$ rpki-client -vvf rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft File: BC56CE0B357E1A9036243CAE454739729AD6633C.mft (raw, json) Hash identifier: rJNpW8fk8KKXaTkWkA9/ZQft0+Mik+K2bEvLKcKUPOU= Subject key identifier: 02:AC:A5:91:7D:5D:69:D2:E8:F4:4C:37:75:3C:FC:88:58:32:FD:52 Authority key identifier: BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C Certificate issuer: /CN=BC56CE0B357E1A9036243CAE454739729AD6633C Certificate serial: 216422A73E43F328B22EBCBA12813B7DB8E60037 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 23:18:20 +0000 Manifest this update: Thu 23 Jul 2026 23:13:20 +0000 Manifest next update: Sat 25 Jul 2026 00:38:20 +0000 Files and hashes: 1: BC56CE0B357E1A9036243CAE454739729AD6633C.crl (hash: KwVoSlPgNZTuA1DgB0eRqXFOtiCxvN24jPKrUhDjPVQ=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: gRWK/0YFVmnxzlTGh51A5dqs3NFdvCJxXgz/joszlok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:64:22:a7:3e:43:f3:28:b2:2e:bc:ba:12:81:3b:7d:b8:e6:00:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC56CE0B357E1A9036243CAE454739729AD6633C Validity Not Before: Jul 23 23:13:20 2026 GMT Not After : Jul 25 00:38:20 2026 GMT Subject: CN=02ACA5917D5D69D2E8F44C37753CFC885832FD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:4e:19:d2:4d:15:c5:28:45:2a:f0:74:cc: 37:82:d5:3e:c2:04:78:ca:fa:5a:5b:dc:d5:00:05: de:01:00:c5:09:f5:24:c2:1f:8f:54:88:d3:a3:1a: d1:7f:58:01:38:ec:d9:4a:3d:1f:c0:66:33:ac:69: 3f:ba:ee:5f:b0:b8:a2:c4:77:40:34:a3:e1:8b:43: b4:51:62:23:2d:0d:9f:d6:ff:b7:69:40:e1:9e:89: cb:20:3a:a1:5e:39:c7:bf:53:49:e3:2d:5e:dc:a2: f2:7a:36:ec:63:ca:6e:a3:e3:f3:99:0a:2a:e8:67: 39:6f:36:c1:93:54:bf:3b:a4:a1:31:cb:8d:56:22: 45:4b:a4:9c:49:8a:23:41:0d:81:a5:28:d2:57:4c: c3:ef:68:f3:3f:2b:ac:71:e7:b5:12:b0:60:94:cf: 67:0e:79:24:d3:39:5e:57:08:33:1c:6e:84:bd:c7: bc:73:50:38:2a:98:e4:19:11:10:ac:84:4c:a6:c2: 59:e5:58:86:a7:51:27:87:ff:41:e7:80:5a:e2:13: c8:b5:3f:0c:39:c6:d0:69:46:7d:44:6b:59:3a:fd: c5:74:14:b7:36:8f:e1:c9:7f:94:43:68:de:d6:2d: dc:9c:00:dc:ab:19:ad:76:03:1c:96:29:6b:75:e0: 4a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AC:A5:91:7D:5D:69:D2:E8:F4:4C:37:75:3C:FC:88:58:32:FD:52 X509v3 Authority Key Identifier: keyid:BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:63:6f:4d:f2:a5:0d:75:34:d5:63:7c:bd:c2:25:35:c6:d2: 53:8f:f6:dc:aa:f9:ae:ab:3e:ac:7c:7b:fe:2c:e2:4e:93:d7: 8b:5f:9a:08:7f:e6:08:bb:80:2b:b7:f0:f2:74:17:03:8e:3b: 72:22:a5:e0:d8:36:68:98:b9:9b:6e:37:88:c3:69:e8:c4:26: e4:16:af:6f:41:af:a2:17:39:43:59:73:66:7d:a8:4c:52:02: b5:2e:4b:f3:6a:09:e1:a6:b2:86:88:62:66:5e:ad:eb:68:65: 4f:5c:12:f5:4c:c3:60:1e:49:7b:98:06:64:16:7c:85:f4:1b: 0b:9e:82:3e:8e:be:b6:5a:e0:b1:56:fb:de:08:6c:c9:58:bc: f5:a1:6f:c3:a5:a5:f2:82:3a:a2:c9:c3:8b:f4:03:f8:2c:5a: f3:df:7d:e9:a7:01:e9:1d:a6:ca:72:74:62:42:01:23:59:fa: a6:7b:e7:b0:5c:db:41:ca:ce:b9:38:19:b6:b2:ce:8a:ac:5c: f2:04:96:64:82:cc:55:ab:37:c1:8d:d8:bb:01:5f:67:87:3c: 5a:1b:f3:83:22:63:fb:29:b2:f0:78:7a:2e:dc:dd:7f:5e:b0: ba:bd:93:a5:2f:58:15:2f:cd:41:31:20:17:65:e1:25:42:2f: 41:89:36:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWQipz5D8yiyLry6EoE7fbjmADcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1NkNFMEIzNTdFMUE5MDM2MjQzQ0FFNDU0NzM5NzI5 QUQ2NjMzQzAeFw0yNjA3MjMyMzEzMjBaFw0yNjA3MjUwMDM4MjBaMDMxMTAvBgNV BAMTKDAyQUNBNTkxN0Q1RDY5RDJFOEY0NEMzNzc1M0NGQzg4NTgzMkZENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWFU4Z0k0VxShFKvB0zDeC1T7C BHjK+lpb3NUABd4BAMUJ9STCH49UiNOjGtF/WAE47NlKPR/AZjOsaT+67l+wuKLE d0A0o+GLQ7RRYiMtDZ/W/7dpQOGeicsgOqFeOce/U0njLV7covJ6Nuxjym6j4/OZ CiroZzlvNsGTVL87pKExy41WIkVLpJxJiiNBDYGlKNJXTMPvaPM/K6xx57USsGCU z2cOeSTTOV5XCDMcboS9x7xzUDgqmOQZERCshEymwlnlWIanUSeH/0HngFriE8i1 Pww5xtBpRn1Ea1k6/cV0FLc2j+HJf5RDaN7WLdycANyrGa12AxyWKWt14Eo9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqylkX1dadLo9Ew3dTz8iFgy/VIwHwYDVR0j BBgwFoAUvFbOCzV+GpA2JDyuRUc5cprWYzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjIzOWZkY2ItYzQxNy00ZjNmLWIxYzktN2UzNjljZGUyMWZkLzAvQkM1NkNFMEIz NTdFMUE5MDM2MjQzQ0FFNDU0NzM5NzI5QUQ2NjMzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzU2Q0UwQjM1N0UxQTkwMzYyNDNDQUU0NTQ3Mzk3MjlBRDY2 MzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvQkM1NkNFMEIzNTdFMUE5MDM2MjQzQ0FFNDU0NzM5 NzI5QUQ2NjMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVjb03ypQ11NNVjfL3CJTXG0lOP9tyq+a6r Pqx8e/4s4k6T14tfmgh/5gi7gCu38PJ0FwOOO3IipeDYNmiYuZtuN4jDaejEJuQW r29Br6IXOUNZc2Z9qExSArUuS/NqCeGmsoaIYmZeretoZU9cEvVMw2AeSXuYBmQW fIX0Gwuegj6OvrZa4LFW+94IbMlYvPWhb8OlpfKCOqLJw4v0A/gsWvPffemnAekd pspydGJCASNZ+qZ757Bc20HKzrk4GbayzoqsXPIElmSCzFWrN8GN2LsBX2eHPFob 84MiY/spsvB4ei7c3X9esLq9k6UvWBUvzUExIBdl4SVCL0GJNl0= -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:28 2026 by rpki-client