$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft File: BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft (raw, json) Hash identifier: oIxjaJELFHtkRXrTkGnQh3AiFfsozjF3y8IrBu3n6yU= Subject key identifier: 78:25:C7:1C:F0:A5:26:88:1B:6D:17:E3:13:60:E4:05:78:80:B2:F9 Authority key identifier: BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58 Certificate issuer: /CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58 Certificate serial: 76760019B36F8E2F20614C934ECAF84495425629 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 12:36:48 +0000 Manifest this update: Wed 23 Sep 2026 12:31:48 +0000 Manifest next update: Thu 24 Sep 2026 13:31:48 +0000 Files and hashes: 1: BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl (hash: ljJseCzc4lyVCRwHXDW5OjhMt+XSq9VdwyK3JRj6kmc=) 2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: +Kb0QkuG6f/u6BTqbTg841fMbaQ1r4RI338rMHPGvvc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:76:00:19:b3:6f:8e:2f:20:61:4c:93:4e:ca:f8:44:95:42:56:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCB15A9816D96CD6D5CD78E524B075E4A91EDC58 Validity Not Before: Sep 23 12:31:48 2026 GMT Not After : Sep 24 13:31:48 2026 GMT Subject: CN=7825C71CF0A526881B6D17E31360E4057880B2F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:22:2b:d6:04:44:f1:20:86:59:50:c7:9b: 70:2f:94:0e:2f:94:e0:74:8e:40:6d:7d:29:34:cb: 45:db:9e:f8:e2:31:ed:56:8e:ac:9d:e8:89:78:64: 00:f5:f9:1e:9e:9f:28:d8:0c:d3:6f:76:55:0e:90: c9:75:bd:86:6c:3a:9d:40:e0:b9:a8:94:d2:c9:47: 55:bc:3b:16:4c:09:67:b5:41:11:cb:08:18:00:ec: 76:58:61:46:43:f8:b8:a2:8a:d1:3e:77:93:e7:ac: 3f:ca:53:d5:34:fe:25:2d:a2:fe:36:83:7a:e6:1f: 56:ec:3b:7a:a8:52:9a:4f:54:13:80:74:48:03:9d: 11:c9:1f:5a:8c:ce:6e:09:e2:1a:4a:ec:b5:f7:b5: f7:74:9b:df:aa:d1:a9:6d:f4:64:3d:53:c9:29:a0: ac:f4:77:2b:f4:ee:7b:29:15:77:6e:60:2b:95:d4: cb:5c:31:e2:d3:78:ed:98:04:6b:d8:34:8e:2e:f2: b3:2f:ae:dd:da:86:48:07:ce:74:ef:fd:01:50:2d: 9b:5a:07:9c:4e:a7:2b:21:20:2e:40:7e:79:e0:79: c4:b7:42:58:06:d7:5e:e2:0f:57:eb:34:68:64:f6: 90:d6:fa:ee:7a:75:e5:50:50:e3:da:eb:65:7e:33: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:25:C7:1C:F0:A5:26:88:1B:6D:17:E3:13:60:E4:05:78:80:B2:F9 X509v3 Authority Key Identifier: keyid:BC:B1:5A:98:16:D9:6C:D6:D5:CD:78:E5:24:B0:75:E4:A9:1E:DC:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/BCB15A9816D96CD6D5CD78E524B075E4A91EDC58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9a:6b:08:54:0a:86:15:a5:f1:11:49:4e:be:7d:ab:61:68: aa:b9:9d:3d:67:dd:04:8a:50:e5:cd:69:2e:3d:8e:62:d2:fd: fc:dd:fe:52:75:06:bd:85:c7:76:49:5a:26:6f:eb:fd:cc:cf: 58:7c:30:1e:da:83:ac:c7:71:87:90:e6:6a:b5:f0:4f:b8:26: f1:de:11:15:70:14:00:c5:71:e8:d2:97:f4:db:48:3a:3e:93: 4a:63:e8:0a:af:c3:ac:5e:9c:96:35:df:65:fa:59:a3:67:4b: 41:c6:3f:3b:ca:b0:e6:39:85:37:e1:69:8a:b6:27:57:30:63: c0:3a:2b:16:c9:b9:ac:32:15:73:a8:bd:71:64:03:de:49:d3: 18:11:28:6d:e5:02:d0:b7:b2:2b:42:51:c1:1a:88:e6:00:06: a7:be:1f:e9:d6:f3:d2:35:63:52:b2:51:6a:9b:7d:4d:a2:80: 23:b6:55:6c:21:f1:38:ab:b7:a1:0e:94:82:2a:00:75:fb:3f: 1e:08:0e:ec:dc:32:08:10:da:18:77:a7:68:d8:ce:e5:b6:3f: 98:20:aa:3a:d9:17:11:77:31:21:14:d3:89:09:11:7a:4a:a1: 16:49:88:52:46:f1:12:e8:b5:d9:87:64:eb:a0:61:da:4b:9e: d5:bc:95:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnYAGbNvji8gYUyTTsr4RJVCVikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCMTVBOTgxNkQ5NkNENkQ1Q0Q3OEU1MjRCMDc1RTRB OTFFREM1ODAeFw0yNjA5MjMxMjMxNDhaFw0yNjA5MjQxMzMxNDhaMDMxMTAvBgNV BAMTKDc4MjVDNzFDRjBBNTI2ODgxQjZEMTdFMzEzNjBFNDA1Nzg4MEIyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAyIr1gRE8SCGWVDHm3AvlA4v lOB0jkBtfSk0y0XbnvjiMe1Wjqyd6Il4ZAD1+R6enyjYDNNvdlUOkMl1vYZsOp1A 4LmolNLJR1W8OxZMCWe1QRHLCBgA7HZYYUZD+LiiitE+d5PnrD/KU9U0/iUtov42 g3rmH1bsO3qoUppPVBOAdEgDnRHJH1qMzm4J4hpK7LX3tfd0m9+q0alt9GQ9U8kp oKz0dyv07nspFXduYCuV1MtcMeLTeO2YBGvYNI4u8rMvrt3ahkgHznTv/QFQLZta B5xOpyshIC5AfnngecS3QlgG117iD1frNGhk9pDW+u56deVQUOPa62V+M7TlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeCXHHPClJogbbRfjE2DkBXiAsvkwHwYDVR0j BBgwFoAUvLFamBbZbNbVzXjlJLB15Kke3FgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZhODRkZTUtNjFkMS00NjE4LTlmYjQtNDNmNjMxYTEyODlhLzAvQkNCMTVBOTgx NkQ5NkNENkQ1Q0Q3OEU1MjRCMDc1RTRBOTFFREM1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQ0IxNUE5ODE2RDk2Q0Q2RDVDRDc4RTUyNEIwNzVFNEE5MUVE QzU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQkNCMTVBOTgxNkQ5NkNENkQ1Q0Q3OEU1MjRCMDc1 RTRBOTFFREM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiaawhUCoYVpfERSU6+fathaKq5nT1n3QSK UOXNaS49jmLS/fzd/lJ1Br2Fx3ZJWiZv6/3Mz1h8MB7ag6zHcYeQ5mq18E+4JvHe ERVwFADFcejSl/TbSDo+k0pj6Aqvw6xenJY132X6WaNnS0HGPzvKsOY5hTfhaYq2 J1cwY8A6KxbJuawyFXOovXFkA95J0xgRKG3lAtC3sitCUcEaiOYABqe+H+nW89I1 Y1KyUWqbfU2igCO2VWwh8Tirt6EOlIIqAHX7Px4IDuzcMggQ2hh3p2jYzuW2P5gg qjrZFxF3MSEU04kJEXpKoRZJiFJG8RLotdmHZOugYdpLntW8lWw= -----END CERTIFICATE-----Generated at Wed Sep 23 20:03:19 2026 by rpki-client