$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: QM9oGYqiRf0bKMso1QHbxIObMdz/FUXkXrpBqzKBJ3Y= Subject key identifier: 65:D8:3E:9A:87:1A:BC:A7:34:4C:35:D0:A5:A9:FC:39:7F:16:79:DC Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 754F05AE2F6D0DF572637E86C19379FA8F6BD05A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 06:12:07 +0000 Manifest this update: Sun 27 Sep 2026 06:07:07 +0000 Manifest next update: Mon 28 Sep 2026 07:20:07 +0000 Files and hashes: 1: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) 2: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: 7aMXjrj9cuYxEud3uKV5ciAlnZbCEzZvtUw1s47rlLI=) 3: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) 4: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4f:05:ae:2f:6d:0d:f5:72:63:7e:86:c1:93:79:fa:8f:6b:d0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Sep 27 06:07:07 2026 GMT Not After : Sep 28 07:20:07 2026 GMT Subject: CN=65D83E9A871ABCA7344C35D0A5A9FC397F1679DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:14:50:05:c1:e0:38:5f:b3:6a:6d:21:a3: de:4e:e5:c6:fe:01:d1:cc:ca:dc:f6:0d:8e:8e:db: a0:da:42:1d:e4:a2:28:54:09:66:24:db:07:26:7a: 19:f0:f3:25:32:2c:2b:ad:c1:3f:76:f9:b9:73:43: 27:2f:d5:07:88:7f:1e:2e:54:93:ee:06:2c:47:11: 07:81:f6:e7:9c:97:cd:ca:c0:9a:09:2d:4b:31:4b: 1b:5b:8d:88:6a:f0:79:c1:81:16:1a:87:ac:20:83: e1:4f:11:56:d5:7d:ee:74:19:fb:f3:18:f8:e3:3b: fc:98:1b:7b:a3:3c:9d:59:de:ac:0e:01:24:f3:e6: 62:a1:09:08:96:de:c4:a0:d0:54:02:d3:5e:b2:d5: 7d:c5:0e:a1:3b:b1:3d:2d:a9:5b:6a:af:d7:eb:bc: 7f:02:72:3f:11:4e:7c:0b:49:93:f7:1d:3d:3a:f4: 5a:68:e8:ba:3d:e7:d3:f0:cf:89:da:1d:b9:d5:b5: b5:c5:df:29:d6:42:66:f8:b7:2a:b9:0c:dd:6e:a1: 5f:cc:d7:b8:a8:c4:66:a8:29:d4:c3:00:0c:04:ea: c0:0e:19:98:6f:c3:62:36:50:03:4b:ba:a1:7b:5d: c5:28:7d:2c:dd:c7:0e:6a:34:ea:ed:bb:e8:28:83: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D8:3E:9A:87:1A:BC:A7:34:4C:35:D0:A5:A9:FC:39:7F:16:79:DC X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ee:a1:02:79:d9:e7:52:39:db:98:a5:9d:e5:47:a6:cc:82: d4:29:a4:f6:b1:61:3d:cd:f4:c3:5d:81:fc:c9:fc:87:32:ca: 56:3f:1e:b7:35:30:76:f6:d5:3a:1f:4f:a9:2b:3d:c6:fb:6f: 5a:02:d6:51:4e:c3:ce:30:df:9b:2c:38:e1:04:50:79:b8:6d: d7:ae:74:35:57:e0:9d:6a:4a:28:34:ad:df:78:74:42:3f:df: 2e:51:f6:68:81:2b:32:9c:80:ac:ed:f2:77:95:35:e1:2a:2a: 28:49:28:01:a9:c8:6e:2e:8c:41:da:bf:e1:b6:52:dd:a7:ac: ad:48:7d:e7:7d:97:00:2f:cd:7d:11:ec:5b:a6:ff:2c:0c:74: ec:e8:98:c3:70:90:63:4f:77:4f:d7:01:96:4b:e4:9d:63:72: 67:80:43:35:96:5c:3d:c6:0d:0b:4a:79:1b:40:68:27:1d:e3: cb:d4:93:cc:84:80:0d:39:9d:fa:bd:9f:ed:8f:ec:6a:1c:8c: 59:06:e7:5e:68:25:dc:0b:89:a6:b0:eb:59:d0:35:9e:f7:45: 04:f6:e2:c8:6f:68:b4:56:8d:b0:0f:c1:53:fd:15:5f:42:75: 16:43:a9:7c:58:43:4f:cd:0c:dc:25:92:58:a1:b7:7f:1e:39: d4:41:42:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdU8Fri9tDfVyY36GwZN5+o9r0FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA5MjcwNjA3MDdaFw0yNjA5MjgwNzIwMDdaMDMxMTAvBgNV BAMTKDY1RDgzRTlBODcxQUJDQTczNDRDMzVEMEE1QTlGQzM5N0YxNjc5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPhRQBcHgOF+zam0ho95O5cb+ AdHMytz2DY6O26DaQh3koihUCWYk2wcmehnw8yUyLCutwT92+blzQycv1QeIfx4u VJPuBixHEQeB9uecl83KwJoJLUsxSxtbjYhq8HnBgRYah6wgg+FPEVbVfe50Gfvz GPjjO/yYG3ujPJ1Z3qwOASTz5mKhCQiW3sSg0FQC016y1X3FDqE7sT0tqVtqr9fr vH8Ccj8RTnwLSZP3HT069Fpo6Lo959Pwz4naHbnVtbXF3ynWQmb4tyq5DN1uoV/M 17ioxGaoKdTDAAwE6sAOGZhvw2I2UANLuqF7XcUofSzdxw5qNOrtu+gog94PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdg+mocavKc0TDXQpan8OX8WedwwHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvuoQJ52edSOduYpZ3lR6bMgtQppPaxYT3N 9MNdgfzJ/IcyylY/Hrc1MHb21TofT6krPcb7b1oC1lFOw84w35ssOOEEUHm4bdeu dDVX4J1qSig0rd94dEI/3y5R9miBKzKcgKzt8neVNeEqKihJKAGpyG4ujEHav+G2 Ut2nrK1Ifed9lwAvzX0R7Fum/ywMdOzomMNwkGNPd0/XAZZL5J1jcmeAQzWWXD3G DQtKeRtAaCcd48vUk8yEgA05nfq9n+2P7GocjFkG515oJdwLiaaw61nQNZ73RQT2 4shvaLRWjbAPwVP9FV9CdRZDqXxYQ0/NDNwlkliht38eOdRBQlU= -----END CERTIFICATE-----Generated at Sun Sep 27 14:52:53 2026 by rpki-client