$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft File: BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json) Hash identifier: 28+ggtPwnpQgtS9QfgEVlyypoXH5SKXkwYBccTl4b/M= Subject key identifier: 1E:4D:64:28:B2:5A:9C:37:52:C7:67:1F:BA:22:48:CC:D3:69:D1:70 Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Certificate issuer: /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Certificate serial: 1DD1B78118DF05E2435E770F510405A0081309F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 14:20:01 +0000 Manifest this update: Sun 11 Oct 2026 14:15:01 +0000 Manifest next update: Mon 12 Oct 2026 17:30:01 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=) 2: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: NrrwmRlcXiP4vBwY9BlJvnpluS2u78sGAcvZOs8ssEE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 13:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:b7:81:18:df:05:e2:43:5e:77:0f:51:04:05:a0:08:13:09:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Validity Not Before: Oct 11 14:15:01 2026 GMT Not After : Oct 12 17:30:01 2026 GMT Subject: CN=1E4D6428B25A9C3752C7671FBA2248CCD369D170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f4:57:f7:77:4e:e5:58:12:6c:80:bc:90:17: 3b:b4:70:01:89:1b:41:df:16:69:49:99:05:7f:4b: f6:74:00:4f:d7:f6:4e:cc:9c:20:46:a2:1b:14:c6: 29:13:66:e2:ea:82:1a:e1:45:fd:cf:9a:76:67:38: 58:14:61:60:a4:47:90:d7:32:b4:3a:d2:fc:b3:f0: 9b:6b:b2:f8:69:6b:65:4f:cd:d1:b5:ac:48:11:9f: 19:c2:50:9e:dc:0e:0d:2a:50:52:d3:82:d4:c9:05: 44:3d:cd:52:5c:30:a6:bb:90:5d:49:4d:23:3d:df: 8f:6f:0c:7f:de:61:f0:14:8d:d1:bc:c0:ef:e1:e6: 99:e9:3b:eb:ea:91:16:7b:0c:72:51:05:12:72:c6: cc:93:f9:05:48:63:da:d4:7c:82:3d:0a:26:e4:95: be:1d:bd:93:c9:78:43:d0:d7:4f:bb:ad:c6:a7:80: fb:d4:e7:17:2b:a5:34:e2:e2:4b:c3:70:5e:b4:40: 6d:77:ef:ae:e4:29:9a:66:85:43:59:bd:c3:71:09: 5c:03:fd:99:93:b9:02:b4:5d:01:44:40:75:e2:28: c3:ff:1a:cd:71:23:7a:09:2f:03:2f:03:e8:fd:3a: 7e:86:ee:db:78:2a:33:77:9a:1f:c4:d0:a3:1b:81: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:4D:64:28:B2:5A:9C:37:52:C7:67:1F:BA:22:48:CC:D3:69:D1:70 X509v3 Authority Key Identifier: keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f5:fe:98:76:bb:16:bd:a2:26:c6:8d:fd:85:87:53:ba:7f: 43:b2:33:d0:a9:17:0c:23:cf:6d:7f:45:39:ac:7f:f6:ee:e2: 4c:d1:ef:6d:35:25:34:4e:af:b9:3d:1e:1e:af:0c:6f:ee:0f: c9:44:4b:ca:9b:43:22:14:1f:8e:ad:91:44:3f:8f:e7:21:f8: 21:8f:76:50:b3:2a:22:f0:6d:80:fd:4f:c1:f7:74:90:62:fa: 2e:ae:b0:84:45:93:e3:30:7e:f8:8e:16:9f:29:61:25:26:8e: 29:fd:1a:74:98:a8:fc:24:11:2f:00:0d:02:72:36:5c:d5:ab: 1d:2c:a6:4b:fb:57:e6:37:15:f8:81:2e:48:40:fc:0b:7d:ad: 04:ac:19:40:d4:55:e0:04:fc:21:9c:2b:09:27:6a:14:5f:bf: bf:ad:5a:be:c4:47:f4:3b:bf:f0:6a:7b:2f:23:36:c4:27:68: 2b:56:c7:86:8f:9f:3b:c2:0e:5f:9e:48:e2:a5:d3:93:22:07: 14:2e:82:a9:96:ea:b1:3d:cf:9b:48:8c:88:fb:e6:eb:4d:b0: d1:a4:8f:d9:fc:d5:60:5c:c2:f1:2e:3d:9f:66:eb:34:93:33: 74:ee:c5:17:39:41:50:1a:a9:ba:0b:0a:6d:e8:7c:00:cc:88: 7a:38:27:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdG3gRjfBeJDXncPUQQFoAgTCfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD MTBCRUNGNzAeFw0yNjEwMTExNDE1MDFaFw0yNjEwMTIxNzMwMDFaMDMxMTAvBgNV BAMTKDFFNEQ2NDI4QjI1QTlDMzc1MkM3NjcxRkJBMjI0OENDRDM2OUQxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9Ff3d07lWBJsgLyQFzu0cAGJ G0HfFmlJmQV/S/Z0AE/X9k7MnCBGohsUxikTZuLqghrhRf3PmnZnOFgUYWCkR5DX MrQ60vyz8Jtrsvhpa2VPzdG1rEgRnxnCUJ7cDg0qUFLTgtTJBUQ9zVJcMKa7kF1J TSM9349vDH/eYfAUjdG8wO/h5pnpO+vqkRZ7DHJRBRJyxsyT+QVIY9rUfII9Cibk lb4dvZPJeEPQ10+7rcangPvU5xcrpTTi4kvDcF60QG13767kKZpmhUNZvcNxCVwD /ZmTuQK0XQFEQHXiKMP/Gs1xI3oJLwMvA+j9On6G7tt4KjN3mh/E0KMbgfpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHk1kKLJanDdSx2cfuiJIzNNp0XAwHwYDVR0j BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2 MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJL1/ph2uxa9oibGjf2Fh1O6f0OyM9CpFwwj z21/RTmsf/bu4kzR7201JTROr7k9Hh6vDG/uD8lES8qbQyIUH46tkUQ/j+ch+CGP dlCzKiLwbYD9T8H3dJBi+i6usIRFk+MwfviOFp8pYSUmjin9GnSYqPwkES8ADQJy NlzVqx0spkv7V+Y3FfiBLkhA/At9rQSsGUDUVeAE/CGcKwknahRfv7+tWr7ER/Q7 v/Bqey8jNsQnaCtWx4aPnzvCDl+eSOKl05MiBxQugqmW6rE9z5tIjIj75utNsNGk j9n81WBcwvEuPZ9m6zSTM3TuxRc5QVAaqboLCm3ofADMiHo4J1w= -----END CERTIFICATE-----Generated at Sun Oct 11 17:40:10 2026 by rpki-client