$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: E+71E3BraWMjOTC8k//eBLBCg+amKcMtPOSKUkj2wv8= Subject key identifier: 0C:AA:95:C4:0E:D7:EA:EC:EA:3C:6C:EE:36:5E:EC:1F:36:8D:E0:CD Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 69544E3FE176039455ECE97A7513781F35695544 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:06:20 +0000 Manifest this update: Tue 02 Jun 2026 09:01:20 +0000 Manifest next update: Wed 03 Jun 2026 12:01:20 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 2: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: 3scgIzaUM5ZfrEXSmix/2qv92MHuZ0QUDHQtqCshHdk=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 12:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:54:4e:3f:e1:76:03:94:55:ec:e9:7a:75:13:78:1f:35:69:55:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Jun 2 09:01:20 2026 GMT Not After : Jun 3 12:01:20 2026 GMT Subject: CN=0CAA95C40ED7EAECEA3C6CEE365EEC1F368DE0CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dd:20:86:92:54:7a:83:74:ad:2f:e9:c2:2e: 9c:7b:95:0b:86:d9:8a:8e:69:ce:59:ba:80:4b:12: a8:3a:9a:8b:c8:43:7f:51:6d:b5:a5:73:00:2b:82: 8d:c5:f4:46:10:f0:e8:9d:87:20:60:49:71:52:4c: de:34:74:89:ee:50:12:ce:46:c3:96:72:a8:20:c2: dc:12:6e:25:53:51:5d:09:42:54:f0:a2:81:bb:46: ad:02:1f:1d:93:4e:e0:92:61:49:f0:20:3a:92:ae: 5f:20:bf:ab:5f:cd:8f:92:dc:6d:f6:8a:76:f9:1a: 34:d2:2a:97:38:00:ab:1e:b2:23:8f:d4:e2:ad:e3: 61:d7:37:a9:32:50:c3:2f:92:91:6b:a7:ce:c9:8e: 14:3a:51:56:3c:4c:8a:76:f3:03:d9:70:17:66:e4: 25:4b:40:3c:db:2d:ff:6a:91:aa:f7:26:e4:53:06: 9b:0b:fa:fb:ac:6d:8e:db:f8:d9:cb:34:6b:17:f6: df:d8:32:ac:f9:8a:56:b6:06:c2:c5:99:f3:d0:73: da:85:11:9c:cc:db:88:d9:11:80:5f:7a:43:1a:15: f7:42:88:51:ce:d5:bb:cc:6c:0b:2a:02:92:06:6b: ff:05:f6:a4:6d:52:c7:40:8c:2c:04:e8:53:f8:37: 80:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AA:95:C4:0E:D7:EA:EC:EA:3C:6C:EE:36:5E:EC:1F:36:8D:E0:CD X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:35:c4:5c:e5:3d:11:fc:73:4e:e4:f4:27:d0:63:ff:99:d6: 14:b5:8f:4e:54:fa:70:9a:58:49:29:ff:04:ed:1d:27:3f:69: 84:30:69:0e:d8:28:1e:5b:1f:31:08:aa:c8:86:d4:f9:68:17: f8:97:63:0a:3e:a9:9f:c7:13:8a:c6:af:8e:7b:f2:64:1e:fe: 1d:52:53:4e:27:32:e5:f5:91:1b:f1:96:d7:60:7a:f0:eb:cd: 01:d1:fa:e5:c0:a5:42:5b:87:db:11:08:e8:2b:d9:64:8d:fa: 88:6c:6a:39:7a:05:b6:88:e7:c4:cc:d2:34:19:fd:19:7e:d1: 41:e6:70:00:08:5d:37:98:9b:3e:7d:58:f5:03:24:31:6e:9f: d9:1f:86:c9:e6:15:95:8a:c4:c8:9d:b0:b9:ac:0a:29:a8:5d: 41:b6:22:26:0f:3b:7e:19:12:ef:35:e0:fe:af:fe:d8:4e:f9: 94:34:45:23:11:d9:c2:bd:e7:c5:79:fa:04:35:4a:27:16:01: 1c:6c:eb:76:b9:a5:28:a6:61:02:63:e1:3b:30:e4:11:cb:fd: ff:ef:9e:d8:25:c4:1b:fb:d1:92:02:57:fa:e3:0d:b8:f4:6a: 25:5a:44:1b:37:b2:21:4c:21:e2:68:ba:06:75:1e:e2:c3:44: fe:bd:1b:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVROP+F2A5RV7Ol6dRN4HzVpVUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA2MDIwOTAxMjBaFw0yNjA2MDMxMjAxMjBaMDMxMTAvBgNV BAMTKDBDQUE5NUM0MEVEN0VBRUNFQTNDNkNFRTM2NUVFQzFGMzY4REUwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN3SCGklR6g3StL+nCLpx7lQuG 2YqOac5ZuoBLEqg6movIQ39RbbWlcwArgo3F9EYQ8OidhyBgSXFSTN40dInuUBLO RsOWcqggwtwSbiVTUV0JQlTwooG7Rq0CHx2TTuCSYUnwIDqSrl8gv6tfzY+S3G32 inb5GjTSKpc4AKsesiOP1OKt42HXN6kyUMMvkpFrp87JjhQ6UVY8TIp28wPZcBdm 5CVLQDzbLf9qkar3JuRTBpsL+vusbY7b+NnLNGsX9t/YMqz5ila2BsLFmfPQc9qF EZzM24jZEYBfekMaFfdCiFHO1bvMbAsqApIGa/8F9qRtUsdAjCwE6FP4N4CxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDKqVxA7X6uzqPGzuNl7sHzaN4M0wHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA1xFzlPRH8c07k9CfQY/+Z1hS1j05U+nCa WEkp/wTtHSc/aYQwaQ7YKB5bHzEIqsiG1PloF/iXYwo+qZ/HE4rGr4578mQe/h1S U04nMuX1kRvxltdgevDrzQHR+uXApUJbh9sRCOgr2WSN+ohsajl6BbaI58TM0jQZ /Rl+0UHmcAAIXTeYmz59WPUDJDFun9kfhsnmFZWKxMidsLmsCimoXUG2IiYPO34Z Eu814P6v/thO+ZQ0RSMR2cK958V5+gQ1SicWARxs63a5pSimYQJj4Tsw5BHL/f/v ntglxBv70ZICV/rjDbj0aiVaRBs3siFMIeJougZ1HuLDRP69Gz8= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:12 2026 by rpki-client