e6:56:e7:47:a0:64: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C1:DE:9E:F5:31:FA:EA:81:8B:4B:DE:67:D0:F8:AF:D7:A4:05:CA X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:3f:50:b9:6b:9c:ca:cd:66:1f:cd:9b:3c:18:67:eb:62:70: b1:98:34:77:94:a8:95:23:0e:5f:c7:6b:ee:4e:05:c9:60:b1: dc:df:5c:5d:4c:78:ac:1f:b3:19:55:c4:26:ad:06:76:df:a2: 09:5d:8e:53:1a:43:e0:4d:ef:5c:50:7a:aa:4c:35:1e:d3:40: 4e:c0:9a:97:d0:e1:72:35:43:62:dc:88:31:87:33:63:20:d7: 5c:31:ff:16:b6:59:33:1e:6c:2b:b8:9c:77:ad:64:37:20:bf: 84:6b:78:4a:9d:20:8b:d6:06:f0:4f:e4:0e:90:c0:fe:46:15: f4:d3:7f:87:05:62:1b:70:fe:3b:50:5b:2a:f9:ec:62:56:b0: c7:75:a9:05:e0:2a:6b:30:17:48:b6:4a:4e:58:1f:25:58:43: 67:5a:2a:8a:aa:ca:d3:1b:12:92:77:2d:d8:56:7e:30:1e:e5: 6f:64:32:6b:ab:e3:10:65:61:e7:ee:79:8c:71:60:7f:1e:83: 4b:c4:66:64:3d:70:19:fe:ba:d1:88:6b:db:5d:2f:cd:66:63: c6:68:87:c3:06:1e:f1:0e:90:ca:9a:4f:f4:ac:f0:c7:20:a8: 39:99:2f:69:92:91:e4:1e:e1:7b:18:e8:d4:11:c9:57:ce:15: d5:65:b0:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdz5obnQbyBwf4rpSYO+Fp4dc7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA4MDIwNjUwNThaFw0yNjA4MDMxMDQ4NThaMDMxMTAvBgNV BAMTKDAyQzFERTlFRjUzMUZBRUE4MThCNEJERTY3RDBGOEFGRDdBNDA1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ejTZ816fNl2D/aHPTw/foq1n cvmi2c3SZrlCt1CFj/fxuAqh9l3WMi/6jbyA9ml87hMB456qQH2n4CshD7KPBvp/ MRr/apm4YDfJ/jdNcdbyLlC95arrJi2SpyRB/wW/lXSgSBGw6Jn1Od1Y2LLCSrGT UzehGHfCPrKd/gL4n3KHn1lKR66DZ0w5iIOjZjC6zK7jL1xWkorKQeeXJMb3wf+r apCQGy9Ro/O1h+dPG11r72Mtxe8IrhnqjHG32dJecK8ZhBVFPI/ahRmkynppF+8V vhY15KReLxJkhpdmIH29xtaPK2HvzX0N/+8EAh4p8o8si08LxuZW50egZPGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsHenvUx+uqBi0veZ9D4r9ekBcowHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALs/ULlrnMrNZh/NmzwYZ+ticLGYNHeUqJUj Dl/Ha+5OBclgsdzfXF1MeKwfsxlVxCatBnbfogldjlMaQ+BN71xQeqpMNR7TQE7A mpfQ4XI1Q2LciDGHM2Mg11wx/xa2WTMebCu4nHetZDcgv4RreEqdIIvWBvBP5A6Q wP5GFfTTf4cFYhtw/jtQWyr57GJWsMd1qQXgKmswF0i2Sk5YHyVYQ2daKoqqytMb EpJ3LdhWfjAe5W9kMmur4xBlYefueYxxYH8eg0vEZmQ9cBn+utGIa9tdL81mY8Zo h8MGHvEOkMqaT/Ss8McgqDmZL2mSkeQe4XsY6NQRyVfOFdVlsO0= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:46 2026 by rpki-client