$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft File: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft (raw, json) Hash identifier: chYifP6ubCnL4HN97g07TxI7ThqHjW6k+GupCDlizwg= Subject key identifier: C4:AE:EF:5B:6C:99:E5:11:A6:16:95:D3:69:BD:42:CB:7E:F9:16:FD Authority key identifier: BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 Certificate issuer: /CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Certificate serial: 0BDF089ACC0BAEC828E908AAC5FABA7C041A590A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:20:17 +0000 Manifest this update: Tue 12 May 2026 19:15:17 +0000 Manifest next update: Wed 13 May 2026 19:27:17 +0000 Files and hashes: 1: BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl (hash: d7VwzAunK4rpMnorRhdFUx5guX/f+AAVciW3ExU61GY=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: 90Cz10FjkFZ2pV6M4XiA2di1cLbPmc5p3zsiLZCbb1Q=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:df:08:9a:cc:0b:ae:c8:28:e9:08:aa:c5:fa:ba:7c:04:1a:59:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD5E824D46E122AB5D174572D15CC2C47E0D02D1 Validity Not Before: May 12 19:15:17 2026 GMT Not After : May 13 19:27:17 2026 GMT Subject: CN=C4AEEF5B6C99E511A61695D369BD42CB7EF916FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:18:11:e3:c5:f9:ac:63:22:9e:8d:ef:23: 55:fb:a7:7a:37:eb:18:9f:e2:56:aa:df:b6:03:01: e5:99:b8:fa:9d:fc:0e:63:b5:d0:fb:45:a8:75:42: 43:fd:2d:79:27:a1:54:5f:04:26:07:0a:e6:fb:27: d1:22:16:08:82:77:47:8e:4d:63:87:5d:fe:bf:5c: e6:fe:f6:8f:6c:ce:8f:7c:5c:eb:a8:a3:d2:24:5f: b1:e9:cc:b4:25:c3:26:e4:39:13:16:66:1e:f7:3e: 89:10:fe:0b:f2:98:5f:26:b3:d4:9a:f6:ca:7e:44: 3a:ff:f6:e2:d3:6c:10:d6:72:07:03:ec:e9:fb:2a: d7:e4:5c:49:3d:b5:68:1d:c2:8a:c1:18:0f:38:6b: 7f:04:4f:fa:b7:86:12:02:5a:57:00:ec:4b:25:06: f6:6c:ff:bc:6c:29:8c:40:f1:d5:83:0a:f4:fb:39: 57:41:ce:3a:04:40:ea:0a:39:a1:6c:76:74:ce:3e: 11:85:bf:f5:20:5b:54:e1:8b:0a:8f:8f:2c:af:5f: 69:7e:20:9a:c8:44:82:d9:55:d2:1d:90:6e:d7:b3: e8:e0:ea:51:3f:72:b5:c0:dd:5e:b8:0e:c2:dc:1c: 22:80:96:00:e0:b0:63:8b:33:a8:4a:21:71:bf:0c: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AE:EF:5B:6C:99:E5:11:A6:16:95:D3:69:BD:42:CB:7E:F9:16:FD X509v3 Authority Key Identifier: keyid:BD:5E:82:4D:46:E1:22:AB:5D:17:45:72:D1:5C:C2:C4:7E:0D:02:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/BD5E824D46E122AB5D174572D15CC2C47E0D02D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b4:e1:53:e8:40:15:73:cc:25:5b:4d:b4:2e:0e:b1:86:96: be:31:63:29:81:dc:97:36:e8:47:a0:84:76:78:5c:75:12:cb: d0:7c:ad:7c:72:dd:9b:64:7a:a9:a7:b9:b2:7a:31:ad:b5:82: 2b:b1:56:b2:c1:57:12:55:10:74:04:d9:49:fd:b7:55:77:cf: 4b:98:ae:6d:ae:e7:d4:50:67:4f:43:ff:9f:c9:da:2b:f6:77: 17:69:01:f9:de:29:de:f2:6c:42:65:38:15:66:78:f5:1e:86: 6b:d1:1a:6e:15:9b:66:58:ff:19:d0:7a:0d:46:33:de:16:2f: 72:ab:1c:01:99:48:3c:83:9a:f4:26:f2:df:9c:83:da:9f:5c: 9c:5b:e4:37:90:9a:bf:e9:e2:2e:61:ac:c7:83:b8:32:4a:05: 92:cb:58:74:8b:5b:46:16:18:83:f5:dd:e5:81:6c:2f:e8:82: 53:4e:8d:7c:49:2b:7f:b3:0a:e8:10:77:0f:47:45:dd:7d:7e: 42:23:2e:f0:92:5a:fc:cf:e4:c8:0a:f4:6a:f2:be:79:cd:61: fa:89:2c:51:ad:0b:77:29:c9:68:1a:91:22:a0:fa:8b:81:e1: d6:3b:10:ea:08:4a:dd:a1:93:e2:0b:46:b6:a3:61:1a:68:15: 5b:68:d4:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC98ImswLrsgo6Qiqxfq6fAQaWQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3 RTBEMDJEMTAeFw0yNjA1MTIxOTE1MTdaFw0yNjA1MTMxOTI3MTdaMDMxMTAvBgNV BAMTKEM0QUVFRjVCNkM5OUU1MTFBNjE2OTVEMzY5QkQ0MkNCN0VGOTE2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwhgR48X5rGMino3vI1X7p3o3 6xif4laq37YDAeWZuPqd/A5jtdD7Rah1QkP9LXknoVRfBCYHCub7J9EiFgiCd0eO TWOHXf6/XOb+9o9szo98XOuoo9IkX7HpzLQlwybkORMWZh73PokQ/gvymF8ms9Sa 9sp+RDr/9uLTbBDWcgcD7On7KtfkXEk9tWgdworBGA84a38ET/q3hhICWlcA7Esl BvZs/7xsKYxA8dWDCvT7OVdBzjoEQOoKOaFsdnTOPhGFv/UgW1ThiwqPjyyvX2l+ IJrIRILZVdIdkG7Xs+jg6lE/crXA3V64DsLcHCKAlgDgsGOLM6hKIXG/DK9jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxK7vW2yZ5RGmFpXTab1Cy375Fv0wHwYDVR0j BBgwFoAUvV6CTUbhIqtdF0Vy0VzCxH4NAtEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThkZTRhZjctYmY0OC00Y2I4LThmNjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0 NkUxMjJBQjVEMTc0NTcyRDE1Q0MyQzQ3RTBEMDJEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDVFODI0RDQ2RTEyMkFCNUQxNzQ1NzJEMTVDQzJDNDdFMEQw MkQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvQkQ1RTgyNEQ0NkUxMjJBQjVEMTc0NTcyRDE1Q0My QzQ3RTBEMDJEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHS04VPoQBVzzCVbTbQuDrGGlr4xYymB3Jc2 6EeghHZ4XHUSy9B8rXxy3ZtkeqmnubJ6Ma21giuxVrLBVxJVEHQE2Un9t1V3z0uY rm2u59RQZ09D/5/J2iv2dxdpAfneKd7ybEJlOBVmePUehmvRGm4Vm2ZY/xnQeg1G M94WL3KrHAGZSDyDmvQm8t+cg9qfXJxb5DeQmr/p4i5hrMeDuDJKBZLLWHSLW0YW GIP13eWBbC/oglNOjXxJK3+zCugQdw9HRd19fkIjLvCSWvzP5MgK9GryvnnNYfqJ LFGtC3cpyWgakSKg+ouB4dY7EOoISt2hk+ILRrajYRpoFVto1Ns= -----END CERTIFICATE-----Generated at Wed May 13 04:25:50 2026 by rpki-client