$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: nbDZwQx8XZC/CY+Y8srn/WL/gEL59RAumzmgZpFqEJE= Subject key identifier: 94:DC:CA:27:CE:FE:C2:D1:DB:76:AC:4F:7C:B0:64:BD:D8:C0:0B:B1 Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 22373973D9CAB5AA9AFEC45CD7E3176D53D42F93 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 23:46:28 +0000 Manifest this update: Wed 17 Jun 2026 23:41:28 +0000 Manifest next update: Fri 19 Jun 2026 03:26:28 +0000 Files and hashes: 1: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) 2: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) 3: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: e7v7gAFCO/5aCvnEnjdMGkDkAgwURtDQxbKMu1YPyxQ=) 4: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:37:39:73:d9:ca:b5:aa:9a:fe:c4:5c:d7:e3:17:6d:53:d4:2f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Jun 17 23:41:28 2026 GMT Not After : Jun 19 03:26:28 2026 GMT Subject: CN=94DCCA27CEFEC2D1DB76AC4F7CB064BDD8C00BB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:d7:3c:90:09:dc:a9:ef:e7:03:38:8d:2c: 1f:14:ee:f1:5f:c7:f2:17:b1:18:56:fc:a7:01:59: 53:2d:11:d7:f0:d0:f9:59:05:64:1a:ad:2c:5a:d3: 58:77:9a:85:90:d7:53:03:24:1a:19:f9:0a:1a:c0: f5:72:61:1d:3d:1e:8e:34:7f:94:1d:82:a6:08:5e: 93:98:af:8a:4c:c3:4e:cc:38:15:cf:fe:3f:d9:1e: 0e:91:d0:64:6f:73:73:b1:e7:bb:26:e0:f6:8b:66: 15:42:ea:0d:51:a7:e1:c8:c7:83:ba:16:20:5b:a8: 2e:c4:8e:33:17:40:c6:94:0f:70:44:c1:98:72:71: b4:eb:41:61:6b:24:e7:07:1d:9a:0a:8b:6f:ea:a4: 62:d6:a5:a9:56:40:18:41:66:73:9f:0a:9b:9b:34: 2b:34:d3:35:e5:0f:8a:24:71:d1:5a:92:70:be:4b: 66:22:0a:b2:69:3c:8c:60:0e:dc:29:f5:d5:5a:34: 02:f0:58:fd:20:69:a1:e7:a1:0a:d8:70:c1:b0:2e: e8:da:58:85:ce:2f:42:f4:80:7b:d2:bf:95:d0:ac: 4c:c7:ad:c2:1d:5c:e8:ff:51:03:11:03:1d:db:ff: 21:af:56:32:5f:0a:9c:c5:cc:cc:70:94:ba:59:95: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DC:CA:27:CE:FE:C2:D1:DB:76:AC:4F:7C:B0:64:BD:D8:C0:0B:B1 X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5d:93:b1:25:59:a4:d1:92:d2:4c:0c:13:90:9e:b3:42:89: 69:a4:95:c4:56:26:01:e5:a1:71:e6:33:b9:e7:d6:fc:3c:22: aa:20:1a:7e:f9:ec:83:42:31:3d:99:5b:44:51:be:40:f6:a1: 61:6b:96:7b:fa:fa:d9:d3:69:a2:c8:b5:05:fb:42:72:80:bf: 2a:ef:71:f4:64:5e:e9:33:50:ab:77:8d:58:b7:55:0f:93:71: 84:2d:37:e0:73:1e:40:e5:f3:10:e5:28:df:34:39:6b:36:e0: d1:1d:c4:b0:5b:f2:c8:6f:dc:75:4a:fc:fd:7a:2f:c7:71:c2: 83:60:b2:ff:91:4a:c5:53:18:f7:77:93:9a:79:ea:19:00:82: e0:4b:26:36:f1:2d:6d:92:8f:d2:21:93:00:61:c6:cf:fa:a2: da:3d:7a:38:34:04:7a:ab:a2:32:92:6d:d3:52:6e:13:45:c1: 8c:21:dc:f9:2e:6d:0c:52:50:b3:e5:d3:43:6d:56:f6:8d:73: 85:57:fc:55:44:a9:74:a3:96:aa:2a:b1:fa:e7:1f:0c:f0:ac: 7f:9a:ae:0e:c7:02:11:7c:07:3f:60:a9:25:f7:69:dd:e6:b7: c4:6b:ec:d2:c0:2a:a7:8f:38:58:bd:b4:96:e6:c9:96:f6:19: 89:de:6d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjc5c9nKtaqa/sRc1+MXbVPUL5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA2MTcyMzQxMjhaFw0yNjA2MTkwMzI2MjhaMDMxMTAvBgNV BAMTKDk0RENDQTI3Q0VGRUMyRDFEQjc2QUM0RjdDQjA2NEJERDhDMDBCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshNc8kAncqe/nAziNLB8U7vFf x/IXsRhW/KcBWVMtEdfw0PlZBWQarSxa01h3moWQ11MDJBoZ+QoawPVyYR09Ho40 f5QdgqYIXpOYr4pMw07MOBXP/j/ZHg6R0GRvc3Ox57sm4PaLZhVC6g1Rp+HIx4O6 FiBbqC7EjjMXQMaUD3BEwZhycbTrQWFrJOcHHZoKi2/qpGLWpalWQBhBZnOfCpub NCs00zXlD4okcdFaknC+S2YiCrJpPIxgDtwp9dVaNALwWP0gaaHnoQrYcMGwLuja WIXOL0L0gHvSv5XQrEzHrcIdXOj/UQMRAx3b/yGvVjJfCpzFzMxwlLpZlZJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNzKJ87+wtHbdqxPfLBkvdjAC7EwHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1dk7ElWaTRktJMDBOQnrNCiWmklcRWJgHl oXHmM7nn1vw8IqogGn757INCMT2ZW0RRvkD2oWFrlnv6+tnTaaLItQX7QnKAvyrv cfRkXukzUKt3jVi3VQ+TcYQtN+BzHkDl8xDlKN80OWs24NEdxLBb8shv3HVK/P16 L8dxwoNgsv+RSsVTGPd3k5p56hkAguBLJjbxLW2Sj9IhkwBhxs/6oto9ejg0BHqr ojKSbdNSbhNFwYwh3PkubQxSULPl00NtVvaNc4VX/FVEqXSjlqoqsfrnHwzwrH+a rg7HAhF8Bz9gqSX3ad3mt8Rr7NLAKqePOFi9tJbmyZb2GYnebcQ= -----END CERTIFICATE-----Generated at Thu Jun 18 19:09:31 2026 by rpki-client