$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: UaaNm5Z3LPNF9GOvCfstuVmlYhFt3Elhd9VS5o20+Xk= Subject key identifier: 25:D4:82:8A:46:93:16:C8:96:FA:8A:4F:D3:3D:D8:E0:7C:6D:1D:12 Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 2B8033399749E6AEFCDFE8782B2C0C1B99176D61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 22:22:10 +0000 Manifest this update: Thu 23 Jul 2026 22:17:10 +0000 Manifest next update: Sat 25 Jul 2026 00:53:10 +0000 Files and hashes: 1: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) 2: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) 3: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: 9cT5XDDrLX7cPbbhA0YHOyeJVPS6vbOSKSPMHQgS2cA=) 4: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:80:33:39:97:49:e6:ae:fc:df:e8:78:2b:2c:0c:1b:99:17:6d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Jul 23 22:17:10 2026 GMT Not After : Jul 25 00:53:10 2026 GMT Subject: CN=25D4828A469316C896FA8A4FD33DD8E07C6D1D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:f4:91:74:f3:91:f2:99:78:f6:5a:7b:ac: db:9e:74:85:68:4a:7b:8b:71:a3:e8:2b:d6:55:31: 74:30:3d:0e:07:ea:f6:bb:8b:60:f8:1f:5b:10:1f: e7:64:9f:f6:93:39:56:7b:fa:be:0f:38:fa:83:05: 37:c8:78:d4:78:f3:4d:a0:72:37:4a:b5:d6:5d:ad: da:c6:f8:1e:ad:8c:f6:5b:89:3a:f8:31:77:7a:99: 58:3b:f2:21:3e:35:ad:a5:8a:57:bd:53:1d:35:a5: 6d:ff:6f:72:49:75:a0:78:19:26:5d:cf:6a:82:d4: 6a:f6:f3:d4:ca:97:cd:d6:f8:36:ec:d1:30:9c:84: 30:b3:5f:e9:59:14:7a:49:cf:69:a2:d2:2d:6d:b7: 40:cb:af:46:10:f0:ee:bb:ad:0f:30:01:c2:ac:fa: 47:a9:a7:7d:52:f0:f3:e5:ab:69:00:a2:ca:75:46: b4:09:67:79:3e:68:96:86:d1:81:53:77:54:3b:96: 87:75:02:e6:60:1c:3f:b3:b2:bf:22:ab:a2:67:c7: 7a:6c:7d:d2:87:54:51:f4:9a:7c:94:3d:3c:23:18: 6e:9b:e9:58:2c:a4:e9:a9:07:65:6d:c6:99:4d:5d: 88:28:83:99:08:e7:8a:b2:8c:16:3c:05:8b:6a:9f: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D4:82:8A:46:93:16:C8:96:FA:8A:4F:D3:3D:D8:E0:7C:6D:1D:12 X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:f8:e4:0a:88:e7:38:81:d2:0a:e5:97:53:59:b2:e3:5d:6b: fe:2f:a6:39:6a:34:99:69:31:02:44:08:70:83:7e:51:1a:b7: ef:85:65:2e:8d:ea:fe:92:27:02:19:44:0b:d4:01:2a:e8:e1: 8a:19:af:96:d5:54:b6:20:59:61:fa:ed:81:7a:f2:50:95:fd: c8:33:f1:b5:d8:b3:c6:47:4d:98:ec:46:2b:2b:d9:29:78:2a: 5b:37:0b:c0:d1:5e:ed:e9:f9:a0:1a:19:32:14:4e:4f:20:a6: 6b:16:fc:5c:93:ff:ec:01:db:56:0a:53:e3:49:33:d6:16:a8: 6a:c1:50:e3:8a:19:c2:1a:c1:8a:7b:bd:55:e9:20:dd:11:7e: fd:60:4d:8c:8a:a2:e8:41:7d:65:9b:58:93:63:aa:44:5e:f2: d1:79:0a:d4:ae:21:a0:5f:81:b6:e5:a0:0e:9f:37:63:90:ab: 2e:10:eb:d2:d2:49:29:cc:6a:b3:41:3c:2e:2f:2a:d5:c6:2c: 95:b4:b0:e5:37:c6:da:98:58:32:21:67:29:9a:1d:08:da:0a: aa:63:3b:08:a2:ac:0f:b9:24:c2:6e:02:84:3f:61:5b:7c:8c: 00:50:e7:01:06:e3:5e:a2:0d:54:4e:eb:dd:14:a5:73:b4:be: fa:7c:bd:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4AzOZdJ5q783+h4KywMG5kXbWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA3MjMyMjE3MTBaFw0yNjA3MjUwMDUzMTBaMDMxMTAvBgNV BAMTKDI1RDQ4MjhBNDY5MzE2Qzg5NkZBOEE0RkQzM0REOEUwN0M2RDFEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLS/SRdPOR8pl49lp7rNuedIVo SnuLcaPoK9ZVMXQwPQ4H6va7i2D4H1sQH+dkn/aTOVZ7+r4POPqDBTfIeNR4802g cjdKtdZdrdrG+B6tjPZbiTr4MXd6mVg78iE+Na2lile9Ux01pW3/b3JJdaB4GSZd z2qC1Gr289TKl83W+Dbs0TCchDCzX+lZFHpJz2mi0i1tt0DLr0YQ8O67rQ8wAcKs +kepp31S8PPlq2kAosp1RrQJZ3k+aJaG0YFTd1Q7lod1AuZgHD+zsr8iq6Jnx3ps fdKHVFH0mnyUPTwjGG6b6VgspOmpB2VtxplNXYgog5kI54qyjBY8BYtqnzAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJdSCikaTFsiW+opP0z3Y4HxtHRIwHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALH45AqI5ziB0grll1NZsuNda/4vpjlqNJlp MQJECHCDflEat++FZS6N6v6SJwIZRAvUASro4YoZr5bVVLYgWWH67YF68lCV/cgz 8bXYs8ZHTZjsRisr2Sl4Kls3C8DRXu3p+aAaGTIUTk8gpmsW/FyT/+wB21YKU+NJ M9YWqGrBUOOKGcIawYp7vVXpIN0Rfv1gTYyKouhBfWWbWJNjqkRe8tF5CtSuIaBf gbbloA6fN2OQqy4Q69LSSSnMarNBPC4vKtXGLJW0sOU3xtqYWDIhZymaHQjaCqpj OwiirA+5JMJuAoQ/YVt8jABQ5wEG416iDVRO690UpXO0vvp8vbo= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:31 2026 by rpki-client