$ rpki-client -vvvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft File: BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json) Hash identifier: i4Y1EOSeO4KGDA7NuiWwV5znzBJS2fTapJM1EFB9kFg= Subject key identifier: 73:7C:6F:70:8A:28:81:72:78:6D:A0:8C:07:FA:82:EE:41:41:ED:2C Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Certificate issuer: /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Certificate serial: 04E14630AE7336B16AB340E4C66017DB044B90DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:46:54 +0000 Manifest this update: Thu 17 Sep 2026 10:41:54 +0000 Manifest next update: Fri 18 Sep 2026 11:33:54 +0000 Files and hashes: 1: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: MMr9RtT7vQadBp1ckDGekS/3aL6a9UX1LdmFEjzNIPM=) 2: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e1:46:30:ae:73:36:b1:6a:b3:40:e4:c6:60:17:db:04:4b:90:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Validity Not Before: Sep 17 10:41:54 2026 GMT Not After : Sep 18 11:33:54 2026 GMT Subject: CN=737C6F708A288172786DA08C07FA82EE4141ED2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:89:3a:5a:fe:e7:1d:c7:78:63:a3:91:0c: 81:b6:1b:c6:ca:dd:91:60:e9:3d:6a:c4:c2:b2:49: ea:b5:11:cb:3f:95:17:ac:2d:00:56:6f:e8:9b:cb: fe:dc:0b:d5:2f:4e:ed:61:5c:e6:4d:67:a4:e1:a3: a5:0d:d7:20:f8:9e:9e:71:b7:dc:70:7f:e7:62:d2: 8b:09:69:79:5f:eb:02:e6:9d:f1:f4:67:81:cf:77: 81:0f:c6:c0:3e:34:c8:9c:1c:57:ac:98:fe:b2:3a: 89:1d:19:c7:2c:36:28:e0:9b:e6:b8:6f:e8:5a:40: 5e:18:eb:a6:6f:50:ce:73:73:8b:3f:0e:c2:87:ff: 7a:cf:79:cb:e6:ea:4c:a3:86:92:ab:de:97:cb:12: 35:54:07:6c:e1:ea:16:64:ed:a0:14:f9:88:dc:a4: b4:7e:f7:57:7a:47:7a:a7:07:9a:20:56:51:a2:60: e7:63:0b:92:ec:00:a2:94:85:97:38:a4:d0:ec:5e: 04:ef:13:98:71:ea:06:8c:ec:67:a6:4c:8f:ee:a1: 4d:69:b1:df:a7:bf:ca:66:d4:25:4a:e4:b5:ac:8a: d9:4e:50:b7:56:38:60:99:f6:6b:df:59:54:83:7f: 74:69:42:bf:49:67:85:6d:b7:20:bb:9d:c3:7e:b5: 87:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7C:6F:70:8A:28:81:72:78:6D:A0:8C:07:FA:82:EE:41:41:ED:2C X509v3 Authority Key Identifier: keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:95:f6:cc:84:53:5a:16:79:af:78:01:9d:92:8c:53:6c: a3:ed:0b:b6:b6:69:52:61:ed:66:61:03:7e:a5:86:0d:cd:1b: 13:62:d4:47:5d:b4:12:79:97:6f:da:b9:5c:01:17:84:d0:44: 13:c9:a3:5c:ce:4a:ab:19:12:9b:53:80:53:23:e5:79:80:9e: 4a:09:dd:17:da:57:55:2f:5e:41:dc:59:97:e8:49:46:9e:f2: 4a:4d:81:c1:fd:34:dd:3f:e1:b5:5e:83:b0:73:13:80:5d:fc: e8:67:da:19:68:db:d8:ec:9e:ea:81:b9:93:5f:c3:66:0f:5d: 2e:ab:ba:3e:54:37:d4:11:52:62:a2:39:1c:71:ee:9f:83:1f: 43:bc:10:43:80:78:91:bb:01:97:3a:3a:bb:e1:59:60:ed:6e: 5e:41:72:81:df:d2:a2:fd:5b:0d:6c:96:f0:d2:39:81:11:69: 6d:29:1f:a5:aa:25:4c:01:65:af:4c:39:32:c2:20:99:7b:19: fd:97:39:e1:1e:4d:ea:5a:28:5f:8d:9a:28:f5:07:c6:85:cc: f7:6e:3f:2a:d7:52:91:63:ba:63:60:1a:21:33:18:dc:89:9d: c9:84:33:25:f6:46:02:23:e9:c0:bd:f4:7e:c4:01:d5:47:e7: bb:a1:e7:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOFGMK5zNrFqs0DkxmAX2wRLkN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD MTBCRUNGNzAeFw0yNjA5MTcxMDQxNTRaFw0yNjA5MTgxMTMzNTRaMDMxMTAvBgNV BAMTKDczN0M2RjcwOEEyODgxNzI3ODZEQTA4QzA3RkE4MkVFNDE0MUVEMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Wok6Wv7nHcd4Y6ORDIG2G8bK 3ZFg6T1qxMKySeq1Ecs/lResLQBWb+iby/7cC9UvTu1hXOZNZ6Tho6UN1yD4np5x t9xwf+di0osJaXlf6wLmnfH0Z4HPd4EPxsA+NMicHFesmP6yOokdGccsNijgm+a4 b+haQF4Y66ZvUM5zc4s/DsKH/3rPecvm6kyjhpKr3pfLEjVUB2zh6hZk7aAU+Yjc pLR+91d6R3qnB5ogVlGiYOdjC5LsAKKUhZc4pNDsXgTvE5hx6gaM7GemTI/uoU1p sd+nv8pm1CVK5LWsitlOULdWOGCZ9mvfWVSDf3RpQr9JZ4VttyC7ncN+tYfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3xvcIoogXJ4baCMB/qC7kFB7SwwHwYDVR0j BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2 MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLUlfbMhFNaFnmveAGdkoxTbKPtC7a2aVJh 7WZhA36lhg3NGxNi1EddtBJ5l2/auVwBF4TQRBPJo1zOSqsZEptTgFMj5XmAnkoJ 3RfaV1UvXkHcWZfoSUae8kpNgcH9NN0/4bVeg7BzE4Bd/Ohn2hlo29jsnuqBuZNf w2YPXS6ruj5UN9QRUmKiORxx7p+DH0O8EEOAeJG7AZc6OrvhWWDtbl5BcoHf0qL9 Ww1slvDSOYERaW0pH6WqJUwBZa9MOTLCIJl7Gf2XOeEeTepaKF+Nmij1B8aFzPdu PyrXUpFjumNgGiEzGNyJncmEMyX2RgIj6cC99H7EAdVH57uh51M= -----END CERTIFICATE-----Generated at Thu Sep 17 16:52:11 2026 by rpki-client