$ rpki-client -vvf rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft File: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft (raw, json) Hash identifier: e0SyYPMJ5n51ZZjVzsyzuCD7s/pDm+co/hq42VBQKiY= Subject key identifier: 12:C5:24:6E:60:05:F5:D6:E1:7D:57:5F:C4:1C:F0:7E:79:6D:2C:4B Authority key identifier: BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 Certificate issuer: /CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Certificate serial: 2EC1B06C01130BC4B4CEAEA98035FB697C5066E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 11:13:09 +0000 Manifest this update: Fri 24 Jul 2026 11:08:09 +0000 Manifest next update: Sat 25 Jul 2026 11:42:09 +0000 Files and hashes: 1: 3130332e3134372e38332e302f32342d3234203d3e20313339393538.roa (hash: IfsQ87oFYClIbVmB3uKurJ6Gi4oX0jp4YPlKTlz04zI=) 2: 3130332e3134372e38322e302f32342d3234203d3e20313339393538.roa (hash: QAsVtfJ5MeFkdQm44JCiH05Q1rhNltV7DI7CKM25258=) 3: BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl (hash: CqKM2TIYc9P+XeS2pk1M5HZJH9xGNfsmViPnSzoEzsM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c1:b0:6c:01:13:0b:c4:b4:ce:ae:a9:80:35:fb:69:7c:50:66:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750 Validity Not Before: Jul 24 11:08:09 2026 GMT Not After : Jul 25 11:42:09 2026 GMT Subject: CN=12C5246E6005F5D6E17D575FC41CF07E796D2C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:46:4f:c5:6a:91:fa:3f:46:39:21:08:96: fa:76:20:06:25:ad:0c:20:ff:bf:ac:38:8d:1c:43: ce:c8:19:72:1a:7c:84:4c:38:e9:4d:5a:1e:78:d2: a0:ad:ec:73:bb:48:06:95:76:e4:75:f3:6a:99:a1: 09:ac:a2:6e:86:de:3d:10:60:26:1b:4f:73:52:ea: e7:6b:f5:4b:a8:2a:55:94:4d:5c:14:1b:07:2f:5b: 58:91:e5:89:1c:95:7d:bf:c0:26:c4:e3:d2:31:0e: 72:8c:db:84:6f:de:bd:5a:c2:bb:86:33:ac:4d:88: 68:2e:30:91:e6:bd:da:49:d7:0c:8b:9f:38:02:75: 2e:08:15:e6:00:97:aa:d6:0d:64:b9:9c:57:e2:3f: 9c:48:1a:b6:fe:a3:14:57:a8:e7:18:e6:ba:a9:9a: d7:65:b1:ec:06:df:40:d6:a4:44:cd:e1:f8:ca:6d: 21:e8:55:48:98:53:74:05:84:6b:8b:d6:02:e5:90: f8:23:dc:6b:66:19:bb:17:48:bb:05:da:3e:11:5d: a2:91:6d:93:97:61:6c:98:f3:5a:79:61:af:ce:67: cd:02:98:65:04:40:54:0d:47:72:7f:33:30:1d:20: 03:f4:a8:ec:d4:78:24:e0:17:a7:2a:d1:0d:fa:16: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:24:6E:60:05:F5:D6:E1:7D:57:5F:C4:1C:F0:7E:79:6D:2C:4B X509v3 Authority Key Identifier: keyid:BD:AC:5B:A0:6A:B1:B4:38:C6:4C:F5:66:D2:A3:F4:8E:B2:1B:97:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/BDAC5BA06AB1B438C64CF566D2A3F48EB21B9750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:71:1c:45:43:d1:bc:c2:e2:0c:ab:93:93:c7:de:18:54:5e: 41:08:60:bf:ba:89:1c:09:f4:10:45:2a:e8:f1:a7:b6:42:49: 13:69:90:0c:6b:2e:13:10:3a:c6:39:ce:ea:46:94:d3:06:b2: 90:2f:a6:1f:26:72:07:a7:c4:ba:35:6a:f1:b8:aa:a5:dd:a3: b5:0f:04:a1:fd:64:18:75:89:be:24:08:36:a1:bf:b0:f2:b9: 8b:2f:b4:b6:8d:68:2c:98:80:13:a1:9b:99:cc:08:67:f9:f3: 82:9f:0d:76:90:71:6e:63:67:d3:20:6f:47:17:c1:76:61:e0: e3:a0:dc:e1:87:39:42:33:c7:c7:33:f5:7c:f8:db:54:b2:0e: b4:62:84:de:3c:3a:f4:81:75:c2:d9:6d:57:11:88:9c:db:95: c8:29:64:df:39:b9:41:d4:54:57:35:c3:52:23:6d:3f:2b:e0: c7:c0:90:da:a5:c7:5e:70:04:e0:2b:30:31:d3:42:2f:b4:4b: 40:7a:20:b6:47:48:11:7c:ca:f8:09:47:ea:e1:38:16:82:b8: 39:4c:66:ac:9c:26:22:46:5c:7d:ce:12:e5:ee:df:06:9e:ea: b6:01:13:3f:64:32:8a:8f:2b:b4:5d:cb:f6:ae:30:03:27:b4: 33:de:15:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsGwbAETC8S0zq6pgDX7aXxQZuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVC MjFCOTc1MDAeFw0yNjA3MjQxMTA4MDlaFw0yNjA3MjUxMTQyMDlaMDMxMTAvBgNV BAMTKDEyQzUyNDZFNjAwNUY1RDZFMTdENTc1RkM0MUNGMDdFNzk2RDJDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyUZPxWqR+j9GOSEIlvp2IAYl rQwg/7+sOI0cQ87IGXIafIRMOOlNWh540qCt7HO7SAaVduR182qZoQmsom6G3j0Q YCYbT3NS6udr9UuoKlWUTVwUGwcvW1iR5YkclX2/wCbE49IxDnKM24Rv3r1awruG M6xNiGguMJHmvdpJ1wyLnzgCdS4IFeYAl6rWDWS5nFfiP5xIGrb+oxRXqOcY5rqp mtdlsewG30DWpETN4fjKbSHoVUiYU3QFhGuL1gLlkPgj3GtmGbsXSLsF2j4RXaKR bZOXYWyY81p5Ya/OZ80CmGUEQFQNR3J/MzAdIAP0qOzUeCTgF6cq0Q36FnAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsUkbmAF9dbhfVdfxBzwfnltLEswHwYDVR0j BBgwFoAUvaxboGqxtDjGTPVm0qP0jrIbl1AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWFhNWFjNjUtNjA3MS00NmUyLWJiOWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2 QUIxQjQzOEM2NENGNTY2RDJBM0Y0OEVCMjFCOTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CREFDNUJBMDZBQjFCNDM4QzY0Q0Y1NjZEMkEzRjQ4RUIyMUI5 NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWFhNWFjNjUtNjA3MS00NmUyLWJi OWQtZDc3MGQxMTdjNGI0LzAvQkRBQzVCQTA2QUIxQjQzOEM2NENGNTY2RDJBM0Y0 OEVCMjFCOTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtxHEVD0bzC4gyrk5PH3hhUXkEIYL+6iRwJ 9BBFKujxp7ZCSRNpkAxrLhMQOsY5zupGlNMGspAvph8mcgenxLo1avG4qqXdo7UP BKH9ZBh1ib4kCDahv7DyuYsvtLaNaCyYgBOhm5nMCGf584KfDXaQcW5jZ9Mgb0cX wXZh4OOg3OGHOUIzx8cz9Xz421SyDrRihN48OvSBdcLZbVcRiJzblcgpZN85uUHU VFc1w1IjbT8r4MfAkNqlx15wBOArMDHTQi+0S0B6ILZHSBF8yvgJR+rhOBaCuDlM ZqycJiJGXH3OEuXu3wae6rYBEz9kMoqPK7Rdy/auMAMntDPeFT8= -----END CERTIFICATE-----Generated at Fri Jul 24 14:35:20 2026 by rpki-client