$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft File: BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json) Hash identifier: aLpymL/k7SwPjACgwXk6crF0pdUYK8Unoc5Arib/Pug= Subject key identifier: C6:C2:7B:70:D0:C6:F4:D5:38:0E:F1:8D:70:34:5C:DA:95:74:33:A7 Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Certificate issuer: /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Certificate serial: 5D45995BEBADF7D1B1747648FDE8A0B0CF2075FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 10:52:42 +0000 Manifest this update: Fri 24 Jul 2026 10:47:42 +0000 Manifest next update: Sat 25 Jul 2026 12:47:42 +0000 Files and hashes: 1: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: k+aWz6sMraStSf3OHws5rJ+uZ0VRFa3ZImaNsRhzK4Q=) 2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 09:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:45:99:5b:eb:ad:f7:d1:b1:74:76:48:fd:e8:a0:b0:cf:20:75:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Validity Not Before: Jul 24 10:47:42 2026 GMT Not After : Jul 25 12:47:42 2026 GMT Subject: CN=C6C27B70D0C6F4D5380EF18D70345CDA957433A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:85:89:6b:6c:fa:58:ff:09:30:3a:7d:9d: 2d:5b:ca:f1:f7:92:1b:d8:b6:de:a4:3a:88:4a:94: 52:6f:95:95:3a:b8:2b:e3:4a:d0:d5:20:16:f8:7a: d2:be:d0:8a:3f:97:1b:50:54:b2:07:4c:cc:73:6f: ca:fb:19:75:9b:81:37:7a:b9:d2:9a:2a:ff:e9:f8: 49:80:6e:dc:ae:dc:37:c0:3d:3b:28:de:1a:83:b5: 07:eb:03:66:6f:03:c1:2d:ad:70:08:7c:86:a4:cb: 0a:f5:ad:b6:a6:d0:e5:2b:7e:78:de:4a:23:67:14: 70:5c:92:29:dc:a4:1d:ab:5d:6c:d6:47:99:05:c7: 5b:53:08:ce:91:ff:ee:6e:c3:fb:e0:5f:ed:e6:30: 66:dd:42:18:aa:d5:93:f0:a0:44:bd:1a:ce:54:09: b0:f1:87:e6:49:f1:43:ae:a3:37:1f:18:b1:0a:ad: 14:ea:de:3e:96:f3:fa:3c:aa:1c:dc:ab:de:12:d0: d3:af:3c:8b:3a:72:1e:51:31:c2:3d:6f:39:8d:82: 39:ad:4c:e7:60:1b:3e:af:1b:ef:eb:83:5a:13:4f: a3:ee:d3:af:18:0d:5d:eb:e1:4d:4f:1d:5a:e1:73: aa:63:e8:fd:f0:cb:4a:84:3b:08:39:aa:ac:41:c1: f9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C2:7B:70:D0:C6:F4:D5:38:0E:F1:8D:70:34:5C:DA:95:74:33:A7 X509v3 Authority Key Identifier: keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6b:cc:0d:00:f5:00:d7:24:9c:9f:5b:92:10:5f:1b:8f:c2: e0:79:66:d0:ca:45:3a:f6:c5:e7:36:6c:0f:99:9d:4f:e9:70: db:e9:0f:26:c2:fc:98:12:98:5a:76:67:15:2d:2a:3e:32:16: 2c:56:93:84:bc:87:e6:cd:c5:03:0e:37:4f:1f:c1:81:bd:0f: 49:79:9c:ae:15:be:b8:a5:be:c4:94:49:7d:f5:18:fa:1b:e5: 6e:61:2f:34:57:3b:2d:9a:1f:57:22:c3:0f:4b:ae:f0:47:d7: b8:3d:d2:b5:f1:8c:be:f6:d1:71:0d:c9:30:cc:e5:6b:ad:06: 3a:1b:fc:c8:b9:d2:c8:7c:dc:23:94:cf:92:33:4d:aa:a0:a7: 6a:2c:9e:30:88:e6:4b:94:24:39:f4:7c:df:4b:42:2d:23:65: c3:e2:ab:5c:ca:35:d8:b6:3f:e3:16:65:fe:3f:97:b2:65:ca: 76:22:a8:4c:41:2a:9e:d8:09:40:38:90:1e:5d:d0:b3:7e:c9: ba:e4:58:68:59:cf:f3:4f:65:d6:90:76:0c:2d:f5:b3:7a:8f: 73:48:93:2c:d2:19:93:30:d6:e9:e3:9d:67:6e:83:e5:d2:8a: 8b:b5:5c:f1:0d:e3:ab:b7:ab:56:03:f3:1f:a7:15:6c:05:78: c7:a1:d6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUWZW+ut99GxdHZI/eigsM8gdf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD MTBCRUNGNzAeFw0yNjA3MjQxMDQ3NDJaFw0yNjA3MjUxMjQ3NDJaMDMxMTAvBgNV BAMTKEM2QzI3QjcwRDBDNkY0RDUzODBFRjE4RDcwMzQ1Q0RBOTU3NDMzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PoWJa2z6WP8JMDp9nS1byvH3 khvYtt6kOohKlFJvlZU6uCvjStDVIBb4etK+0Io/lxtQVLIHTMxzb8r7GXWbgTd6 udKaKv/p+EmAbtyu3DfAPTso3hqDtQfrA2ZvA8EtrXAIfIakywr1rbam0OUrfnje SiNnFHBckincpB2rXWzWR5kFx1tTCM6R/+5uw/vgX+3mMGbdQhiq1ZPwoES9Gs5U CbDxh+ZJ8UOuozcfGLEKrRTq3j6W8/o8qhzcq94S0NOvPIs6ch5RMcI9bzmNgjmt TOdgGz6vG+/rg1oTT6Pu068YDV3r4U1PHVrhc6pj6P3wy0qEOwg5qqxBwfldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxsJ7cNDG9NU4DvGNcDRc2pV0M6cwHwYDVR0j BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2 MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClrzA0A9QDXJJyfW5IQXxuPwuB5ZtDKRTr2 xec2bA+ZnU/pcNvpDybC/JgSmFp2ZxUtKj4yFixWk4S8h+bNxQMON08fwYG9D0l5 nK4VvrilvsSUSX31GPob5W5hLzRXOy2aH1ciww9LrvBH17g90rXxjL720XENyTDM 5WutBjob/Mi50sh83COUz5IzTaqgp2osnjCI5kuUJDn0fN9LQi0jZcPiq1zKNdi2 P+MWZf4/l7JlynYiqExBKp7YCUA4kB5d0LN+ybrkWGhZz/NPZdaQdgwt9bN6j3NI kyzSGZMw1unjnWdug+XSiou1XPEN46u3q1YD8x+nFWwFeMeh1tc= -----END CERTIFICATE-----Generated at Fri Jul 24 20:23:50 2026 by rpki-client