$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json) Hash identifier: f9wfXETgewyI3OWfWxqyeL9tpHr3EIMS2+a7/ajHebk= Subject key identifier: 2C:79:FB:13:D5:4A:34:1D:D3:55:92:9A:F2:F1:0B:19:E6:FE:87:CB Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Certificate serial: 65F45F7DCEF8854775D83C2286615D0E8DF36EE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 18:05:54 +0000 Manifest this update: Wed 07 Oct 2026 18:00:54 +0000 Manifest next update: Thu 08 Oct 2026 19:27:54 +0000 Files and hashes: 1: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=) 2: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: cq1y+dklclIcNN6Yfz5ooiexfiXjOl8eBrKDPvDqy7A=) 3: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 12:58:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f4:5f:7d:ce:f8:85:47:75:d8:3c:22:86:61:5d:0e:8d:f3:6e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Validity Not Before: Oct 7 18:00:54 2026 GMT Not After : Oct 8 19:27:54 2026 GMT Subject: CN=2C79FB13D54A341DD355929AF2F10B19E6FE87CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b3:c2:15:ed:23:3f:54:db:5b:d9:6b:3d:ec: 18:d4:06:46:43:95:27:63:30:85:29:da:e5:9e:cd: e6:ca:52:6f:8f:d2:5a:67:06:3b:3b:d2:13:e9:43: c8:a9:e2:47:b1:96:6c:ce:46:28:bc:d6:fa:f8:be: 2e:a5:83:c7:78:3f:ca:21:c9:45:25:c2:e6:2f:f2: 2f:a2:6d:0e:21:08:80:7b:6c:27:97:49:fb:cd:27: aa:ae:ab:63:f3:7d:3d:84:59:1e:30:f0:a0:3c:b1: 01:a3:44:dd:de:3d:bd:87:4f:d3:36:1e:6b:ab:9a: 1c:22:2b:58:e9:84:7e:ed:38:a4:2b:7f:2d:08:7d: 9d:23:af:3d:38:3d:03:be:5f:a0:85:de:51:af:ff: 23:d9:e3:1a:cf:09:52:c0:a1:7a:b0:eb:83:ce:4f: 34:3a:b2:0f:dd:63:72:2f:51:8c:b3:02:5d:da:1b: 16:a1:e9:c2:e4:9f:50:98:b1:fe:63:97:26:41:cb: 3b:4c:95:18:38:89:ca:6c:d2:27:a9:0a:5d:a0:b7: 5a:1d:29:e0:26:17:75:4c:88:76:b0:a0:a6:d2:8f: 52:cd:99:dc:f1:df:d2:46:1e:7a:e3:f9:1b:6d:04: 23:03:d3:62:0e:c4:91:b1:84:0f:1a:63:9e:a1:12: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:FB:13:D5:4A:34:1D:D3:55:92:9A:F2:F1:0B:19:E6:FE:87:CB X509v3 Authority Key Identifier: keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9a:20:d3:52:a7:84:91:60:ed:ae:4c:b5:59:67:34:0e:d1: 3a:7a:1f:20:65:72:c9:f4:f7:aa:4c:4d:11:ca:9d:78:d4:59: 68:96:16:6f:ee:4a:fd:43:5e:10:64:a7:68:90:21:e0:e0:64: ab:ba:89:94:92:52:3e:f3:e3:ef:64:d2:98:06:e2:1d:89:53: d5:b5:97:7c:88:af:47:67:cc:d9:1f:83:8a:1f:e1:2e:b6:b2: d6:39:be:e0:91:e4:d5:b1:97:bf:d8:de:37:bb:3d:58:9f:cf: e0:cc:17:79:73:66:8e:5f:1d:a8:e0:7a:94:48:68:2c:e1:ca: 28:25:94:a7:61:1f:ff:4c:be:44:a7:ce:19:0c:d6:08:fb:df: c8:ef:ad:a7:a1:b2:1f:31:eb:96:f7:d6:28:af:dc:06:bf:2e: ec:84:d9:41:21:87:36:44:64:6b:24:35:aa:1b:2d:a0:22:cc: c8:07:55:f7:a3:1c:82:18:bc:e2:14:62:9e:d9:c7:99:f0:a8: ce:a9:80:11:2b:5a:af:a1:ae:83:c6:10:d7:5a:f1:78:08:3d: 23:ff:90:61:b7:5e:15:1b:5b:71:6b:72:12:80:f9:79:38:59: 24:95:b8:6d:d7:97:c9:ea:69:35:54:10:ef:f1:09:ba:5b:85: 26:3b:89:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfRffc74hUd12DwihmFdDo3zbuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1 MDdGNTVENjAeFw0yNjEwMDcxODAwNTRaFw0yNjEwMDgxOTI3NTRaMDMxMTAvBgNV BAMTKDJDNzlGQjEzRDU0QTM0MUREMzU1OTI5QUYyRjEwQjE5RTZGRTg3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIs8IV7SM/VNtb2Ws97BjUBkZD lSdjMIUp2uWezebKUm+P0lpnBjs70hPpQ8ip4kexlmzORii81vr4vi6lg8d4P8oh yUUlwuYv8i+ibQ4hCIB7bCeXSfvNJ6quq2PzfT2EWR4w8KA8sQGjRN3ePb2HT9M2 HmurmhwiK1jphH7tOKQrfy0IfZ0jrz04PQO+X6CF3lGv/yPZ4xrPCVLAoXqw64PO TzQ6sg/dY3IvUYyzAl3aGxah6cLkn1CYsf5jlyZByztMlRg4icps0iepCl2gt1od KeAmF3VMiHawoKbSj1LNmdzx39JGHnrj+RttBCMD02IOxJGxhA8aY56hEn2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULHn7E9VKNB3TVZKa8vELGeb+h8swHwYDVR0j BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3 MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1 NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5 QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWaINNSp4SRYO2uTLVZZzQO0Tp6HyBlcsn0 96pMTRHKnXjUWWiWFm/uSv1DXhBkp2iQIeDgZKu6iZSSUj7z4+9k0pgG4h2JU9W1 l3yIr0dnzNkfg4of4S62stY5vuCR5NWxl7/Y3je7PVifz+DMF3lzZo5fHajgepRI aCzhyigllKdhH/9MvkSnzhkM1gj738jvraehsh8x65b31iiv3Aa/LuyE2UEhhzZE ZGskNaobLaAizMgHVfejHIIYvOIUYp7Zx5nwqM6pgBErWq+hroPGENda8XgIPSP/ kGG3XhUbW3FrchKA+Xk4WSSVuG3Xl8nqaTVUEO/xCbpbhSY7iSQ= -----END CERTIFICATE-----Generated at Thu Oct 8 00:48:19 2026 by rpki-client