$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: 56TvqFQimDj5SB3LUtx7ANQR5+ecTJ3I5I/EYD0Hhp0= Subject key identifier: F0:54:2C:BF:DB:F1:D1:79:5F:CA:40:0F:17:40:E3:A8:D4:1E:C9:D4 Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 2515FB140211A62BD5E12019A7DD8020B63A1BDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: BF Signing time: Mon 21 Sep 2026 13:28:11 +0000 Manifest this update: Mon 21 Sep 2026 13:23:11 +0000 Manifest next update: Tue 22 Sep 2026 16:46:11 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) 2: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: zH4WP1PrscKvzbzY8HB88MSczeGQXHgaygOl5hvFjRI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:15:fb:14:02:11:a6:2b:d5:e1:20:19:a7:dd:80:20:b6:3a:1b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: Sep 21 13:23:11 2026 GMT Not After : Sep 22 16:46:11 2026 GMT Subject: CN=F0542CBFDBF1D1795FCA400F1740E3A8D41EC9D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:ea:e3:82:0d:2b:c6:6e:d3:19:12:56:ad: 43:20:a7:47:6a:bc:12:3d:79:09:75:d3:ee:53:6d: 7b:28:83:6a:cd:29:6b:85:e1:70:90:66:43:16:0e: 0b:17:a2:51:f7:6c:cb:a8:35:bb:68:67:1e:5c:2a: b8:f2:5c:bb:90:d3:2c:b3:a8:b2:9d:50:f6:b0:f2: ec:3a:f2:9d:ea:a6:e1:f8:57:aa:93:bd:07:d2:66: 43:cd:8a:f8:d6:a1:89:d3:95:9e:0e:67:51:34:80: 3e:20:7d:c5:fc:25:b8:4c:41:cf:07:69:21:c9:86: 1d:25:6d:b0:1f:82:19:26:b2:cc:31:ba:a0:12:2a: e3:82:18:48:8a:b3:9b:82:5b:2d:bc:3b:28:38:5d: c4:45:54:cc:97:51:40:4e:6b:5d:e1:af:ce:cd:0d: 5e:08:db:8b:ec:cf:f4:0c:8a:1a:41:8c:9d:31:6f: f6:2f:ef:fd:38:13:eb:d3:f8:1a:d9:08:c4:22:7a: bf:e1:66:49:8b:e5:93:66:ad:19:ee:74:48:0c:55: b6:b0:b8:0a:75:e2:ff:ec:be:25:78:fd:a7:80:ca: f8:c4:e8:55:d7:77:10:11:82:40:8b:7e:f0:a8:e1: aa:f7:6d:e6:e3:7b:4f:c3:46:65:db:d4:c4:a7:5a: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:2C:BF:DB:F1:D1:79:5F:CA:40:0F:17:40:E3:A8:D4:1E:C9:D4 X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:15:71:73:27:5d:3e:f4:79:84:a3:f6:c0:5b:86:a9:d1:bb: bc:96:7f:d8:bc:4a:c3:70:82:a1:09:b2:74:e7:e2:e9:64:cd: 19:08:8a:f7:68:f4:e0:bc:df:90:5c:32:b3:a5:fc:0f:10:8d: 23:4b:13:a0:76:25:72:e7:61:8b:39:99:35:55:7b:9d:7b:12: cb:89:1d:16:ca:e4:54:97:db:1c:4c:63:76:5a:e7:2f:b2:ed: e6:bc:5c:94:32:77:61:5d:38:97:b5:63:cc:2d:58:ef:87:b2: 4a:2e:b8:54:03:71:7c:9c:bb:97:99:fc:39:07:7b:55:fe:3a: db:89:9c:f9:e0:18:eb:15:82:43:10:6c:89:e3:91:d5:d0:d2: 95:d4:20:0e:72:db:04:c7:ca:94:cf:53:ff:b1:96:2f:c1:42: b5:bc:07:8b:73:0a:58:2d:35:7e:80:28:4f:00:57:10:fb:af: 4b:d8:0d:3e:c2:39:83:ed:a5:bc:10:33:c3:f8:f8:86:f9:60: 95:b3:30:40:81:40:70:ff:d1:14:97:61:d5:71:48:80:1b:c5: a2:e8:f3:35:b1:73:b7:4b:24:ac:50:a0:04:85:69:45:5e:6b: 21:2e:fb:96:e1:9e:7d:12:f6:18:8e:1f:d7:fb:f9:9c:d4:69: 80:38:87:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRX7FAIRpivV4SAZp92AILY6G9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA5MjExMzIzMTFaFw0yNjA5MjIxNjQ2MTFaMDMxMTAvBgNV BAMTKEYwNTQyQ0JGREJGMUQxNzk1RkNBNDAwRjE3NDBFM0E4RDQxRUM5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4urjgg0rxm7TGRJWrUMgp0dq vBI9eQl10+5TbXsog2rNKWuF4XCQZkMWDgsXolH3bMuoNbtoZx5cKrjyXLuQ0yyz qLKdUPaw8uw68p3qpuH4V6qTvQfSZkPNivjWoYnTlZ4OZ1E0gD4gfcX8JbhMQc8H aSHJhh0lbbAfghkmsswxuqASKuOCGEiKs5uCWy28Oyg4XcRFVMyXUUBOa13hr87N DV4I24vsz/QMihpBjJ0xb/Yv7/04E+vT+BrZCMQier/hZkmL5ZNmrRnudEgMVbaw uAp14v/sviV4/aeAyvjE6FXXdxARgkCLfvCo4ar3bebje0/DRmXb1MSnWuoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8FQsv9vx0XlfykAPF0DjqNQeydQwHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoVcXMnXT70eYSj9sBbhqnRu7yWf9i8SsNw gqEJsnTn4ulkzRkIivdo9OC835BcMrOl/A8QjSNLE6B2JXLnYYs5mTVVe517EsuJ HRbK5FSX2xxMY3Za5y+y7ea8XJQyd2FdOJe1Y8wtWO+HskouuFQDcXycu5eZ/DkH e1X+OtuJnPngGOsVgkMQbInjkdXQ0pXUIA5y2wTHypTPU/+xli/BQrW8B4tzClgt NX6AKE8AVxD7r0vYDT7COYPtpbwQM8P4+Ib5YJWzMECBQHD/0RSXYdVxSIAbxaLo 8zWxc7dLJKxQoASFaUVeayEu+5bhnn0S9hiOH9f7+ZzUaYA4hyQ= -----END CERTIFICATE-----Generated at Mon Sep 21 20:11:32 2026 by rpki-client