$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: aoR5ZEGTcWuSJLPCrnU3PPNnplL5iffKsc90Px18tpk= Subject key identifier: 71:09:66:E9:48:52:3A:4A:0E:89:70:82:48:83:E4:27:32:36:17:2D Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 1289ACB2977FFF50DB79E70CA2D56AD988B78127 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 10:47:37 +0000 Manifest this update: Sat 13 Jun 2026 10:42:37 +0000 Manifest next update: Sun 14 Jun 2026 13:34:37 +0000 Files and hashes: 1: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) 2: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) 3: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: VkNKkFU4iQ6yI3gBrcRdLUyOuZjjWsle8Dxj12FHGT8=) 4: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:89:ac:b2:97:7f:ff:50:db:79:e7:0c:a2:d5:6a:d9:88:b7:81:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Jun 13 10:42:37 2026 GMT Not After : Jun 14 13:34:37 2026 GMT Subject: CN=710966E948523A4A0E8970824883E4273236172D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:c0:cf:1e:6f:92:d0:13:13:4b:44:41:30: 40:fa:a2:77:78:d9:43:65:18:2f:cc:ab:cd:8a:9b: 54:46:f9:c1:72:e8:c5:b7:2e:2b:55:7c:28:2b:bf: 08:f9:3a:8c:86:00:8e:35:26:76:21:15:d1:26:17: c5:b0:6f:36:70:c7:b6:33:9d:0b:dd:dc:38:77:ff: 77:8f:88:fc:2a:68:4b:9e:de:25:86:6f:97:03:df: 38:13:f7:a9:54:85:9a:98:fa:22:1b:5d:65:ad:c4: e8:8c:a8:34:42:e8:47:2d:05:37:ee:9f:a3:e0:02: 75:3a:ab:3c:7c:84:57:37:2e:e7:77:c9:62:bb:97: 00:ce:88:18:d4:a0:24:98:72:e3:dc:1e:3d:71:03: 25:18:7d:c1:e0:b7:82:a3:7c:ca:ba:3c:dc:6a:01: 81:e6:48:26:7d:b8:96:ec:42:9a:90:a3:c2:27:05: ce:79:e5:04:90:2b:68:40:28:48:c8:fa:da:7e:69: 50:6f:1d:5d:84:d7:42:3e:c4:1f:8d:2f:f1:20:39: 3f:5d:b7:23:80:91:2a:d1:81:48:21:83:55:95:0a: 2a:b2:39:1f:21:e5:50:c2:ad:96:3d:52:1f:eb:ff: 66:5a:56:fc:7e:ea:bd:cf:18:7e:6c:09:ae:17:53: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:09:66:E9:48:52:3A:4A:0E:89:70:82:48:83:E4:27:32:36:17:2D X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ab:72:a6:88:55:30:9f:da:6e:58:6c:88:2c:ea:80:74:fd: 5b:84:e7:24:b3:62:76:3a:b7:03:ae:3c:6c:5d:d7:4e:ff:29: 62:8a:71:fb:d6:7a:e4:31:b8:6e:57:c9:f3:b1:2c:6b:44:b8: 89:31:d5:e8:42:cc:37:6c:b8:2f:39:ad:0f:fa:a7:3a:63:65: f6:6f:65:05:9e:ca:ef:5c:57:59:3c:96:7c:84:e3:a3:22:01: 9b:0a:fb:2d:da:88:c3:2e:e5:4c:2b:ab:a8:ad:2b:f7:45:4b: 1d:14:b3:54:ea:d4:71:f3:67:fd:f4:24:16:cb:d1:33:ca:22: eb:a7:da:a3:63:34:8d:01:d7:af:b5:19:c3:bb:b4:64:4c:5d: 43:11:2e:d1:f4:bf:29:87:f3:e0:40:bc:84:47:58:3b:e5:12: 84:c4:b8:e2:10:a7:e7:7f:cf:bf:80:5b:ad:b9:2d:35:38:ee: cc:fb:4d:ab:77:75:cf:94:7c:da:bd:71:e9:3d:80:ad:4a:b5: fb:3c:6f:64:3a:bb:57:b7:e6:9a:2d:38:2c:59:cd:3f:3d:39: e7:41:26:d6:7f:a1:ef:c5:c1:17:d9:0e:18:69:14:b3:ce:59: e9:96:a1:6a:dc:9e:fa:be:50:58:2f:26:94:b8:30:aa:fb:f4: db:75:c6:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEomsspd//1DbeecMotVq2Yi3gScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA2MTMxMDQyMzdaFw0yNjA2MTQxMzM0MzdaMDMxMTAvBgNV BAMTKDcxMDk2NkU5NDg1MjNBNEEwRTg5NzA4MjQ4ODNFNDI3MzIzNjE3MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDMDPHm+S0BMTS0RBMED6ond4 2UNlGC/Mq82Km1RG+cFy6MW3LitVfCgrvwj5OoyGAI41JnYhFdEmF8WwbzZwx7Yz nQvd3Dh3/3ePiPwqaEue3iWGb5cD3zgT96lUhZqY+iIbXWWtxOiMqDRC6EctBTfu n6PgAnU6qzx8hFc3Lud3yWK7lwDOiBjUoCSYcuPcHj1xAyUYfcHgt4KjfMq6PNxq AYHmSCZ9uJbsQpqQo8InBc555QSQK2hAKEjI+tp+aVBvHV2E10I+xB+NL/EgOT9d tyOAkSrRgUghg1WVCiqyOR8h5VDCrZY9Uh/r/2ZaVvx+6r3PGH5sCa4XU0ufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcQlm6UhSOkoOiXCCSIPkJzI2Fy0wHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEercqaIVTCf2m5YbIgs6oB0/VuE5ySzYnY6 twOuPGxd107/KWKKcfvWeuQxuG5XyfOxLGtEuIkx1ehCzDdsuC85rQ/6pzpjZfZv ZQWeyu9cV1k8lnyE46MiAZsK+y3aiMMu5Uwrq6itK/dFSx0Us1Tq1HHzZ/30JBbL 0TPKIuun2qNjNI0B16+1GcO7tGRMXUMRLtH0vymH8+BAvIRHWDvlEoTEuOIQp+d/ z7+AW625LTU47sz7Tat3dc+UfNq9cek9gK1Ktfs8b2Q6u1e35potOCxZzT89OedB JtZ/oe/FwRfZDhhpFLPOWemWoWrcnvq+UFgvJpS4MKr79Nt1xuU= -----END CERTIFICATE-----Generated at Sun Jun 14 00:02:01 2026 by rpki-client