
$ rpki-client -vvf repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
File: BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft (raw, json)
Hash identifier: bGT1cAiK0CWinCP96PtP0UnhIg2TY7uWbnM6hYDxXnA=
Subject key identifier: 03:32:E9:AB:60:8B:AE:32:59:B9:12:A7:84:37:7C:1D:A9:E2:8B:DC
Authority key identifier: BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
Certificate issuer: /CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Certificate serial: 4DD1C33FF6810870893957CC3D93EC7F76F90CA8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
Manifest number: 0568
Signing time: Sat 18 Apr 2026 09:11:25 +0000
Manifest this update: Sat 18 Apr 2026 09:06:25 +0000
Manifest next update: Tue 21 Apr 2026 10:48:25 +0000
Files and hashes: 1: 323430333a323730303a343030303a3a2f34382d3438203d3e203338353030.roa (hash: j8bdRIZx+6qyB9G1jeoDSrbJdadjDRQ67ND37zYlpko=)
2: 3131362e36382e3235322e302f32342d3234203d3e203338353030.roa (hash: vqAXc/V8UGRafSTW/TKjmRMeoC5nQdooNvEc7Q7KX+Q=)
3: 323430333a323730303a31303a3a2f34382d3438203d3e203338353030.roa (hash: 3E5JAaPCnmY7zISSQ4gI8lzsfCOHDli32AP+3Nlaqx8=)
4: 3130332e3234342e33372e302f32342d3234203d3e203338353030.roa (hash: CR1it/5lcj5mKjbJVyhsPIojVY8ODCkmMaMNHWrImtQ=)
5: 3133372e35392e31342e302f32342d3234203d3e203338353030.roa (hash: 0fv19luagoO93f5fwpQzyxrCgwGajNrOA8tDwWa++20=)
6: 323430333a323730303a343030313a3a2f34382d3438203d3e203338353030.roa (hash: KUe9YItWJewDr+vCEqi/EWllhXguJY0TmzIo3kUmGpg=)
7: 323430333a323730303a343030323a3a2f34382d3438203d3e203338353030.roa (hash: brBoAiHnPAXN7w+iiY5nOKnIJikx1cWKFRJLTv9yELs=)
8: 3131362e36382e3235352e302f32342d3234203d3e203338353030.roa (hash: 8srxXf6sCBp8LKU/ba9SFEFlNY8/TI8wDKtzcsi3W7k=)
9: 323430333a323730303a373a3a2f34382d3438203d3e203338353030.roa (hash: zom4OgHCT9yNR9s7PClSziJLNh/98AcRHADEEh70B44=)
10: 3133372e35392e31332e302f32342d3234203d3e203338353030.roa (hash: eSUzjWuiojseXg64akzIRz5XswNmVhnqy1cUbaNq3YA=)
11: 3130332e3234342e33382e302f32342d3234203d3e203338353030.roa (hash: d8faUdzBnFVRw5kIwanXJwWwTtXxeTRqt8Ed9RkYJwQ=)
12: 323430333a323730303a3a2f34382d3438203d3e203338353030.roa (hash: C7t3QQh/DTqZqDmxOH5Nzo0bVmfi2oIbzbzkt/a9NWE=)
13: 323430333a323730303a323a3a2f34382d3438203d3e203338353030.roa (hash: 0t+sP9mMUayz06wxXRa0Zlci2ba1YMNRtNd8apwlSzo=)
14: 3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (hash: brbz9ziFS0tbMcRonA9TyxfYawTYuBLpI2gS2ZyTNq8=)
15: 3130332e3234342e33392e302f32342d3234203d3e203338353030.roa (hash: 5BUitJKGxpFSJUUsM/tb96/1vZXkv4i9MubxNUYqkCI=)
16: 323430333a323730303a343030353a3a2f34382d3438203d3e203338353030.roa (hash: ScL2Ml9V0JxrkWOtUekcUkbGo5E4qCUz801UmzIBxWo=)
17: 323430333a323730303a343031303a3a2f34382d3438203d3e203338353030.roa (hash: 8uCEZaq+ErAkXmWnljIKQtRBspsZSJtLGFr9COygbXs=)
18: 3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (hash: oY5bwkHOZ5o/T4nyqHVk+QlZTq6zSV5WkYvYpvg7OW0=)
19: 323430333a323730303a353a3a2f34382d3438203d3e203338353030.roa (hash: dkBm1uq0fOeNnS/XAl8fOwdP51OmJH2MKhTJVDaflPk=)
20: 323430333a323730303a313a3a2f34382d3438203d3e203338353030.roa (hash: e98j/GnS4Qx/kvETXwDsBan3judrk6fv46l57y5vEAg=)
21: 323430333a323730303a333a3a2f34382d3438203d3e203338353030.roa (hash: 4XZ+2oDbC6jWPVbtwhOIpx0Ovr9SsBW1YMGL1IND6yA=)
22: BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl (hash: M7S+OOtNb9dLa5Qnk2MSZ1mqcinoQLBUzSnVH6iSRLw=)
23: 3130332e3234342e33362e302f32342d3234203d3e203338353030.roa (hash: ml8tgAzjPWfRZ6grIN5HL2FzB13oLZfVDnZYbJMHBAs=)
24: 3133372e35392e31352e302f32342d3234203d3e203338353030.roa (hash: lO5FLbufasmDWnZ9uvAVgaRmYYXGBSTz+dfylI0ofXQ=)
25: 323430333a323730303a343030373a3a2f34382d3438203d3e203338353030.roa (hash: GOMGqpabFLARAkTD3/79W716x+tCxTdb6049snwD2sY=)
26: 323430333a323730303a363a3a2f34382d3438203d3e203338353030.roa (hash: jvNDZEnqhiROy2saBd3ptbOt84MblTLhLgl0wHJO/VY=)
27: 3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (hash: V3KmgD3tTwhMEvs0Z12c99jKw1ctfp/222r2PmQ0tu8=)
28: 323430333a323730303a343030393a3a2f34382d3438203d3e203338353030.roa (hash: QNOvqxPhnejQxGTKHiQXSiXfIuY1m87nHG2q2XmKahg=)
29: 3131362e36382e3234382e302f32342d3234203d3e203338353030.roa (hash: CjwAdgechVyDEmdpWTYBD8Ris/80uI0UGLAhyRKKJA0=)
30: 323430333a323730303a343a3a2f34382d3438203d3e203338353030.roa (hash: Has9KhYZW/xL+AZ5Y86DT/rX9uV6ZdOQ3QRaKxgL1+g=)
31: 3131362e36382e3235302e302f32342d3234203d3e203338353030.roa (hash: FidrCQYO33Zq2TbkFlxgDF0SdKNPwCMdkDhbgsLO8bE=)
32: 3133372e35392e31322e302f32342d3234203d3e203338353030.roa (hash: flQKP/0naoXCI/90O73XuvucNpqyALJ5YVya2pQLkEw=)
33: 323430333a323730303a343030333a3a2f34382d3438203d3e203338353030.roa (hash: in6zkVgSo1zvq2LTLhVOqlCHjB8xLXn2xL9+G3wkap0=)
34: 323430333a323730303a393a3a2f34382d3438203d3e203338353030.roa (hash: YrLtsOYvp+DPw1cXnGNExzyx3eWKJFFV1BLJsck7tXI=)
35: 323430333a323730303a343030343a3a2f34382d3438203d3e203338353030.roa (hash: +GSzXEw9XVO9MZTg/3tsdoDls1yUaHYhurx3LSZ7ZG4=)
36: 3131362e36382e3235332e302f32342d3234203d3e203338353030.roa (hash: hTvjuYJru8sBC5Vi4eVcg0T8y4PjzTgW+TTHVszhGGY=)
37: 323430333a323730303a343030363a3a2f34382d3438203d3e203338353030.roa (hash: mT5M0yPm3/dROrkx7EXtMvuuuiLJJBueeArGpe0kXEU=)
38: 323430333a323730303a383a3a2f34382d3438203d3e203338353030.roa (hash: qURilkjtdA9tmzrVI6OrtqFXtdHl5I4HX6q7a9Ca7gg=)
39: 323430333a323730303a343030383a3a2f34382d3438203d3e203338353030.roa (hash: lU+XzrpXlPGqlVGdSD9IV3Pgign0OrucSJ9ueYpQFA4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 10:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d1:c3:3f:f6:81:08:70:89:39:57:cc:3d:93:ec:7f:76:f9:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB05293D3E9DCD0F4AD926100C191885CE1DB1D0
Validity
Not Before: Apr 18 09:06:25 2026 GMT
Not After : Apr 21 10:48:25 2026 GMT
Subject: CN=0332E9AB608BAE3259B912A784377C1DA9E28BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:82:7d:db:07:59:db:75:1c:00:ae:53:e2:78:
a7:60:ad:93:ae:0e:32:ea:f9:c0:5f:23:03:95:e6:
2c:f5:ae:10:e8:50:29:5b:4e:eb:a1:ad:bf:c7:54:
86:d3:4f:5b:bb:d0:68:82:11:c1:0b:36:0b:22:a8:
de:30:b1:91:0c:75:a5:d8:ee:0f:95:1e:26:f3:5a:
2f:79:4b:4e:3e:65:e7:46:e9:c7:e6:10:af:18:c6:
68:6d:73:43:08:df:46:37:76:23:0b:19:67:e5:0a:
b2:e2:a2:de:a2:6b:92:ae:15:6b:85:49:ae:ec:06:
02:b3:e3:e1:0f:97:e0:b9:73:3c:79:a7:68:5c:c1:
cd:7e:4b:1d:bc:cd:da:98:6b:75:3f:23:d3:fd:26:
22:f1:1d:df:70:e6:59:38:18:e2:d1:17:cf:76:2d:
2a:00:23:2b:3d:8b:ae:f1:a4:b7:0f:97:9b:69:66:
58:26:f9:25:12:1b:e5:89:f5:be:7b:d9:48:80:68:
51:6d:89:0a:b4:7e:17:e3:63:d6:58:17:a3:e2:de:
0a:06:f5:75:60:32:dd:66:ca:88:66:c9:d4:23:1a:
b6:e6:a2:14:08:37:72:c1:13:fe:f7:0a:b1:e8:5d:
bb:ed:10:92:36:2e:1e:ac:53:47:4c:26:74:47:d5:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:32:E9:AB:60:8B:AE:32:59:B9:12:A7:84:37:7C:1D:A9:E2:8B:DC
X509v3 Authority Key Identifier:
keyid:BB:05:29:3D:3E:9D:CD:0F:4A:D9:26:10:0C:19:18:85:CE:1D:B1:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/BB05293D3E9DCD0F4AD926100C191885CE1DB1D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:f8:d1:db:86:fe:b4:81:20:4f:23:26:17:0e:e5:65:ce:
10:a8:7f:83:4e:3d:2e:ed:44:90:d5:3e:ba:76:1f:f0:ec:5a:
82:15:a6:2d:ea:0f:c8:6c:70:99:32:5f:f3:da:cf:96:c7:75:
99:18:ea:70:d8:fe:19:ae:e8:cd:ff:b6:ad:fc:7c:eb:22:aa:
c0:24:1f:db:42:1f:89:a2:d2:57:7f:e8:12:07:a8:97:b4:9e:
4f:f8:44:99:3b:fa:c0:cb:c6:7e:00:7d:32:c8:d0:ab:bd:7d:
fc:c7:cd:ed:09:eb:60:49:e4:b3:2b:3a:7e:a4:4f:92:e7:03:
f1:81:97:ce:d7:26:e4:dc:23:21:6e:a8:c1:59:26:bc:d6:e9:
b5:3e:2e:c5:ad:f7:63:6b:be:0e:ed:21:12:cd:51:12:37:79:
47:b6:5e:58:6c:6b:03:9d:9e:0e:f4:86:17:41:df:9f:68:2a:
db:85:3c:ae:fe:4e:a4:d4:0e:66:ba:a0:22:84:8e:42:4a:e0:
be:85:fc:90:68:66:5c:7e:23:24:16:0c:17:ed:9a:a4:32:dd:
e2:e2:37:34:76:02:07:90:94:7c:e0:32:f3:48:30:28:b1:ec:
4b:a8:cb:30:f6:68:bc:65:1e:98:8e:f0:25:83:2c:64:31:79:
7c:af:c4:31
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTdHDP/aBCHCJOVfMPZPsf3b5DKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVD
RTFEQjFEMDAeFw0yNjA0MTgwOTA2MjVaFw0yNjA0MjExMDQ4MjVaMDMxMTAvBgNV
BAMTKDAzMzJFOUFCNjA4QkFFMzI1OUI5MTJBNzg0Mzc3QzFEQTlFMjhCREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8gn3bB1nbdRwArlPieKdgrZOu
DjLq+cBfIwOV5iz1rhDoUClbTuuhrb/HVIbTT1u70GiCEcELNgsiqN4wsZEMdaXY
7g+VHibzWi95S04+ZedG6cfmEK8Yxmhtc0MI30Y3diMLGWflCrLiot6ia5KuFWuF
Sa7sBgKz4+EPl+C5czx5p2hcwc1+Sx28zdqYa3U/I9P9JiLxHd9w5lk4GOLRF892
LSoAIys9i67xpLcPl5tpZlgm+SUSG+WJ9b572UiAaFFtiQq0fhfjY9ZYF6Pi3goG
9XVgMt1myohmydQjGrbmohQIN3LBE/73CrHoXbvtEJI2Lh6sU0dMJnRH1eWVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUAzLpq2CLrjJZuRKnhDd8Hanii9wwHwYDVR0j
BBgwFoAUuwUpPT6dzQ9K2SYQDBkYhc4dsdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MDQwNjhmMy1hNzViLTQ3NjQtOWU4MC0xZmE1NzI5MjA3ZmMvMC9CQjA1MjkzRDNF
OURDRDBGNEFEOTI2MTAwQzE5MTg4NUNFMURCMUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4ODVDRTFE
QjFEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjA0MDY4ZjMtYTc1Yi00NzY0LTll
ODAtMWZhNTcyOTIwN2ZjLzAvQkIwNTI5M0QzRTlEQ0QwRjRBRDkyNjEwMEMxOTE4
ODVDRTFEQjFEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIxZ+NHbhv60gSBPIyYXDuVlzhCof4NOPS7t
RJDVPrp2H/DsWoIVpi3qD8hscJkyX/Paz5bHdZkY6nDY/hmu6M3/tq38fOsiqsAk
H9tCH4mi0ld/6BIHqJe0nk/4RJk7+sDLxn4AfTLI0Ku9ffzHze0J62BJ5LMrOn6k
T5LnA/GBl87XJuTcIyFuqMFZJrzW6bU+LsWt92Nrvg7tIRLNURI3eUe2XlhsawOd
ng70hhdB359oKtuFPK7+TqTUDma6oCKEjkJK4L6F/JBoZlx+IyQWDBftmqQy3eLi
NzR2AgeQlHzgMvNIMCix7EuoyzD2aLxlHpiO8CWDLGQxeXyvxDE=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:42 2026 by rpki-client