$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: PhtJkqg6C1dMwkhooDn7YxQE7SodVqZIbqFO6AR5XHg= Subject key identifier: 09:E2:AC:7E:CB:2A:D4:56:E7:F2:B1:EC:26:E0:A6:3E:96:33:3E:12 Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 28E1C3ABE6AF2C21ACC6563C921F095C4EB3FAAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 20:47:25 +0000 Manifest this update: Sun 02 Aug 2026 20:42:25 +0000 Manifest next update: Mon 03 Aug 2026 21:04:25 +0000 Files and hashes: 1: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) 2: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) 3: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: vUkP40RVcCRhLTEMUoH+YC9nvZFzOMLL2fDq+3RyTEE=) 4: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:c3:ab:e6:af:2c:21:ac:c6:56:3c:92:1f:09:5c:4e:b3:fa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Aug 2 20:42:25 2026 GMT Not After : Aug 3 21:04:25 2026 GMT Subject: CN=09E2AC7ECB2AD456E7F2B1EC26E0A63E96333E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:cc:c7:03:93:05:d6:a6:3c:fa:16:3e:6e: dd:b3:97:e1:17:a3:a0:19:32:4a:90:86:9c:51:65: c6:d4:50:20:b5:bf:49:38:03:b5:44:f5:5a:97:82: 8f:7c:c0:9f:82:64:d8:2b:02:4d:f5:e6:a1:a6:2e: 26:00:9f:75:3c:d1:78:93:ea:d7:90:da:0a:fc:e2: b0:43:28:26:00:b9:fd:69:e1:23:d7:e9:54:c2:c6: f5:ce:9c:df:92:99:60:c6:d6:42:fc:be:69:9f:41: b0:9d:57:dd:eb:9f:b4:a2:7b:26:a2:68:d6:4d:92: a6:7c:14:4d:33:44:57:61:69:1c:d8:8a:3a:b4:6d: fc:0a:56:66:39:aa:4b:1a:9c:98:19:53:d4:32:f0: 76:e6:6b:0f:74:16:db:51:f1:43:22:fc:70:29:80: 23:9b:cd:da:f0:e2:01:01:1e:f7:06:0c:17:83:34: 6a:7e:b0:93:15:3d:1c:10:ae:89:28:f5:d1:ab:a8: e0:eb:43:d1:2c:dd:91:07:0e:de:4a:0d:53:76:b8: 5d:c8:2f:86:c2:89:0d:1d:80:a8:a2:56:39:5f:04: d1:ae:4b:47:65:bf:3a:84:b9:ff:50:65:fb:78:50: eb:55:3e:b8:92:91:3a:95:b0:7b:61:1b:db:5d:f9: 42:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E2:AC:7E:CB:2A:D4:56:E7:F2:B1:EC:26:E0:A6:3E:96:33:3E:12 X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:1e:d3:32:74:9e:68:58:2a:11:20:1e:27:93:c0:bf:ea:1d: d5:74:32:f2:6d:92:5d:13:0e:6b:79:0e:25:e0:16:d1:86:93: c7:97:67:c3:0b:7d:8d:e4:24:e0:e8:f7:8a:d3:e9:c5:03:79: a4:56:3d:3f:45:9c:84:d6:f6:4d:75:f8:cb:7d:71:80:d0:87: 60:0c:a2:da:83:f2:dc:0e:36:c7:c1:9f:aa:e0:c8:01:f0:dc: 5e:96:ec:d2:ab:d1:23:ec:4f:6b:72:82:e5:23:bc:28:a0:79: 9a:33:0c:ea:10:1a:a4:e5:90:d5:fe:54:26:fa:3e:2e:9a:b6: bb:66:86:bc:9c:eb:94:70:f3:b2:53:83:ed:0e:72:29:d9:9f: 99:eb:69:d8:e7:fb:46:40:70:12:72:c9:f4:f3:7d:e2:a9:b0: d7:a3:d5:73:a5:be:cd:7a:8c:2e:29:ab:cb:6b:53:20:a1:a7: 51:d3:77:e4:36:07:1d:2e:9a:96:c4:63:7d:89:3c:64:4e:7c: 18:da:ed:37:c5:aa:0c:d1:7d:88:16:b8:63:d1:95:83:04:e0: f5:d9:ee:10:a7:5b:bc:be:cb:41:59:87:b6:d9:15:de:ca:f8: 78:2f:85:a4:f5:36:67:98:df:df:9d:2d:5f:36:fd:29:ed:67: 2c:0a:5a:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOHDq+avLCGsxlY8kh8JXE6z+q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA4MDIyMDQyMjVaFw0yNjA4MDMyMTA0MjVaMDMxMTAvBgNV BAMTKDA5RTJBQzdFQ0IyQUQ0NTZFN0YyQjFFQzI2RTBBNjNFOTYzMzNFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1MzHA5MF1qY8+hY+bt2zl+EX o6AZMkqQhpxRZcbUUCC1v0k4A7VE9VqXgo98wJ+CZNgrAk315qGmLiYAn3U80XiT 6teQ2gr84rBDKCYAuf1p4SPX6VTCxvXOnN+SmWDG1kL8vmmfQbCdV93rn7Sieyai aNZNkqZ8FE0zRFdhaRzYijq0bfwKVmY5qksanJgZU9Qy8Hbmaw90FttR8UMi/HAp gCObzdrw4gEBHvcGDBeDNGp+sJMVPRwQroko9dGrqODrQ9Es3ZEHDt5KDVN2uF3I L4bCiQ0dgKiiVjlfBNGuS0dlvzqEuf9QZft4UOtVPriSkTqVsHthG9td+UKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCeKsfssq1Fbn8rHsJuCmPpYzPhIwHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAe0zJ0nmhYKhEgHieTwL/qHdV0MvJtkl0T Dmt5DiXgFtGGk8eXZ8MLfY3kJODo94rT6cUDeaRWPT9FnITW9k11+Mt9cYDQh2AM otqD8twONsfBn6rgyAHw3F6W7NKr0SPsT2tyguUjvCigeZozDOoQGqTlkNX+VCb6 Pi6atrtmhryc65Rw87JTg+0OcinZn5nradjn+0ZAcBJyyfTzfeKpsNej1XOlvs16 jC4pq8trUyChp1HTd+Q2Bx0umpbEY32JPGROfBja7TfFqgzRfYgWuGPRlYME4PXZ 7hCnW7y+y0FZh7bZFd7K+HgvhaT1NmeY39+dLV82/SntZywKWoQ= -----END CERTIFICATE-----Generated at Sun Aug 2 22:48:12 2026 by rpki-client