$ rpki-client -vvf rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft File: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft (raw, json) Hash identifier: prdmPeG3DJq4NBCMo9yKFH7pcpzfjWIDiBKuGel9BAw= Subject key identifier: 16:48:14:AC:B7:10:B1:3B:E4:CC:30:A1:95:AF:CC:33:D4:58:CF:ED Authority key identifier: BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 Certificate issuer: /CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Certificate serial: 0B7BBC70D1E8D030FFDE8BB14F6A87141536DDBB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 03:57:36 +0000 Manifest this update: Wed 17 Jun 2026 03:52:36 +0000 Manifest next update: Thu 18 Jun 2026 06:48:36 +0000 Files and hashes: 1: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl (hash: bABxXFWOBLHY/HfurQfrom09hq4EqBPuqOh8p8M6Yzw=) 2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: InX610PRk4RjrPQDGJ9PHRqZSNIWPEj//hXhXRso8Zk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7b:bc:70:d1:e8:d0:30:ff:de:8b:b1:4f:6a:87:14:15:36:dd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Validity Not Before: Jun 17 03:52:36 2026 GMT Not After : Jun 18 06:48:36 2026 GMT Subject: CN=164814ACB710B13BE4CC30A195AFCC33D458CFED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:81:62:2b:7a:4b:3a:2f:23:25:39:2e:94: a9:45:d0:84:e0:1e:28:c1:d7:8c:f9:1a:33:03:5f: 50:01:88:73:ed:da:87:6a:20:8e:5c:d7:56:0d:22: ad:38:67:a4:5d:11:2d:40:a6:35:da:bb:0e:78:58: 3e:67:9f:7a:52:08:5d:0d:32:7b:e7:b3:db:d9:03: f7:ad:d1:1e:e4:60:c1:aa:1d:47:c8:59:36:36:dc: 1a:09:0a:59:cb:47:43:70:c1:26:5a:50:66:0d:3e: d7:3a:b1:ac:59:66:82:35:34:68:4b:24:60:e5:7c: 32:60:80:9d:62:df:f6:f7:11:f1:38:6a:bf:cc:39: 61:cd:ab:91:9a:76:db:24:36:5d:3f:b9:af:f1:ab: 28:0e:9c:c8:ce:8a:18:32:ab:69:86:bb:0e:7c:b7: f5:59:7f:98:69:f6:fd:13:66:e5:bb:df:df:7f:2c: 67:b5:cc:2a:5b:07:d8:8b:bb:82:bb:6b:b7:6a:bd: 02:2b:2c:cd:9b:97:fd:09:28:a6:a9:4c:90:4e:df: a8:a1:37:78:88:25:13:08:11:27:a0:3a:a3:c5:98: 7b:60:a8:e3:62:f8:63:8e:95:8f:3c:48:af:42:35: d5:76:29:c4:d5:df:79:66:13:8d:b0:90:07:de:75: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:48:14:AC:B7:10:B1:3B:E4:CC:30:A1:95:AF:CC:33:D4:58:CF:ED X509v3 Authority Key Identifier: keyid:BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:05:c7:07:3c:e9:e9:3b:a9:81:31:e4:df:73:a6:00:e6:c3: f3:17:63:83:3f:03:55:e1:84:a5:72:ec:d4:cd:87:1c:bd:82: 0a:88:61:25:f6:e2:a9:6f:08:06:ea:40:4b:45:eb:9c:3d:de: 11:8f:71:1a:7d:df:e0:87:74:91:3c:47:30:34:ff:53:57:1c: 55:09:b0:42:c7:16:ea:47:4f:df:3c:d4:98:e8:24:1f:1e:64: 3b:62:33:62:53:92:33:65:18:60:5f:de:df:25:a5:80:89:51: 57:29:ca:a1:17:03:d3:b1:13:79:88:72:da:9f:4c:76:c6:b1: 7c:6f:d9:2f:07:fb:12:a9:f3:89:3e:7a:2d:d0:92:13:74:b4: da:0d:8a:7f:c5:cb:88:c0:bc:47:34:f2:d9:fd:bc:de:6b:e8: 0b:97:81:f8:e3:25:d5:ca:7e:26:87:f0:05:4e:77:de:95:ef: 94:e7:1f:ce:8e:c2:7e:05:73:b9:44:fa:ec:b6:90:a1:69:aa: 56:56:7a:9e:33:ec:fa:26:50:2f:76:e7:0c:41:8c:7c:ce:06: 47:4d:f6:b9:91:e6:d1:4e:bb:37:55:7d:c6:74:af:56:02:b8: 21:c4:60:b7:22:b2:64:bc:80:ad:12:94:80:fa:69:b4:1a:d6: 3c:6b:e3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3u8cNHo0DD/3ouxT2qHFBU23bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4 RjZCNjMzMjAeFw0yNjA2MTcwMzUyMzZaFw0yNjA2MTgwNjQ4MzZaMDMxMTAvBgNV BAMTKDE2NDgxNEFDQjcxMEIxM0JFNENDMzBBMTk1QUZDQzMzRDQ1OENGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAYFiK3pLOi8jJTkulKlF0ITg HijB14z5GjMDX1ABiHPt2odqII5c11YNIq04Z6RdES1ApjXauw54WD5nn3pSCF0N Mnvns9vZA/et0R7kYMGqHUfIWTY23BoJClnLR0NwwSZaUGYNPtc6saxZZoI1NGhL JGDlfDJggJ1i3/b3EfE4ar/MOWHNq5GadtskNl0/ua/xqygOnMjOihgyq2mGuw58 t/VZf5hp9v0TZuW7399/LGe1zCpbB9iLu4K7a7dqvQIrLM2bl/0JKKapTJBO36ih N3iIJRMIESegOqPFmHtgqONi+GOOlY88SK9CNdV2KcTV33lmE42wkAfedfCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFkgUrLcQsTvkzDChla/MM9RYz+0wHwYDVR0j BBgwFoAUu95zUrK+CpEqD1pFbcBUdY9rYzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZjYmI2YWUtMTM4ZS00ZDJiLTkzZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJC MkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4RjZCNjMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkRFNzM1MkIyQkUwQTkxMkEwRjVBNDU2REMwNTQ3NThGNkI2 MzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0 NzU4RjZCNjMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcFxwc86ek7qYEx5N9zpgDmw/MXY4M/A1Xh hKVy7NTNhxy9ggqIYSX24qlvCAbqQEtF65w93hGPcRp93+CHdJE8RzA0/1NXHFUJ sELHFupHT9881JjoJB8eZDtiM2JTkjNlGGBf3t8lpYCJUVcpyqEXA9OxE3mIctqf THbGsXxv2S8H+xKp84k+ei3QkhN0tNoNin/Fy4jAvEc08tn9vN5r6AuXgfjjJdXK fiaH8AVOd96V75TnH86Own4Fc7lE+uy2kKFpqlZWep4z7PomUC925wxBjHzOBkdN 9rmR5tFOuzdVfcZ0r1YCuCHEYLcismS8gK0SlID6abQa1jxr48w= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:22 2026 by rpki-client