$ rpki-client -vvf rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft File: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft (raw, json) Hash identifier: kPeV0C2a7QLjxjurQji9+oUpvaXbU+UjpDm28dbn8kI= Subject key identifier: B8:87:C0:33:47:9E:6A:F5:9A:04:99:DF:36:33:8A:3A:7E:31:57:EE Authority key identifier: BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B Certificate issuer: /CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B Certificate serial: 16613EFD8E127D35FE6331E52E1D9049EF7AC76E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 11:31:02 +0000 Manifest this update: Tue 28 Jul 2026 11:26:02 +0000 Manifest next update: Wed 29 Jul 2026 15:10:02 +0000 Files and hashes: 1: BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl (hash: CH82JV8jIDPegBFGyGpnkTWiWAMqDSb5jxJL0A12LTk=) 2: 3135372e36362e392e302f32342d3234203d3e20313532373436.roa (hash: gRxGW+klSIDqUWcFQBMXFqiWdggcgwp1v/UvYVaMWW4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:61:3e:fd:8e:12:7d:35:fe:63:31:e5:2e:1d:90:49:ef:7a:c7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC48E1350B2535426C09D2EA539390BBE1FEC6B Validity Not Before: Jul 28 11:26:02 2026 GMT Not After : Jul 29 15:10:02 2026 GMT Subject: CN=B887C033479E6AF59A0499DF36338A3A7E3157EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:53:86:58:5c:bb:4b:29:89:e2:29:01:26:0e: 27:d9:82:9f:7b:18:a7:e6:11:07:51:08:93:76:2e: 58:4f:2c:1f:44:40:97:7a:39:3c:c2:58:60:05:82: 45:19:8e:43:a8:67:d1:33:e2:a4:80:6b:57:ad:d3: 89:ae:f1:87:b2:07:2c:85:41:c7:19:b2:2a:7b:54: 67:be:7d:8c:bb:c3:c2:ff:44:16:d1:90:f3:96:8f: fd:ad:a1:b2:d6:03:80:37:ef:3d:de:d4:88:03:62: da:5f:f2:c4:9d:87:f3:75:ac:8b:01:60:ae:d6:a1: 38:07:32:09:9c:46:27:50:19:5c:09:f8:a5:dd:ab: 10:d5:8d:26:9d:20:6d:73:99:68:ea:f7:96:6e:a5: f3:b9:b2:05:03:ab:03:62:6c:a5:87:04:d3:e9:df: 3b:67:4d:e6:83:68:73:8b:cd:5b:92:ee:18:59:db: 69:07:9d:ba:f7:03:98:1d:4b:5b:0a:53:58:8f:1b: fa:d9:2a:00:66:71:10:97:0f:d2:af:22:9c:cf:6b: 4f:3b:14:fc:d7:17:fd:f9:57:2a:89:aa:38:2e:7f: e4:53:85:ab:94:97:0e:49:b7:40:3a:0d:4d:fd:d6: 74:1a:ff:05:d7:73:8d:64:8d:85:80:c8:f4:d2:5d: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:87:C0:33:47:9E:6A:F5:9A:04:99:DF:36:33:8A:3A:7E:31:57:EE X509v3 Authority Key Identifier: keyid:BC:C4:8E:13:50:B2:53:54:26:C0:9D:2E:A5:39:39:0B:BE:1F:EC:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bebf55ca-d783-4a3b-95cc-73cc346db46e/0/BCC48E1350B2535426C09D2EA539390BBE1FEC6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:22:cd:bd:30:f9:ee:01:58:c0:0f:9d:7e:3e:6c:4b:87: 6d:ce:87:53:96:72:96:f2:3e:83:33:59:9f:c4:3d:e2:1c:a4: da:9e:55:e5:96:0a:95:25:bd:c2:19:f3:2c:db:ff:b7:4a:0d: 31:88:c6:70:49:b8:4b:b5:fb:a1:e8:43:f4:8f:52:51:3b:88: c5:ea:5a:5c:d5:93:0a:fd:4e:71:82:de:57:81:b4:46:20:41: 35:94:f7:f7:ce:fe:f8:8e:db:6e:26:1e:45:29:6d:ad:28:65: d1:2f:db:aa:6d:06:65:17:a0:1e:70:a4:5b:77:68:76:5f:a6: 4c:f3:6a:0f:64:45:4f:61:cd:9a:83:20:e4:f4:85:5c:17:37: d0:38:0c:dc:8f:0a:df:20:9c:db:ec:74:c5:60:b7:27:62:9b: 87:f5:e5:e2:f4:98:a8:29:43:6c:ac:0f:cf:a4:cd:f4:67:c6: 1f:c8:97:4d:30:7a:a6:a2:4c:68:e9:5c:e3:be:cc:66:57:6b: fa:23:b8:da:06:1e:78:32:22:31:2a:98:8c:96:5b:82:7e:97: ad:3e:68:bd:6f:ee:6d:42:0c:fd:cb:31:1a:a9:e6:de:74:c9: c3:e8:93:9e:91:e1:3a:73:d9:64:c9:bd:86:a2:20:e9:fb:f2: 2e:86:a1:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmE+/Y4SfTX+YzHlLh2QSe96x24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDNDhFMTM1MEIyNTM1NDI2QzA5RDJFQTUzOTM5MEJC RTFGRUM2QjAeFw0yNjA3MjgxMTI2MDJaFw0yNjA3MjkxNTEwMDJaMDMxMTAvBgNV BAMTKEI4ODdDMDMzNDc5RTZBRjU5QTA0OTlERjM2MzM4QTNBN0UzMTU3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8U4ZYXLtLKYniKQEmDifZgp97 GKfmEQdRCJN2LlhPLB9EQJd6OTzCWGAFgkUZjkOoZ9Ez4qSAa1et04mu8YeyByyF QccZsip7VGe+fYy7w8L/RBbRkPOWj/2tobLWA4A37z3e1IgDYtpf8sSdh/N1rIsB YK7WoTgHMgmcRidQGVwJ+KXdqxDVjSadIG1zmWjq95ZupfO5sgUDqwNibKWHBNPp 3ztnTeaDaHOLzVuS7hhZ22kHnbr3A5gdS1sKU1iPG/rZKgBmcRCXD9KvIpzPa087 FPzXF/35VyqJqjguf+RThauUlw5Jt0A6DU391nQa/wXXc41kjYWAyPTSXb71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIfAM0eeavWaBJnfNjOKOn4xV+4wHwYDVR0j BBgwFoAUvMSOE1CyU1QmwJ0upTk5C74f7GswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmViZjU1Y2EtZDc4My00YTNiLTk1Y2MtNzNjYzM0NmRiNDZlLzAvQkNDNDhFMTM1 MEIyNTM1NDI2QzA5RDJFQTUzOTM5MEJCRTFGRUM2Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQ0M0OEUxMzUwQjI1MzU0MjZDMDlEMkVBNTM5MzkwQkJFMUZF QzZCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmViZjU1Y2EtZDc4My00YTNiLTk1 Y2MtNzNjYzM0NmRiNDZlLzAvQkNDNDhFMTM1MEIyNTM1NDI2QzA5RDJFQTUzOTM5 MEJCRTFGRUM2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjIIs29MPnuAVjAD51+PmxLh23Oh1OWcpby PoMzWZ/EPeIcpNqeVeWWCpUlvcIZ8yzb/7dKDTGIxnBJuEu1+6HoQ/SPUlE7iMXq WlzVkwr9TnGC3leBtEYgQTWU9/fO/viO224mHkUpba0oZdEv26ptBmUXoB5wpFt3 aHZfpkzzag9kRU9hzZqDIOT0hVwXN9A4DNyPCt8gnNvsdMVgtydim4f15eL0mKgp Q2ysD8+kzfRnxh/Il00weqaiTGjpXOO+zGZXa/ojuNoGHngyIjEqmIyWW4J+l60+ aL1v7m1CDP3LMRqp5t50ycPok56R4Tpz2WTJvYaiIOn78i6GoSA= -----END CERTIFICATE-----Generated at Wed Jul 29 08:34:49 2026 by rpki-client