$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: PNLRcsH/uD7PptdlL1Km/UkXjOzu1kiZcZVVftyIB9k= Subject key identifier: 8D:29:7B:DE:45:93:3B:1C:DB:35:F5:8B:28:90:56:52:24:16:2C:51 Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 51612AE7D8A91CD60DC8752490114456F95FA966 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 02:01:01 +0000 Manifest this update: Thu 17 Sep 2026 01:56:01 +0000 Manifest next update: Fri 18 Sep 2026 02:58:01 +0000 Files and hashes: 1: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: qZnWSj56wglGxjIUuK1FA1B/Zb1ypLArB4RC6afpMHg=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:61:2a:e7:d8:a9:1c:d6:0d:c8:75:24:90:11:44:56:f9:5f:a9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: Sep 17 01:56:01 2026 GMT Not After : Sep 18 02:58:01 2026 GMT Subject: CN=8D297BDE45933B1CDB35F58B2890565224162C51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:c5:2b:5b:ad:20:a1:cc:8a:4c:25:9b:df: 24:5d:8d:0a:95:7b:2b:f7:16:09:d6:2c:ba:a7:d1: 9e:e2:8b:0a:57:46:91:ba:7c:46:c7:15:12:20:ce: b5:54:6d:db:ad:3c:6c:1b:9e:86:7e:06:05:55:9c: 22:9f:64:2a:16:7f:5e:7c:cb:3f:6d:44:2e:95:13: bf:e1:be:87:a5:70:ad:5e:06:21:9d:7d:05:5e:fa: b0:37:db:1a:1f:f1:57:7e:d1:0e:b1:16:d2:10:af: e7:53:63:bd:a7:1c:63:dd:78:8a:95:1a:0f:75:b2: 3d:7e:d0:f5:22:96:05:5a:90:31:d5:7e:b3:dd:01: 51:56:aa:39:11:a3:5c:6a:fe:28:0f:fd:40:50:5d: 9c:5d:cf:1f:49:9d:cc:63:05:10:f7:ba:55:0f:16: c4:bb:05:a0:97:55:3c:7d:df:57:93:cb:67:03:f0: 40:fb:e6:88:af:48:d9:cb:88:17:0e:2b:4c:1c:2e: ff:c0:33:68:26:4f:2d:ac:71:d3:8f:09:1e:b4:58: 8c:b5:ae:9a:90:c7:51:e2:75:b6:15:9e:89:04:01: 8c:4c:0f:23:6e:6c:07:2d:da:40:5f:19:70:44:f1: cc:38:21:21:01:30:64:f7:64:91:2c:1c:30:cc:c4: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:29:7B:DE:45:93:3B:1C:DB:35:F5:8B:28:90:56:52:24:16:2C:51 X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ac:8e:b2:5c:f6:ac:d8:a1:c7:d7:e9:29:86:7c:ca:38:42: 73:b2:44:6b:40:76:b0:9b:22:3c:15:13:f5:fb:5e:23:61:f3: 54:2a:60:fc:3d:09:3c:cf:53:2a:eb:9c:db:a8:4e:ce:cf:02: 64:08:b0:1b:74:76:b8:d6:d9:40:c5:32:7c:85:c0:00:5a:4f: 6d:17:56:72:7f:37:d2:67:f0:13:83:9e:08:b1:42:52:22:6f: f9:e5:3e:48:eb:d1:67:2c:cd:c0:a9:fc:20:47:c4:0b:2b:33: 0f:f6:a9:03:14:af:1c:13:10:16:ef:37:30:bb:d1:03:97:a5: e2:bc:c0:1e:4e:80:e4:16:b9:fe:d5:b3:a1:41:4b:2a:07:37: c1:2e:63:2b:9e:19:41:9e:38:13:1c:46:f2:bc:5d:ab:b2:d8: ac:ec:67:94:ff:1e:5d:8a:4e:dc:f9:3e:43:0f:f8:5c:47:9a: 66:f8:2d:eb:34:91:01:35:7a:16:72:1c:8f:e4:50:59:d7:9f: 8f:54:5e:e3:c0:ba:51:11:a0:62:23:b7:49:fe:a8:4c:8e:a4: 2e:96:99:7a:74:57:f9:f2:f3:f0:67:df:b4:49:d0:be:6c:34: 8b:e6:ed:66:6e:62:64:2b:7e:24:69:d8:9b:62:52:ea:0e:73: 75:a2:7a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUWEq59ipHNYNyHUkkBFEVvlfqWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjA5MTcwMTU2MDFaFw0yNjA5MTgwMjU4MDFaMDMxMTAvBgNV BAMTKDhEMjk3QkRFNDU5MzNCMUNEQjM1RjU4QjI4OTA1NjUyMjQxNjJDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTMUrW60gocyKTCWb3yRdjQqV eyv3FgnWLLqn0Z7iiwpXRpG6fEbHFRIgzrVUbdutPGwbnoZ+BgVVnCKfZCoWf158 yz9tRC6VE7/hvoelcK1eBiGdfQVe+rA32xof8Vd+0Q6xFtIQr+dTY72nHGPdeIqV Gg91sj1+0PUilgVakDHVfrPdAVFWqjkRo1xq/igP/UBQXZxdzx9JncxjBRD3ulUP FsS7BaCXVTx931eTy2cD8ED75oivSNnLiBcOK0wcLv/AM2gmTy2scdOPCR60WIy1 rpqQx1HidbYVnokEAYxMDyNubAct2kBfGXBE8cw4ISEBMGT3ZJEsHDDMxMFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjSl73kWTOxzbNfWLKJBWUiQWLFEwHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAusjrJc9qzYocfX6SmGfMo4QnOyRGtAdrCb IjwVE/X7XiNh81QqYPw9CTzPUyrrnNuoTs7PAmQIsBt0drjW2UDFMnyFwABaT20X VnJ/N9Jn8BODngixQlIib/nlPkjr0WcszcCp/CBHxAsrMw/2qQMUrxwTEBbvNzC7 0QOXpeK8wB5OgOQWuf7Vs6FBSyoHN8EuYyueGUGeOBMcRvK8Xauy2KzsZ5T/Hl2K Ttz5PkMP+FxHmmb4Les0kQE1ehZyHI/kUFnXn49UXuPAulERoGIjt0n+qEyOpC6W mXp0V/ny8/Bn37RJ0L5sNIvm7WZuYmQrfiRp2JtiUuoOc3Wierw= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:51 2026 by rpki-client