$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: zwrdM97agT6fvnCvS9uvKhaxbXqZe+9DqZTLBlvLF7M= Subject key identifier: 99:01:45:A3:EA:FA:BD:06:EA:E2:5A:BF:D3:D5:10:60:FC:3E:4B:E2 Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 46E59E828A63528E979ADFE64930BA106B1C80E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:56:30 +0000 Manifest this update: Tue 12 May 2026 19:51:30 +0000 Manifest next update: Wed 13 May 2026 20:40:30 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) 3: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: SkOni2cTy5GRg1oYCth5wsMXg9afeq4X4azK2hXI/Uw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e5:9e:82:8a:63:52:8e:97:9a:df:e6:49:30:ba:10:6b:1c:80:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: May 12 19:51:30 2026 GMT Not After : May 13 20:40:30 2026 GMT Subject: CN=990145A3EAFABD06EAE25ABFD3D51060FC3E4BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:2a:2a:ed:af:92:f0:66:3a:3c:39:1f:c3: 2c:90:ab:b9:6c:95:f7:cc:3e:33:7a:d7:64:dd:81: 31:51:1f:92:23:fe:9a:3a:09:ef:e6:03:6b:01:18: 72:35:5b:51:39:a9:46:04:d2:94:96:e9:21:54:76: 32:27:88:6c:2d:23:48:c4:8e:1c:27:7a:66:3f:72: ee:52:57:b1:40:a4:ff:c8:d7:8b:02:18:ab:a5:8c: 5b:e9:c6:fe:03:94:b6:d7:52:2a:8c:d1:d5:a0:eb: d9:67:ad:95:51:29:b5:6e:6c:36:7e:5a:90:74:0e: d1:ca:9a:49:27:6a:48:e1:a0:fe:b4:de:06:99:43: 06:80:36:51:90:92:ba:89:95:48:f5:36:bb:52:dd: 44:cf:93:aa:19:ea:91:4e:09:32:83:e9:42:a4:9f: b0:6c:cd:1d:e9:2c:79:3f:38:41:97:f3:a1:58:19: 4e:e7:dd:7b:f7:1e:ad:fe:b1:78:1d:dd:a5:f1:fc: 76:db:d3:4e:0f:55:98:36:b0:c3:67:ee:52:0c:4c: c5:9b:8b:68:42:3e:e2:29:85:c0:3a:ca:37:9f:33: d8:81:1c:a7:3e:52:17:6b:20:bf:e5:91:65:e5:75: 89:14:93:4d:77:92:09:58:57:03:b7:fa:49:f0:eb: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:01:45:A3:EA:FA:BD:06:EA:E2:5A:BF:D3:D5:10:60:FC:3E:4B:E2 X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9a:80:e5:96:69:67:3b:d3:72:16:54:48:7d:94:c8:4b:5b: b1:c6:a8:47:cc:b0:19:6c:47:6e:0d:21:72:9f:16:98:d8:c0: ac:b6:77:ad:95:53:b8:01:a8:ac:78:bf:ff:57:0a:d5:5e:85: 81:1f:4b:5c:d6:26:96:17:ee:d9:a6:a8:b6:b9:79:18:af:63: 25:5e:47:da:78:94:d2:ca:74:3b:75:d6:ff:c8:18:bb:97:93: df:f2:db:bb:9b:20:4d:7b:30:83:66:81:c8:8d:33:38:0e:89: 0f:5a:7e:5f:a5:e1:21:c1:5f:ea:5e:26:bb:39:69:c5:7e:d3: c6:43:44:13:dc:93:b9:ef:e2:a0:65:7d:08:cc:c8:d3:87:45: e9:02:f4:38:d0:7a:0a:0d:39:e2:3f:d9:03:c2:f2:89:d1:a6: 65:d4:18:11:83:8f:62:00:f1:bd:72:28:49:bd:f9:ca:e9:b1: cf:76:c9:f7:6f:e5:f2:44:76:77:89:66:93:69:9b:9d:ab:29: 08:8e:ff:46:02:35:8e:c8:e1:c5:b9:e9:bc:ef:55:e3:8c:75: c1:89:71:e0:25:06:d0:18:01:2f:67:ad:14:4a:95:b7:32:9c: 75:f7:5c:78:38:ea:68:72:57:de:53:c9:13:9c:17:2e:c2:dd: a6:d1:50:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURuWegopjUo6Xmt/mSTC6EGscgOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA1MTIxOTUxMzBaFw0yNjA1MTMyMDQwMzBaMDMxMTAvBgNV BAMTKDk5MDE0NUEzRUFGQUJEMDZFQUUyNUFCRkQzRDUxMDYwRkMzRTRCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuVCoq7a+S8GY6PDkfwyyQq7ls lffMPjN612TdgTFRH5Ij/po6Ce/mA2sBGHI1W1E5qUYE0pSW6SFUdjIniGwtI0jE jhwnemY/cu5SV7FApP/I14sCGKuljFvpxv4DlLbXUiqM0dWg69lnrZVRKbVubDZ+ WpB0DtHKmkknakjhoP603gaZQwaANlGQkrqJlUj1NrtS3UTPk6oZ6pFOCTKD6UKk n7BszR3pLHk/OEGX86FYGU7n3Xv3Hq3+sXgd3aXx/Hbb004PVZg2sMNn7lIMTMWb i2hCPuIphcA6yjefM9iBHKc+UhdrIL/lkWXldYkUk013kglYVwO3+knw69R5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQFFo+r6vQbq4lq/09UQYPw+S+IwHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOagOWWaWc703IWVEh9lMhLW7HGqEfMsBls R24NIXKfFpjYwKy2d62VU7gBqKx4v/9XCtVehYEfS1zWJpYX7tmmqLa5eRivYyVe R9p4lNLKdDt11v/IGLuXk9/y27ubIE17MINmgciNMzgOiQ9afl+l4SHBX+peJrs5 acV+08ZDRBPck7nv4qBlfQjMyNOHRekC9DjQegoNOeI/2QPC8onRpmXUGBGDj2IA 8b1yKEm9+crpsc92yfdv5fJEdneJZpNpm52rKQiO/0YCNY7I4cW56bzvVeOMdcGJ ceAlBtAYAS9nrRRKlbcynHX3XHg46mhyV95TyROcFy7C3abRUCk= -----END CERTIFICATE-----Generated at Wed May 13 02:49:38 2026 by rpki-client