$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json) Hash identifier: 5PVynOfbBRa4ewZ2qmy07vWvZCC5zRoy6FBbrOb/YBk= Subject key identifier: 9A:6D:57:FD:71:0A:A2:22:93:2C:1E:22:5D:F5:83:9E:C8:C2:BE:D8 Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Certificate serial: 18376281AD527F9CA339BFF5BFF94BE3C2F6EF03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:25:14 +0000 Manifest this update: Wed 23 Sep 2026 15:20:14 +0000 Manifest next update: Thu 24 Sep 2026 17:58:14 +0000 Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=) 2: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: Q0/dZdDbxzS7l6nv4iwqg34RLHl5LTNhN9SqOy6r2AA=) 3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:37:62:81:ad:52:7f:9c:a3:39:bf:f5:bf:f9:4b:e3:c2:f6:ef:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Validity Not Before: Sep 23 15:20:14 2026 GMT Not After : Sep 24 17:58:14 2026 GMT Subject: CN=9A6D57FD710AA222932C1E225DF5839EC8C2BED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:20:0a:0a:ef:db:ce:ae:31:d3:4b:d1:90: 48:44:8c:bf:73:7b:37:45:f3:54:e5:2b:1b:f3:81: 3c:33:e2:9b:92:12:ee:d2:b1:30:03:05:11:98:8f: e6:e1:2d:53:b5:45:c5:2b:07:57:d0:7e:f9:3f:6f: 2e:34:6a:bf:82:5b:71:d4:fa:31:2e:88:b2:b0:f2: 29:db:dd:d8:95:d8:20:82:17:1d:40:a4:1d:ca:9a: 62:cc:11:4f:ac:d9:1f:7e:0d:2e:51:9b:2a:81:92: aa:b1:3e:34:d3:20:9e:e9:6f:bb:09:7b:12:20:95: 43:3b:0f:90:8e:8a:54:24:9b:7f:c7:ff:26:7c:d0: aa:a7:9e:d1:cf:97:2b:cd:19:4f:e9:56:48:d4:35: 85:2a:1b:20:28:c8:31:ee:bd:a1:73:cd:a0:00:0b: 2a:d6:db:00:72:65:16:0e:9b:64:53:27:3c:b2:85: c6:24:fc:2a:0c:c2:18:01:bc:c1:9e:b6:d2:d0:a8: cd:35:08:5f:20:1d:e6:96:93:27:17:19:82:54:80: 56:e3:3b:f9:11:d3:ac:05:95:23:5e:27:dd:59:af: b8:c7:fc:30:09:2a:cc:12:a4:fd:51:c6:2a:02:df: 08:ca:88:04:cc:fb:26:82:2f:b0:58:61:a8:71:62: f3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6D:57:FD:71:0A:A2:22:93:2C:1E:22:5D:F5:83:9E:C8:C2:BE:D8 X509v3 Authority Key Identifier: keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d8:f0:35:6c:3e:4a:98:87:e3:6a:8d:37:f7:66:3d:44:cb: 5e:46:81:9e:02:db:b9:45:42:59:f1:ad:29:59:0a:43:18:5b: 66:e0:40:d3:25:ce:5c:da:2a:f2:a8:07:c7:c5:99:c0:f4:2c: 06:61:f5:66:47:0f:e1:a6:56:2e:11:af:14:b0:f9:ee:2a:a1: ff:0b:80:3f:1d:d0:a0:39:9f:40:f9:ed:8e:57:9e:f1:41:7a: 13:8e:45:b7:70:ec:25:66:9e:2c:23:8b:6b:99:90:18:84:2d: cb:37:d7:e9:81:5d:ec:71:a9:79:0c:73:7c:ea:04:d1:20:c3: 08:b5:48:2e:97:e7:0a:d7:17:ee:b3:8e:82:ae:bc:75:01:b4: 4e:b4:a6:18:a8:f6:28:6a:6f:f7:f7:b7:d5:ac:58:da:21:d4: 4b:75:18:5d:f3:25:ba:46:a5:97:65:f3:7e:1a:d4:fb:f7:57: 4d:6d:5c:86:71:88:fe:54:8a:d3:fb:c2:2e:11:c6:76:fa:7f: b1:67:60:93:30:3d:f6:14:ea:c7:fe:1c:36:c9:01:7c:95:ac: 42:42:1b:23:f6:44:fb:be:b0:91:89:97:b7:49:73:df:ef:f3: c5:b1:3e:37:c1:05:a1:81:6e:e6:b3:b2:b5:59:fe:ae:cc:20: 20:ca:9e:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDdiga1Sf5yjOb/1v/lL48L27wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1 MDdGNTVENjAeFw0yNjA5MjMxNTIwMTRaFw0yNjA5MjQxNzU4MTRaMDMxMTAvBgNV BAMTKDlBNkQ1N0ZENzEwQUEyMjI5MzJDMUUyMjVERjU4MzlFQzhDMkJFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOSAKCu/bzq4x00vRkEhEjL9z ezdF81TlKxvzgTwz4puSEu7SsTADBRGYj+bhLVO1RcUrB1fQfvk/by40ar+CW3HU +jEuiLKw8inb3diV2CCCFx1ApB3KmmLMEU+s2R9+DS5RmyqBkqqxPjTTIJ7pb7sJ exIglUM7D5COilQkm3/H/yZ80KqnntHPlyvNGU/pVkjUNYUqGyAoyDHuvaFzzaAA CyrW2wByZRYOm2RTJzyyhcYk/CoMwhgBvMGettLQqM01CF8gHeaWkycXGYJUgFbj O/kR06wFlSNeJ91Zr7jH/DAJKswSpP1RxioC3wjKiATM+yaCL7BYYahxYvNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmm1X/XEKoiKTLB4iXfWDnsjCvtgwHwYDVR0j BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3 MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1 NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5 QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/Y8DVsPkqYh+NqjTf3Zj1Ey15GgZ4C27lF QlnxrSlZCkMYW2bgQNMlzlzaKvKoB8fFmcD0LAZh9WZHD+GmVi4RrxSw+e4qof8L gD8d0KA5n0D57Y5XnvFBehOORbdw7CVmniwji2uZkBiELcs31+mBXexxqXkMc3zq BNEgwwi1SC6X5wrXF+6zjoKuvHUBtE60phio9ihqb/f3t9WsWNoh1Et1GF3zJbpG pZdl834a1Pv3V01tXIZxiP5UitP7wi4Rxnb6f7FnYJMwPfYU6sf+HDbJAXyVrEJC GyP2RPu+sJGJl7dJc9/v88WxPjfBBaGBbuazsrVZ/q7MICDKnvo= -----END CERTIFICATE-----Generated at Wed Sep 23 19:49:23 2026 by rpki-client