$ rpki-client -vvvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: JzCOgw2/xlnzuRr3GTAd994FNKa24K3tPdTtU8sE5DE= Subject key identifier: 11:66:5C:A0:21:66:C4:CE:08:2C:B8:2A:5F:2F:86:91:EA:89:3D:A5 Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 50AD317C54110944A53F1CBF5913CB96EC8DF25C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 05:50:45 +0000 Manifest this update: Thu 17 Sep 2026 05:45:45 +0000 Manifest next update: Fri 18 Sep 2026 07:39:45 +0000 Files and hashes: 1: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) 2: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) 3: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) 4: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: 8DHdXzxHWNY5oxpBNlP9su7N24Xtlca5txq3kwxjUBk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ad:31:7c:54:11:09:44:a5:3f:1c:bf:59:13:cb:96:ec:8d:f2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Sep 17 05:45:45 2026 GMT Not After : Sep 18 07:39:45 2026 GMT Subject: CN=11665CA02166C4CE082CB82A5F2F8691EA893DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6b:31:a0:5a:a1:41:4b:10:05:74:f7:0e:fa: 54:2f:d1:50:5c:83:e5:06:69:a6:da:c5:81:54:6f: df:9b:9a:d9:76:04:0c:f6:81:97:47:e2:21:b1:ca: 63:6d:28:f4:76:ab:bd:d1:ba:37:cb:f4:17:27:6e: 86:65:0e:e3:04:30:5f:5b:44:39:d7:c1:71:6e:a9: d8:f6:28:43:a2:e0:23:ae:82:5d:f6:15:a5:ec:e9: c3:e8:12:f1:95:46:36:f3:fb:95:98:ce:e7:36:94: 5a:d6:67:36:48:23:ad:12:ad:72:f6:d1:ba:57:ac: 6f:60:e6:8c:42:bf:81:bb:82:95:db:0a:d6:b8:69: 01:a3:b0:cf:de:dd:66:c5:79:f7:44:f6:0d:f0:d8: f1:9b:6c:a8:86:c0:78:a8:63:52:5d:d0:d3:1e:1e: 88:59:a7:f0:03:2b:52:9c:0d:a7:72:61:12:e4:71: b0:e9:c1:98:d1:e0:7b:08:26:b3:db:18:46:20:71: a5:8c:0d:69:bc:6a:7f:26:82:7d:a7:ea:39:8b:67: 1e:22:2a:a3:a1:0d:7a:1f:44:59:87:c7:4a:6f:c1: 9e:e9:13:59:70:94:0e:80:c6:f0:c8:6d:b8:32:63: 7d:62:d3:4e:1a:a1:f9:6c:a4:ed:ec:37:25:0b:ed: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:5C:A0:21:66:C4:CE:08:2C:B8:2A:5F:2F:86:91:EA:89:3D:A5 X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:52:be:bb:a0:a9:40:4e:d0:c1:ac:bc:80:69:5e:a3:4a:a8: bc:d8:ad:58:8c:52:e3:0d:75:c3:ed:01:84:31:eb:0c:64:37: 88:3f:86:9d:e3:78:80:8f:6f:94:2c:43:31:e4:c4:c6:c2:73: b7:38:62:c4:ff:b1:3f:12:b4:ba:0b:43:ca:10:0f:8e:15:82: c1:3f:ac:e8:d7:12:43:e0:61:c3:11:0d:a4:d3:76:c9:1d:65: 59:1a:45:c2:03:29:01:53:c1:1e:3b:48:a1:b0:8a:77:d9:5c: 4a:17:d2:c0:81:22:27:50:55:a4:29:b2:9a:f6:e9:f5:55:4f: c3:f1:6e:36:10:1f:e4:56:20:4e:40:55:f0:dc:23:9a:0a:83: 1d:55:2a:01:ec:99:3a:d8:f8:78:19:7d:a1:6f:cc:ef:55:6b: c0:c6:60:e7:15:8b:6a:5d:ba:85:2a:3d:15:84:77:a7:bd:36: 39:4a:3c:2c:92:38:52:9b:a8:f5:75:ab:38:59:a6:b8:b9:d9: e3:1f:be:38:9a:9e:aa:97:2c:c9:e9:af:c0:2a:72:e9:44:de: 7f:60:87:a1:6a:9d:35:17:83:b4:b7:a5:a5:cf:02:f1:58:ae: e2:0c:58:09:21:e4:0a:76:dd:69:31:44:c9:cc:66:60:91:a4: 27:62:9b:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUK0xfFQRCUSlPxy/WRPLluyN8lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA5MTcwNTQ1NDVaFw0yNjA5MTgwNzM5NDVaMDMxMTAvBgNV BAMTKDExNjY1Q0EwMjE2NkM0Q0UwODJDQjgyQTVGMkY4NjkxRUE4OTNEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPazGgWqFBSxAFdPcO+lQv0VBc g+UGaabaxYFUb9+bmtl2BAz2gZdH4iGxymNtKPR2q73RujfL9BcnboZlDuMEMF9b RDnXwXFuqdj2KEOi4COugl32FaXs6cPoEvGVRjbz+5WYzuc2lFrWZzZII60SrXL2 0bpXrG9g5oxCv4G7gpXbCta4aQGjsM/e3WbFefdE9g3w2PGbbKiGwHioY1Jd0NMe HohZp/ADK1KcDadyYRLkcbDpwZjR4HsIJrPbGEYgcaWMDWm8an8mgn2n6jmLZx4i KqOhDXofRFmHx0pvwZ7pE1lwlA6AxvDIbbgyY31i004aoflspO3sNyUL7fTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWZcoCFmxM4ILLgqXy+GkeqJPaUwHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9SvrugqUBO0MGsvIBpXqNKqLzYrViMUuMN dcPtAYQx6wxkN4g/hp3jeICPb5QsQzHkxMbCc7c4YsT/sT8StLoLQ8oQD44VgsE/ rOjXEkPgYcMRDaTTdskdZVkaRcIDKQFTwR47SKGwinfZXEoX0sCBIidQVaQpspr2 6fVVT8PxbjYQH+RWIE5AVfDcI5oKgx1VKgHsmTrY+HgZfaFvzO9Va8DGYOcVi2pd uoUqPRWEd6e9NjlKPCySOFKbqPV1qzhZpri52eMfvjianqqXLMnpr8AqculE3n9g h6FqnTUXg7S3paXPAvFYruIMWAkh5Ap23WkxRMnMZmCRpCdim78= -----END CERTIFICATE-----Generated at Thu Sep 17 10:51:05 2026 by rpki-client