$ rpki-client -vvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: d5wYYbb5HZX2eNmaprRXbFto5TWKY+6UU5/RpKv2+gU= Subject key identifier: 6F:EE:25:13:95:45:D8:40:19:C2:AA:13:31:FD:28:24:4B:EE:1A:03 Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 4409F1F98984F92391B63FEA6B32A21B8B02F338 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 06:35:10 +0000 Manifest this update: Thu 18 Jun 2026 06:30:10 +0000 Manifest next update: Fri 19 Jun 2026 09:51:10 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) 2: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: Ol+MMO6GABa2exBD/oHryWRRt63ZaYlhfg5aB85pE9g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 09:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:09:f1:f9:89:84:f9:23:91:b6:3f:ea:6b:32:a2:1b:8b:02:f3:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: Jun 18 06:30:10 2026 GMT Not After : Jun 19 09:51:10 2026 GMT Subject: CN=6FEE25139545D84019C2AA1331FD28244BEE1A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:7e:58:9f:0c:d6:02:38:45:2d:db:62:4b: f6:0f:05:6d:ca:6f:6c:fa:93:f7:01:a0:e9:89:26: 7c:8e:e9:08:7d:08:a3:f7:2a:39:67:83:c0:b2:e1: 1a:6a:1c:34:7b:ff:f6:82:3c:43:93:4e:c3:e8:78: 16:82:32:80:b9:f6:d6:f3:bc:5c:f2:d1:5e:4a:29: b8:cc:bc:f5:3d:eb:a4:4a:2b:07:81:d4:89:62:14: c0:44:3a:6d:65:4c:17:28:c3:e5:89:80:15:cc:4d: 00:8d:70:77:20:0f:86:16:14:cb:be:2f:db:d9:e5: ec:bd:4d:1b:03:3c:45:b8:25:ac:50:16:93:8a:a6: 79:cb:32:f6:98:ab:d7:a7:18:fd:b6:da:69:c9:fe: cd:d9:6d:fe:28:61:c4:bb:81:9e:4e:c2:1c:e5:33: b1:74:ce:a3:d0:08:b7:a5:21:1a:ae:a1:90:da:f4: ae:15:ba:86:52:9a:88:9d:70:24:e7:12:2f:68:53: d0:e7:01:09:1b:4a:a9:c2:4b:bd:84:b8:ac:32:92: bb:15:40:c0:97:61:48:55:5f:33:84:4b:02:2f:c3: ad:1b:e7:c5:86:bd:6b:3a:39:55:01:7b:10:a7:ab: b7:0d:58:9c:4f:dd:2f:8c:5f:41:fa:8c:b8:60:a9: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EE:25:13:95:45:D8:40:19:C2:AA:13:31:FD:28:24:4B:EE:1A:03 X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:0d:4e:13:36:b5:dc:a5:1b:4f:05:6b:b7:57:20:e0:a7:54: 21:39:2c:3e:0a:b0:21:33:93:54:8c:ca:37:18:c6:b2:46:36: c6:38:5d:e0:ad:76:aa:dc:bc:c2:9e:52:63:5b:0f:cb:bb:47: 77:93:47:2f:f3:15:af:9e:6e:34:0d:c2:3d:67:0d:d2:49:4c: 26:52:f6:84:16:76:50:17:81:1f:61:05:ca:4a:34:4e:2f:87: 15:0f:9a:b4:33:1a:a0:fb:65:df:38:a1:9e:f4:4a:e6:83:63: 2d:42:b3:b4:1b:8f:eb:47:9e:33:f8:9b:5b:bb:11:8a:9f:a7: a8:3c:94:6a:c1:7b:af:5a:03:7e:ac:59:3c:b1:b4:22:16:c9: 09:9a:2f:4a:cd:d2:cf:c4:43:a7:6e:75:05:d4:7d:4f:95:14: 26:b0:92:ba:3e:f3:0c:b9:39:e8:e5:d1:d6:df:ee:8f:85:36: e4:6a:17:8c:1b:35:3e:17:e2:24:57:7c:cd:4d:f4:90:b5:d7: a6:d4:61:a0:1e:64:7b:30:a2:78:48:3c:f8:75:93:9e:e5:d1: ab:cc:93:46:bd:60:e4:0c:f0:e5:94:e4:32:ca:d5:1e:e8:f4: ab:31:3f:a4:ab:0b:0b:e6:68:83:71:e9:75:71:b4:d0:e7:91: e0:79:06:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAnx+YmE+SORtj/qazKiG4sC8zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjA2MTgwNjMwMTBaFw0yNjA2MTkwOTUxMTBaMDMxMTAvBgNV BAMTKDZGRUUyNTEzOTU0NUQ4NDAxOUMyQUExMzMxRkQyODI0NEJFRTFBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQn5YnwzWAjhFLdtiS/YPBW3K b2z6k/cBoOmJJnyO6Qh9CKP3Kjlng8Cy4RpqHDR7//aCPEOTTsPoeBaCMoC59tbz vFzy0V5KKbjMvPU966RKKweB1IliFMBEOm1lTBcow+WJgBXMTQCNcHcgD4YWFMu+ L9vZ5ey9TRsDPEW4JaxQFpOKpnnLMvaYq9enGP222mnJ/s3Zbf4oYcS7gZ5Owhzl M7F0zqPQCLelIRquoZDa9K4VuoZSmoidcCTnEi9oU9DnAQkbSqnCS72EuKwykrsV QMCXYUhVXzOESwIvw60b58WGvWs6OVUBexCnq7cNWJxP3S+MX0H6jLhgqaD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+4lE5VF2EAZwqoTMf0oJEvuGgMwHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQNThM2tdylG08Fa7dXIOCnVCE5LD4KsCEz k1SMyjcYxrJGNsY4XeCtdqrcvMKeUmNbD8u7R3eTRy/zFa+ebjQNwj1nDdJJTCZS 9oQWdlAXgR9hBcpKNE4vhxUPmrQzGqD7Zd84oZ70SuaDYy1Cs7Qbj+tHnjP4m1u7 EYqfp6g8lGrBe69aA36sWTyxtCIWyQmaL0rN0s/EQ6dudQXUfU+VFCawkro+8wy5 Oejl0dbf7o+FNuRqF4wbNT4X4iRXfM1N9JC116bUYaAeZHswonhIPPh1k57l0avM k0a9YOQM8OWU5DLK1R7o9KsxP6SrCwvmaINx6XVxtNDnkeB5BiY= -----END CERTIFICATE-----Generated at Thu Jun 18 19:21:24 2026 by rpki-client