$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: jiJvhwTW2t58n2SBhvwIWi/6iv8lTupfprbXjTAGOYI= Subject key identifier: 04:E1:A9:5A:C3:8A:77:59:35:E3:B3:62:3B:A4:9F:8F:57:9D:6C:EC Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 6FA3371C1B2CFB6902DA0172ACD835BEB673D965 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:57:53 +0000 Manifest this update: Thu 23 Jul 2026 22:52:53 +0000 Manifest next update: Fri 24 Jul 2026 23:03:53 +0000 Files and hashes: 1: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: jheAmdVGMIHyD85FQckokAE2cxuQ3ri7LUUy96PHQo0=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:37:1c:1b:2c:fb:69:02:da:01:72:ac:d8:35:be:b6:73:d9:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: Jul 23 22:52:53 2026 GMT Not After : Jul 24 23:03:53 2026 GMT Subject: CN=04E1A95AC38A775935E3B3623BA49F8F579D6CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:4d:a6:3e:a5:86:a7:67:eb:f0:4b:c1:81: 16:20:f6:89:bf:e8:a3:c0:ba:43:f4:00:cf:a7:6a: ca:60:7e:fb:0c:a3:87:12:ae:8c:81:bb:73:da:9a: b6:4d:a1:e8:46:bd:35:e3:fc:f3:ea:07:a2:d3:83: d1:d9:9b:5c:54:a2:f6:01:c8:0d:8b:b9:7c:ca:78: 84:15:b7:03:5f:25:5d:be:e2:64:55:bd:ec:06:6f: fe:38:e2:96:80:12:06:59:ea:5a:a9:aa:68:05:1c: ec:c2:ee:79:57:8b:24:c9:49:70:de:26:63:56:9c: f7:af:84:cb:00:5d:c9:d9:d9:4a:fd:a0:97:aa:12: ad:b2:c3:22:7b:10:11:35:1f:d4:53:6a:50:eb:d4: ae:af:c7:9a:a1:90:12:ec:26:cb:b3:2d:ae:e5:ef: 89:84:7d:e8:0e:f2:7a:74:ad:82:56:d6:ef:7b:d9: fe:15:86:dd:4a:8b:f2:7d:b4:d5:ff:f7:9e:17:44: 2f:ff:e5:e9:df:78:cb:05:0c:53:b7:54:3e:19:6e: 9b:f0:e2:27:b7:5b:78:35:1d:a4:6b:f6:23:1a:87: 9e:6b:78:d0:3a:d2:e4:18:f7:34:f7:d0:2c:de:8b: 83:fd:d6:7a:5f:cb:b6:d5:cf:a7:07:e0:de:19:9c: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:A9:5A:C3:8A:77:59:35:E3:B3:62:3B:A4:9F:8F:57:9D:6C:EC X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:eb:14:e4:9b:fd:71:f3:dc:35:b8:4d:37:3a:69:a3:23:3a: 9e:21:f0:cc:36:a3:20:85:48:46:a0:98:9d:09:9b:8a:c2:ed: b9:98:3a:4b:34:e4:b1:e3:df:72:7e:69:d2:40:f3:ef:4b:29: 21:ac:3d:ee:5a:d7:e5:44:94:77:e7:bf:de:47:2c:35:60:9d: 8d:fc:34:bc:18:b6:75:80:ac:c2:7e:f4:65:a1:60:ee:cb:a0: de:95:09:d7:39:7b:b5:e8:ae:ac:f3:78:b6:32:8e:53:25:b2: c1:42:37:62:e4:c5:06:e8:36:a9:1f:ab:4e:5d:02:60:13:48: 12:e0:fb:07:7f:77:35:14:16:09:7d:dc:0c:31:e5:36:04:61: 59:1c:94:15:1f:a7:a3:e2:16:89:f3:87:ac:3b:26:be:1f:d5: f7:65:e8:b7:2f:3c:75:1a:56:c8:b2:fa:5f:30:a5:aa:c7:79: 55:00:b1:b1:f9:10:f3:d3:bb:35:c5:b4:c7:46:92:14:9a:81: 83:59:f6:49:18:07:cc:d6:93:1b:ba:73:64:03:5f:f5:bd:63: 97:23:f7:5f:0d:41:62:6c:c2:14:5c:9c:cb:9c:03:32:82:f5: 0a:5f:78:23:5e:0f:d2:da:af:0a:ac:d1:b5:8c:86:75:2d:ef: fd:61:ae:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6M3HBss+2kC2gFyrNg1vrZz2WUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA3MjMyMjUyNTNaFw0yNjA3MjQyMzAzNTNaMDMxMTAvBgNV BAMTKDA0RTFBOTVBQzM4QTc3NTkzNUUzQjM2MjNCQTQ5RjhGNTc5RDZDRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCieE2mPqWGp2fr8EvBgRYg9om/ 6KPAukP0AM+naspgfvsMo4cSroyBu3PamrZNoehGvTXj/PPqB6LTg9HZm1xUovYB yA2LuXzKeIQVtwNfJV2+4mRVvewGb/444paAEgZZ6lqpqmgFHOzC7nlXiyTJSXDe JmNWnPevhMsAXcnZ2Ur9oJeqEq2ywyJ7EBE1H9RTalDr1K6vx5qhkBLsJsuzLa7l 74mEfegO8np0rYJW1u972f4Vht1Ki/J9tNX/954XRC//5enfeMsFDFO3VD4Zbpvw 4ie3W3g1HaRr9iMah55reNA60uQY9zT30Czei4P91npfy7bVz6cH4N4ZnNJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBOGpWsOKd1k147NiO6Sfj1edbOwwHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHrFOSb/XHz3DW4TTc6aaMjOp4h8Mw2oyCF SEagmJ0Jm4rC7bmYOks05LHj33J+adJA8+9LKSGsPe5a1+VElHfnv95HLDVgnY38 NLwYtnWArMJ+9GWhYO7LoN6VCdc5e7XorqzzeLYyjlMlssFCN2LkxQboNqkfq05d AmATSBLg+wd/dzUUFgl93Awx5TYEYVkclBUfp6PiFonzh6w7Jr4f1fdl6LcvPHUa Vsiy+l8wparHeVUAsbH5EPPTuzXFtMdGkhSagYNZ9kkYB8zWkxu6c2QDX/W9Y5cj 918NQWJswhRcnMucAzKC9QpfeCNeD9Larwqs0bWMhnUt7/1hrr8= -----END CERTIFICATE-----Generated at Fri Jul 24 16:18:25 2026 by rpki-client