$ rpki-client -vvf rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft File: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft (raw, json) Hash identifier: j8ZCKRgjufWs7j4/UvWs0Q9VgVyXw3bHdUeik/zULck= Subject key identifier: 75:29:69:3F:58:57:68:40:75:2A:FB:2F:72:65:63:33:1C:96:99:8D Authority key identifier: BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD Certificate issuer: /CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Certificate serial: 62DD0D1F31D0A65682347FA0943D82237EFEC93B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 07:59:16 +0000 Manifest this update: Fri 24 Jul 2026 07:54:16 +0000 Manifest next update: Sat 25 Jul 2026 10:17:16 +0000 Files and hashes: 1: BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl (hash: DSB6FSZlcoq6F4Rx3vLmXyefsUo0TaBbtTQxkZdK0Vc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:dd:0d:1f:31:d0:a6:56:82:34:7f:a0:94:3d:82:23:7e:fe:c9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD Validity Not Before: Jul 24 07:54:16 2026 GMT Not After : Jul 25 10:17:16 2026 GMT Subject: CN=7529693F58576840752AFB2F726563331C96998D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:62:19:0f:47:de:9a:c6:df:36:34:f0:00: 4a:5b:f3:14:19:4e:c7:b2:ff:cf:d2:ab:78:0e:bb: 98:5e:a1:f6:ea:f2:1a:2c:cf:11:50:0c:5a:7d:95: 3f:b9:4c:99:eb:5e:43:cb:51:bc:37:81:19:84:d8: f2:3e:95:1e:0c:a7:56:53:b8:78:64:0a:16:cd:d9: 34:c8:a0:06:32:77:7a:5f:0c:8b:03:74:55:27:1d: 91:24:b7:46:7f:80:08:ea:74:f0:a1:ba:64:95:b9: 83:05:71:ba:8f:48:31:26:fe:de:1a:c4:86:08:08: f6:36:52:80:83:6b:ac:ad:52:bc:a0:a2:c6:54:33: fe:81:ab:58:33:72:1d:76:d8:14:aa:cb:d6:53:ba: 1f:b1:61:05:43:a1:02:83:5b:39:c5:69:aa:c6:4f: e8:68:26:3f:9f:a0:5d:4e:83:94:b0:bf:30:17:5d: 1d:87:85:03:fe:3e:3c:1b:88:ce:02:a4:2b:ed:8d: 5e:27:9a:1d:f2:fb:ec:19:39:ed:70:bc:6d:f9:0c: 71:73:35:7e:03:a3:d9:13:8f:61:07:6d:ad:a7:6f: ff:75:48:4d:4c:b2:65:09:ac:ce:0c:ac:68:e5:16: 31:73:1e:eb:38:a1:98:f2:b5:94:db:54:62:37:fa: 02:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:29:69:3F:58:57:68:40:75:2A:FB:2F:72:65:63:33:1C:96:99:8D X509v3 Authority Key Identifier: keyid:BD:FB:C7:A3:A8:2A:DE:06:4A:7D:31:57:A4:9E:83:CF:B7:6B:9C:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/BDFBC7A3A82ADE064A7D3157A49E83CFB76B9CCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d9:6c:7e:c9:8c:c8:f8:94:d1:85:97:30:48:4a:f4:8a:c5: 4f:2c:4d:f1:e3:4a:e7:b0:7d:12:7e:c0:bb:61:aa:37:ed:2b: 7a:ed:55:78:8d:e4:7e:bb:b4:fd:4a:27:39:a5:b9:13:25:ee: a6:78:a5:90:a0:f8:06:f0:ee:be:44:ff:30:0f:3e:f3:3c:d8: 4e:a8:81:7e:4b:28:07:4d:eb:8b:fb:5a:2b:a5:70:33:43:5a: 9f:85:c8:43:f9:41:72:be:57:6b:9d:e5:ab:23:f8:d2:24:e3: fa:73:99:46:c3:12:51:7b:fa:48:cc:25:8f:51:53:05:00:18: 98:25:d2:ac:c2:5d:62:45:07:62:ec:78:3c:98:93:ee:4c:d6: be:7d:b4:be:57:58:8b:1c:f7:c1:ef:36:21:d1:7e:ce:7a:8a: 17:bd:09:4b:6c:ce:a1:07:7f:5b:f8:57:cb:ed:cd:f1:c9:94: 57:24:3b:a4:b1:6c:08:83:49:6f:8a:dd:24:1a:79:fd:c5:42: a6:d5:1a:b3:d1:ef:06:27:41:cd:ab:af:b7:8f:0c:94:e4:67: c7:28:13:88:0b:91:25:b0:bd:70:1f:29:12:17:f5:60:23:46: a7:0a:f1:55:20:7e:b9:53:55:8c:12:8a:7c:80:81:c1:7f:c6: 8e:0f:52:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYt0NHzHQplaCNH+glD2CI37+yTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZC NzZCOUNDRDAeFw0yNjA3MjQwNzU0MTZaFw0yNjA3MjUxMDE3MTZaMDMxMTAvBgNV BAMTKDc1Mjk2OTNGNTg1NzY4NDA3NTJBRkIyRjcyNjU2MzMzMUM5Njk5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDElGIZD0femsbfNjTwAEpb8xQZ Tsey/8/Sq3gOu5heofbq8hoszxFQDFp9lT+5TJnrXkPLUbw3gRmE2PI+lR4Mp1ZT uHhkChbN2TTIoAYyd3pfDIsDdFUnHZEkt0Z/gAjqdPChumSVuYMFcbqPSDEm/t4a xIYICPY2UoCDa6ytUrygosZUM/6Bq1gzch122BSqy9ZTuh+xYQVDoQKDWznFaarG T+hoJj+foF1Og5SwvzAXXR2HhQP+PjwbiM4CpCvtjV4nmh3y++wZOe1wvG35DHFz NX4Do9kTj2EHba2nb/91SE1MsmUJrM4MrGjlFjFzHus4oZjytZTbVGI3+gL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdSlpP1hXaEB1KvsvcmVjMxyWmY0wHwYDVR0j BBgwFoAUvfvHo6gq3gZKfTFXpJ6Dz7drnM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgyYjhmNTYtOGU4Mi00NjQ0LWIwNDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNB ODJBREUwNjRBN0QzMTU3QTQ5RTgzQ0ZCNzZCOUNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CREZCQzdBM0E4MkFERTA2NEE3RDMxNTdBNDlFODNDRkI3NkI5 Q0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvQkRGQkM3QTNBODJBREUwNjRBN0QzMTU3QTQ5RTgz Q0ZCNzZCOUNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLZbH7JjMj4lNGFlzBISvSKxU8sTfHjSuew fRJ+wLthqjftK3rtVXiN5H67tP1KJzmluRMl7qZ4pZCg+Abw7r5E/zAPPvM82E6o gX5LKAdN64v7WiulcDNDWp+FyEP5QXK+V2ud5asj+NIk4/pzmUbDElF7+kjMJY9R UwUAGJgl0qzCXWJFB2LseDyYk+5M1r59tL5XWIsc98HvNiHRfs56ihe9CUtszqEH f1v4V8vtzfHJlFckO6SxbAiDSW+K3SQaef3FQqbVGrPR7wYnQc2rr7ePDJTkZ8co E4gLkSWwvXAfKRIX9WAjRqcK8VUgfrlTVYwSinyAgcF/xo4PUi8= -----END CERTIFICATE-----Generated at Fri Jul 24 14:34:54 2026 by rpki-client