$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft File: BCE01C08E8E67E88147644DD138C0632C10BECF7.mft (raw, json) Hash identifier: EVlnJbuzt0ZGTvfQ0XOwBnmwWFLCMRv0RqE3RfMOnUQ= Subject key identifier: 6E:7B:E1:E3:F4:34:F9:46:75:40:59:1F:30:2F:61:E3:8F:3D:CD:2A Authority key identifier: BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 Certificate issuer: /CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Certificate serial: 3E2087FBB6B83C1586ABD18E67ABD5A42AA71BC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 11:06:08 +0000 Manifest this update: Sun 02 Aug 2026 11:01:08 +0000 Manifest next update: Mon 03 Aug 2026 13:25:08 +0000 Files and hashes: 1: 3136302e3138372e3136342e302f32342d3234203d3e20313439393333.roa (hash: GmBqoocRQKggDWCQV98uJdiIxG9ynSKifYvn1zS1W2I=) 2: BCE01C08E8E67E88147644DD138C0632C10BECF7.crl (hash: tvPLmnn8uYz6Mgi+VbIwVthsb9krE8PnQ351lwC9Nok=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 13:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:20:87:fb:b6:b8:3c:15:86:ab:d1:8e:67:ab:d5:a4:2a:a7:1b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCE01C08E8E67E88147644DD138C0632C10BECF7 Validity Not Before: Aug 2 11:01:08 2026 GMT Not After : Aug 3 13:25:08 2026 GMT Subject: CN=6E7BE1E3F434F9467540591F302F61E38F3DCD2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:a6:9d:8f:d0:82:5a:df:3a:b2:df:46:bd: 55:76:eb:b7:24:67:0a:0b:61:85:8e:79:72:2d:eb: df:28:9e:4d:c0:6b:d6:3d:f6:9f:3f:a8:bd:80:7e: 64:55:7c:40:13:74:e9:ce:d8:a2:d6:6f:d4:23:b1: 45:fe:c2:d7:87:d7:47:10:7d:19:45:26:5e:99:d2: 78:36:f4:c0:27:16:32:3c:2b:a7:52:c7:88:e3:85: 9f:77:1d:2d:1b:0e:07:2a:02:26:54:65:27:06:b9: b4:4b:68:04:28:c3:94:29:41:6a:4b:dc:ae:1f:f2: 36:74:06:25:8f:42:a1:89:51:11:c2:2e:84:c9:ee: e4:b9:6c:dd:53:76:23:9c:d4:0e:fb:24:49:62:11: fc:42:83:0f:d0:fa:0f:63:0c:1a:21:40:31:aa:40: 5d:ff:0d:69:01:42:79:a2:1e:f4:46:27:64:4b:1c: 4b:44:ab:00:1e:7a:af:63:f0:62:6b:8e:2e:0c:65: 33:f1:c8:3d:20:a3:0d:a4:40:3f:35:60:52:43:e5: 03:60:2c:e4:09:67:14:bb:c4:ac:27:9d:b0:78:65: 61:67:e3:06:57:1a:54:8a:a4:44:f9:99:5b:0c:5e: 0e:95:41:c9:9d:6a:e1:b9:50:58:df:0d:c7:20:a8: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:E1:E3:F4:34:F9:46:75:40:59:1F:30:2F:61:E3:8F:3D:CD:2A X509v3 Authority Key Identifier: keyid:BC:E0:1C:08:E8:E6:7E:88:14:76:44:DD:13:8C:06:32:C1:0B:EC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf2975d5-f990-484e-9460-f136b4551f8d/0/BCE01C08E8E67E88147644DD138C0632C10BECF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0c:31:46:76:77:14:cc:ca:70:d2:2f:9e:50:80:c4:5d:1c: fa:0f:d5:c3:39:1d:a5:53:0e:02:cb:7d:c4:93:4e:f2:cb:2d: 12:8d:b9:47:09:af:4d:05:83:46:92:ef:18:c3:84:c3:9f:53: 9f:16:b8:15:d6:d6:39:30:6a:cd:be:c1:56:c0:c7:70:35:8d: fb:d8:f9:6b:7d:60:f1:d3:cc:07:d5:88:00:00:03:0c:9d:33: b3:28:16:a7:68:52:5a:a3:d8:65:d5:2d:c2:5f:62:f2:45:ed: 7c:79:b0:eb:9b:16:2d:1f:fe:74:55:0d:95:38:73:1d:3b:3f: 30:27:90:11:a7:d3:c4:4f:ab:6b:3a:21:11:b5:6a:46:ba:6e: 8b:78:18:73:1c:c5:41:cd:24:3f:6c:83:23:90:df:82:7c:0d: 57:1d:5b:b4:d5:22:14:34:d0:dd:6a:6c:e8:f7:45:a8:d8:5a: db:90:bd:5d:39:9f:4c:04:51:e2:ac:39:25:01:4a:0a:fd:74: 94:25:78:b3:74:6c:3e:7d:00:d3:17:1f:de:d8:19:79:89:1d: c1:31:bf:6d:e5:98:85:16:16:05:38:67:37:5b:2d:f8:ba:64: 00:d9:48:7d:a7:0a:79:b1:3f:0e:80:d5:ad:17:22:6e:74:e5: 11:b2:bd:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPiCH+7a4PBWGq9GOZ6vVpCqnG8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2MzJD MTBCRUNGNzAeFw0yNjA4MDIxMTAxMDhaFw0yNjA4MDMxMzI1MDhaMDMxMTAvBgNV BAMTKDZFN0JFMUUzRjQzNEY5NDY3NTQwNTkxRjMwMkY2MUUzOEYzRENEMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzV6adj9CCWt86st9GvVV267ck ZwoLYYWOeXIt698onk3Aa9Y99p8/qL2AfmRVfEATdOnO2KLWb9QjsUX+wteH10cQ fRlFJl6Z0ng29MAnFjI8K6dSx4jjhZ93HS0bDgcqAiZUZScGubRLaAQow5QpQWpL 3K4f8jZ0BiWPQqGJURHCLoTJ7uS5bN1TdiOc1A77JEliEfxCgw/Q+g9jDBohQDGq QF3/DWkBQnmiHvRGJ2RLHEtEqwAeeq9j8GJrji4MZTPxyD0gow2kQD81YFJD5QNg LOQJZxS7xKwnnbB4ZWFn4wZXGlSKpET5mVsMXg6VQcmdauG5UFjfDccgqH71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnvh4/Q0+UZ1QFkfMC9h4489zSowHwYDVR0j BBgwFoAUvOAcCOjmfogUdkTdE4wGMsEL7PcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2YyOTc1ZDUtZjk5MC00ODRlLTk0NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhF OEU2N0U4ODE0NzY0NEREMTM4QzA2MzJDMTBCRUNGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0UwMUMwOEU4RTY3RTg4MTQ3NjQ0REQxMzhDMDYzMkMxMEJF Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2YyOTc1ZDUtZjk5MC00ODRlLTk0 NjAtZjEzNmI0NTUxZjhkLzAvQkNFMDFDMDhFOEU2N0U4ODE0NzY0NEREMTM4QzA2 MzJDMTBCRUNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsMMUZ2dxTMynDSL55QgMRdHPoP1cM5HaVT DgLLfcSTTvLLLRKNuUcJr00Fg0aS7xjDhMOfU58WuBXW1jkwas2+wVbAx3A1jfvY +Wt9YPHTzAfViAAAAwydM7MoFqdoUlqj2GXVLcJfYvJF7Xx5sOubFi0f/nRVDZU4 cx07PzAnkBGn08RPq2s6IRG1aka6bot4GHMcxUHNJD9sgyOQ34J8DVcdW7TVIhQ0 0N1qbOj3RajYWtuQvV05n0wEUeKsOSUBSgr9dJQleLN0bD59ANMXH97YGXmJHcEx v23lmIUWFgU4ZzdbLfi6ZADZSH2nCnmxPw6A1a0XIm505RGyvdo= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:50 2026 by rpki-client