$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: mMTVNG+wZN2k5oWKQG+95azp7KGAXRqnlIMVEU+uuEo= Subject key identifier: 3A:59:D0:C7:52:ED:AF:44:DA:DE:82:20:3E:D1:E4:22:2E:31:0D:C8 Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 74CBB2DA798AA942C6CBBD220D8C5710DD317C2D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:06:56 +0000 Manifest this update: Tue 12 May 2026 23:01:56 +0000 Manifest next update: Thu 14 May 2026 01:41:56 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) 2: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: 6vIhZAwpE5VegqVB1K2MFt8PXbqVDLKJVYyiHiZxTJc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:cb:b2:da:79:8a:a9:42:c6:cb:bd:22:0d:8c:57:10:dd:31:7c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: May 12 23:01:56 2026 GMT Not After : May 14 01:41:56 2026 GMT Subject: CN=3A59D0C752EDAF44DADE82203ED1E4222E310DC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:7f:fc:3c:4c:10:1a:a7:df:87:89:dc:36: a0:16:7e:33:89:82:79:94:52:53:77:a0:96:4c:b3: 57:9a:a0:9c:6f:1e:c8:05:05:0d:20:53:93:89:c1: 4e:93:b0:59:08:d6:c4:d9:48:20:a5:1f:a2:51:ac: 59:c0:65:44:93:e4:7a:a9:1e:a6:3c:17:0c:c5:44: e8:2d:8a:83:45:62:d8:b7:ec:81:58:6a:5f:39:44: b9:d2:4d:07:a2:64:33:df:5f:a1:81:92:8c:d9:f4: 0d:63:7b:ce:11:5d:cf:d6:1e:7b:72:28:ae:43:18: 8e:54:b0:54:af:44:5a:ef:19:42:dc:56:9b:b7:13: 7f:f8:a0:3a:d5:4a:d5:81:44:a1:7c:04:41:6a:8c: 78:47:27:da:8d:21:5c:df:e4:87:ce:8b:be:a3:34: 8f:e8:0e:af:11:6d:39:a2:71:98:0b:f3:a1:ea:5d: 28:06:4b:70:f9:8b:d0:5c:c7:94:98:b9:6b:95:f8: d3:e1:ef:71:ad:b5:ab:a2:40:f5:6e:73:e5:dd:2a: 5c:66:a5:7d:32:91:e9:f1:a7:44:78:44:65:45:0c: 17:9f:39:dd:4b:dc:d1:73:1d:44:13:9c:43:4d:01: 0b:1e:99:24:ea:00:de:c4:a8:b4:c5:c3:d4:b2:58: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:59:D0:C7:52:ED:AF:44:DA:DE:82:20:3E:D1:E4:22:2E:31:0D:C8 X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:99:71:ae:0b:9e:de:93:fe:90:9b:42:c3:82:29:21:59:e3: a4:86:31:2a:93:49:6e:a2:73:d6:07:e8:de:c2:01:fa:75:bd: d3:fe:ea:35:4e:9c:03:00:f4:9c:02:32:c7:bb:a1:65:1f:55: ec:d4:2e:4d:55:10:b8:b1:fe:78:c6:5c:e4:06:d1:7d:89:78: 36:f8:a6:db:44:79:44:51:d7:1d:ec:14:ce:78:88:fa:71:1d: ab:8f:92:cb:34:8c:03:8e:26:2f:16:a1:ea:b1:60:e0:46:5f: 18:85:f2:1e:34:16:92:3d:24:98:16:8e:67:40:7b:77:3b:48: 30:b5:23:59:58:36:ee:f9:6e:19:ce:14:0a:8c:44:5a:9c:80: 45:ab:65:34:ff:d3:98:cf:aa:b8:f1:d4:de:de:09:b8:b8:2b: 26:52:7a:9d:7f:0d:dc:09:6f:0f:66:e0:45:e7:06:d1:90:e7: 7d:8a:94:cd:73:4a:7c:01:b1:10:0d:06:46:33:be:02:3a:f5: 22:c4:91:6f:46:63:3a:9d:62:a7:29:ef:87:2e:b8:5f:93:e5: 33:28:f8:1a:84:ef:52:b7:2a:ee:66:eb:76:84:f5:d3:8e:a6: 8e:45:92:c8:dd:82:8f:44:dd:f1:70:73:a2:11:63:54:15:32: a7:f6:20:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMuy2nmKqULGy70iDYxXEN0xfC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjA1MTIyMzAxNTZaFw0yNjA1MTQwMTQxNTZaMDMxMTAvBgNV BAMTKDNBNTlEMEM3NTJFREFGNDREQURFODIyMDNFRDFFNDIyMkUzMTBEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBnn/8PEwQGqffh4ncNqAWfjOJ gnmUUlN3oJZMs1eaoJxvHsgFBQ0gU5OJwU6TsFkI1sTZSCClH6JRrFnAZUST5Hqp HqY8FwzFROgtioNFYti37IFYal85RLnSTQeiZDPfX6GBkozZ9A1je84RXc/WHnty KK5DGI5UsFSvRFrvGULcVpu3E3/4oDrVStWBRKF8BEFqjHhHJ9qNIVzf5IfOi76j NI/oDq8RbTmicZgL86HqXSgGS3D5i9Bcx5SYuWuV+NPh73GttauiQPVuc+XdKlxm pX0ykenxp0R4RGVFDBefOd1L3NFzHUQTnENNAQsemSTqAN7EqLTFw9SyWB1LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlnQx1Ltr0Ta3oIgPtHkIi4xDcgwHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqZca4Lnt6T/pCbQsOCKSFZ46SGMSqTSW6i c9YH6N7CAfp1vdP+6jVOnAMA9JwCMse7oWUfVezULk1VELix/njGXOQG0X2JeDb4 pttEeURR1x3sFM54iPpxHauPkss0jAOOJi8WoeqxYOBGXxiF8h40FpI9JJgWjmdA e3c7SDC1I1lYNu75bhnOFAqMRFqcgEWrZTT/05jPqrjx1N7eCbi4KyZSep1/DdwJ bw9m4EXnBtGQ532KlM1zSnwBsRANBkYzvgI69SLEkW9GYzqdYqcp74cuuF+T5TMo +BqE71K3Ku5m63aE9dOOpo5Fksjdgo9E3fFwc6IRY1QVMqf2IKQ= -----END CERTIFICATE-----Generated at Wed May 13 02:25:50 2026 by rpki-client