$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: Ef6P+763q5NR6k3fHHqJpD1HNLLbgdCAvdv/GHXETwI= Subject key identifier: 80:03:33:94:F9:6A:37:07:37:36:03:4C:E6:81:C9:6D:1A:55:A3:3F Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 17C6F4EAE4E7374E7524BF9AF8150810E9E267DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 00:03:04 +0000 Manifest this update: Tue 16 Jun 2026 23:58:04 +0000 Manifest next update: Thu 18 Jun 2026 01:23:04 +0000 Files and hashes: 1: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: oyhzHsMjOtxJNUoEhSAej+SFF0Q9T5JR/Ez63NYM4bU=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c6:f4:ea:e4:e7:37:4e:75:24:bf:9a:f8:15:08:10:e9:e2:67:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: Jun 16 23:58:04 2026 GMT Not After : Jun 18 01:23:04 2026 GMT Subject: CN=80033394F96A37073736034CE681C96D1A55A33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:f5:45:78:5c:47:7c:9b:dd:e6:44:c4:b8: 67:2e:ff:ef:f1:2a:06:fc:7a:bb:e0:73:74:ad:cf: d9:22:09:d2:d0:45:b2:1d:73:ac:f5:33:7e:92:00: e2:2d:27:99:28:4b:7d:75:32:30:af:57:ad:14:60: df:c7:ef:32:53:7e:02:42:23:99:e4:9c:b3:16:f2: dc:3a:a8:08:78:a8:d5:69:4f:e8:99:fc:83:bb:93: 71:5d:f5:aa:86:07:55:d6:a4:e8:8f:ba:d5:62:f4: 38:bd:bc:55:24:49:fc:5b:80:54:dd:e7:cc:69:19: b7:79:68:ad:5a:b7:65:04:f6:69:26:57:d2:cb:1c: d3:1c:0b:fc:64:9c:95:db:8d:8f:77:8a:20:6a:ff: f1:0a:43:a9:28:15:3d:d7:de:8f:4e:b6:b4:5c:6f: 97:f2:a4:38:4f:cf:42:fc:ce:cd:a1:2f:b6:8e:31: ab:a3:cd:03:8a:4a:ac:f1:30:8e:e5:7c:8e:cb:f4: 2b:36:c2:d7:b0:00:47:b5:eb:ca:27:a2:f9:74:00: 43:19:ee:0b:f0:bc:e6:0e:ea:79:5a:83:af:3f:c1: 8b:0f:20:2e:82:f1:f9:43:80:f2:58:88:10:78:6a: 63:ca:3b:b2:c2:79:44:05:b2:43:4b:b6:5c:e8:0f: a6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:03:33:94:F9:6A:37:07:37:36:03:4C:E6:81:C9:6D:1A:55:A3:3F X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:9c:ed:6c:e9:a1:4e:30:c9:13:24:d8:91:bf:e3:8d:50: 63:ee:c7:e7:bd:94:de:87:35:d7:57:f7:6b:ed:fd:c5:4f:92: 11:d9:4d:50:fe:fe:51:c4:cb:76:8d:40:33:71:be:af:60:1f: 6a:89:cf:02:1c:38:7e:d4:e9:f8:46:00:41:4a:73:ff:ba:0c: c3:0d:18:3c:b1:4e:13:bc:8f:85:28:b3:27:6b:7c:91:d8:b2: df:c2:ba:c0:34:57:5a:c8:16:11:00:f0:78:82:c7:20:6a:7b: ef:53:14:da:95:e1:24:8d:bf:e0:20:17:0a:ad:11:43:24:0a: 1d:1a:8b:53:6e:b9:18:7c:59:9a:9f:70:2e:68:71:92:fd:9e: a2:05:65:21:8c:c2:30:4f:a1:c5:83:a7:aa:9c:f1:7c:f5:1d: 80:88:60:7d:1d:66:2e:63:b0:7b:0a:e3:aa:ca:d6:ab:b5:0d: fa:f3:b2:36:1b:68:4f:9f:c9:a2:e9:1e:5c:c8:fb:27:14:3c: 0c:45:13:e5:19:70:37:84:70:bb:b3:95:f4:04:4a:80:26:f7: 48:74:12:3f:7a:a0:4e:27:35:dc:8f:5b:3c:0a:1f:9f:fd:f6: 4e:97:d0:45:92:04:7f:72:42:0c:bf:8f:4c:2e:f9:10:e6:3d: 88:c7:e2:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8b06uTnN051JL+a+BUIEOniZ98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA2MTYyMzU4MDRaFw0yNjA2MTgwMTIzMDRaMDMxMTAvBgNV BAMTKDgwMDMzMzk0Rjk2QTM3MDczNzM2MDM0Q0U2ODFDOTZEMUE1NUEzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYfVFeFxHfJvd5kTEuGcu/+/x Kgb8ervgc3Stz9kiCdLQRbIdc6z1M36SAOItJ5koS311MjCvV60UYN/H7zJTfgJC I5nknLMW8tw6qAh4qNVpT+iZ/IO7k3Fd9aqGB1XWpOiPutVi9Di9vFUkSfxbgFTd 58xpGbd5aK1at2UE9mkmV9LLHNMcC/xknJXbjY93iiBq//EKQ6koFT3X3o9OtrRc b5fypDhPz0L8zs2hL7aOMaujzQOKSqzxMI7lfI7L9Cs2wtewAEe168onovl0AEMZ 7gvwvOYO6nlag68/wYsPIC6C8flDgPJYiBB4amPKO7LCeUQFskNLtlzoD6YBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgAMzlPlqNwc3NgNM5oHJbRpVoz8wHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo2nO1s6aFOMMkTJNiRv+ONUGPux+e9lN6H NddX92vt/cVPkhHZTVD+/lHEy3aNQDNxvq9gH2qJzwIcOH7U6fhGAEFKc/+6DMMN GDyxThO8j4UosydrfJHYst/CusA0V1rIFhEA8HiCxyBqe+9TFNqV4SSNv+AgFwqt EUMkCh0ai1NuuRh8WZqfcC5ocZL9nqIFZSGMwjBPocWDp6qc8Xz1HYCIYH0dZi5j sHsK46rK1qu1DfrzsjYbaE+fyaLpHlzI+ycUPAxFE+UZcDeEcLuzlfQESoAm90h0 Ej96oE4nNdyPWzwKH5/99k6X0EWSBH9yQgy/j0wu+RDmPYjH4lk= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:03 2026 by rpki-client