$ rpki-client -vvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json) Hash identifier: y0IK+bzmYF5b8hG9Fc6LFqV+1xFxyrrWFf6sI8+tMtI= Subject key identifier: D1:C8:2C:BD:63:E5:6C:3C:C1:6B:34:92:67:C2:A8:C8:9B:9E:2C:5E Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Certificate serial: 1F7EF603C688957D9857478CD6A78A8F3598EAFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft Manifest number: 07 Signing time: Wed 06 May 2026 19:35:38 +0000 Manifest this update: Wed 06 May 2026 19:30:38 +0000 Manifest next update: Thu 07 May 2026 23:12:38 +0000 Files and hashes: 1: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: ttrP1vXmPTfcTqrZHV1KhYzj1LB3LA+I/ZtkbkuYARo=) 2: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=) 3: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 23:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7e:f6:03:c6:88:95:7d:98:57:47:8c:d6:a7:8a:8f:35:98:ea:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Validity Not Before: May 6 19:30:38 2026 GMT Not After : May 7 23:12:38 2026 GMT Subject: CN=D1C82CBD63E56C3CC16B349267C2A8C89B9E2C5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:08:97:0b:e8:a1:0b:c1:76:f9:f9:29:ce:a0: 08:ca:95:bd:e6:ba:e6:d9:09:58:dc:07:6c:b9:da: b9:ef:fe:3b:14:d5:ed:dd:b6:ac:8d:b1:cb:68:f5: c4:b3:98:68:c4:f5:01:47:ed:83:d7:4d:88:47:c1: c5:eb:b9:e6:f1:10:b7:97:89:ff:a1:9d:57:10:51: d0:28:02:f2:ed:e8:fa:d1:87:af:b5:5f:f9:2f:95: 74:e0:d1:cc:39:28:73:1e:7a:90:ed:46:58:ec:5c: 94:c4:5a:54:89:8f:62:82:77:21:70:b0:0a:98:11: c1:db:54:d4:40:a8:96:3c:05:ec:2a:2a:1e:6e:24: 2b:ab:e0:45:64:73:fe:18:f6:87:12:84:7e:17:37: db:41:ce:de:3d:2e:af:db:c4:4e:86:c5:5a:82:66: df:bd:11:69:67:ad:ca:f2:56:db:1d:c0:2a:58:37: bf:f3:0d:ad:0b:df:7c:ab:5a:02:ac:10:ff:5b:44: 98:60:93:9d:87:0c:14:eb:07:28:d8:3b:27:f1:ad: c9:cd:e3:d3:16:16:50:63:63:c6:ae:43:f5:5c:30: f1:1d:f9:81:7d:c4:76:4e:99:ff:02:93:11:e5:27: 20:63:0e:b8:15:ee:74:28:14:df:e8:79:d8:a0:28: 3c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:2C:BD:63:E5:6C:3C:C1:6B:34:92:67:C2:A8:C8:9B:9E:2C:5E X509v3 Authority Key Identifier: keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f3:9a:d3:a7:7f:bb:c5:f0:84:84:e9:0d:e0:2f:c6:c4:63: b0:5f:0b:3d:67:de:50:f7:9a:53:d7:ed:27:78:5d:e6:8f:87: ca:9d:02:cc:7c:9d:41:74:00:51:5c:0f:28:91:63:5c:fe:a7: 0e:6d:a5:bd:5d:77:0e:26:4c:24:96:0c:f8:a9:42:7e:d4:5a: 54:ff:54:23:1f:f6:e6:81:7d:69:84:4a:a5:2c:39:d4:7b:59: d7:63:aa:e2:88:c3:a3:0d:05:a1:cf:2b:c7:1f:06:f5:6f:20: ad:d6:3f:77:8c:31:f2:4a:2a:65:80:98:29:d5:2c:bd:af:45: ab:0f:09:de:b4:18:05:b1:28:0a:f2:15:49:67:b6:08:74:93: 5e:a2:1c:d1:bb:8b:5f:c8:f0:0a:78:4b:06:9b:e8:5b:4b:5d: c7:f1:05:d1:37:42:50:12:3c:9a:40:a7:3c:95:9c:3e:a8:c1: ba:c2:de:b6:73:de:7b:0f:6a:a2:78:6f:c5:ae:46:c5:46:00: b8:4b:34:13:ca:2c:d8:55:00:e9:7e:3a:fa:e5:92:03:96:02: da:01:4f:de:e7:b9:25:eb:72:08:9c:82:68:62:6f:af:2d:88: ca:37:53:a9:6d:7b:71:ba:ee:2d:5f:ee:c4:f4:ea:b2:e3:e5: b9:05:cc:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH372A8aIlX2YV0eM1qeKjzWY6v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1 MDdGNTVENjAeFw0yNjA1MDYxOTMwMzhaFw0yNjA1MDcyMzEyMzhaMDMxMTAvBgNV BAMTKEQxQzgyQ0JENjNFNTZDM0NDMTZCMzQ5MjY3QzJBOEM4OUI5RTJDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdCJcL6KELwXb5+SnOoAjKlb3m uubZCVjcB2y52rnv/jsU1e3dtqyNscto9cSzmGjE9QFH7YPXTYhHwcXruebxELeX if+hnVcQUdAoAvLt6PrRh6+1X/kvlXTg0cw5KHMeepDtRljsXJTEWlSJj2KCdyFw sAqYEcHbVNRAqJY8BewqKh5uJCur4EVkc/4Y9ocShH4XN9tBzt49Lq/bxE6GxVqC Zt+9EWlnrcryVtsdwCpYN7/zDa0L33yrWgKsEP9bRJhgk52HDBTrByjYOyfxrcnN 49MWFlBjY8auQ/VcMPEd+YF9xHZOmf8CkxHlJyBjDrgV7nQoFN/oedigKDxfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cgsvWPlbDzBazSSZ8KoyJueLF4wHwYDVR0j BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3 MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1 NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5 QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvzmtOnf7vF8ISE6Q3gL8bEY7BfCz1n3lD3 mlPX7Sd4XeaPh8qdAsx8nUF0AFFcDyiRY1z+pw5tpb1ddw4mTCSWDPipQn7UWlT/ VCMf9uaBfWmESqUsOdR7WddjquKIw6MNBaHPK8cfBvVvIK3WP3eMMfJKKmWAmCnV LL2vRasPCd60GAWxKAryFUlntgh0k16iHNG7i1/I8Ap4Swab6FtLXcfxBdE3QlAS PJpApzyVnD6owbrC3rZz3nsPaqJ4b8WuRsVGALhLNBPKLNhVAOl+OvrlkgOWAtoB T97nuSXrcgicgmhib68tiMo3U6lte3G67i1f7sT06rLj5bkFzI4= -----END CERTIFICATE-----Generated at Thu May 7 03:53:40 2026 by rpki-client