$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft File: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft (raw, json) Hash identifier: 4p9hdcKS7uWg4BM/cZUAaa7J1bMjamdweitJqGBRk/o= Subject key identifier: 25:EB:AF:22:88:A9:E1:98:EA:84:EB:21:DE:7C:BD:6D:8B:C4:14:99 Authority key identifier: BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 Certificate issuer: /CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Certificate serial: 153D6684984EADD20C4DA5125F2BA7CA12F7A28A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:53:55 +0000 Manifest this update: Mon 21 Sep 2026 09:48:55 +0000 Manifest next update: Tue 22 Sep 2026 12:15:55 +0000 Files and hashes: 1: BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl (hash: uP2g/A9EHqDOQcpi8Gpnd1oMOl5HIPWAEiuCU53rqO4=) 2: 3130332e3134362e3138392e302f32342d3234203d3e203538343935.roa (hash: QGfwj5bqNP4jOjjdpeGZhiTRodQ0EdpPB4bLvU+Pufs=) 3: 323430353a396434303a3a2f33322d3438203d3e203538343935.roa (hash: skUK10knkCBShybDHpDUtmDu/rajXkD3RG/uOlM7FK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:3d:66:84:98:4e:ad:d2:0c:4d:a5:12:5f:2b:a7:ca:12:f7:a2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6 Validity Not Before: Sep 21 09:48:55 2026 GMT Not After : Sep 22 12:15:55 2026 GMT Subject: CN=25EBAF2288A9E198EA84EB21DE7CBD6D8BC41499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d9:4f:9e:1a:17:b0:76:40:38:ad:03:0c:22: 9b:e4:f9:8f:f5:35:58:dd:f9:ab:90:62:c8:22:78: 60:18:0f:de:ea:17:64:c2:e4:9e:24:97:84:4c:a4: fb:bb:45:ad:68:38:bd:09:01:bb:4d:d5:4e:e8:d8: 68:d6:8c:6a:3f:84:9b:c4:4f:69:f1:e2:20:3f:b8: 5e:5d:73:f5:17:8d:c6:18:88:20:66:5c:00:6d:3c: 4b:53:57:4f:73:5e:14:2b:48:fd:0f:61:0b:3a:60: 9e:c2:b2:9d:fc:6f:34:be:53:f7:7d:df:0b:97:a8: c2:51:39:4c:1e:b3:96:f9:3d:6b:f1:6c:4a:f4:cc: 39:92:f5:63:e5:e2:0e:8b:d9:e3:96:25:dd:a6:c8: 04:f4:f7:59:5e:99:73:dc:e1:2f:b7:93:2b:ab:b6: 70:f0:20:02:2d:97:9f:2d:e9:71:b6:0c:d1:8f:45: 5c:4a:66:ab:6d:92:7f:72:66:70:7f:09:f7:bb:c0: 03:6a:2e:17:9d:57:bf:fc:f1:99:f5:71:61:84:58: 3e:51:cd:76:a6:05:77:e0:b3:78:d5:1d:ca:a2:42: ea:c4:f1:0b:f4:88:6a:23:16:2f:b5:e6:f6:55:d7: e9:ba:a3:af:08:8e:c8:8b:56:91:b7:c5:ba:41:2c: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EB:AF:22:88:A9:E1:98:EA:84:EB:21:DE:7C:BD:6D:8B:C4:14:99 X509v3 Authority Key Identifier: keyid:BC:8F:0F:9F:71:05:90:73:ED:E2:3B:9C:AD:97:D9:AF:50:7F:55:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1464cbee-c513-46c6-a1d0-3ec01d7a6626/0/BC8F0F9F71059073EDE23B9CAD97D9AF507F55D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3c:10:88:bd:a0:b5:ad:43:9b:d8:19:23:16:a4:c7:e4:37: a4:68:91:e6:a1:8c:7c:84:54:c3:84:94:1d:2e:80:a5:be:15: 7b:d7:5e:43:4a:71:a9:80:44:be:30:a5:43:15:ea:b5:74:8f: de:d0:f3:2e:58:5a:a1:39:e0:2b:56:51:24:87:ba:e2:b2:c3: dc:e8:d5:9f:a3:83:b0:74:c2:b4:42:1f:3b:8b:a0:a8:7b:9c: 4a:67:0f:d2:9d:9a:da:53:d9:69:8b:ae:36:92:c8:54:6b:f9: 76:cf:4e:3e:70:53:68:46:83:6d:37:e1:c7:3f:5a:c2:42:f9: d7:d0:1b:fe:3f:a2:c2:a0:06:fe:ac:98:9d:3b:24:d9:c6:45: cd:20:99:55:e3:a1:7b:3a:51:98:1b:02:85:1b:bc:89:0f:60: b6:0e:17:73:22:23:b7:7f:46:1b:76:cd:d2:05:43:0c:00:42: e1:d8:1c:04:c4:9c:6b:4b:d6:fb:50:75:d2:1e:eb:27:84:b6: 87:1e:7e:b6:41:dc:f6:af:6a:85:5f:c1:89:24:f9:8c:53:86: 14:82:4c:6e:8d:a9:4a:27:1a:81:50:e1:6f:32:1d:5e:d0:7f: 10:3d:3b:d7:19:76:a9:39:fd:5c:40:6b:8a:88:87:cb:27:f3: 50:37:75:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFT1mhJhOrdIMTaUSXyunyhL3ooowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1 MDdGNTVENjAeFw0yNjA5MjEwOTQ4NTVaFw0yNjA5MjIxMjE1NTVaMDMxMTAvBgNV BAMTKDI1RUJBRjIyODhBOUUxOThFQTg0RUIyMURFN0NCRDZEOEJDNDE0OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2U+eGhewdkA4rQMMIpvk+Y/1 NVjd+auQYsgieGAYD97qF2TC5J4kl4RMpPu7Ra1oOL0JAbtN1U7o2GjWjGo/hJvE T2nx4iA/uF5dc/UXjcYYiCBmXABtPEtTV09zXhQrSP0PYQs6YJ7Csp38bzS+U/d9 3wuXqMJROUwes5b5PWvxbEr0zDmS9WPl4g6L2eOWJd2myAT091lemXPc4S+3kyur tnDwIAItl58t6XG2DNGPRVxKZqttkn9yZnB/Cfe7wANqLhedV7/88Zn1cWGEWD5R zXamBXfgs3jVHcqiQurE8Qv0iGojFi+15vZV1+m6o68IjsiLVpG3xbpBLKhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJeuvIoip4ZjqhOsh3ny9bYvEFJkwHwYDVR0j BBgwFoAUvI8Pn3EFkHPt4jucrZfZr1B/VdYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ2NGNiZWUtYzUxMy00NmM2LWExZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3 MTA1OTA3M0VERTIzQjlDQUQ5N0Q5QUY1MDdGNTVENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzhGMEY5RjcxMDU5MDczRURFMjNCOUNBRDk3RDlBRjUwN0Y1 NUQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ2NGNiZWUtYzUxMy00NmM2LWEx ZDAtM2VjMDFkN2E2NjI2LzAvQkM4RjBGOUY3MTA1OTA3M0VERTIzQjlDQUQ5N0Q5 QUY1MDdGNTVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE8EIi9oLWtQ5vYGSMWpMfkN6RokeahjHyE VMOElB0ugKW+FXvXXkNKcamARL4wpUMV6rV0j97Q8y5YWqE54CtWUSSHuuKyw9zo 1Z+jg7B0wrRCHzuLoKh7nEpnD9KdmtpT2WmLrjaSyFRr+XbPTj5wU2hGg2034cc/ WsJC+dfQG/4/osKgBv6smJ07JNnGRc0gmVXjoXs6UZgbAoUbvIkPYLYOF3MiI7d/ Rht2zdIFQwwAQuHYHATEnGtL1vtQddIe6yeEtocefrZB3PavaoVfwYkk+YxThhSC TG6NqUonGoFQ4W8yHV7QfxA9O9cZdqk5/VxAa4qIh8sn81A3ddw= -----END CERTIFICATE-----Generated at Tue Sep 22 05:49:23 2026 by rpki-client