$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: 9i9kaBMmtb8ifNG4v1bYIwP+hDR+qAimxwpGP7zJ0K0= Subject key identifier: 3F:2C:5D:31:B7:CE:C8:E8:B7:81:65:5A:2A:E6:C3:A9:7D:77:81:16 Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 28A9E6283968D47B8775452A7970F1557344827A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:42:38 +0000 Manifest this update: Thu 24 Sep 2026 09:37:38 +0000 Manifest next update: Fri 25 Sep 2026 11:14:38 +0000 Files and hashes: 1: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: 4dmNpf9hszyA+aOnaRViZt5+IArKhTMQLVBtGz4UM5M=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a9:e6:28:39:68:d4:7b:87:75:45:2a:79:70:f1:55:73:44:82:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: Sep 24 09:37:38 2026 GMT Not After : Sep 25 11:14:38 2026 GMT Subject: CN=3F2C5D31B7CEC8E8B781655A2AE6C3A97D778116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5f:74:b6:76:a7:17:0d:c5:3d:bc:1a:30:cd: 2e:41:75:83:6e:64:22:f5:e5:4d:e3:d6:e6:b7:d3: 8b:11:dd:71:d7:66:a5:d2:cf:1f:0c:0d:c3:7c:ce: 27:93:8d:c4:1c:36:5e:54:42:f3:88:07:5f:cb:d5: 00:1f:30:6b:09:87:7f:bc:0b:ad:fa:42:3b:04:fa: 34:52:49:ff:92:b1:7d:2f:67:f9:e7:ba:1c:7e:6a: 22:5a:8f:73:c4:2f:73:30:75:70:12:22:11:ae:63: f0:92:50:42:93:6e:6a:15:37:bc:fa:de:b1:d8:cf: bd:74:57:3e:48:01:79:19:d2:88:b7:31:83:1c:9a: 02:ba:b9:e0:0f:d0:8e:e6:42:3f:ab:8a:ba:5a:14: de:bc:bc:df:e2:dd:6f:ce:61:20:fd:33:17:d1:3a: 36:ce:22:a4:2d:3d:e0:df:3c:e5:c1:12:e4:7f:61: 7e:1f:4b:d6:fe:09:32:bc:c2:82:d9:29:43:95:12: 2a:27:c5:81:47:23:f5:a3:fd:7c:00:08:45:2a:73: 83:da:2a:d6:31:8f:fa:e8:92:7d:9c:4c:93:d7:52: fa:39:64:2d:70:c2:15:fa:fb:1d:53:d6:db:87:bf: ce:08:3b:99:44:29:0f:94:52:5e:9e:87:08:75:5f: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2C:5D:31:B7:CE:C8:E8:B7:81:65:5A:2A:E6:C3:A9:7D:77:81:16 X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:04:a8:4b:78:fe:19:c2:ac:bd:08:95:5b:e3:e6:8d:e3:b2: 0e:78:32:61:1c:7f:33:00:01:3a:b1:84:46:33:29:78:6d:9c: 4b:aa:b7:27:bb:a6:46:77:ff:96:e7:0e:9d:73:82:72:67:9a: 09:a9:0e:5f:8a:cc:31:c5:86:1b:b0:ec:ee:b1:a7:ad:31:37: 62:db:c5:79:fa:e4:da:22:c5:7d:4b:c8:a9:ca:7e:49:61:05: bc:1e:07:a3:0b:ff:87:7b:5e:99:6e:94:a0:6e:73:21:5d:e7: 71:43:99:ad:3b:d9:98:47:56:45:3f:99:e7:ea:83:8d:24:2d: 92:37:ed:a1:71:d0:88:ad:ef:9c:93:34:c3:a9:f2:bd:29:a6: 06:73:69:63:6c:0c:b6:3b:00:91:83:32:f5:c9:df:d5:60:95: 2c:51:35:4b:54:f4:07:d3:a4:dc:75:80:c7:9a:d7:5f:82:51: bc:55:0c:e7:7d:68:79:33:53:c4:f9:7e:8b:32:0b:22:ce:f9: d8:7c:5a:9d:47:b9:d3:73:ed:4f:75:89:ce:42:d8:31:cb:72: 8e:69:1e:bf:85:96:93:a9:05:4f:af:bf:fd:76:ee:88:39:2e: 45:45:5a:e1:1a:56:76:cf:a4:76:a1:61:96:5e:ce:84:a4:3e: 17:15:40:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKnmKDlo1HuHdUUqeXDxVXNEgnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjA5MjQwOTM3MzhaFw0yNjA5MjUxMTE0MzhaMDMxMTAvBgNV BAMTKDNGMkM1RDMxQjdDRUM4RThCNzgxNjU1QTJBRTZDM0E5N0Q3NzgxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUX3S2dqcXDcU9vBowzS5BdYNu ZCL15U3j1ua304sR3XHXZqXSzx8MDcN8zieTjcQcNl5UQvOIB1/L1QAfMGsJh3+8 C636QjsE+jRSSf+SsX0vZ/nnuhx+aiJaj3PEL3MwdXASIhGuY/CSUEKTbmoVN7z6 3rHYz710Vz5IAXkZ0oi3MYMcmgK6ueAP0I7mQj+rirpaFN68vN/i3W/OYSD9MxfR OjbOIqQtPeDfPOXBEuR/YX4fS9b+CTK8woLZKUOVEionxYFHI/Wj/XwACEUqc4Pa KtYxj/rokn2cTJPXUvo5ZC1wwhX6+x1T1tuHv84IO5lEKQ+UUl6ehwh1X07DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyxdMbfOyOi3gWVaKubDqX13gRYwHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkEqEt4/hnCrL0IlVvj5o3jsg54MmEcfzMA ATqxhEYzKXhtnEuqtye7pkZ3/5bnDp1zgnJnmgmpDl+KzDHFhhuw7O6xp60xN2Lb xXn65NoixX1LyKnKfklhBbweB6ML/4d7XplulKBucyFd53FDma072ZhHVkU/mefq g40kLZI37aFx0Iit75yTNMOp8r0ppgZzaWNsDLY7AJGDMvXJ39VglSxRNUtU9AfT pNx1gMea11+CUbxVDOd9aHkzU8T5fosyCyLO+dh8Wp1HudNz7U91ic5C2DHLco5p Hr+FlpOpBU+vv/127og5LkVFWuEaVnbPpHahYZZezoSkPhcVQK0= -----END CERTIFICATE-----Generated at Thu Sep 24 22:52:35 2026 by rpki-client