$ rpki-client -vvf rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft File: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft (raw, json) Hash identifier: P5XPTj9PW7Tj2CPJH9LTLnGAnP5msQdX8lWWqCxBBp8= Subject key identifier: 2A:99:BF:04:40:BA:80:B2:0B:90:D2:5C:AD:4D:1B:F8:EB:2B:AE:44 Authority key identifier: BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 Certificate issuer: /CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Certificate serial: 036F1DF4422E11AF5D6782363F422BA423DEB262 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 16:54:43 +0000 Manifest this update: Tue 16 Jun 2026 16:49:43 +0000 Manifest next update: Wed 17 Jun 2026 20:22:43 +0000 Files and hashes: 1: BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl (hash: xuAi8tNTl37z/4S2AILeQCee1S6tl5QQYYP0bQoq3wg=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: E2M4qUbZWSt599F2XOoWWkAd0VagbsGc2jT6rtwKATE=) 3: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: 1jE//Ojpbil6rwxS3VYK8Kgs+HvoLDtucURb5d9bxdE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6f:1d:f4:42:2e:11:af:5d:67:82:36:3f:42:2b:a4:23:de:b2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC0B288685FD6E33D4BC0712274DC0A4BB8C8958 Validity Not Before: Jun 16 16:49:43 2026 GMT Not After : Jun 17 20:22:43 2026 GMT Subject: CN=2A99BF0440BA80B20B90D25CAD4D1BF8EB2BAE44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e6:b3:f1:b5:68:89:bd:74:23:c0:df:c0:de: 10:87:ef:ac:96:21:98:72:df:5f:86:fc:4d:3f:c1: d4:f1:a4:cf:aa:65:7b:e9:0f:99:ef:5e:eb:f4:d1: 59:3c:85:93:b5:d5:d1:56:54:72:9c:76:36:32:d1: 26:2d:0d:26:41:c4:f9:51:c8:de:4d:ae:1e:45:85: b5:0c:d4:e5:77:55:57:34:7f:d8:2a:2d:34:a0:ad: 3e:44:36:58:db:0a:40:5e:e5:55:9b:7e:f8:b0:02: 1e:1a:41:d7:d0:9c:5d:40:f2:be:0d:3b:ff:a1:10: c6:34:02:84:44:3d:7a:35:a2:26:8d:88:c1:f4:b4: 67:58:5a:cf:5c:bf:70:9d:c1:32:f2:36:9c:de:6a: eb:9d:b3:46:f3:1c:95:d7:09:42:cc:e2:3b:9e:ef: 15:ec:af:7c:27:8b:df:0e:b2:72:80:fa:5a:f1:5e: e1:0b:f5:03:2e:1f:6e:e6:0d:57:0c:c2:cb:b5:6f: ff:9a:f3:a7:c5:40:ba:84:5f:15:5e:2e:cb:8b:a3: c0:be:76:40:b2:9f:3e:24:78:52:cd:d5:78:cc:c2: 48:54:00:d1:22:ec:f6:ee:66:e3:48:e6:94:08:12: 8c:ff:12:62:ea:5f:96:c8:64:35:c2:ea:70:dc:97: fe:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:99:BF:04:40:BA:80:B2:0B:90:D2:5C:AD:4D:1B:F8:EB:2B:AE:44 X509v3 Authority Key Identifier: keyid:BC:0B:28:86:85:FD:6E:33:D4:BC:07:12:27:4D:C0:A4:BB:8C:89:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/BC0B288685FD6E33D4BC0712274DC0A4BB8C8958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:df:a8:fe:c2:7c:74:fc:21:6d:79:e8:20:79:02:ff:fe:7f: ff:f8:65:bf:61:bf:0d:bb:98:f9:0d:e9:6b:5e:a7:35:10:80: 9c:f3:f2:55:66:37:5e:52:bd:d3:e4:af:88:ee:e8:8c:fb:cf: 57:ab:27:59:73:07:3f:1c:28:db:e5:a3:d1:76:6f:fd:f0:25: 85:f5:d7:f2:a5:22:c3:89:58:ad:54:a3:01:e3:6b:c9:6a:61: 45:30:7d:fd:c2:73:1c:c5:64:c1:b2:8d:74:ef:81:87:58:92: 1e:8f:2d:50:46:cf:d3:69:ff:f6:3d:19:22:be:dc:5c:18:55: 5b:c2:9b:c6:7c:f9:88:6e:61:af:87:a4:b5:69:23:4b:12:c1: b7:6f:89:c4:07:5f:46:1b:8f:3d:dc:82:8c:90:66:18:8f:a5: 3a:05:8b:df:08:56:d2:cd:7b:41:2f:51:13:6f:03:1a:72:f8: 14:da:b8:bd:ea:08:de:55:2e:83:ca:e2:cd:a9:ec:66:1b:87: cb:bd:46:80:f6:62:20:4d:a7:10:13:6c:e1:6c:60:9d:0a:17: e9:17:cc:be:01:df:67:b7:e7:98:76:c5:51:26:fc:fa:c8:50: f8:18:43:81:ae:07:3e:53:20:2a:7b:5e:c8:06:ef:2c:6d:c1: 66:ad:17:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA28d9EIuEa9dZ4I2P0IrpCPesmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRC QjhDODk1ODAeFw0yNjA2MTYxNjQ5NDNaFw0yNjA2MTcyMDIyNDNaMDMxMTAvBgNV BAMTKDJBOTlCRjA0NDBCQTgwQjIwQjkwRDI1Q0FENEQxQkY4RUIyQkFFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5rPxtWiJvXQjwN/A3hCH76yW IZhy31+G/E0/wdTxpM+qZXvpD5nvXuv00Vk8hZO11dFWVHKcdjYy0SYtDSZBxPlR yN5Nrh5FhbUM1OV3VVc0f9gqLTSgrT5ENljbCkBe5VWbfviwAh4aQdfQnF1A8r4N O/+hEMY0AoREPXo1oiaNiMH0tGdYWs9cv3CdwTLyNpzeauuds0bzHJXXCULM4jue 7xXsr3wni98OsnKA+lrxXuEL9QMuH27mDVcMwsu1b/+a86fFQLqEXxVeLsuLo8C+ dkCynz4keFLN1XjMwkhUANEi7PbuZuNI5pQIEoz/EmLqX5bIZDXC6nDcl/6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKpm/BEC6gLILkNJcrU0b+OsrrkQwHwYDVR0j BBgwFoAUvAsohoX9bjPUvAcSJ03ApLuMiVgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjI3ODhjODgtY2EyYy00ZmEwLWEzNWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4 NUZENkUzM0Q0QkMwNzEyMjc0REMwQTRCQjhDODk1OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQzBCMjg4Njg1RkQ2RTMzRDRCQzA3MTIyNzREQzBBNEJCOEM4 OTU4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvQkMwQjI4ODY4NUZENkUzM0Q0QkMwNzEyMjc0REMw QTRCQjhDODk1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvfqP7CfHT8IW156CB5Av/+f//4Zb9hvw27 mPkN6WtepzUQgJzz8lVmN15SvdPkr4ju6Iz7z1erJ1lzBz8cKNvlo9F2b/3wJYX1 1/KlIsOJWK1UowHja8lqYUUwff3CcxzFZMGyjXTvgYdYkh6PLVBGz9Np//Y9GSK+ 3FwYVVvCm8Z8+YhuYa+HpLVpI0sSwbdvicQHX0Ybjz3cgoyQZhiPpToFi98IVtLN e0EvURNvAxpy+BTauL3qCN5VLoPK4s2p7GYbh8u9RoD2YiBNpxATbOFsYJ0KF+kX zL4B32e355h2xVEm/PrIUPgYQ4GuBz5TICp7XsgG7yxtwWatF4Y= -----END CERTIFICATE-----Generated at Wed Jun 17 12:40:39 2026 by rpki-client