$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: osU7TtnRVCUPK6a6kckwQ8eOzEKI4S9FCMvrq1Yoc1Y= Subject key identifier: F3:78:79:52:79:03:04:27:A7:70:B8:29:A7:E5:38:A6:20:C4:A0:55 Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 2DE95E537B8F46D95889FDD2AD08F4F04206891F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:45 +0000 Manifest this update: Tue 12 May 2026 19:30:45 +0000 Manifest next update: Wed 13 May 2026 22:55:45 +0000 Files and hashes: 1: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: BAsoz8yUKTldsV29yAs4NUQst0nvEL562c24rF0dlQQ=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) 3: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e9:5e:53:7b:8f:46:d9:58:89:fd:d2:ad:08:f4:f0:42:06:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: May 12 19:30:45 2026 GMT Not After : May 13 22:55:45 2026 GMT Subject: CN=F378795279030427A770B829A7E538A620C4A055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:13:3d:24:75:43:47:3e:a8:ec:4b:f5:e0: 7f:04:3b:c1:76:f0:f1:f2:68:60:89:8a:1d:28:22: aa:13:08:92:ce:2d:56:43:1a:52:42:d3:89:e1:74: 11:d2:bd:67:1e:19:64:f7:f3:6c:c9:16:cf:0b:75: 7b:96:b5:22:c8:67:78:fc:76:05:93:44:aa:b5:b8: f2:71:b2:f4:ab:1d:42:59:b4:ce:2c:85:85:77:cb: 9c:ac:3f:d9:23:00:0a:2c:39:fe:af:0d:78:71:53: 02:ca:87:7d:ff:02:09:6b:65:f0:6c:9c:ea:31:fc: 31:60:69:ab:c5:02:f1:c9:93:80:cb:a3:7e:2e:57: 22:d2:1f:2b:01:f4:f8:e9:49:31:0e:b9:16:e3:3c: 85:12:3b:8c:89:34:dd:ab:9a:95:9a:e9:c2:4b:0e: 1b:5a:01:43:f3:da:4e:5f:8f:aa:c3:8e:68:0b:2c: eb:d0:2c:42:6d:63:bb:c5:91:42:ca:35:99:61:9b: 3c:53:ce:7d:20:72:6b:91:c1:b2:b7:3c:5e:79:11: 1a:6a:06:81:ca:de:f1:23:58:6a:bf:c6:3b:93:78: f5:b0:e6:20:7d:ee:72:db:c3:45:ab:96:95:e7:98: 59:02:dd:b9:a9:57:30:18:e0:22:d3:39:f5:c8:c3: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:78:79:52:79:03:04:27:A7:70:B8:29:A7:E5:38:A6:20:C4:A0:55 X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:84:ec:59:8c:ed:f4:a9:03:59:4c:76:7c:01:a7:c8:b1:89: 99:a2:e3:71:b6:7d:72:c1:51:f7:44:f8:6d:09:4f:62:58:9d: 6b:cc:4a:a7:58:89:0f:82:e1:a5:37:1a:27:23:d1:88:df:b5: 63:39:9d:fa:bc:d1:ae:9b:e1:21:21:56:bb:f7:d3:54:9b:96: 1d:12:c6:5d:a5:79:33:27:3b:e3:9a:6b:7a:60:7d:94:a7:f6: 36:96:9a:ac:87:3b:6d:92:4d:a3:3a:b8:66:04:d0:09:41:16: a2:35:ae:5f:f8:b6:57:dd:a3:5b:cb:8b:00:2c:63:5d:88:b7: b5:2a:1e:13:f7:97:16:82:33:e5:a6:cd:5e:32:10:34:da:3e: ad:c0:a8:d3:41:a0:f3:db:9a:a0:62:be:aa:56:37:1f:92:ff: c6:63:13:f4:ca:e4:e6:63:e5:99:0d:6b:36:d8:be:f2:e2:a0: cc:dc:8b:5a:e6:47:a7:fb:34:6b:88:14:65:03:e3:bf:62:95: 37:7d:19:06:16:6a:5a:de:c7:d5:ab:ec:3a:ea:be:e0:f9:c6: ca:10:af:6c:0a:bf:b4:c6:ff:54:fb:ee:be:47:a8:7f:da:58: 1a:68:ad:e1:f4:79:0d:33:a7:30:64:49:cf:f3:9f:20:eb:13: bb:64:56:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeleU3uPRtlYif3SrQj08EIGiR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjA1MTIxOTMwNDVaFw0yNjA1MTMyMjU1NDVaMDMxMTAvBgNV BAMTKEYzNzg3OTUyNzkwMzA0MjdBNzcwQjgyOUE3RTUzOEE2MjBDNEEwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oxM9JHVDRz6o7Ev14H8EO8F2 8PHyaGCJih0oIqoTCJLOLVZDGlJC04nhdBHSvWceGWT382zJFs8LdXuWtSLIZ3j8 dgWTRKq1uPJxsvSrHUJZtM4shYV3y5ysP9kjAAosOf6vDXhxUwLKh33/AglrZfBs nOox/DFgaavFAvHJk4DLo34uVyLSHysB9PjpSTEOuRbjPIUSO4yJNN2rmpWa6cJL DhtaAUPz2k5fj6rDjmgLLOvQLEJtY7vFkULKNZlhmzxTzn0gcmuRwbK3PF55ERpq BoHK3vEjWGq/xjuTePWw5iB97nLbw0WrlpXnmFkC3bmpVzAY4CLTOfXIw9JZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU83h5UnkDBCencLgpp+U4piDEoFUwHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImE7FmM7fSpA1lMdnwBp8ixiZmi43G2fXLB UfdE+G0JT2JYnWvMSqdYiQ+C4aU3Gicj0YjftWM5nfq80a6b4SEhVrv301Sblh0S xl2leTMnO+Oaa3pgfZSn9jaWmqyHO22STaM6uGYE0AlBFqI1rl/4tlfdo1vLiwAs Y12It7UqHhP3lxaCM+WmzV4yEDTaPq3AqNNBoPPbmqBivqpWNx+S/8ZjE/TK5OZj 5ZkNazbYvvLioMzci1rmR6f7NGuIFGUD479ilTd9GQYWalrex9Wr7DrqvuD5xsoQ r2wKv7TG/1T77r5HqH/aWBporeH0eQ0zpzBkSc/znyDrE7tkVm0= -----END CERTIFICATE-----Generated at Tue May 12 22:51:04 2026 by rpki-client