$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft File: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft (raw, json) Hash identifier: PyUzUsrECngfq6yt1Cf11oquMldxM0EfNFlFbPnpAfU= Subject key identifier: B5:7E:86:64:CE:B7:60:19:15:32:02:7C:9A:94:A1:81:9D:10:22:20 Authority key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B Certificate issuer: /CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B Certificate serial: 230E5614A81691C8C665FC4DB5D7D8CC6C2CFF03 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 21:15:33 +0000 Manifest this update: Wed 04 Nov 2026 21:10:33 +0000 Manifest next update: Thu 05 Nov 2026 23:43:33 +0000 Files and hashes: 1: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: gRxGW+klSIDqUWcFQBMXFqiWdggcgwp1v/UvYVaMWW4=) 2: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl (hash: AUyoPJJ5jIcl6LXg58MVjyDXYqD8+y2Yhlx4YmrAG8E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 12:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:0e:56:14:a8:16:91:c8:c6:65:fc:4d:b5:d7:d8:cc:6c:2c:ff:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B Validity Not Before: Nov 4 21:10:33 2026 GMT Not After : Nov 5 23:43:33 2026 GMT Subject: CN=B57E8664CEB760191532027C9A94A1819D102220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:05:1c:0a:0b:7e:d5:da:f4:13:af:28:10: 2b:5c:8c:20:f2:be:6d:d8:d0:70:fc:31:3a:f8:95: 9b:13:25:08:d6:8d:69:3f:23:4e:c0:e8:d8:c5:6c: 5d:74:a5:4a:38:34:07:38:a5:a9:74:fd:c3:20:5f: 61:d3:df:c1:82:c1:5a:5f:a6:28:7e:97:3a:34:28: 8f:61:99:d7:4c:38:41:a4:f8:09:36:3d:05:00:de: 0d:1c:1d:97:75:37:9a:08:b7:59:a4:b0:fc:da:e8: ac:0e:ae:1d:f1:67:c6:0e:66:ca:44:6c:a5:57:4b: cd:de:f6:01:b1:ef:9e:cf:4c:1e:b5:c0:5f:ec:a8: cd:82:45:4c:78:c9:8c:bd:c3:cd:f9:2e:77:ee:b4: 02:e8:d7:8c:d7:98:87:e6:f8:93:42:0a:68:cf:3d: 44:3e:9f:a3:52:5a:b6:b0:72:f1:34:b4:7f:b5:01: dc:74:51:0c:99:e1:7d:c2:c4:13:0c:6d:6b:fe:a5: 1a:13:60:68:2e:c4:b2:50:ce:2a:d9:e4:46:a6:4b: 29:92:13:b9:6c:3f:6c:ad:50:00:3d:dc:7a:31:27: fd:99:b9:ba:cb:6c:dd:7b:83:91:f9:42:d0:6e:45: 5b:61:d8:37:99:c1:c1:48:32:8a:cd:22:1f:67:8f: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7E:86:64:CE:B7:60:19:15:32:02:7C:9A:94:A1:81:9D:10:22:20 X509v3 Authority Key Identifier: keyid:BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:aa:5f:14:38:c3:98:f3:6b:ef:83:4e:79:5d:68:42:ec:39: d9:87:c9:02:0c:d8:e8:28:3b:77:ca:e0:52:6a:29:25:f9:c7: fb:e5:3e:1d:f1:cd:c7:50:1c:23:1f:cd:a0:0d:9a:a6:e9:e0: 80:44:7c:d3:0a:56:9c:44:9c:1c:d2:85:bb:3f:50:63:92:4a: 41:15:23:54:f7:93:15:3e:2c:84:99:8b:05:93:54:77:88:b8: 4f:30:c9:1e:44:65:8c:79:8a:20:89:aa:f3:dd:e2:7a:1d:f2: fa:4e:b7:53:f6:9c:5e:fa:36:e2:80:56:6d:c0:2e:0e:4d:5d: 09:60:cf:93:cc:49:97:ee:c3:41:90:a6:57:39:2a:81:0a:79: be:b4:92:dc:ca:1e:55:86:77:91:d3:91:34:42:65:77:3e:f4: 17:7d:ac:b0:05:11:6d:1d:09:d2:44:32:ed:f2:b1:97:55:bd: eb:bf:68:89:c5:44:ab:64:a3:69:bf:98:c2:68:c1:18:b7:14: c8:bc:f0:a6:59:42:63:a2:a9:b4:70:1c:a5:25:6e:7f:a5:ac: 5d:5b:8f:db:53:2b:a9:4b:e0:9e:ea:4b:98:a1:18:d3:a5:70: 0e:24:36:f1:50:55:64:ff:89:0c:86:f9:96:02:4f:93:79:7e: d5:8e:79:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIw5WFKgWkcjGZfxNtdfYzGws/wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDNDhFMTM1MEIyNTM1NDI2QzA5RDJFQTUzOTM5MEJC RTFGRUM2QjAeFw0yNjExMDQyMTEwMzNaFw0yNjExMDUyMzQzMzNaMDMxMTAvBgNV BAMTKEI1N0U4NjY0Q0VCNzYwMTkxNTMyMDI3QzlBOTRBMTgxOUQxMDIyMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRAUcCgt+1dr0E68oECtcjCDy vm3Y0HD8MTr4lZsTJQjWjWk/I07A6NjFbF10pUo4NAc4pal0/cMgX2HT38GCwVpf pih+lzo0KI9hmddMOEGk+Ak2PQUA3g0cHZd1N5oIt1mksPza6KwOrh3xZ8YOZspE bKVXS83e9gGx757PTB61wF/sqM2CRUx4yYy9w835LnfutALo14zXmIfm+JNCCmjP PUQ+n6NSWrawcvE0tH+1Adx0UQyZ4X3CxBMMbWv+pRoTYGguxLJQzirZ5EamSymS E7lsP2ytUAA93HoxJ/2ZubrLbN17g5H5QtBuRVth2DeZwcFIMorNIh9nj5cRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtX6GZM63YBkVMgJ8mpShgZ0QIiAwHwYDVR0j BBgwFoAUvMSOE1CyU1QmwJ0upTk5C74f7GswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmViZjU1Y2EtZDc4My00YTNiLTk1Y2MtNzNjYzM0NmRiNDZlLzAvQkNDNDhFMTM1 MEIyNTM1NDI2QzA5RDJFQTUzOTM5MEJCRTFGRUM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0M0OEUxMzUwQjI1MzU0MjZDMDlEMkVBNTM5MzkwQkJFMUZF QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvQkNDNDhFMTM1MEIyNTM1NDI2QzA5RDJFQTUzOTM5 MEJCRTFGRUM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiqXxQ4w5jza++DTnldaELsOdmHyQIM2Ogo O3fK4FJqKSX5x/vlPh3xzcdQHCMfzaANmqbp4IBEfNMKVpxEnBzShbs/UGOSSkEV I1T3kxU+LISZiwWTVHeIuE8wyR5EZYx5iiCJqvPd4nod8vpOt1P2nF76NuKAVm3A Lg5NXQlgz5PMSZfuw0GQplc5KoEKeb60ktzKHlWGd5HTkTRCZXc+9Bd9rLAFEW0d CdJEMu3ysZdVveu/aInFRKtko2m/mMJowRi3FMi88KZZQmOiqbRwHKUlbn+lrF1b j9tTK6lL4J7qS5ihGNOlcA4kNvFQVWT/iQyG+ZYCT5N5ftWOeZk= -----END CERTIFICATE-----Generated at Thu Nov 5 01:16:45 2026 by rpki-client