$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft File: BC56CE0B357E1A9036243CAE454739729AD6633C.mft (raw, json) Hash identifier: /Fi9d/csS6yYzVTnj+8iksfl7knIcgj5lc5miZWHPhw= Subject key identifier: E8:AD:FD:67:7E:29:72:40:6B:D2:BC:5E:5E:5B:9F:A3:43:01:F2:6F Authority key identifier: BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C Certificate issuer: /CN=BC56CE0B357E1A9036243CAE454739729AD6633C Certificate serial: 7CC7798FFCB4DEEC477B767FAF95B0B7EDBFDDF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 00:43:57 +0000 Manifest this update: Wed 04 Nov 2026 00:38:57 +0000 Manifest next update: Thu 05 Nov 2026 03:19:57 +0000 Files and hashes: 1: BC56CE0B357E1A9036243CAE454739729AD6633C.crl (hash: M8NoiPT+6D5hxsPP86BTDLDVVahqJyu6rsaS7VqrimA=) 2: 3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (hash: gRWK/0YFVmnxzlTGh51A5dqs3NFdvCJxXgz/joszlok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 03:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c7:79:8f:fc:b4:de:ec:47:7b:76:7f:af:95:b0:b7:ed:bf:dd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC56CE0B357E1A9036243CAE454739729AD6633C Validity Not Before: Nov 4 00:38:57 2026 GMT Not After : Nov 5 03:19:57 2026 GMT Subject: CN=E8ADFD677E2972406BD2BC5E5E5B9FA34301F26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:86:d0:0c:e7:65:d9:2a:a2:80:1b:43:d9: 88:58:e2:e8:73:92:87:87:15:48:3a:d0:72:6a:49: d1:a0:2b:96:bb:c9:4c:36:9e:1b:86:80:46:55:dc: c9:71:42:03:18:52:da:c2:2a:76:62:49:6b:c1:ab: 56:79:bb:fc:61:d5:b6:52:7d:9a:7e:42:42:f1:e8: aa:84:5f:f8:d4:50:2c:5c:1d:5c:40:92:54:c7:17: 51:85:b6:ec:89:23:25:cf:0c:9d:ed:c0:ea:d5:58: b3:26:b1:e1:63:0c:62:2c:c3:ea:ff:b7:3e:97:a8: b7:59:8d:f5:99:c6:2b:8c:00:f8:4a:08:c4:37:20: 6d:fc:00:1e:93:ab:82:ea:56:ff:de:9a:5a:45:a2: e0:2b:77:bc:46:45:59:d9:9d:c6:49:c6:8a:de:05: 2d:3a:26:a7:94:cb:d5:fd:8c:81:ba:7b:45:2e:91: 6c:a4:49:96:b8:2a:18:3e:05:7f:f7:66:fb:2e:20: 12:5d:c0:49:b8:ef:94:3b:77:c9:d7:62:54:6a:5f: 4c:da:74:ce:7f:ef:33:b3:d8:c8:5b:7f:8f:1e:13: 28:af:bd:43:bd:82:b0:d3:45:74:ff:f1:19:9b:5e: e7:45:11:33:65:42:25:63:20:26:bc:4a:e3:25:43: 1a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:FD:67:7E:29:72:40:6B:D2:BC:5E:5E:5B:9F:A3:43:01:F2:6F X509v3 Authority Key Identifier: keyid:BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:06:a4:25:8c:f4:ac:f3:f6:97:1d:4b:36:e7:8c:c3:95:7d: 73:52:85:66:8f:2d:e5:f0:b0:55:d6:08:6d:15:ca:8c:17:f5: 30:94:3f:7c:be:f2:b5:5e:d6:3a:b3:c9:01:e5:0a:61:c5:b4: 77:6a:a7:72:f7:f2:cb:27:84:86:ec:28:37:a4:a9:18:c0:c2: 2b:14:48:89:9a:72:a7:d3:a9:e8:a3:de:fe:0e:c3:4d:43:0a: e9:69:05:39:e0:fb:b6:07:6e:c6:28:db:b9:07:25:14:12:93: 6b:71:eb:1d:d6:34:90:53:f1:e3:30:06:5d:bf:30:a4:4a:3a: 0a:d6:80:b1:76:53:f8:09:95:31:03:31:cc:cb:a8:7d:c3:57: f1:00:d2:7c:64:5a:5d:fb:e3:c4:c9:31:75:b4:ad:bf:01:6d: 27:28:50:95:8e:ce:2c:f6:cb:b7:a7:f3:89:80:e6:78:ec:37: 6c:78:06:52:a9:fb:9d:65:fc:94:9d:ea:82:64:bc:0f:7d:2d: 77:b0:a6:10:f5:57:ca:94:48:c9:e2:b0:97:5b:6b:ef:af:01: 0f:b8:b8:74:10:82:0f:b3:cd:e2:b2:80:de:60:ff:3c:37:69: 62:98:95:df:da:e6:4d:e9:80:81:5d:f5:1f:60:b5:d9:d6:29: 94:f2:c2:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMd5j/y03uxHe3Z/r5Wwt+2/3fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM1NkNFMEIzNTdFMUE5MDM2MjQzQ0FFNDU0NzM5NzI5 QUQ2NjMzQzAeFw0yNjExMDQwMDM4NTdaFw0yNjExMDUwMzE5NTdaMDMxMTAvBgNV BAMTKEU4QURGRDY3N0UyOTcyNDA2QkQyQkM1RTVFNUI5RkEzNDMwMUYyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLYbQDOdl2SqigBtD2YhY4uhz koeHFUg60HJqSdGgK5a7yUw2nhuGgEZV3MlxQgMYUtrCKnZiSWvBq1Z5u/xh1bZS fZp+QkLx6KqEX/jUUCxcHVxAklTHF1GFtuyJIyXPDJ3twOrVWLMmseFjDGIsw+r/ tz6XqLdZjfWZxiuMAPhKCMQ3IG38AB6Tq4LqVv/emlpFouArd7xGRVnZncZJxore BS06JqeUy9X9jIG6e0UukWykSZa4Khg+BX/3ZvsuIBJdwEm475Q7d8nXYlRqX0za dM5/7zOz2Mhbf48eEyivvUO9grDTRXT/8RmbXudFETNlQiVjICa8SuMlQxoBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6K39Z34pckBr0rxeXlufo0MB8m8wHwYDVR0j BBgwFoAUvFbOCzV+GpA2JDyuRUc5cprWYzwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjIzOWZkY2ItYzQxNy00ZjNmLWIxYzktN2UzNjljZGUyMWZkLzAvQkM1NkNFMEIz NTdFMUE5MDM2MjQzQ0FFNDU0NzM5NzI5QUQ2NjMzQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzU2Q0UwQjM1N0UxQTkwMzYyNDNDQUU0NTQ3Mzk3MjlBRDY2 MzNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjIzOWZkY2ItYzQxNy00ZjNmLWIx YzktN2UzNjljZGUyMWZkLzAvQkM1NkNFMEIzNTdFMUE5MDM2MjQzQ0FFNDU0NzM5 NzI5QUQ2NjMzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIGpCWM9Kzz9pcdSzbnjMOVfXNShWaPLeXw sFXWCG0VyowX9TCUP3y+8rVe1jqzyQHlCmHFtHdqp3L38ssnhIbsKDekqRjAwisU SImacqfTqeij3v4Ow01DCulpBTng+7YHbsYo27kHJRQSk2tx6x3WNJBT8eMwBl2/ MKRKOgrWgLF2U/gJlTEDMczLqH3DV/EA0nxkWl3748TJMXW0rb8BbScoUJWOziz2 y7en84mA5njsN2x4BlKp+51l/JSd6oJkvA99LXewphD1V8qUSMnisJdba++vAQ+4 uHQQgg+zzeKygN5g/zw3aWKYld/a5k3pgIFd9R9gtdnWKZTywio= -----END CERTIFICATE-----Generated at Wed Nov 4 17:07:45 2026 by rpki-client