$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: rqhRFf9ImD4aRtCItxsqK8dzUCGpuJssVT/dWN4vntI= Subject key identifier: 40:52:AC:15:D5:E8:45:68:5A:DE:D3:00:27:76:6F:81:F7:64:09:33 Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 72CEE131308805063F707D31EBD637432CF3731E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:35:46 +0000 Manifest this update: Tue 12 May 2026 19:30:46 +0000 Manifest next update: Wed 13 May 2026 23:34:46 +0000 Files and hashes: 1: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: 2QCGni5+0feM6jMAjjB3UMUwQFUu2E+8aFJvOL0NHm8=) 2: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) 3: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) 4: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ce:e1:31:30:88:05:06:3f:70:7d:31:eb:d6:37:43:2c:f3:73:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: May 12 19:30:46 2026 GMT Not After : May 13 23:34:46 2026 GMT Subject: CN=4052AC15D5E845685ADED30027766F81F7640933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1f:5f:06:87:4d:ba:70:33:e8:a3:d8:8c:49: b2:09:2a:ce:8b:30:67:18:3c:85:72:f8:f5:79:9d: 1d:e5:44:db:3c:81:ba:8f:46:a2:6d:02:d0:9b:5d: bb:05:29:48:a0:04:c0:df:c3:93:bb:c6:1b:ce:55: 0c:95:1f:fb:49:e6:d3:b1:80:2a:dd:dd:2f:bd:97: 3e:05:68:1e:f7:6f:6f:9c:f6:cf:ef:14:5d:a5:ea: 18:a5:5c:63:50:6a:4c:82:8c:6d:bb:37:64:3d:c9: 7e:87:62:36:22:e8:12:40:00:6e:29:46:a2:53:7b: 5a:04:8f:ab:1f:b2:ba:c8:e2:3b:91:c2:18:1b:c5: 37:c4:35:02:12:64:a2:0e:91:df:b8:a3:e2:18:04: 5b:43:2e:79:fe:c8:56:e6:93:7a:36:a1:ac:96:06: b5:83:fd:7f:10:5c:26:27:96:79:77:c7:2e:3b:0b: a3:0c:7c:d5:56:51:d7:49:cb:f2:92:5b:c7:28:03: 99:70:7c:fe:bc:68:0f:df:0a:7f:22:ae:e9:1b:5e: 1b:27:ac:ad:84:39:e9:44:fe:a8:9a:5a:c8:3f:c7: c3:8b:b3:c1:af:22:a6:3b:68:b0:7f:fb:0f:87:dc: 33:58:df:49:c1:99:a8:a8:fe:bc:50:c4:80:a1:b9: 68:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:52:AC:15:D5:E8:45:68:5A:DE:D3:00:27:76:6F:81:F7:64:09:33 X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:39:dc:11:3e:98:a2:c2:40:79:05:40:c8:88:3c:ae:e2:1f: a2:6a:97:f2:c8:fe:74:1b:a2:45:ef:d0:bb:1e:48:cb:4c:ad: e6:8d:4c:3f:8b:4e:00:c4:7a:fe:33:7e:38:78:8c:dd:0b:1b: 00:ae:a7:34:c0:b7:ca:17:dd:63:f2:45:21:84:43:07:2d:a6: 0d:e0:39:0d:20:de:c2:0b:ba:c6:bc:41:62:d8:d0:63:ed:06: 8a:e0:96:59:73:ff:c1:22:7e:de:40:14:27:42:f3:ac:0d:e9: 52:12:0d:ff:c3:15:a1:4d:da:e3:75:fe:d8:24:f2:4a:67:e5: 0a:0d:f8:8d:23:51:21:57:4c:f2:74:18:13:89:37:d6:48:3b: 2a:a3:db:d8:93:44:d5:d1:a1:8e:04:54:d2:df:72:d1:1f:c6: 7f:3a:61:5d:a5:0f:8d:75:0f:ea:de:57:ff:f4:91:4d:71:33: 5e:e5:af:c2:14:c4:e1:a5:f5:46:23:2f:d8:8b:2c:d7:a4:eb: 99:5a:4d:0b:51:f9:3e:62:14:9f:49:3a:c8:ba:03:fc:40:e6: 92:c7:08:e8:b4:80:c5:c5:fe:cf:82:31:df:0e:c5:de:76:38: 09:1e:3a:30:75:36:f6:90:02:32:58:27:ce:49:a3:49:75:dc: 91:1a:4c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcs7hMTCIBQY/cH0x69Y3Qyzzcx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA1MTIxOTMwNDZaFw0yNjA1MTMyMzM0NDZaMDMxMTAvBgNV BAMTKDQwNTJBQzE1RDVFODQ1Njg1QURFRDMwMDI3NzY2RjgxRjc2NDA5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmH18Gh026cDPoo9iMSbIJKs6L MGcYPIVy+PV5nR3lRNs8gbqPRqJtAtCbXbsFKUigBMDfw5O7xhvOVQyVH/tJ5tOx gCrd3S+9lz4FaB73b2+c9s/vFF2l6hilXGNQakyCjG27N2Q9yX6HYjYi6BJAAG4p RqJTe1oEj6sfsrrI4juRwhgbxTfENQISZKIOkd+4o+IYBFtDLnn+yFbmk3o2oayW BrWD/X8QXCYnlnl3xy47C6MMfNVWUddJy/KSW8coA5lwfP68aA/fCn8irukbXhsn rK2EOelE/qiaWsg/x8OLs8GvIqY7aLB/+w+H3DNY30nBmaio/rxQxIChuWghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFKsFdXoRWha3tMAJ3ZvgfdkCTMwHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw53BE+mKLCQHkFQMiIPK7iH6Jql/LI/nQb okXv0LseSMtMreaNTD+LTgDEev4zfjh4jN0LGwCupzTAt8oX3WPyRSGEQwctpg3g OQ0g3sILusa8QWLY0GPtBorglllz/8Eift5AFCdC86wN6VISDf/DFaFN2uN1/tgk 8kpn5QoN+I0jUSFXTPJ0GBOJN9ZIOyqj29iTRNXRoY4EVNLfctEfxn86YV2lD411 D+reV//0kU1xM17lr8IUxOGl9UYjL9iLLNek65laTQtR+T5iFJ9JOsi6A/xA5pLH COi0gMXF/s+CMd8Oxd52OAkeOjB1NvaQAjJYJ85Jo0l13JEaTE8= -----END CERTIFICATE-----Generated at Wed May 13 02:27:14 2026 by rpki-client