$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft File: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft (raw, json) Hash identifier: XVwgbkSjdIPhBGuQ/A5h30PrOyUMHBa/9uJnNLZxoRY= Subject key identifier: 8E:7C:9B:60:08:72:D4:2B:2C:63:DA:43:C0:67:97:D4:03:0D:87:97 Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8 Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8 Certificate serial: 5EC91FDC0237BB32561B1D138C3BFF760D25D9C2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 11:10:52 +0000 Manifest this update: Thu 03 Sep 2026 11:05:52 +0000 Manifest next update: Fri 04 Sep 2026 11:54:52 +0000 Files and hashes: 1: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl (hash: byuNPfnnqlDFbuThSPlzHTsCoO6Osng5aguRJPmWU9A=) 2: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: NpWQoJWkTFRWtu5IgmdpgROmr0Z1lBzNGKqs6X4eLkI=) 3: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=) 4: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=) 5: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=) 6: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=) 7: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=) 8: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: la/MT35l4XmEKRTivxkgUTpV+veAFTIlPEFkPiSAUT8=) 9: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs=) 10: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: ixvcysOVf6dGfQ7OL/zmp0yRPmCnK8SCHSDkoKzywSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c9:1f:dc:02:37:bb:32:56:1b:1d:13:8c:3b:ff:76:0d:25:d9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8 Validity Not Before: Sep 3 11:05:52 2026 GMT Not After : Sep 4 11:54:52 2026 GMT Subject: CN=8E7C9B600872D42B2C63DA43C06797D4030D8797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:9e:79:3c:36:47:6e:21:a5:45:1c:6a:01: ea:8d:d6:42:bb:d6:74:33:73:7b:0d:cf:fa:29:59: e4:f1:cc:ea:92:fc:a5:db:dc:cc:07:54:1e:3d:ff: 21:2e:46:26:9b:d1:4a:cf:b7:3a:dc:7f:38:67:2c: 19:c6:99:86:bc:a9:2e:01:d2:f1:75:26:96:22:ef: 36:60:93:b3:e3:f6:dc:e3:e6:fa:d7:0b:2e:ca:d5: 5c:23:c3:89:76:9f:e7:a8:dc:7c:dd:1e:c0:26:5e: cd:e1:db:ec:80:5b:dc:bc:6c:14:d5:78:ac:f6:90: 60:9d:25:d5:8e:d4:db:bf:63:e4:a5:7f:ce:8d:3c: 65:7e:c7:ec:0d:03:11:40:3f:74:87:5d:d1:d0:ff: ca:fb:52:f1:4e:6d:c8:b8:c2:23:db:ca:e0:6d:b6: 18:eb:19:a4:6e:ae:67:a0:0d:c4:cc:2d:e6:f9:c0: 34:30:7b:c9:be:69:a7:25:85:0a:c7:0a:f7:ab:b5: 1c:ef:cc:0e:71:77:a6:fa:d6:99:37:fa:c9:3d:b4: 60:ef:ca:5c:d8:e2:06:44:b3:40:07:6a:a6:ab:16: fc:a4:3c:bc:b2:13:a1:f0:0d:f8:37:07:11:32:19: 73:ca:c4:72:92:14:e5:14:39:59:70:2a:17:c0:c9: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7C:9B:60:08:72:D4:2B:2C:63:DA:43:C0:67:97:D4:03:0D:87:97 X509v3 Authority Key Identifier: keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:05:b2:87:93:4d:b8:c0:1c:df:2d:8e:63:83:06:2f:6b:e0: 24:69:f6:ab:02:a4:28:b0:41:54:ec:a3:cd:cb:21:72:43:be: 88:d9:a5:be:55:e5:67:78:1d:f4:8c:86:27:fe:82:43:c8:4d: da:78:d8:45:98:e2:b6:1f:e9:b3:40:1a:e9:df:57:8f:40:20: dd:57:cf:ec:24:b5:fd:3c:9d:ea:49:33:62:50:a3:65:a5:45: 12:09:a2:0e:e7:bf:02:6b:ab:c1:0d:ed:c3:c0:25:cd:b9:59: 1b:c7:ae:08:6a:d7:c1:ab:71:fb:9c:c0:a5:b5:bd:f2:38:52: 0d:47:4c:f5:ac:83:a1:97:4a:dd:ef:44:2d:ab:57:c8:76:8c: f2:3d:0b:9c:c3:ff:ed:b5:b7:e8:53:f2:52:30:55:b6:47:bc: 4e:5c:42:f5:35:71:44:da:74:38:51:f0:c9:39:6b:d0:3f:cc: 4c:4c:a2:ac:39:a0:33:32:8c:3c:a4:b4:e9:d6:62:7b:2b:ae: e2:70:4e:cf:3e:cd:c3:c1:38:b9:fb:55:6f:b2:dc:06:96:cf: 6a:58:a3:38:fe:2e:ec:5e:a4:ee:21:ca:be:90:1e:4e:b0:09: 48:4b:6a:b9:06:e9:89:07:7e:e3:a9:e9:7b:75:ed:0f:93:04: b1:87:92:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXskf3AI3uzJWGx0TjDv/dg0l2cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3 REY1NTZEODAeFw0yNjA5MDMxMTA1NTJaFw0yNjA5MDQxMTU0NTJaMDMxMTAvBgNV BAMTKDhFN0M5QjYwMDg3MkQ0MkIyQzYzREE0M0MwNjc5N0Q0MDMwRDg3OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQp55PDZHbiGlRRxqAeqN1kK7 1nQzc3sNz/opWeTxzOqS/KXb3MwHVB49/yEuRiab0UrPtzrcfzhnLBnGmYa8qS4B 0vF1JpYi7zZgk7Pj9tzj5vrXCy7K1Vwjw4l2n+eo3HzdHsAmXs3h2+yAW9y8bBTV eKz2kGCdJdWO1Nu/Y+Slf86NPGV+x+wNAxFAP3SHXdHQ/8r7UvFObci4wiPbyuBt thjrGaRurmegDcTMLeb5wDQwe8m+aaclhQrHCvertRzvzA5xd6b61pk3+sk9tGDv ylzY4gZEs0AHaqarFvykPLyyE6HwDfg3BxEyGXPKxHKSFOUUOVlwKhfAyfYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjnybYAhy1CssY9pDwGeX1AMNh5cwHwYDVR0j BBgwFoAUvNXgXlcPIoDs7zMXHretyH31VtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwZGE0NDctYTEzOC00NjI1LWE0MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1 NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3REY1NTZEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQ0Q1RTA1RTU3MEYyMjgwRUNFRjMzMTcxRUI3QURDODdERjU1 NkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0 MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FE Qzg3REY1NTZEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoFsoeTTbjAHN8tjmODBi9r4CRp9qsCpCiw QVTso83LIXJDvojZpb5V5Wd4HfSMhif+gkPITdp42EWY4rYf6bNAGunfV49AIN1X z+wktf08nepJM2JQo2WlRRIJog7nvwJrq8EN7cPAJc25WRvHrghq18GrcfucwKW1 vfI4Ug1HTPWsg6GXSt3vRC2rV8h2jPI9C5zD/+21t+hT8lIwVbZHvE5cQvU1cUTa dDhR8Mk5a9A/zExMoqw5oDMyjDyktOnWYnsrruJwTs8+zcPBOLn7VW+y3AaWz2pY ozj+LuxepO4hyr6QHk6wCUhLarkG6YkHfuOp6Xt17Q+TBLGHkqA= -----END CERTIFICATE-----Generated at Thu Sep 3 18:58:02 2026 by rpki-client