$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: YDfcNE7m7KN0oUwTsBAux5XI3Z1qoFqwJqwkWK2dJCs= Subject key identifier: D2:47:43:41:72:51:C1:42:35:1C:26:FC:A9:E1:F4:35:CA:54:16:BD Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 0237F35E4A321D985CA438C6E3567F47570E093A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:37:37 +0000 Manifest this update: Tue 12 May 2026 06:32:37 +0000 Manifest next update: Wed 13 May 2026 09:22:37 +0000 Files and hashes: 1: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: 46xT/dTeVyvSs2pZYTIvCDiOISfHU7tydNY9Qn24DAI=) 2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 4: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:37:f3:5e:4a:32:1d:98:5c:a4:38:c6:e3:56:7f:47:57:0e:09:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: May 12 06:32:37 2026 GMT Not After : May 13 09:22:37 2026 GMT Subject: CN=D24743417251C142351C26FCA9E1F435CA5416BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:3b:c9:b9:d0:56:cb:12:40:d9:fe:c4:1b: 6d:54:0a:34:ee:1f:2b:f2:80:f8:85:9e:62:ac:fa: 2e:c9:93:0c:c7:7b:12:b0:50:3c:2a:fd:9b:32:58: e7:59:2c:de:ef:a9:78:7d:71:55:34:42:a5:9a:1b: de:73:1f:f6:e4:aa:91:6d:7e:8b:c3:14:49:f4:4e: 9a:0a:92:66:8e:17:5d:31:b7:b0:b8:7a:d7:ed:32: 24:21:0b:7a:bd:ca:e1:42:a6:ba:b5:2d:51:4d:6a: e1:ee:f2:36:f2:01:6a:c0:53:45:1f:45:f6:f8:b1: 48:c2:c8:df:34:be:b4:7e:2e:3a:26:4e:f8:d1:33: ee:fb:3b:85:9f:ad:94:20:6a:4e:93:c4:d5:d5:16: c3:b0:14:ad:4d:78:6d:8a:7c:21:f3:09:cc:b3:f5: f5:67:df:19:55:a6:a3:a1:25:38:1e:55:e7:18:39: 3f:a5:c0:81:28:5e:d4:da:db:fa:9a:fb:e8:79:5f: 53:3f:94:99:f1:e5:0a:e5:d6:26:8f:36:9a:bc:75: 49:35:c1:02:14:84:4a:dc:19:d1:1a:26:85:02:bd: 6c:f5:77:6e:88:13:ed:c1:84:ae:e8:54:7c:92:f9: 85:9a:3d:4a:e2:d0:d6:06:24:77:fa:0c:66:76:1d: c7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:47:43:41:72:51:C1:42:35:1C:26:FC:A9:E1:F4:35:CA:54:16:BD X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4f:f0:be:ca:7e:6b:13:e1:70:57:e9:aa:7c:11:6c:98:76: 4c:8c:4e:f5:80:7c:d2:ca:47:1f:f6:de:eb:05:c9:42:d1:6a: 86:17:b0:0b:37:9e:40:a3:13:a9:28:91:38:06:cf:d5:8c:f7: f9:5d:52:22:62:1c:f3:e4:93:0d:74:69:bd:dc:5f:fd:91:67: 9a:ed:f2:04:3e:4f:6e:2e:e6:e2:08:11:b7:94:cb:31:b2:39: 9c:36:09:4a:dc:8b:6f:db:6a:90:98:66:42:5c:46:c0:8f:af: 9e:56:33:51:12:da:0c:55:b7:bc:7c:5e:7b:5c:77:c6:b0:44: 7d:12:c6:6e:e1:eb:01:51:4a:df:c1:32:d3:7c:fc:c7:dd:21: 9f:5b:f7:c8:87:19:2c:e4:06:24:a9:e5:c6:38:b8:6c:4b:e0: 7d:99:2a:eb:e0:32:82:a0:b7:62:89:30:da:d8:26:95:8a:01: e2:d2:ac:90:43:1d:16:c2:be:cd:f5:f9:bc:30:6f:fb:ca:a3: cf:f7:a9:29:2c:55:81:70:ba:73:23:52:d7:5a:e7:c7:e2:94: 8d:5c:ed:eb:f5:e3:34:14:ec:d2:2c:07:70:76:f7:ab:cf:8b: d6:4e:c2:83:f7:19:4f:b1:5f:20:1c:b8:29:bc:1b:62:7a:f5: 33:3b:66:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjfzXkoyHZhcpDjG41Z/R1cOCTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA1MTIwNjMyMzdaFw0yNjA1MTMwOTIyMzdaMDMxMTAvBgNV BAMTKEQyNDc0MzQxNzI1MUMxNDIzNTFDMjZGQ0E5RTFGNDM1Q0E1NDE2QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKjvJudBWyxJA2f7EG21UCjTu HyvygPiFnmKs+i7JkwzHexKwUDwq/ZsyWOdZLN7vqXh9cVU0QqWaG95zH/bkqpFt fovDFEn0TpoKkmaOF10xt7C4etftMiQhC3q9yuFCprq1LVFNauHu8jbyAWrAU0Uf Rfb4sUjCyN80vrR+LjomTvjRM+77O4WfrZQgak6TxNXVFsOwFK1NeG2KfCHzCcyz 9fVn3xlVpqOhJTgeVecYOT+lwIEoXtTa2/qa++h5X1M/lJnx5Qrl1iaPNpq8dUk1 wQIUhErcGdEaJoUCvWz1d26IE+3BhK7oVHyS+YWaPUri0NYGJHf6DGZ2HcdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0kdDQXJRwUI1HCb8qeH0NcpUFr0wHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBP8L7KfmsT4XBX6ap8EWyYdkyMTvWAfNLK Rx/23usFyULRaoYXsAs3nkCjE6kokTgGz9WM9/ldUiJiHPPkkw10ab3cX/2RZ5rt 8gQ+T24u5uIIEbeUyzGyOZw2CUrci2/bapCYZkJcRsCPr55WM1ES2gxVt7x8Xntc d8awRH0Sxm7h6wFRSt/BMtN8/MfdIZ9b98iHGSzkBiSp5cY4uGxL4H2ZKuvgMoKg t2KJMNrYJpWKAeLSrJBDHRbCvs31+bwwb/vKo8/3qSksVYFwunMjUtda58filI1c 7ev14zQU7NIsB3B296vPi9ZOwoP3GU+xXyAcuCm8G2J69TM7Zpo= -----END CERTIFICATE-----Generated at Tue May 12 22:20:11 2026 by rpki-client