$ rpki-client -vvf rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft File: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft (raw, json) Hash identifier: P/HNzd1HYbenJgnofsbHJC9ynf9RI5Q+NQh8yev5hKk= Subject key identifier: 25:B9:C2:AE:C3:D7:F1:48:96:3F:D1:1C:35:51:9E:E9:4D:9B:5D:81 Authority key identifier: BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B Certificate issuer: /CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Certificate serial: 0CFE386BE816137086AA96399D9D961CCBC1C6D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:35:03 +0000 Manifest this update: Tue 12 May 2026 08:30:03 +0000 Manifest next update: Wed 13 May 2026 08:54:03 +0000 Files and hashes: 1: BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl (hash: HG8wzJMZJbPBWpgRqchZ+OmBGHF5Y7VYZxohjdGZH74=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: D1W5omLh7o0cboJZQI9GxY1nYLxszT6FDxJvrufpNko=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:fe:38:6b:e8:16:13:70:86:aa:96:39:9d:9d:96:1c:cb:c1:c6:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDC7DB49447E34D3CF074E82FCC5B942799CB19B Validity Not Before: May 12 08:30:03 2026 GMT Not After : May 13 08:54:03 2026 GMT Subject: CN=25B9C2AEC3D7F148963FD11C35519EE94D9B5D81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:fd:72:7c:6e:23:d8:42:24:48:de:a6:5c: 11:6d:37:ff:ab:05:6e:9b:b7:c0:c5:19:d6:e6:8d: a6:85:c2:55:2f:3a:f8:36:6c:88:f3:ed:19:8a:68: 85:f9:3e:cb:8c:09:1b:7e:1d:b8:8c:09:c9:09:19: f1:49:0e:01:c4:d2:77:c7:ec:54:e4:94:ba:d0:04: 05:55:c1:53:e1:70:df:8b:2a:fb:e2:3f:3e:ca:8c: f5:bd:a2:ad:49:6d:63:ae:fe:40:31:f9:32:c0:d5: b7:2f:42:99:cb:f6:b8:49:52:3a:58:c2:ce:e4:ea: 01:b3:b6:ab:28:dd:6f:ba:a9:f2:49:bf:9e:79:e1: 5c:bd:9c:ca:62:48:38:95:e3:9f:b5:d2:fc:f9:e5: 2e:56:ad:fe:bf:12:c4:46:0d:b7:84:ad:74:20:b6: 03:65:e9:03:2a:09:25:04:87:82:f5:64:29:2d:0c: e5:20:0d:49:8c:5b:11:60:4e:92:44:55:fe:48:38: db:16:82:93:19:e5:fa:38:8d:57:f3:6e:b7:b0:88: fa:41:4a:51:c3:72:93:dc:90:a0:39:30:c5:92:9f: b5:c8:21:92:46:9e:fd:ac:c9:ba:e7:af:06:5e:43: e0:0b:78:43:c1:94:74:96:e8:7e:a1:46:74:29:e9: b4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:B9:C2:AE:C3:D7:F1:48:96:3F:D1:1C:35:51:9E:E9:4D:9B:5D:81 X509v3 Authority Key Identifier: keyid:BD:C7:DB:49:44:7E:34:D3:CF:07:4E:82:FC:C5:B9:42:79:9C:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/BDC7DB49447E34D3CF074E82FCC5B942799CB19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:aa:47:a8:38:01:97:23:d7:78:99:6b:c4:65:4c:a3:87:bc: ef:f5:7a:9c:4d:c1:3d:62:cd:98:b3:db:1a:55:73:f3:bb:11: 9e:5e:0f:16:0a:78:0b:63:6d:8d:03:9c:30:18:20:92:5a:3a: cf:fe:84:d2:12:5a:f0:80:21:ea:e2:4b:e8:85:0e:08:3b:f6: c0:0b:ad:f8:7b:41:1d:e9:88:be:aa:0f:73:2f:dd:bb:0f:37: f8:63:70:1f:85:e4:8e:4c:53:20:b5:e7:39:18:e6:e8:0b:41: 42:ed:33:18:e7:db:95:11:2b:75:40:e8:3d:3e:f9:1a:a1:bf: bd:5c:ac:94:1d:bc:d1:a9:da:b3:16:a0:81:35:73:c6:fc:2d: 9a:78:40:db:fd:ec:09:50:67:f7:a9:d3:04:45:44:6d:b3:f4: 0f:36:e6:4e:34:8e:08:5c:5a:d3:6f:c0:b9:bc:37:7a:9c:e6: 5d:11:c0:c3:ec:57:2d:95:12:34:f5:bd:1f:a2:5f:9e:a9:5f: 8e:af:6c:82:da:4b:b8:fc:ee:94:ee:2a:60:9d:5c:55:1e:49: cb:94:2f:15:6d:6a:1c:bf:ed:19:42:08:1c:be:d0:de:12:73: e4:c5:38:37:e8:8a:50:9b:7d:9d:e0:db:4e:1e:e8:d7:76:47: 15:f2:62:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDP44a+gWE3CGqpY5nZ2WHMvBxtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3 OTlDQjE5QjAeFw0yNjA1MTIwODMwMDNaFw0yNjA1MTMwODU0MDNaMDMxMTAvBgNV BAMTKDI1QjlDMkFFQzNEN0YxNDg5NjNGRDExQzM1NTE5RUU5NEQ5QjVEODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmf1yfG4j2EIkSN6mXBFtN/+r BW6bt8DFGdbmjaaFwlUvOvg2bIjz7RmKaIX5PsuMCRt+HbiMCckJGfFJDgHE0nfH 7FTklLrQBAVVwVPhcN+LKvviPz7KjPW9oq1JbWOu/kAx+TLA1bcvQpnL9rhJUjpY ws7k6gGztqso3W+6qfJJv5554Vy9nMpiSDiV45+10vz55S5Wrf6/EsRGDbeErXQg tgNl6QMqCSUEh4L1ZCktDOUgDUmMWxFgTpJEVf5IONsWgpMZ5fo4jVfzbrewiPpB SlHDcpPckKA5MMWSn7XIIZJGnv2sybrnrwZeQ+ALeEPBlHSW6H6hRnQp6bRpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJbnCrsPX8UiWP9EcNVGe6U2bXYEwHwYDVR0j BBgwFoAUvcfbSUR+NNPPB06C/MW5QnmcsZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmE4OWI3ZGQtOTlhNy00NTBlLWJlODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0 NDdFMzREM0NGMDc0RTgyRkNDNUI5NDI3OTlDQjE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREM3REI0OTQ0N0UzNEQzQ0YwNzRFODJGQ0M1Qjk0Mjc5OUNC MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvQkRDN0RCNDk0NDdFMzREM0NGMDc0RTgyRkNDNUI5 NDI3OTlDQjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuqR6g4AZcj13iZa8RlTKOHvO/1epxNwT1i zZiz2xpVc/O7EZ5eDxYKeAtjbY0DnDAYIJJaOs/+hNISWvCAIeriS+iFDgg79sAL rfh7QR3piL6qD3Mv3bsPN/hjcB+F5I5MUyC15zkY5ugLQULtMxjn25URK3VA6D0+ +Rqhv71crJQdvNGp2rMWoIE1c8b8LZp4QNv97AlQZ/ep0wRFRG2z9A825k40jghc WtNvwLm8N3qc5l0RwMPsVy2VEjT1vR+iX56pX46vbILaS7j87pTuKmCdXFUeScuU LxVtahy/7RlCCBy+0N4Sc+TFODfoilCbfZ3g204e6Nd2RxXyYjY= -----END CERTIFICATE-----Generated at Tue May 12 23:20:36 2026 by rpki-client