$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft File: BACDD9DBC696965384EE99739EB6991320966120.mft (raw, json) Hash identifier: +UDFwe41FdnVidAPKcT/IWvzn08CC8jLlhiKQhpAtvs= Subject key identifier: E1:3A:3D:DD:33:4A:BC:61:7B:9B:C0:97:98:FF:5F:DF:72:7E:F7:4B Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 Certificate issuer: /CN=BACDD9DBC696965384EE99739EB6991320966120 Certificate serial: 0F51E961DBBDBA8EE110DD8662B048FB9B6DAB64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:24:00 +0000 Manifest this update: Wed 13 May 2026 00:19:00 +0000 Manifest next update: Thu 14 May 2026 02:20:00 +0000 Files and hashes: 1: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=) 2: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=) 3: BACDD9DBC696965384EE99739EB6991320966120.crl (hash: Wxvq3eseCsBoc0aPtN3zLrQsb4kzIya0vnFG0BJgWtU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:51:e9:61:db:bd:ba:8e:e1:10:dd:86:62:b0:48:fb:9b:6d:ab:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120 Validity Not Before: May 13 00:19:00 2026 GMT Not After : May 14 02:20:00 2026 GMT Subject: CN=E13A3DDD334ABC617B9BC09798FF5FDF727EF74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8b:92:b0:a8:25:47:59:77:c0:3e:1f:bf:66: 19:c8:20:5f:cd:04:50:1d:40:17:17:54:da:cd:8d: 94:5b:e1:7e:d9:90:87:90:9b:93:1e:45:ed:96:1b: c3:11:a5:38:70:1c:59:45:3c:ea:d1:57:cf:33:eb: 47:28:79:5f:1b:3b:28:d0:b8:4a:fe:a7:17:5a:b5: 6c:0f:24:5c:f0:75:d8:ec:f9:e0:6d:3f:d4:f4:54: 30:ac:16:1c:c0:2d:dc:33:59:9a:11:8e:08:92:47: c7:f8:83:33:35:35:02:64:ad:3e:91:05:ce:59:d5: 64:18:2a:a9:98:b7:d8:c9:c9:da:3c:cc:9c:ca:39: 52:7e:7d:7e:8d:ba:1b:ed:c4:ef:e0:e9:1f:51:e4: a3:5b:13:7e:70:85:1c:9f:2a:77:19:7a:e4:c0:70: 7a:ed:b3:44:64:18:5f:b8:c4:d7:bb:28:5a:2e:38: 58:ad:a6:6b:dd:52:f3:3c:e8:4d:9a:7a:d3:e4:a0: e8:16:65:7b:64:0c:f1:db:3d:97:4a:eb:5d:9f:f9: d1:4c:2d:bf:00:21:7c:80:d9:ec:24:26:d2:a7:d6: 08:e5:78:17:ba:0d:fc:7f:e0:7b:d5:68:bc:7d:43: d9:b6:7f:80:36:8a:fa:11:fd:3b:05:04:4f:ea:5b: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:3D:DD:33:4A:BC:61:7B:9B:C0:97:98:FF:5F:DF:72:7E:F7:4B X509v3 Authority Key Identifier: keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fa:3b:03:d4:ec:4f:05:d5:2e:3b:ea:74:2a:1b:ea:8a:81: b3:40:2c:e9:7d:ee:96:8f:09:7f:26:b1:26:7e:2e:e9:d5:14: fb:b7:86:2d:6a:4e:34:76:a6:2e:25:6b:95:98:09:26:6b:fd: 99:6c:21:78:73:29:3f:2f:ea:0e:d4:dc:55:3e:06:b5:7c:a9: 50:92:53:49:68:fe:74:a3:1c:38:b8:c5:e4:26:2a:ea:30:dd: 04:d1:d9:77:4a:08:31:c9:d8:28:97:a4:67:38:d1:e5:b5:9c: 4a:83:cd:2e:f7:8f:c3:a4:b9:06:08:0f:0d:ed:68:9a:46:39: 17:22:97:be:c3:3c:5b:63:d5:01:fb:b5:af:99:d6:9d:f7:85: 0a:f6:54:04:64:7f:23:34:ef:1d:53:4a:1f:69:76:6a:bc:12: 75:0e:6b:2e:b0:e9:05:fc:60:3a:f6:41:12:14:7b:96:53:c6: 1c:34:b3:19:35:1f:27:1d:b5:38:a2:9f:e6:2c:82:06:00:d2: a5:eb:d6:f0:de:e1:ed:3f:db:70:c3:a9:c4:89:d4:96:5a:8b: 25:8d:07:db:03:ff:5a:11:e8:a7:ae:c5:05:d6:e7:7e:bf:47: e7:36:60:ee:fb:75:9a:43:8d:b6:cb:60:c6:c0:39:52:4c:35: ac:03:83:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1HpYdu9uo7hEN2GYrBI+5ttq2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5MTMy MDk2NjEyMDAeFw0yNjA1MTMwMDE5MDBaFw0yNjA1MTQwMjIwMDBaMDMxMTAvBgNV BAMTKEUxM0EzREREMzM0QUJDNjE3QjlCQzA5Nzk4RkY1RkRGNzI3RUY3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSi5KwqCVHWXfAPh+/ZhnIIF/N BFAdQBcXVNrNjZRb4X7ZkIeQm5MeRe2WG8MRpThwHFlFPOrRV88z60coeV8bOyjQ uEr+pxdatWwPJFzwddjs+eBtP9T0VDCsFhzALdwzWZoRjgiSR8f4gzM1NQJkrT6R Bc5Z1WQYKqmYt9jJydo8zJzKOVJ+fX6NuhvtxO/g6R9R5KNbE35whRyfKncZeuTA cHrts0RkGF+4xNe7KFouOFitpmvdUvM86E2aetPkoOgWZXtkDPHbPZdK612f+dFM Lb8AIXyA2ewkJtKn1gjleBe6Dfx/4HvVaLx9Q9m2f4A2ivoR/TsFBE/qWxKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4To93TNKvGF7m8CXmP9f33J+90swHwYDVR0j BBgwFoAUus3Z28aWllOE7plznraZEyCWYSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA4NzIwODYtODA1Yy00MGFhLTg3YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJD Njk2OTY1Mzg0RUU5OTczOUVCNjk5MTMyMDk2NjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUNERDlEQkM2OTY5NjUzODRFRTk5NzM5RUI2OTkxMzIwOTY2 MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5 MTMyMDk2NjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH6OwPU7E8F1S476nQqG+qKgbNALOl97paP CX8msSZ+LunVFPu3hi1qTjR2pi4la5WYCSZr/ZlsIXhzKT8v6g7U3FU+BrV8qVCS U0lo/nSjHDi4xeQmKuow3QTR2XdKCDHJ2CiXpGc40eW1nEqDzS73j8OkuQYIDw3t aJpGORcil77DPFtj1QH7ta+Z1p33hQr2VARkfyM07x1TSh9pdmq8EnUOay6w6QX8 YDr2QRIUe5ZTxhw0sxk1HycdtTiin+YsggYA0qXr1vDe4e0/23DDqcSJ1JZaiyWN B9sD/1oR6KeuxQXW536/R+c2YO77dZpDjbbLYMbAOVJMNawDgxo= -----END CERTIFICATE-----Generated at Wed May 13 02:15:22 2026 by rpki-client