$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: qVeIZUaK3CKza7AyX1W1PbGAioYUtZN6vfqsv7QzrAo= Subject key identifier: BC:BD:C7:4C:BF:62:C0:4A:9A:2E:90:2B:E4:C6:2E:0F:83:0A:FE:8A Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 7CA5EEEFEEF381EDC54CDBA662BC75CA4E2784C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 21:10:10 +0000 Manifest this update: Wed 16 Sep 2026 21:05:10 +0000 Manifest next update: Thu 17 Sep 2026 21:40:10 +0000 Files and hashes: 1: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: cRryJiiQqD6i+zCMyH2dBzRW3zYrJzBMtRdwXLHSBgY=) 2: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) 3: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a5:ee:ef:ee:f3:81:ed:c5:4c:db:a6:62:bc:75:ca:4e:27:84:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Sep 16 21:05:10 2026 GMT Not After : Sep 17 21:40:10 2026 GMT Subject: CN=BCBDC74CBF62C04A9A2E902BE4C62E0F830AFE8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:a3:cf:f5:0e:da:e0:9f:0a:3e:7b:af:c2: aa:c1:d6:46:d5:f5:76:b1:9c:d6:05:f3:49:a5:2e: c5:60:c3:fa:cd:84:21:bb:8a:96:ac:52:e3:bc:bf: 18:b6:7a:2c:96:0a:0b:41:5d:07:92:7e:eb:e9:89: 7d:cb:f7:da:b7:cc:b1:d1:d3:e9:a7:2a:b1:1a:87: e2:a4:77:95:39:97:50:10:91:8c:fd:ea:bc:37:46: 82:14:73:b2:8c:cc:6a:b3:86:5d:8b:cf:c5:53:85: ff:79:06:c8:c0:af:e6:e2:44:fb:f4:f3:70:c5:16: 58:fc:f0:51:00:fb:2a:bc:0f:d7:d3:10:eb:e0:b5: e9:56:3a:79:34:f9:dd:ce:f9:26:60:6f:48:20:ad: 42:f0:9c:0d:db:00:07:e6:8d:dc:86:44:dc:76:25: 11:9f:c5:74:d8:fe:07:f4:b9:e8:b0:23:05:09:33: 41:97:06:85:ba:f3:41:20:eb:78:94:1c:3d:65:16: 6d:95:d7:57:0b:b8:1f:51:7a:f7:51:2a:0e:86:3a: 4d:c1:60:48:ac:d9:28:f1:11:30:ee:b7:2c:90:8a: eb:c6:e2:d7:81:27:82:26:a4:42:b2:e4:7c:ba:ba: 48:e1:ea:e5:6d:c8:b9:a7:42:31:38:70:97:e6:b2: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:BD:C7:4C:BF:62:C0:4A:9A:2E:90:2B:E4:C6:2E:0F:83:0A:FE:8A X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:72:2c:b6:78:b4:b0:e6:c9:a9:ce:7e:bb:c9:74:e0:e8:56: 35:3d:a0:db:9a:d6:32:e9:a5:e7:19:30:ed:4f:ee:6e:bd:a8: be:84:22:ea:de:0c:7a:6a:48:a7:ec:55:f4:5f:70:8c:9f:25: 89:67:13:38:58:d5:5e:bb:19:87:bc:9e:02:b9:fa:10:08:99: e3:08:51:d1:2b:2c:ea:fb:6c:64:95:e1:4f:f2:a7:cd:9b:b5: ce:9e:78:d3:e1:c7:c5:c8:fd:9c:a5:46:89:c7:f6:f6:4f:e2: 85:9e:2b:b1:05:ce:ff:bd:28:e7:86:56:d0:5a:fc:22:47:35: c9:c2:ae:bb:01:74:b3:19:2a:32:fd:7c:4a:73:c2:7c:0a:17: 27:1b:75:f2:10:77:f3:1c:19:d4:16:b4:a2:6b:99:d7:4c:9d: b6:cc:9d:19:eb:56:f6:e6:75:f6:e3:c2:41:aa:21:06:65:aa: 39:a9:74:e0:18:5f:99:04:0a:4b:7f:61:05:a0:d9:a6:fe:c4: 41:44:fc:ac:e3:c1:b4:e6:e7:d7:23:59:92:87:19:cd:c4:a9: e9:86:e3:d6:b4:51:81:34:e7:4a:7c:48:6a:b3:89:85:c7:64: 83:d0:61:70:d4:33:75:d3:63:8d:be:6b:75:e0:5c:2b:fd:44: 69:36:17:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKXu7+7zge3FTNumYrx1yk4nhMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA5MTYyMTA1MTBaFw0yNjA5MTcyMTQwMTBaMDMxMTAvBgNV BAMTKEJDQkRDNzRDQkY2MkMwNEE5QTJFOTAyQkU0QzYyRTBGODMwQUZFOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMrqPP9Q7a4J8KPnuvwqrB1kbV 9XaxnNYF80mlLsVgw/rNhCG7ipasUuO8vxi2eiyWCgtBXQeSfuvpiX3L99q3zLHR 0+mnKrEah+Kkd5U5l1AQkYz96rw3RoIUc7KMzGqzhl2Lz8VThf95BsjAr+biRPv0 83DFFlj88FEA+yq8D9fTEOvgtelWOnk0+d3O+SZgb0ggrULwnA3bAAfmjdyGRNx2 JRGfxXTY/gf0ueiwIwUJM0GXBoW680Eg63iUHD1lFm2V11cLuB9RevdRKg6GOk3B YEis2SjxETDutyyQiuvG4teBJ4ImpEKy5Hy6ukjh6uVtyLmnQjE4cJfmsvkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvL3HTL9iwEqaLpAr5MYuD4MK/oowHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhyLLZ4tLDmyanOfrvJdODoVjU9oNua1jLp pecZMO1P7m69qL6EIureDHpqSKfsVfRfcIyfJYlnEzhY1V67GYe8ngK5+hAImeMI UdErLOr7bGSV4U/yp82btc6eeNPhx8XI/ZylRonH9vZP4oWeK7EFzv+9KOeGVtBa /CJHNcnCrrsBdLMZKjL9fEpzwnwKFycbdfIQd/McGdQWtKJrmddMnbbMnRnrVvbm dfbjwkGqIQZlqjmpdOAYX5kECkt/YQWg2ab+xEFE/KzjwbTm59cjWZKHGc3EqemG 49a0UYE050p8SGqziYXHZIPQYXDUM3XTY42+a3XgXCv9RGk2F94= -----END CERTIFICATE-----Generated at Thu Sep 17 16:30:24 2026 by rpki-client