$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft File: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft (raw, json) Hash identifier: hj7Mk7dYWoz0vxX/axZlavwkoz3KuYryP6sFYeoO/4c= Subject key identifier: 2B:6A:FA:35:F6:A1:18:C1:0B:EB:B2:1E:37:FD:C8:3D:31:8A:10:09 Authority key identifier: BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8 Certificate issuer: /CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8 Certificate serial: 3AAC9B9B14ADEE3DD8FA5F0142334D2F7083A92E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 07:09:35 +0000 Manifest this update: Thu 24 Sep 2026 07:04:35 +0000 Manifest next update: Fri 25 Sep 2026 08:01:35 +0000 Files and hashes: 1: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: la/MT35l4XmEKRTivxkgUTpV+veAFTIlPEFkPiSAUT8=) 2: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: UGmub+zvmz38VUHBdFrEohUoj9JI2gk3RmJ2b1SMZ/E=) 3: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: aMwliF8f+KJHeJLDBVlDQIRW+UpwyCDnVCmgvmDSPBs=) 4: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: EYkI0p4+CgnYpKny2uHcSev4QPkQmeLLChTvoH2DvhI=) 5: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: ixvcysOVf6dGfQ7OL/zmp0yRPmCnK8SCHSDkoKzywSg=) 6: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: NpWQoJWkTFRWtu5IgmdpgROmr0Z1lBzNGKqs6X4eLkI=) 7: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: zUL5UQNXnc8QhEgTnOt/ZHUWtyhWWgBBUQzy5H70VK4=) 8: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: Lwb/Sd018a/wGqBSdGChZ8920giGhrUJnYfpSOUiZ7E=) 9: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: U2ap+e12vTMaTWTUslebQCqX7KlurU+JCU+tN10AEBc=) 10: BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl (hash: ZwbqdHrhZoX2P3/g9Vi4eVzH/6RHn1KcaH5pTR2BNtI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ac:9b:9b:14:ad:ee:3d:d8:fa:5f:01:42:33:4d:2f:70:83:a9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCD5E05E570F2280ECEF33171EB7ADC87DF556D8 Validity Not Before: Sep 24 07:04:35 2026 GMT Not After : Sep 25 08:01:35 2026 GMT Subject: CN=2B6AFA35F6A118C10BEBB21E37FDC83D318A1009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:88:db:15:8f:ee:79:c5:59:18:2a:40:3d:a7: ce:e2:3a:3e:b6:64:72:38:9a:0e:d4:13:ab:5b:93: bc:5e:0a:ab:f4:6a:71:b2:55:6a:74:e4:29:c7:d4: d1:73:29:38:ca:7b:90:ac:49:07:4d:23:72:8c:ba: d6:ff:8d:ec:e8:9d:0c:53:a3:ae:b2:15:27:65:74: d3:fc:48:96:89:84:fe:02:c6:c0:e4:ca:ab:bc:4c: 4f:eb:90:fb:1b:06:ef:b5:9b:d8:d3:72:65:e9:f1: 46:63:cf:9b:f6:fd:e5:81:f1:16:0f:5f:a8:ec:6b: 22:97:a5:69:cc:d2:17:10:28:2e:5f:2d:2f:c2:41: f4:c3:e0:e3:80:64:c2:35:0d:a1:ca:99:3d:6e:d7: 56:a5:e3:47:30:34:79:af:16:11:15:71:be:f5:b2: 5f:83:57:73:bf:6e:64:08:b7:90:fe:3e:eb:cf:c7: fb:53:e7:0f:37:f4:9f:74:b5:3a:47:f5:24:84:fa: 56:20:ea:a1:bd:d1:9d:59:ea:e8:d9:02:51:d3:c7: 15:3d:cc:00:95:d3:7a:14:4c:a4:43:a7:3e:0c:f6: 4f:bb:5c:3c:da:65:9a:08:bf:45:6d:61:3d:bf:c9: ef:32:1a:dc:de:3d:fb:90:7b:77:d7:6c:df:11:e7: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:FA:35:F6:A1:18:C1:0B:EB:B2:1E:37:FD:C8:3D:31:8A:10:09 X509v3 Authority Key Identifier: keyid:BC:D5:E0:5E:57:0F:22:80:EC:EF:33:17:1E:B7:AD:C8:7D:F5:56:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BCD5E05E570F2280ECEF33171EB7ADC87DF556D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:81:d2:f2:c3:0f:d0:00:db:b8:a9:65:c3:27:05:5a:08:ef: cb:8a:36:35:dd:ca:7c:b4:62:1c:db:4e:b6:24:76:38:22:4a: 76:ad:fd:5d:47:a9:b6:5c:8d:df:96:e8:1d:6c:05:07:94:6a: 50:20:98:d4:11:ce:2e:33:67:d7:b7:66:51:03:19:04:58:7b: f9:b8:12:90:59:91:0b:e3:b7:d6:a3:06:b1:50:5e:82:20:25: d8:5d:e9:45:a1:3f:e3:27:ad:99:85:ca:e6:c0:72:1a:c9:71: f5:4b:b8:95:e1:8a:44:a3:c3:f5:f7:59:d1:bd:f2:2d:90:be: 95:f8:ee:c4:fd:97:f5:5d:f2:36:d9:8b:58:25:92:a7:f9:3c: c2:72:bd:5c:70:64:a7:70:c2:10:2a:1d:9a:68:a3:50:74:2b: 34:1d:aa:60:4e:5b:73:3b:b8:72:b9:a1:d3:ce:22:13:75:aa: 73:29:24:4e:75:14:ce:53:69:04:4b:3a:11:6a:83:b5:93:65: c0:51:de:2e:32:56:af:8d:e0:a2:b7:35:45:af:b5:3e:ae:66: ac:97:59:b6:b4:5b:4b:0c:5b:a6:9f:ad:39:e4:0d:13:88:dc: 0e:e3:68:53:34:77:83:af:bd:36:9c:1d:31:33:b5:6c:ca:d7: 29:48:cb:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqybmxSt7j3Y+l8BQjNNL3CDqS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3 REY1NTZEODAeFw0yNjA5MjQwNzA0MzVaFw0yNjA5MjUwODAxMzVaMDMxMTAvBgNV BAMTKDJCNkFGQTM1RjZBMTE4QzEwQkVCQjIxRTM3RkRDODNEMzE4QTEwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiNsVj+55xVkYKkA9p87iOj62 ZHI4mg7UE6tbk7xeCqv0anGyVWp05CnH1NFzKTjKe5CsSQdNI3KMutb/jezonQxT o66yFSdldNP8SJaJhP4CxsDkyqu8TE/rkPsbBu+1m9jTcmXp8UZjz5v2/eWB8RYP X6jsayKXpWnM0hcQKC5fLS/CQfTD4OOAZMI1DaHKmT1u11al40cwNHmvFhEVcb71 sl+DV3O/bmQIt5D+PuvPx/tT5w839J90tTpH9SSE+lYg6qG90Z1Z6ujZAlHTxxU9 zACV03oUTKRDpz4M9k+7XDzaZZoIv0VtYT2/ye8yGtzePfuQe3fXbN8R58TLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2r6NfahGMEL67IeN/3IPTGKEAkwHwYDVR0j BBgwFoAUvNXgXlcPIoDs7zMXHretyH31VtgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTUwZGE0NDctYTEzOC00NjI1LWE0MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1 NzBGMjI4MEVDRUYzMzE3MUVCN0FEQzg3REY1NTZEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQ0Q1RTA1RTU3MEYyMjgwRUNFRjMzMTcxRUI3QURDODdERjU1 NkQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0 MjAtYTcxMWFjMjQzNTE5LzAvQkNENUUwNUU1NzBGMjI4MEVDRUYzMzE3MUVCN0FE Qzg3REY1NTZEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCB0vLDD9AA27ipZcMnBVoI78uKNjXdyny0 YhzbTrYkdjgiSnat/V1HqbZcjd+W6B1sBQeUalAgmNQRzi4zZ9e3ZlEDGQRYe/m4 EpBZkQvjt9ajBrFQXoIgJdhd6UWhP+MnrZmFyubAchrJcfVLuJXhikSjw/X3WdG9 8i2QvpX47sT9l/Vd8jbZi1glkqf5PMJyvVxwZKdwwhAqHZpoo1B0KzQdqmBOW3M7 uHK5odPOIhN1qnMpJE51FM5TaQRLOhFqg7WTZcBR3i4yVq+N4KK3NUWvtT6uZqyX Wba0W0sMW6afrTnkDROI3A7jaFM0d4OvvTacHTEztWzK1ylIy0I= -----END CERTIFICATE-----Generated at Thu Sep 24 20:27:18 2026 by rpki-client