$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft File: BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json) Hash identifier: Fs6zbfePqDUNoyu/WW0BjxacFuNxfZZLA5rFI9PCitI= Subject key identifier: 20:0B:BC:F4:C4:EA:3E:7F:7E:46:25:86:B3:A4:58:F3:8F:E9:E5:30 Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Certificate issuer: /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Certificate serial: 39CC535327631453D5921724FB1A70FEA87FC1BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft Manifest number: 40 Signing time: Wed 17 Jun 2026 21:38:41 +0000 Manifest this update: Wed 17 Jun 2026 21:33:41 +0000 Manifest next update: Thu 18 Jun 2026 23:22:41 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=) 2: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: d9Kb7OFd8C2KQPET8kvSDfNV0OBJppKX3CLqMpZ0Zzw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 23:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cc:53:53:27:63:14:53:d5:92:17:24:fb:1a:70:fe:a8:7f:c1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Validity Not Before: Jun 17 21:33:41 2026 GMT Not After : Jun 18 23:22:41 2026 GMT Subject: CN=200BBCF4C4EA3E7F7E462586B3A458F38FE9E530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:0c:27:ed:ef:12:45:f8:d2:94:f5:0f:c4: 07:bb:c4:fe:0b:24:aa:4f:67:96:05:79:3a:76:7f: 0c:17:14:17:9b:e6:a0:56:3c:51:e2:7b:15:46:7a: c2:8c:82:36:3f:65:42:55:3a:3d:7b:86:e2:68:12: 01:fd:8e:04:a0:73:ca:55:35:c1:0f:b6:55:16:e9: a4:4c:23:10:36:92:73:bc:08:86:75:0d:8c:e5:bc: 69:d8:7e:9d:c3:a7:ea:b1:8d:0b:52:56:b7:16:66: 3c:68:b0:80:65:69:03:73:f6:6f:a4:95:83:08:f7: e6:28:88:b4:49:76:9f:b3:69:d7:b0:11:05:bb:bb: 6f:67:cc:ca:f6:af:8e:21:e3:31:07:33:45:fa:42: 70:1c:b0:73:42:f9:f1:88:0c:36:e4:7a:56:3a:2c: 6b:77:c7:5e:c5:7a:f3:13:c8:ac:52:49:fa:b4:7f: 35:68:33:af:f6:35:9c:b4:4f:6e:49:c1:53:1e:90: c9:57:d8:63:3d:e3:88:4b:3c:4e:af:32:05:2b:58: 1a:44:80:80:fe:19:90:49:3b:48:98:04:7f:76:46: cb:21:ab:17:f4:7f:1f:34:e4:87:93:8e:59:9d:7f: 22:e2:22:64:10:a7:27:e1:4a:d8:38:dc:ff:8d:4c: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:BC:F4:C4:EA:3E:7F:7E:46:25:86:B3:A4:58:F3:8F:E9:E5:30 X509v3 Authority Key Identifier: keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6f:3e:3e:ca:e2:f5:57:50:89:f8:9b:25:a5:d6:52:4f:47: f1:d7:91:9b:64:9d:6f:de:f6:ae:e2:a1:a7:22:96:2f:91:d6: 3b:a6:72:4e:4a:cc:54:21:9d:9e:f1:77:2c:ef:04:73:2d:d4: f7:ce:de:15:35:38:06:2b:82:7b:89:2e:01:e4:fe:54:31:ec: d2:65:a6:ca:71:4f:5a:9e:60:eb:29:c5:aa:b4:74:9a:d7:4e: d7:fa:c1:45:54:01:70:e0:ec:79:8e:e8:17:01:57:1a:22:b6: f3:c4:7f:44:96:43:17:98:97:ae:18:3d:5a:02:ab:da:c6:40: 80:ea:42:f4:c2:77:51:eb:71:22:51:d4:87:44:8a:48:25:f5: 44:95:1f:bc:10:19:06:a9:fb:ae:44:a5:d1:60:d4:8f:ee:81: be:72:77:ba:58:3c:30:11:a3:ea:37:40:f5:dc:f1:bc:9d:dc: 78:63:0b:a8:6f:c0:0f:40:3a:cc:98:f4:06:b0:7e:15:c7:90: 4e:3a:f7:3a:06:0d:e6:bf:f6:b1:9f:c8:d2:26:c3:b9:33:50: 88:5b:b6:09:fa:d5:c3:f0:56:dc:ce:81:8d:dd:1f:3c:a3:3f: 44:fc:38:03:d4:ac:bd:0f:56:9a:8e:72:d0:9d:0a:6b:97:83: 4c:00:ba:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcxTUydjFFPVkhck+xpw/qh/wb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD MTBCRUNGNzAeFw0yNjA2MTcyMTMzNDFaFw0yNjA2MTgyMzIyNDFaMDMxMTAvBgNV BAMTKDIwMEJCQ0Y0QzRFQTNFN0Y3RTQ2MjU4NkIzQTQ1OEYzOEZFOUU1MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGQwn7e8SRfjSlPUPxAe7xP4L JKpPZ5YFeTp2fwwXFBeb5qBWPFHiexVGesKMgjY/ZUJVOj17huJoEgH9jgSgc8pV NcEPtlUW6aRMIxA2knO8CIZ1DYzlvGnYfp3Dp+qxjQtSVrcWZjxosIBlaQNz9m+k lYMI9+YoiLRJdp+zadewEQW7u29nzMr2r44h4zEHM0X6QnAcsHNC+fGIDDbkelY6 LGt3x17FevMTyKxSSfq0fzVoM6/2NZy0T25JwVMekMlX2GM944hLPE6vMgUrWBpE gID+GZBJO0iYBH92Rsshqxf0fx805IeTjlmdfyLiImQQpyfhStg43P+NTGNLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIAu89MTqPn9+RiWGs6RY84/p5TAwHwYDVR0j BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2 MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhvPj7K4vVXUIn4myWl1lJPR/HXkZtknW/e 9q7ioacili+R1jumck5KzFQhnZ7xdyzvBHMt1PfO3hU1OAYrgnuJLgHk/lQx7NJl pspxT1qeYOspxaq0dJrXTtf6wUVUAXDg7HmO6BcBVxoitvPEf0SWQxeYl64YPVoC q9rGQIDqQvTCd1HrcSJR1IdEikgl9USVH7wQGQap+65EpdFg1I/ugb5yd7pYPDAR o+o3QPXc8byd3HhjC6hvwA9AOsyY9AawfhXHkE469zoGDea/9rGfyNImw7kzUIhb tgn61cPwVtzOgY3dHzyjP0T8OAPUrL0PVpqOctCdCmuXg0wAutI= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:57 2026 by rpki-client