$ rpki-client -vvf rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft File: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft (raw, json) Hash identifier: P30MVhFWAkr6XXYUbJbh1JNfBq+uXdNs3LDtzttcF70= Subject key identifier: F4:E8:6D:F0:43:1D:C9:B2:3D:75:0C:44:33:F4:9A:E7:D4:51:8B:7B Authority key identifier: BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E Certificate issuer: /CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Certificate serial: 4888D5CBDE71889F1A468329BC0336F466240611 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:47 +0000 Manifest this update: Tue 12 May 2026 19:30:47 +0000 Manifest next update: Wed 13 May 2026 20:55:47 +0000 Files and hashes: 1: BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl (hash: DQX9zYdO1go0fEOXCOen9hYrX+h0JPB4xHKOnZtHF2c=) 2: 3130332e3135332e33342e302f32332d3234203d3e20313430343532.roa (hash: K/vlRNC+KQ5JyA0pwiIFS/TmPu7i6jVh0r5OiRdmy0A=) 3: 323030313a6466343a326438303a3a2f34382d3438203d3e20313430343532.roa (hash: v7DJudWf3ta86HIN/myNYYKoGmeXzKtpr14NT1uUyL0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:88:d5:cb:de:71:88:9f:1a:46:83:29:bc:03:36:f4:66:24:06:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAD1403588CA8E7E1F9A4B306C6B8BE29079793E Validity Not Before: May 12 19:30:47 2026 GMT Not After : May 13 20:55:47 2026 GMT Subject: CN=F4E86DF0431DC9B23D750C4433F49AE7D4518B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:a9:13:95:27:de:62:ed:1f:6f:75:65:66: 41:ab:eb:77:4e:62:8e:cd:73:d9:6c:d6:d8:49:e2: 69:1d:71:72:82:d1:24:ca:5d:a8:f4:f7:99:60:da: 39:0f:b5:6d:83:ad:10:af:1d:ec:5e:f9:9a:b9:ca: 54:63:46:79:80:17:dd:23:11:2c:17:08:1d:7e:5e: 2c:f3:80:a6:77:a2:ed:e5:c2:53:f2:29:a8:8c:7a: cc:9e:09:5f:97:f4:79:40:7d:82:3e:d8:e0:17:d1: 8b:18:b0:98:21:d6:5c:a8:7d:f2:4b:4a:c3:ae:f4: 57:38:2d:c0:43:99:6b:1a:bd:66:fa:70:cb:23:89: c4:4c:7a:14:40:70:60:d8:ee:43:4e:1e:3a:f7:e7: d4:81:82:f1:aa:5b:72:83:66:06:12:d1:1a:29:10: 1e:49:91:49:3a:7c:67:3a:c0:a3:62:6a:92:0d:05: 4a:a5:77:a4:69:7a:1a:e8:50:75:87:19:51:a8:d3: 12:d1:32:57:1d:12:6f:0f:ea:80:7c:dd:67:fa:7a: bf:49:d5:db:f2:20:78:37:6e:fc:3e:eb:1c:18:09: 3e:8c:f0:5d:12:22:82:ac:09:1a:8b:c4:de:cb:4c: 1d:9e:51:1b:88:b9:3c:f6:fb:f9:71:b2:e2:18:a1: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:6D:F0:43:1D:C9:B2:3D:75:0C:44:33:F4:9A:E7:D4:51:8B:7B X509v3 Authority Key Identifier: keyid:BA:D1:40:35:88:CA:8E:7E:1F:9A:4B:30:6C:6B:8B:E2:90:79:79:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/BAD1403588CA8E7E1F9A4B306C6B8BE29079793E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ae:1d:6f:cd:58:e6:5e:6d:3c:a7:9f:b1:7c:c7:d4:e2:ad: 83:b3:d2:5e:6f:1f:63:25:84:d8:33:ea:62:7e:28:ab:30:b9: ac:31:b6:71:9b:ea:2c:98:50:78:0f:46:82:08:d0:f8:1f:ee: 54:b1:ae:eb:e4:80:21:a0:a0:32:09:47:00:2e:88:3d:93:bf: e5:d4:68:1e:a6:88:41:72:61:c8:0f:0f:22:15:a6:82:9c:13: 04:48:92:0d:56:8c:95:e0:66:26:15:18:92:7d:e6:19:6e:c3: ac:03:b7:30:9c:73:3b:26:e0:25:b3:15:d8:34:eb:ec:e1:60: 6e:37:b4:25:57:1e:5a:07:9c:b7:5d:bb:6f:84:03:49:2d:d9: 08:aa:a1:79:03:fd:18:14:d7:82:33:e3:6a:e6:0a:13:48:38: 7e:e1:9d:d4:88:41:7f:32:97:b4:7b:91:9f:d0:c9:7d:b5:b2: 45:1e:5e:2e:f9:af:56:d4:24:a9:31:11:c7:33:c3:0a:82:ff: 24:97:6e:d2:1c:7e:18:33:d5:64:a6:9c:47:85:fa:7e:30:f9: 03:d5:3c:4b:af:a4:51:9e:1f:45:9b:f5:1b:6c:f4:1a:fb:0c: dd:8e:b4:a7:5c:52:bd:64:6e:60:d2:e2:52:63:6a:2a:2f:7e: 65:5a:9d:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIjVy95xiJ8aRoMpvAM29GYkBhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5 MDc5NzkzRTAeFw0yNjA1MTIxOTMwNDdaFw0yNjA1MTMyMDU1NDdaMDMxMTAvBgNV BAMTKEY0RTg2REYwNDMxREM5QjIzRDc1MEM0NDMzRjQ5QUU3RDQ1MThCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PqkTlSfeYu0fb3VlZkGr63dO Yo7Nc9ls1thJ4mkdcXKC0STKXaj095lg2jkPtW2DrRCvHexe+Zq5ylRjRnmAF90j ESwXCB1+XizzgKZ3ou3lwlPyKaiMesyeCV+X9HlAfYI+2OAX0YsYsJgh1lyoffJL SsOu9Fc4LcBDmWsavWb6cMsjicRMehRAcGDY7kNOHjr359SBgvGqW3KDZgYS0Rop EB5JkUk6fGc6wKNiapINBUqld6RpehroUHWHGVGo0xLRMlcdEm8P6oB83Wf6er9J 1dvyIHg3bvw+6xwYCT6M8F0SIoKsCRqLxN7LTB2eURuIuTz2+/lxsuIYobsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Oht8EMdybI9dQxEM/Sa59RRi3swHwYDVR0j BBgwFoAUutFANYjKjn4fmkswbGuL4pB5eT4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmRjNDFjMWEtZTA4OC00ZWY2LTlkMjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4 OENBOEU3RTFGOUE0QjMwNkM2QjhCRTI5MDc5NzkzRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUQxNDAzNTg4Q0E4RTdFMUY5QTRCMzA2QzZCOEJFMjkwNzk3 OTNFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmRjNDFjMWEtZTA4OC00ZWY2LTlk MjgtODE0YzYxNDU2ZDMwLzAvQkFEMTQwMzU4OENBOEU3RTFGOUE0QjMwNkM2QjhC RTI5MDc5NzkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKuHW/NWOZebTynn7F8x9TirYOz0l5vH2Ml hNgz6mJ+KKswuawxtnGb6iyYUHgPRoII0Pgf7lSxruvkgCGgoDIJRwAuiD2Tv+XU aB6miEFyYcgPDyIVpoKcEwRIkg1WjJXgZiYVGJJ95hluw6wDtzCcczsm4CWzFdg0 6+zhYG43tCVXHloHnLddu2+EA0kt2QiqoXkD/RgU14Iz42rmChNIOH7hndSIQX8y l7R7kZ/QyX21skUeXi75r1bUJKkxEcczwwqC/ySXbtIcfhgz1WSmnEeF+n4w+QPV PEuvpFGeH0Wb9Rts9Br7DN2OtKdcUr1kbmDS4lJjaiovfmVandw= -----END CERTIFICATE-----Generated at Wed May 13 02:49:09 2026 by rpki-client