$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft File: BACDD9DBC696965384EE99739EB6991320966120.mft (raw, json) Hash identifier: wgDisz/0HPh5H6G2L7sD830ckR/heCZchf8/yhGs5gg= Subject key identifier: 04:C1:BD:6D:F9:B5:FE:50:C2:51:CE:23:89:3A:E4:8C:82:20:F3:2B Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 Certificate issuer: /CN=BACDD9DBC696965384EE99739EB6991320966120 Certificate serial: 1F70140CBE7AB5A65F59B9BB0B71EC2F892C377F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:09:36 +0000 Manifest this update: Thu 23 Jul 2026 16:04:36 +0000 Manifest next update: Fri 24 Jul 2026 17:53:36 +0000 Files and hashes: 1: 3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (hash: L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=) 2: BACDD9DBC696965384EE99739EB6991320966120.crl (hash: C+FqHQXs3g5s+HKMnN2G26nHEV+dY9MddozP3M/6sMA=) 3: 3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (hash: jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:70:14:0c:be:7a:b5:a6:5f:59:b9:bb:0b:71:ec:2f:89:2c:37:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120 Validity Not Before: Jul 23 16:04:36 2026 GMT Not After : Jul 24 17:53:36 2026 GMT Subject: CN=04C1BD6DF9B5FE50C251CE23893AE48C8220F32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:fe:5a:92:2d:0e:28:70:a6:12:45:82:3c: dd:ac:d7:93:7b:49:f9:20:58:75:26:2b:e9:4a:06: e2:21:c2:aa:48:99:ff:f9:88:f1:c7:92:cf:a4:bb: 1b:46:92:6a:2b:29:22:7b:34:c6:34:a3:65:4c:51: 81:4a:f0:41:bf:39:fd:2f:c5:d9:8a:85:4d:37:a3: 2d:bf:90:18:98:13:76:d4:35:1f:4f:ae:46:45:42: 34:27:dd:b6:17:c5:8e:96:c4:b5:38:62:3e:5f:5c: f3:8a:42:0d:83:1f:3d:ab:79:b0:6b:2a:ab:e3:ed: 9e:2b:dd:39:02:bd:34:74:df:88:c2:d1:56:4f:12: f3:a2:06:35:d2:32:8c:75:df:70:6a:38:07:c1:c4: 52:57:af:b1:ae:52:ee:60:ea:d2:32:66:df:e7:ac: d5:46:2c:81:2f:26:59:34:82:3f:b1:3e:4b:cc:05: 69:92:fc:5f:b9:35:1f:f0:25:7e:8c:a1:db:78:de: 46:7a:fb:ea:21:b0:bd:6b:a3:c8:6d:aa:a0:1c:b7: 70:e9:20:0d:c6:10:34:85:f1:2e:97:3c:ab:10:08: d8:24:39:69:1d:20:cc:cb:49:18:9b:ea:5c:e7:6c: ce:93:04:41:62:8d:ae:aa:c9:cc:a4:ae:39:11:70: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C1:BD:6D:F9:B5:FE:50:C2:51:CE:23:89:3A:E4:8C:82:20:F3:2B X509v3 Authority Key Identifier: keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:5c:fa:77:23:72:4e:3a:9c:fe:e3:6e:7e:7f:ec:63:db: 6c:0c:0c:b1:31:1d:e1:db:56:11:14:d0:6c:29:f0:c9:f6:fc: 8c:50:04:a0:c3:d3:5d:f8:95:ce:f4:77:b5:dc:3e:cf:23:ff: f2:60:10:fb:5a:f6:c7:6b:b5:3d:5b:e1:b0:87:9d:8e:f8:b3: 70:58:14:47:ac:61:12:5d:ee:b8:2a:05:18:ba:cb:8a:a0:40: c5:3c:3d:cf:16:ee:91:9d:0c:82:e0:c9:78:6f:2c:f6:57:56: 62:dd:45:d0:02:98:ec:f9:25:70:f2:ea:a5:54:f3:fd:b7:51: d5:64:f7:c2:e7:18:44:b5:a2:d8:d8:26:29:c3:90:a7:08:35: 44:26:b9:1c:2d:d2:25:70:66:1a:68:28:a8:fb:8c:29:84:a1: a0:9d:dc:ec:4c:7e:32:de:8a:df:8f:64:c5:ef:48:cc:c0:64: 47:50:4b:ec:85:f7:5a:58:87:1c:6f:eb:13:c6:4b:d4:0d:8a: c4:03:e8:f1:9c:72:f9:b1:13:d6:fe:76:64:d9:26:af:9c:62: 76:a0:f9:71:8d:49:82:fd:91:65:f8:19:8f:de:d4:d4:91:16: 4b:95:ab:11:fa:d7:27:25:7c:e0:47:f9:e6:00:a7:b6:b4:15: 63:29:6b:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3AUDL56taZfWbm7C3HsL4ksN38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5MTMy MDk2NjEyMDAeFw0yNjA3MjMxNjA0MzZaFw0yNjA3MjQxNzUzMzZaMDMxMTAvBgNV BAMTKDA0QzFCRDZERjlCNUZFNTBDMjUxQ0UyMzg5M0FFNDhDODIyMEYzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lv5aki0OKHCmEkWCPN2s15N7 SfkgWHUmK+lKBuIhwqpImf/5iPHHks+kuxtGkmorKSJ7NMY0o2VMUYFK8EG/Of0v xdmKhU03oy2/kBiYE3bUNR9PrkZFQjQn3bYXxY6WxLU4Yj5fXPOKQg2DHz2rebBr Kqvj7Z4r3TkCvTR034jC0VZPEvOiBjXSMox133BqOAfBxFJXr7GuUu5g6tIyZt/n rNVGLIEvJlk0gj+xPkvMBWmS/F+5NR/wJX6Modt43kZ6++ohsL1ro8htqqAct3Dp IA3GEDSF8S6XPKsQCNgkOWkdIMzLSRib6lznbM6TBEFija6qycykrjkRcM89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMG9bfm1/lDCUc4jiTrkjIIg8yswHwYDVR0j BBgwFoAUus3Z28aWllOE7plznraZEyCWYSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjA4NzIwODYtODA1Yy00MGFhLTg3YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJD Njk2OTY1Mzg0RUU5OTczOUVCNjk5MTMyMDk2NjEyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUNERDlEQkM2OTY5NjUzODRFRTk5NzM5RUI2OTkxMzIwOTY2 MTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjA4NzIwODYtODA1Yy00MGFhLTg3 YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5 MTMyMDk2NjEyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjwXPp3I3JOOpz+425+f+xj22wMDLExHeHb VhEU0Gwp8Mn2/IxQBKDD0134lc70d7XcPs8j//JgEPta9sdrtT1b4bCHnY74s3BY FEesYRJd7rgqBRi6y4qgQMU8Pc8W7pGdDILgyXhvLPZXVmLdRdACmOz5JXDy6qVU 8/23UdVk98LnGES1otjYJinDkKcINUQmuRwt0iVwZhpoKKj7jCmEoaCd3OxMfjLe it+PZMXvSMzAZEdQS+yF91pYhxxv6xPGS9QNisQD6PGccvmxE9b+dmTZJq+cYnag +XGNSYL9kWX4GY/e1NSRFkuVqxH61yclfOBH+eYAp7a0FWMpa9c= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:55 2026 by rpki-client