$ rpki-client -vvf rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft File: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft (raw, json) Hash identifier: 4RE93Pp5IHwKuT7187DWN5m8txBift+c+ZHOUgdoCsc= Subject key identifier: EE:66:5E:CE:62:D2:61:D0:AA:02:14:F0:04:E1:E1:5B:FB:DC:57:BA Authority key identifier: BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 Certificate issuer: /CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Certificate serial: 306F34184684942822778B9B32C1FE5E39AC16C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft Manifest number: 75 Signing time: Wed 29 Jul 2026 04:16:17 +0000 Manifest this update: Wed 29 Jul 2026 04:11:17 +0000 Manifest next update: Thu 30 Jul 2026 07:54:17 +0000 Files and hashes: 1: BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl (hash: KF7deg1ntYqehn2kjXoX1efLWq2FjosUFleGAq00n9k=) 2: 3230332e3137352e3132342e302f32342d3234203d3e20313339393532.roa (hash: ZSw4Uq5kBtHJtMaE8rKzgmI2s1rhms6m5RdJe1in6/8=) 3: 3230332e3137352e3132342e302f32332d3233203d3e20313339393532.roa (hash: Nma88EOqWYWpQsglD32h81XYLhVQYdqCijuHJE+VloU=) 4: 3230332e3137352e3132352e302f32342d3234203d3e20313339393532.roa (hash: jC/3N/0mOEMFWjEL1ITUu1mNjq/HhBvbNlIzBRl8FHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6f:34:18:46:84:94:28:22:77:8b:9b:32:c1:fe:5e:39:ac:16:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42 Validity Not Before: Jul 29 04:11:17 2026 GMT Not After : Jul 30 07:54:17 2026 GMT Subject: CN=EE665ECE62D261D0AA0214F004E1E15BFBDC57BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:cf:aa:99:c3:bc:8f:62:9c:2c:b9:b5:33: 2d:e6:e2:a5:be:29:7a:40:1a:14:64:5c:8b:f5:49: 7b:04:32:49:77:3a:89:f5:c5:03:ae:fb:fa:ee:83: 5d:b9:82:9d:f3:32:9e:b9:7b:33:51:88:35:95:ca: bf:3c:af:c8:72:2a:34:3d:ae:48:8b:18:80:81:59: 4b:30:dd:66:13:a8:55:c4:bd:bd:7b:e6:0b:04:e9: ab:c7:8f:18:66:0d:a1:95:43:f0:13:b7:b9:45:95: ab:fc:58:c9:15:a1:52:84:36:ca:03:6a:97:c8:26: 20:88:f0:4e:9a:62:91:95:ce:5e:b0:7e:41:04:ae: 0c:c2:47:72:43:87:91:ab:3f:d0:26:a2:2e:ff:ca: 09:41:50:eb:3d:6e:18:36:bd:a8:4f:90:60:c0:bc: d3:13:8f:d6:dd:eb:92:8a:dc:c6:8f:03:2e:df:1a: 77:40:d1:bb:9f:bb:6a:19:98:86:33:b3:77:21:99: af:e1:af:86:51:28:c9:91:63:68:af:3d:e3:1a:ed: ed:07:93:0e:2f:d8:29:8d:e5:eb:8a:3c:a1:b1:14: 46:51:2d:23:5d:a4:58:09:36:63:2c:be:58:a4:f7: 79:3c:8c:4a:2c:7a:9d:72:e7:f3:12:2f:7a:99:13: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:66:5E:CE:62:D2:61:D0:AA:02:14:F0:04:E1:E1:5B:FB:DC:57:BA X509v3 Authority Key Identifier: keyid:BC:2F:FB:53:46:9C:81:8C:FF:E7:C5:1F:3A:A4:AA:B5:5C:E3:2C:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52b38f79-26d3-4489-a47d-0a8805b448ae/0/BC2FFB53469C818CFFE7C51F3AA4AAB55CE32C42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8c:ec:d0:db:8f:c6:74:f9:f7:46:c2:e2:dc:10:dc:f5:c4: b7:43:12:bf:af:7a:54:5a:04:32:a8:0d:fe:52:7d:f4:39:ed: 27:2a:6e:10:1e:6b:b9:b6:08:77:3b:d1:69:da:49:0f:09:3a: 64:ee:4a:3a:a2:99:a3:be:55:71:99:93:aa:e4:6c:9c:90:1d: be:f8:53:1b:d4:32:70:0d:a6:38:08:70:e5:c7:3d:c5:6f:64: 48:c1:2b:af:66:6d:d1:9d:6b:27:fc:a2:99:54:1b:7d:23:5f: 2a:e0:95:16:90:7c:f0:e7:0f:5b:f7:72:bb:48:9d:f1:cb:41: 72:90:cd:16:8a:3d:5f:3c:d5:d9:02:e3:da:73:bd:47:0f:ae: c4:33:27:c5:54:aa:b5:5d:4f:67:77:71:98:b9:05:cc:7a:ba: 0f:96:72:ab:7a:0e:37:6e:f5:7b:6c:97:23:b7:78:d8:2b:5a: b1:00:f3:af:b4:a2:b3:41:f5:37:17:25:d7:50:67:3a:50:8d: 51:2d:1c:fb:68:b6:28:4e:d9:6e:ce:ec:77:da:ba:84:64:58: 99:6a:05:b8:67:dc:cf:3c:68:0f:cb:2e:a5:ec:d3:cb:6a:c7: ea:e5:71:ae:b9:cc:df:cf:f3:e0:2e:d5:c5:a8:f1:1e:ae:cb: a3:ba:25:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMG80GEaElCgid4ubMsH+XjmsFsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1 Q0UzMkM0MjAeFw0yNjA3MjkwNDExMTdaFw0yNjA3MzAwNzU0MTdaMDMxMTAvBgNV BAMTKEVFNjY1RUNFNjJEMjYxRDBBQTAyMTRGMDA0RTFFMTVCRkJEQzU3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuk8+qmcO8j2KcLLm1My3m4qW+ KXpAGhRkXIv1SXsEMkl3Oon1xQOu+/rug125gp3zMp65ezNRiDWVyr88r8hyKjQ9 rkiLGICBWUsw3WYTqFXEvb175gsE6avHjxhmDaGVQ/ATt7lFlav8WMkVoVKENsoD apfIJiCI8E6aYpGVzl6wfkEErgzCR3JDh5GrP9Amoi7/yglBUOs9bhg2vahPkGDA vNMTj9bd65KK3MaPAy7fGndA0bufu2oZmIYzs3chma/hr4ZRKMmRY2ivPeMa7e0H kw4v2CmN5euKPKGxFEZRLSNdpFgJNmMsvlik93k8jEosep1y5/MSL3qZE4yrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7mZezmLSYdCqAhTwBOHhW/vcV7owHwYDVR0j BBgwFoAUvC/7U0acgYz/58UfOqSqtVzjLEIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTJiMzhmNzktMjZkMy00NDg5LWE0N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0 NjlDODE4Q0ZGRTdDNTFGM0FBNEFBQjU1Q0UzMkM0Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzJGRkI1MzQ2OUM4MThDRkZFN0M1MUYzQUE0QUFCNTVDRTMy QzQyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTJiMzhmNzktMjZkMy00NDg5LWE0 N2QtMGE4ODA1YjQ0OGFlLzAvQkMyRkZCNTM0NjlDODE4Q0ZGRTdDNTFGM0FBNEFB QjU1Q0UzMkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuM7NDbj8Z0+fdGwuLcENz1xLdDEr+velRa BDKoDf5SffQ57ScqbhAea7m2CHc70WnaSQ8JOmTuSjqimaO+VXGZk6rkbJyQHb74 UxvUMnANpjgIcOXHPcVvZEjBK69mbdGdayf8oplUG30jXyrglRaQfPDnD1v3crtI nfHLQXKQzRaKPV881dkC49pzvUcPrsQzJ8VUqrVdT2d3cZi5Bcx6ug+Wcqt6Djdu 9XtslyO3eNgrWrEA86+0orNB9TcXJddQZzpQjVEtHPtotihO2W7O7HfauoRkWJlq Bbhn3M88aA/LLqXs08tqx+rlca65zN/P8+Au1cWo8R6uy6O6JVE= -----END CERTIFICATE-----Generated at Wed Jul 29 13:10:35 2026 by rpki-client