$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft File: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft (raw, json) Hash identifier: MornuZ6dNt+ARO/SAUU8WiQn6UxTG3189jC3xQKtbxA= Subject key identifier: 72:82:35:7B:73:E5:2F:61:DD:B0:58:9C:C6:BC:01:DB:E3:52:B8:0F Authority key identifier: BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 Certificate issuer: /CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Certificate serial: 2D6B3C2BBD0A015EA20F4A7B98494507ABFDC94A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 00:06:17 +0000 Manifest this update: Wed 23 Sep 2026 00:01:17 +0000 Manifest next update: Thu 24 Sep 2026 01:33:17 +0000 Files and hashes: 1: BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl (hash: RdiA8HTQdjgYlo6D58N9RtkYqSWH1FKLdhMeuAMtmlo=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: UuRUSNqdjIpRgWCi5F5RSbdgKiXL1eLlsoyTQx4fcqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6b:3c:2b:bd:0a:01:5e:a2:0f:4a:7b:98:49:45:07:ab:fd:c9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2AF28C6DED924EF743389C8F7535C6F5F550C4 Validity Not Before: Sep 23 00:01:17 2026 GMT Not After : Sep 24 01:33:17 2026 GMT Subject: CN=7282357B73E52F61DDB0589CC6BC01DBE352B80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:f8:61:58:93:46:91:06:41:5d:8a:cf:f5: f5:a1:db:72:bd:5a:f9:c0:d6:61:82:74:94:9b:52: ee:33:84:1a:65:fa:76:1a:5d:8c:8f:00:e5:94:c9: 4f:3a:37:80:98:a4:a7:2e:d6:48:f5:f6:43:78:e6: d4:f3:74:42:d7:bb:81:67:06:0c:cc:c1:08:d2:fc: 44:1d:0e:aa:a5:cd:8c:92:5a:4d:35:34:b6:22:3b: 67:06:ad:3b:5d:16:61:69:89:35:6e:ba:a0:ed:48: d6:f3:31:b7:70:78:d9:f9:ca:4f:ef:62:c9:eb:96: d7:10:16:40:d6:a5:b3:62:52:b3:e8:98:1a:41:d2: 25:ea:e2:4a:ad:63:1b:3a:3a:97:59:b9:44:18:a3: 60:72:3c:85:04:82:b6:82:f8:48:92:7f:10:d1:b5: 9f:e3:7a:cf:f3:30:1f:e1:95:0a:6a:2c:b5:fc:51: 0d:25:17:fe:2e:19:3d:36:c3:f8:b3:f4:31:93:91: 94:5c:a3:a3:84:6d:48:27:df:8e:82:f6:1d:58:3f: e6:aa:0c:e9:5b:d1:2c:a2:55:84:ad:99:f4:3c:2e: 3c:92:1f:07:ba:11:e4:9a:74:24:47:8b:a6:04:3a: 30:fd:9d:f3:4c:1c:ac:26:d6:e9:dc:54:a7:1d:8d: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:82:35:7B:73:E5:2F:61:DD:B0:58:9C:C6:BC:01:DB:E3:52:B8:0F X509v3 Authority Key Identifier: keyid:BC:2A:F2:8C:6D:ED:92:4E:F7:43:38:9C:8F:75:35:C6:F5:F5:50:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/BC2AF28C6DED924EF743389C8F7535C6F5F550C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:9f:10:2e:9f:96:e1:0a:a1:5c:31:10:c4:97:a2:03:b4:f7: 17:49:c5:b4:b4:bf:79:e4:53:0d:5d:e8:7a:e9:39:4d:f8:b3: 90:a4:62:69:8e:2b:59:88:1c:e0:48:18:70:95:af:8d:25:61: 53:4c:14:8d:2f:0b:63:8c:50:40:23:1f:91:eb:a1:33:6b:62: a1:e4:d7:5e:d8:f0:46:6d:2c:f2:99:fe:eb:99:27:18:43:84: db:2d:20:6e:83:e4:bc:7c:95:c0:93:c7:e5:e7:37:22:80:e5: 24:7a:76:5b:59:84:6c:c2:97:49:53:eb:1e:33:62:da:0b:5c: e4:37:60:99:f8:7e:3d:98:65:f2:6a:cf:98:5a:8a:b2:8e:85: ba:11:4e:c7:14:1e:bc:8c:37:36:94:cd:0b:1c:b2:49:dc:96: b3:72:3f:a9:f9:5d:59:a3:5a:8b:24:e6:09:11:1a:d7:c9:0a: c4:b4:4a:77:47:64:35:c0:e3:aa:fb:39:4a:99:5a:c2:64:ec: e9:bd:57:2e:d0:ea:be:7f:68:ec:20:ce:e4:65:74:1a:d1:b0: 9e:6c:0d:b2:c4:84:cc:04:98:fe:a9:c8:aa:73:f5:bb:a3:b2: d8:9d:2b:f4:14:38:98:e7:97:0f:b5:66:be:14:2f:0c:ea:ab: 97:be:f4:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWs8K70KAV6iD0p7mElFB6v9yUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1QzZG NUY1NTBDNDAeFw0yNjA5MjMwMDAxMTdaFw0yNjA5MjQwMTMzMTdaMDMxMTAvBgNV BAMTKDcyODIzNTdCNzNFNTJGNjFEREIwNTg5Q0M2QkMwMURCRTM1MkI4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiV/hhWJNGkQZBXYrP9fWh23K9 WvnA1mGCdJSbUu4zhBpl+nYaXYyPAOWUyU86N4CYpKcu1kj19kN45tTzdELXu4Fn BgzMwQjS/EQdDqqlzYySWk01NLYiO2cGrTtdFmFpiTVuuqDtSNbzMbdweNn5yk/v YsnrltcQFkDWpbNiUrPomBpB0iXq4kqtYxs6OpdZuUQYo2ByPIUEgraC+EiSfxDR tZ/jes/zMB/hlQpqLLX8UQ0lF/4uGT02w/iz9DGTkZRco6OEbUgn346C9h1YP+aq DOlb0SyiVYStmfQ8LjySHwe6EeSadCRHi6YEOjD9nfNMHKwm1uncVKcdjX7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcoI1e3PlL2HdsFicxrwB2+NSuA8wHwYDVR0j BBgwFoAUvCryjG3tkk73Qzicj3U1xvX1UMQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2IzZGY2YWYtZDllZS00MDc2LTgxYTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2 REVEOTI0RUY3NDMzODlDOEY3NTM1QzZGNUY1NTBDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJBRjI4QzZERUQ5MjRFRjc0MzM4OUM4Rjc1MzVDNkY1RjU1 MEM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvQkMyQUYyOEM2REVEOTI0RUY3NDMzODlDOEY3NTM1 QzZGNUY1NTBDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+fEC6fluEKoVwxEMSXogO09xdJxbS0v3nk Uw1d6HrpOU34s5CkYmmOK1mIHOBIGHCVr40lYVNMFI0vC2OMUEAjH5HroTNrYqHk 117Y8EZtLPKZ/uuZJxhDhNstIG6D5Lx8lcCTx+XnNyKA5SR6dltZhGzCl0lT6x4z YtoLXOQ3YJn4fj2YZfJqz5hairKOhboRTscUHryMNzaUzQscsknclrNyP6n5XVmj Wosk5gkRGtfJCsS0SndHZDXA46r7OUqZWsJk7Om9Vy7Q6r5/aOwgzuRldBrRsJ5s DbLEhMwEmP6pyKpz9bujstidK/QUOJjnlw+1Zr4ULwzqq5e+9N0= -----END CERTIFICATE-----Generated at Wed Sep 23 14:42:30 2026 by rpki-client