$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: Zt+iT1x5zUonbkDt+8O0zj0mcxjKp9S9MHZdzbWuYiI= Subject key identifier: 5E:1F:C4:B5:67:D6:14:4C:8A:16:8C:DE:4D:DF:CA:29:16:98:60:45 Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 16D2C8BC9D004CFDC1E5CEDDF2A945237EFAC105 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 08:04:51 +0000 Manifest this update: Sat 26 Sep 2026 07:59:51 +0000 Manifest next update: Sun 27 Sep 2026 10:57:51 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) 3: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: auk0OkfsDw9sxQ5zqCi96xwQpUaIVSVG9t+Q4rYEUQk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d2:c8:bc:9d:00:4c:fd:c1:e5:ce:dd:f2:a9:45:23:7e:fa:c1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Sep 26 07:59:51 2026 GMT Not After : Sep 27 10:57:51 2026 GMT Subject: CN=5E1FC4B567D6144C8A168CDE4DDFCA2916986045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:99:d4:e4:e7:18:d5:4d:0a:bf:9d:04:d9: 82:0c:60:2d:a5:42:f2:4c:7b:99:00:03:71:2a:40: bc:06:16:94:46:0f:a0:f3:ba:df:71:35:df:7a:09: 4d:a1:7a:8c:4d:ed:5b:a2:09:e7:05:6f:29:b7:f4: b8:79:c9:7a:31:bd:4a:86:ba:80:ed:b2:af:ee:b6: d0:8f:5b:5a:dd:b3:46:a9:d8:d0:8b:d7:9b:88:50: db:10:be:3c:d2:d6:af:1b:ab:25:ce:eb:4e:02:c3: fb:a2:50:50:d0:6c:a3:4b:7c:37:69:f8:97:e1:0d: 55:72:bf:8d:c1:04:3b:4b:c6:ba:74:17:3e:75:26: 9d:ae:7b:41:a4:10:fd:f8:b4:39:62:22:86:b2:e1: 4d:39:0f:e0:40:c4:e0:9b:af:01:00:5f:ea:c4:1e: 3c:12:f4:d2:ee:d5:79:3e:82:f9:29:35:75:fc:99: e8:a3:e5:45:ef:de:a2:29:42:37:10:dc:e4:1a:47: 27:50:05:b8:4e:1d:51:06:36:bc:b3:47:e3:29:d3: 71:34:90:10:3c:18:2e:0a:48:af:5e:18:91:6e:67: f7:2f:9e:fb:a2:bb:9d:07:8f:74:51:d5:ae:13:78: 3d:88:79:27:68:5d:46:ca:2c:ea:e6:f8:a7:62:14: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1F:C4:B5:67:D6:14:4C:8A:16:8C:DE:4D:DF:CA:29:16:98:60:45 X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6c:aa:6e:07:9f:ae:04:f8:63:1a:2e:c8:87:2a:b9:48:a7: c8:02:0f:48:d0:08:24:1d:7d:f1:bf:af:13:88:7b:a8:ed:9e: 59:51:e1:ca:23:50:01:cb:68:f8:7d:31:bd:91:87:bd:72:1d: ad:d7:1e:07:75:20:2c:62:3e:17:01:77:51:9d:d2:37:8d:07: 22:96:26:96:69:26:7d:1b:82:bb:4b:e2:be:4e:a2:0c:c1:c4: 19:ff:48:95:47:f3:8b:ec:91:3a:f3:4a:ca:47:e0:65:ff:48: 99:8a:a7:1b:04:ed:6f:fa:ee:4e:9c:29:43:3b:28:e3:15:6a: 38:06:76:e2:20:eb:c4:85:7a:0f:40:f9:1c:36:93:c0:7c:6d: da:13:39:06:25:5b:41:2d:78:2b:14:86:1b:9d:60:b0:1f:d3: b8:61:b9:90:40:29:5c:46:5b:a0:23:38:d5:17:80:2c:bf:9f: 56:ba:af:c3:ef:a4:14:95:6f:84:8e:ff:f5:9e:36:1f:5a:11: 0f:96:d7:d3:23:01:e9:8a:27:79:66:ce:bb:8b:1b:17:ca:6e: f4:72:95:de:5d:c9:b8:28:6f:ce:4d:df:a7:cd:85:76:76:eb: 1e:80:c7:de:60:02:74:52:21:6f:b1:20:13:47:75:19:2a:95: 0e:dd:3c:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtLIvJ0ATP3B5c7d8qlFI376wQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA5MjYwNzU5NTFaFw0yNjA5MjcxMDU3NTFaMDMxMTAvBgNV BAMTKDVFMUZDNEI1NjdENjE0NEM4QTE2OENERTREREZDQTI5MTY5ODYwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyZnU5OcY1U0Kv50E2YIMYC2l QvJMe5kAA3EqQLwGFpRGD6Dzut9xNd96CU2heoxN7VuiCecFbym39Lh5yXoxvUqG uoDtsq/uttCPW1rds0ap2NCL15uIUNsQvjzS1q8bqyXO604Cw/uiUFDQbKNLfDdp +JfhDVVyv43BBDtLxrp0Fz51Jp2ue0GkEP34tDliIoay4U05D+BAxOCbrwEAX+rE HjwS9NLu1Xk+gvkpNXX8meij5UXv3qIpQjcQ3OQaRydQBbhOHVEGNryzR+Mp03E0 kBA8GC4KSK9eGJFuZ/cvnvuiu50Hj3RR1a4TeD2IeSdoXUbKLOrm+KdiFCdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXh/EtWfWFEyKFozeTd/KKRaYYEUwHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApsqm4Hn64E+GMaLsiHKrlIp8gCD0jQCCQd ffG/rxOIe6jtnllR4cojUAHLaPh9Mb2Rh71yHa3XHgd1ICxiPhcBd1Gd0jeNByKW JpZpJn0bgrtL4r5OogzBxBn/SJVH84vskTrzSspH4GX/SJmKpxsE7W/67k6cKUM7 KOMVajgGduIg68SFeg9A+Rw2k8B8bdoTOQYlW0EteCsUhhudYLAf07hhuZBAKVxG W6AjONUXgCy/n1a6r8PvpBSVb4SO//WeNh9aEQ+W19MjAemKJ3lmzruLGxfKbvRy ld5dybgob85N36fNhXZ26x6Ax95gAnRSIW+xIBNHdRkqlQ7dPDo= -----END CERTIFICATE-----Generated at Sat Sep 26 12:12:29 2026 by rpki-client