$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft File: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft (raw, json) Hash identifier: OC7YTjnO+swdi3fo9ug+iSESkC1XCz5YlgWHE5b9T+k= Subject key identifier: C2:BD:B6:72:CE:B0:9C:19:D8:6D:C2:D5:B9:7B:3D:72:A4:37:F5:75 Authority key identifier: BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D Certificate issuer: /CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Certificate serial: 35BE0EE1B5C81F2B2910A6164117380CDCD1D50B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:30:21 +0000 Manifest this update: Thu 23 Jul 2026 12:25:21 +0000 Manifest next update: Fri 24 Jul 2026 15:48:21 +0000 Files and hashes: 1: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: ReOBLWdtDJWQswRVGSjgEFLs79bXbLqWyTDzAzAiJNI=) 2: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: cNWk4pPW9adRWcVUgZk3Gh+ATLpCOTauELAsC0bddZs=) 3: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: //ahjg9/ssGLXo+2TqwZ1+agr2xeTR0MMenHDqtdpYM=) 4: BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl (hash: pX19EbsC7gueRRDRg2uNaGodEDeE5aSGYZk+SVXQD0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:48:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:be:0e:e1:b5:c8:1f:2b:29:10:a6:16:41:17:38:0c:dc:d1:d5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD6AA16169DB4B937F06A838BBBAA3775CADA41D Validity Not Before: Jul 23 12:25:21 2026 GMT Not After : Jul 24 15:48:21 2026 GMT Subject: CN=C2BDB672CEB09C19D86DC2D5B97B3D72A437F575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9e:8c:f6:f4:85:41:f4:43:21:29:bf:80:dc: 1e:29:1f:73:15:e3:d1:6d:54:56:28:18:55:5b:aa: 3f:c2:f4:71:cf:d5:1d:55:ef:ef:ba:2a:11:a9:66: c0:3d:33:2a:b9:bc:07:1b:36:50:78:95:8f:cc:bf: 8d:96:4e:d9:a8:d2:e5:b4:a6:8c:f0:12:05:14:fe: 20:eb:fb:bc:14:11:8d:9f:8d:5b:cc:e7:f4:91:a4: ec:ae:ef:2e:ee:e2:6d:91:59:40:ed:71:56:db:5d: 7a:2b:53:7a:a5:2d:14:b4:9f:65:29:50:27:9e:0f: 75:54:25:88:7c:01:31:c4:5d:59:1f:53:cf:12:17: e8:4e:83:bc:5a:f8:58:bb:57:32:29:07:d0:71:fd: 6a:9a:21:50:b9:5a:a3:2d:2b:d3:87:5d:34:50:09: f8:11:b2:c7:49:1e:94:f3:c4:c3:f6:31:ba:43:d2: 66:03:d7:70:84:43:a6:9c:9d:73:50:79:2e:82:9b: 29:a2:cf:4f:9d:5a:05:3f:d9:d6:d6:34:82:37:ff: 67:87:75:b3:75:29:3c:52:d2:3d:32:75:8f:8e:a2: 3b:fc:13:3d:7d:31:e0:b0:49:62:05:87:d8:16:38: db:4d:27:a9:9b:b2:8e:48:91:31:1e:aa:06:a4:2e: f4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BD:B6:72:CE:B0:9C:19:D8:6D:C2:D5:B9:7B:3D:72:A4:37:F5:75 X509v3 Authority Key Identifier: keyid:BD:6A:A1:61:69:DB:4B:93:7F:06:A8:38:BB:BA:A3:77:5C:AD:A4:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/BD6AA16169DB4B937F06A838BBBAA3775CADA41D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:26:f8:f4:4b:82:fc:33:18:b7:0f:60:3e:02:f5:71:94:b1: 4d:36:2f:9e:91:72:cb:47:16:88:ff:77:a7:61:46:f8:88:88: 05:39:82:d6:97:46:70:25:17:fe:1f:15:f7:82:19:a3:35:1d: a9:8c:42:1f:d0:16:43:57:a3:59:1a:1e:13:79:ab:d6:f1:48: bc:d5:67:ae:b1:7f:71:e9:97:9a:61:a4:cd:fe:a7:2d:04:3f: 6f:c2:73:24:7d:c5:73:52:c5:71:e9:d1:c2:94:ea:58:e4:de: 12:ee:a3:49:06:bf:31:ce:b8:6d:86:e6:3d:a7:c6:0e:c5:90: f3:3a:fc:69:f1:0e:b6:7a:83:3b:03:36:8f:03:f2:50:b8:b9: 4b:bd:02:45:89:95:92:9e:e8:99:1c:d6:34:c4:f9:50:9d:c4: bc:b3:85:86:6d:38:50:9d:10:cf:e4:08:88:41:56:56:b6:4d: 29:f2:92:ad:a2:7b:eb:53:b2:7c:fd:b7:08:da:9e:b4:ac:0f: 41:ad:f2:b4:c0:3b:96:71:49:90:66:1d:e2:86:a5:8c:93:bd: 3b:d7:ff:29:00:6b:e6:b0:97:45:f3:d7:ae:0a:55:59:b7:d1: 88:6f:0d:ef:0c:48:ff:dd:f6:76:3f:52:e1:35:1e:a2:38:73: f0:bf:b3:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNb4O4bXIHyspEKYWQRc4DNzR1QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1 Q0FEQTQxRDAeFw0yNjA3MjMxMjI1MjFaFw0yNjA3MjQxNTQ4MjFaMDMxMTAvBgNV BAMTKEMyQkRCNjcyQ0VCMDlDMTlEODZEQzJENUI5N0IzRDcyQTQzN0Y1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnoz29IVB9EMhKb+A3B4pH3MV 49FtVFYoGFVbqj/C9HHP1R1V7++6KhGpZsA9Myq5vAcbNlB4lY/Mv42WTtmo0uW0 pozwEgUU/iDr+7wUEY2fjVvM5/SRpOyu7y7u4m2RWUDtcVbbXXorU3qlLRS0n2Up UCeeD3VUJYh8ATHEXVkfU88SF+hOg7xa+Fi7VzIpB9Bx/WqaIVC5WqMtK9OHXTRQ CfgRssdJHpTzxMP2MbpD0mYD13CEQ6acnXNQeS6Cmymiz0+dWgU/2dbWNII3/2eH dbN1KTxS0j0ydY+Oojv8Ez19MeCwSWIFh9gWONtNJ6mbso5IkTEeqgakLvS/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwr22cs6wnBnYbcLVuXs9cqQ39XUwHwYDVR0j BBgwFoAUvWqhYWnbS5N/Bqg4u7qjd1ytpB0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjJhYTJkMTAtM2ZhYS00MjcyLWJlMWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2 OURCNEI5MzdGMDZBODM4QkJCQUEzNzc1Q0FEQTQxRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRDZBQTE2MTY5REI0QjkzN0YwNkE4MzhCQkJBQTM3NzVDQURB NDFELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQkQ2QUExNjE2OURCNEI5MzdGMDZBODM4QkJCQUEz Nzc1Q0FEQTQxRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUm+PRLgvwzGLcPYD4C9XGUsU02L56RcstH Foj/d6dhRviIiAU5gtaXRnAlF/4fFfeCGaM1HamMQh/QFkNXo1kaHhN5q9bxSLzV Z66xf3Hpl5phpM3+py0EP2/CcyR9xXNSxXHp0cKU6ljk3hLuo0kGvzHOuG2G5j2n xg7FkPM6/GnxDrZ6gzsDNo8D8lC4uUu9AkWJlZKe6Jkc1jTE+VCdxLyzhYZtOFCd EM/kCIhBVla2TSnykq2ie+tTsnz9twjanrSsD0Gt8rTAO5ZxSZBmHeKGpYyTvTvX /ykAa+awl0Xz164KVVm30YhvDe8MSP/d9nY/UuE1HqI4c/C/s1w= -----END CERTIFICATE-----Generated at Fri Jul 24 08:46:52 2026 by rpki-client