$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: yzV2qFpeXb/fSzw+3lFUSE7cO3vE8rZewqjLzl3vsds= Subject key identifier: D2:74:F2:C7:95:64:C2:B5:A1:26:41:A2:CA:44:09:22:8B:C7:5E:C4 Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 32888283067FE7E6D71208569AC25BC76E6061CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:59:18 +0000 Manifest this update: Fri 24 Jul 2026 03:54:18 +0000 Manifest next update: Sat 25 Jul 2026 07:55:18 +0000 Files and hashes: 1: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: 0by08X60KPHLLAIlfwa4rgv4jESDXlvu4fJ/PHh7hoM=) 2: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) 3: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:88:82:83:06:7f:e7:e6:d7:12:08:56:9a:c2:5b:c7:6e:60:61:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: Jul 24 03:54:18 2026 GMT Not After : Jul 25 07:55:18 2026 GMT Subject: CN=D274F2C79564C2B5A12641A2CA4409228BC75EC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6a:3c:83:c7:f4:47:15:7a:9a:af:b5:35:a6: a3:af:10:94:b3:9e:9b:e7:eb:23:41:f3:e3:53:f8: a4:6e:58:45:f4:c2:e0:71:ca:b7:f4:f3:32:5a:8b: d2:06:6a:49:60:ff:82:7e:70:0a:18:69:ff:59:57: 87:b3:3d:45:0d:61:ae:7a:ec:46:2e:bb:f0:20:19: 83:db:2e:bb:56:03:6b:7c:84:3d:e2:bd:dc:a8:76: 86:e0:a3:d6:7b:96:6f:4a:8c:89:78:8d:dd:87:52: 9a:76:02:08:06:15:ad:7d:75:93:54:6c:e6:13:c1: 51:31:0f:92:34:6a:13:87:5d:b1:f6:af:28:1e:0c: 29:bb:8e:5d:1a:0f:b2:f8:2e:ff:ad:8d:2b:b3:67: 35:dc:9a:db:11:b0:88:aa:95:0c:66:6b:c4:39:c7: 0d:85:5c:65:0d:fc:1b:a0:9a:70:10:40:69:76:ed: b6:ea:8a:b1:ad:d1:96:b3:7a:e4:7c:ba:1f:17:ff: 0d:42:52:05:35:ee:f2:f9:73:3d:08:85:15:9e:80: b9:5b:e3:c0:ad:fb:c5:e8:e7:72:a2:3c:fe:53:24: 97:4a:ee:b6:5c:08:d3:35:28:ae:e7:19:7a:b8:ab: 27:51:a2:31:07:9f:8a:13:ab:e0:e4:56:39:64:c0: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:74:F2:C7:95:64:C2:B5:A1:26:41:A2:CA:44:09:22:8B:C7:5E:C4 X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9e:e0:5c:e9:47:12:58:58:6a:c9:fc:79:60:d8:e4:4d:32: 0f:ec:ef:b7:fe:bc:a2:bd:e4:f9:a8:2c:2f:bf:c6:50:f3:ec: 9a:45:1f:53:dd:4a:4b:9d:7f:4c:18:07:31:23:4b:48:92:79: fe:d0:37:74:75:65:01:23:fc:94:b3:96:15:5c:a7:ca:aa:c6: 6f:ff:78:0b:07:7c:35:33:19:8f:54:7a:fe:7c:e0:09:6b:d5: c0:76:84:23:4e:08:6e:b5:36:30:0e:84:a3:36:6a:e2:00:8e: 55:fd:38:d0:2c:8d:8f:da:91:6f:c4:41:da:a3:06:09:74:99: b5:01:3c:ed:24:59:6f:b5:aa:69:22:b6:1a:ba:f0:1a:cd:b5: d7:87:d4:6e:27:53:55:b1:15:de:16:6c:c8:d2:2e:f3:99:92: 31:6e:60:ee:3d:03:26:b5:0c:f7:54:b6:96:d4:84:f3:de:bd: e5:d8:90:d6:75:3c:29:da:f2:7c:e4:60:84:ed:50:be:e0:ab: 10:a5:82:8c:62:8d:10:ce:e4:b4:62:7b:d5:e2:2f:01:96:28: 19:74:46:06:a3:5b:7d:26:20:61:f2:7c:1e:0c:3f:33:56:c0: 0e:31:4b:03:fd:17:46:8c:b3:21:32:0c:cf:38:8b:5d:98:24: 99:55:1d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMoiCgwZ/5+bXEghWmsJbx25gYc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA3MjQwMzU0MThaFw0yNjA3MjUwNzU1MThaMDMxMTAvBgNV BAMTKEQyNzRGMkM3OTU2NEMyQjVBMTI2NDFBMkNBNDQwOTIyOEJDNzVFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJajyDx/RHFXqar7U1pqOvEJSz npvn6yNB8+NT+KRuWEX0wuBxyrf08zJai9IGaklg/4J+cAoYaf9ZV4ezPUUNYa56 7EYuu/AgGYPbLrtWA2t8hD3ivdyodobgo9Z7lm9KjIl4jd2HUpp2AggGFa19dZNU bOYTwVExD5I0ahOHXbH2rygeDCm7jl0aD7L4Lv+tjSuzZzXcmtsRsIiqlQxma8Q5 xw2FXGUN/BugmnAQQGl27bbqirGt0ZazeuR8uh8X/w1CUgU17vL5cz0IhRWegLlb 48Ct+8Xo53KiPP5TJJdK7rZcCNM1KK7nGXq4qydRojEHn4oTq+DkVjlkwBK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0nTyx5VkwrWhJkGiykQJIovHXsQwHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCe4FzpRxJYWGrJ/Hlg2ORNMg/s77f+vKK9 5PmoLC+/xlDz7JpFH1PdSkudf0wYBzEjS0iSef7QN3R1ZQEj/JSzlhVcp8qqxm// eAsHfDUzGY9Uev584Alr1cB2hCNOCG61NjAOhKM2auIAjlX9ONAsjY/akW/EQdqj Bgl0mbUBPO0kWW+1qmkithq68BrNtdeH1G4nU1WxFd4WbMjSLvOZkjFuYO49Aya1 DPdUtpbUhPPeveXYkNZ1PCna8nzkYITtUL7gqxClgoxijRDO5LRie9XiLwGWKBl0 RgajW30mIGHyfB4MPzNWwA4xSwP9F0aMsyEyDM84i12YJJlVHSI= -----END CERTIFICATE-----Generated at Fri Jul 24 15:06:47 2026 by rpki-client