$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft File: BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json) Hash identifier: 1W8rx0uLIQcl+OihKRiB1+f4r7ApUbqjrLldYFW35dw= Subject key identifier: 55:BB:10:C3:D9:F5:93:F0:81:C6:72:1C:53:49:2A:72:7A:CC:FC:DC Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Certificate issuer: /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Certificate serial: 3EF6C757592AA6F5329A4C7217AC5E20C6AE2AB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft Manifest number: 10 Signing time: Wed 13 May 2026 08:15:32 +0000 Manifest this update: Wed 13 May 2026 08:10:32 +0000 Manifest next update: Thu 14 May 2026 12:12:32 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=) 2: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: IVUV431MZNmn2e/gRtvAidn9sP9Q8llSV95uKL/tRsU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f6:c7:57:59:2a:a6:f5:32:9a:4c:72:17:ac:5e:20:c6:ae:2a:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Validity Not Before: May 13 08:10:32 2026 GMT Not After : May 14 12:12:32 2026 GMT Subject: CN=55BB10C3D9F593F081C6721C53492A727ACCFCDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:07:46:a9:d5:87:e4:94:b2:9e:d2:f0:fd: a8:6d:7b:4e:e0:cd:ce:0f:5e:63:ba:0b:48:4f:8f: cd:e7:46:d4:34:00:31:f4:ce:44:07:dc:72:f2:f9: bf:06:0b:0f:29:3d:49:6e:3e:49:e4:bf:03:a2:39: 93:e9:d3:94:13:62:17:94:00:77:e9:e9:09:b3:3b: 4d:78:8c:e7:97:f2:86:1a:33:6e:34:10:a6:7c:1d: 88:d6:ce:4e:fe:53:47:d6:94:c0:c0:a6:4e:ad:2e: 0a:1f:cd:c1:2d:b2:8b:b9:ec:b1:44:88:37:3f:a0: b0:bc:c9:54:f9:06:84:16:bc:8d:96:c8:c2:2f:31: 5a:a6:64:9b:bc:41:28:82:a8:29:68:a3:7f:17:57: f7:ba:03:2d:8b:52:e9:95:97:18:95:97:b0:69:da: 11:8c:45:c3:28:a5:9c:0b:93:bb:6a:a8:4d:2c:39: 71:9d:f6:d2:0f:d1:db:14:aa:f4:37:16:4d:dd:0c: 7b:f7:d8:ec:80:89:e5:38:fb:79:e4:41:3b:52:93: 4e:72:e0:5d:30:a5:f2:05:b1:44:d4:85:6b:c4:09: ec:2f:3d:8c:cc:48:7a:19:c7:07:5a:12:8d:8b:93: 66:b9:1f:42:8b:b3:3b:ba:f8:2e:76:1c:ad:92:fb: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BB:10:C3:D9:F5:93:F0:81:C6:72:1C:53:49:2A:72:7A:CC:FC:DC X509v3 Authority Key Identifier: keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a2:13:d1:fb:54:d3:e5:62:a2:94:4e:6a:0c:b9:fa:36:0f: 34:46:d8:3a:2d:a8:f4:9c:fb:0d:22:50:57:2b:ed:48:d1:ef: 45:2f:f6:ba:fb:51:3a:35:db:f6:c2:9a:65:bc:c3:70:0f:80: 6d:d1:2a:27:c4:2f:7f:90:57:e9:6a:18:b6:af:d6:64:dd:00: 73:c4:9e:c9:73:0c:8b:8d:91:f6:8e:95:09:62:68:0f:f1:d5: 52:72:da:33:40:4c:17:ef:05:25:29:ed:be:e1:3e:9c:99:fc: 5e:7a:34:1a:6a:18:ff:af:f8:65:e7:17:b6:b5:94:e5:18:63: 8e:4f:2c:16:67:01:85:c0:23:ba:0c:96:4a:ec:6e:dd:77:23: dc:64:d8:2e:8a:da:72:52:97:20:39:54:4e:81:82:2a:3b:cd: 14:3e:75:ea:3b:60:58:2d:f9:71:54:39:be:df:89:4e:18:21: 0b:14:7f:60:dc:ab:60:7a:01:b6:f3:c1:fd:f7:a4:3c:00:b5: 66:84:56:f6:a9:a1:d0:81:14:60:d8:bd:85:ae:32:d2:42:14: de:c9:02:0f:3d:2f:e5:19:1c:48:c0:53:82:b5:d5:9e:1f:5b: 1b:03:a6:1d:91:2b:e8:6d:39:eb:e5:42:8d:b5:e4:dc:a6:fc: d1:34:df:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPvbHV1kqpvUymkxyF6xeIMauKrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD MTBCRUNGNzAeFw0yNjA1MTMwODEwMzJaFw0yNjA1MTQxMjEyMzJaMDMxMTAvBgNV BAMTKDU1QkIxMEMzRDlGNTkzRjA4MUM2NzIxQzUzNDkyQTcyN0FDQ0ZDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0oAdGqdWH5JSyntLw/ahte07g zc4PXmO6C0hPj83nRtQ0ADH0zkQH3HLy+b8GCw8pPUluPknkvwOiOZPp05QTYheU AHfp6QmzO014jOeX8oYaM240EKZ8HYjWzk7+U0fWlMDApk6tLgofzcEtsou57LFE iDc/oLC8yVT5BoQWvI2WyMIvMVqmZJu8QSiCqCloo38XV/e6Ay2LUumVlxiVl7Bp 2hGMRcMopZwLk7tqqE0sOXGd9tIP0dsUqvQ3Fk3dDHv32OyAieU4+3nkQTtSk05y 4F0wpfIFsUTUhWvECewvPYzMSHoZxwdaEo2Lk2a5H0KLszu6+C52HK2S+1YtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVbsQw9n1k/CBxnIcU0kqcnrM/NwwHwYDVR0j BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2 MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOiE9H7VNPlYqKUTmoMufo2DzRG2DotqPSc +w0iUFcr7UjR70Uv9rr7UTo12/bCmmW8w3APgG3RKifEL3+QV+lqGLav1mTdAHPE nslzDIuNkfaOlQliaA/x1VJy2jNATBfvBSUp7b7hPpyZ/F56NBpqGP+v+GXnF7a1 lOUYY45PLBZnAYXAI7oMlkrsbt13I9xk2C6K2nJSlyA5VE6Bgio7zRQ+deo7YFgt +XFUOb7fiU4YIQsUf2Dcq2B6Abbzwf33pDwAtWaEVvapodCBFGDYvYWuMtJCFN7J Ag89L+UZHEjAU4K11Z4fWxsDph2RK+htOevlQo215Nym/NE0390= -----END CERTIFICATE-----Generated at Wed May 13 14:59:39 2026 by rpki-client