$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft File: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft (raw, json) Hash identifier: 1Uo5oyYmeHR7OQ4sJFYC2+6vjVz7LHzeDfOPXpEkKq4= Subject key identifier: 7F:56:57:E0:E3:36:95:58:F9:C3:47:3E:FC:DD:AA:DA:0C:E4:10:C3 Authority key identifier: BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 Certificate issuer: /CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Certificate serial: 5658CB76956EBC9DF51F571F40C33EA59B9321CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 09:36:04 +0000 Manifest this update: Sun 15 Nov 2026 09:31:04 +0000 Manifest next update: Mon 16 Nov 2026 12:01:04 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: InX610PRk4RjrPQDGJ9PHRqZSNIWPEj//hXhXRso8Zk=) 2: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl (hash: HMhKbWeOamWf5/n3mhKhkG71hd+TJMsINYpTt+LsgF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:58:cb:76:95:6e:bc:9d:f5:1f:57:1f:40:c3:3e:a5:9b:93:21:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Validity Not Before: Nov 15 09:31:04 2026 GMT Not After : Nov 16 12:01:04 2026 GMT Subject: CN=7F5657E0E3369558F9C3473EFCDDAADA0CE410C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:3b:42:87:cb:f0:0d:81:b0:f1:32:f0:80: b3:67:61:6c:c3:4a:aa:42:bc:ae:ff:e5:67:ac:b2: cb:62:37:78:88:c0:d8:24:06:6b:f6:67:80:a6:64: a2:83:f5:4e:cb:18:bb:1f:3c:a0:fc:f1:73:13:0c: bc:58:5d:1d:d8:dc:be:07:fb:28:e6:23:9c:d7:88: 75:94:32:93:f0:c1:89:f9:6f:86:49:e9:46:26:aa: 83:47:b8:f4:e6:13:f8:1c:eb:5b:6b:c6:d8:dd:70: 0e:52:cc:3e:31:98:d9:ca:ae:98:59:64:1b:6f:09: 68:88:c2:ca:1a:21:12:69:1d:7f:b6:25:a8:9a:5e: 72:e8:ac:75:f3:62:ea:f3:88:1d:ea:b1:f8:a5:9a: 81:38:5a:45:48:8f:9c:81:d6:de:7a:b9:ab:0a:55: 57:46:f0:2b:5a:24:bb:09:a4:e5:a2:24:f9:a9:3a: 6a:e6:26:da:78:18:2f:70:d5:e8:dd:e4:cd:00:cd: 68:24:0f:7f:ee:e2:db:76:b4:a5:59:a3:1b:d0:fd: c4:20:bd:12:42:12:86:35:b3:50:cb:4f:84:a0:3b: 28:0d:57:03:ee:68:d1:02:e2:36:bb:9d:96:a5:b6: 02:0a:9b:e0:a4:cb:47:de:05:30:62:04:c0:28:f6: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:56:57:E0:E3:36:95:58:F9:C3:47:3E:FC:DD:AA:DA:0C:E4:10:C3 X509v3 Authority Key Identifier: keyid:BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:d3:28:8e:1e:ff:06:e2:48:ff:02:44:60:db:a6:83:30:1b: 23:93:05:36:7c:d0:87:b3:90:c1:58:ed:ca:57:2b:3b:2d:62: 9b:fe:9f:49:3c:f1:fc:3c:4f:5e:68:54:5e:6f:7c:09:c7:3b: c7:2f:a8:e8:83:95:18:a1:8d:d1:1c:af:7d:0f:45:60:6f:68: fe:46:24:2b:a2:96:a0:30:d6:ec:a9:46:e6:cb:b7:3b:bd:3e: 4b:8b:a1:e9:ee:af:96:e8:fd:46:fa:03:42:d1:b6:1e:55:d2: 01:bb:31:79:a8:66:54:95:48:60:44:8f:48:6a:56:b9:17:41: b6:d9:2f:67:07:eb:d1:53:94:e0:86:6a:19:75:d0:fa:6f:a4: 37:e3:c7:d0:68:6b:fd:f4:5c:18:5d:19:5d:48:a2:28:c2:4d: f4:1e:4c:0a:f9:86:6c:ca:9d:d1:3a:fd:c9:38:93:f7:e9:a0: 92:d0:eb:81:de:96:e6:85:04:03:12:3d:29:2c:96:92:c6:db: b7:ce:b9:90:f6:7e:af:0b:94:8d:44:76:26:e1:bf:7e:5b:2d: 55:7e:df:42:4c:55:cc:a4:e5:44:b7:a4:be:7a:db:ab:ea:36: c6:c1:c1:08:8b:50:ef:fc:9c:a4:ac:6f:54:98:47:45:4d:4f: d2:31:c2:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVljLdpVuvJ31H1cfQMM+pZuTIc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4 RjZCNjMzMjAeFw0yNjExMTUwOTMxMDRaFw0yNjExMTYxMjAxMDRaMDMxMTAvBgNV BAMTKDdGNTY1N0UwRTMzNjk1NThGOUMzNDczRUZDRERBQURBMENFNDEwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJztCh8vwDYGw8TLwgLNnYWzD SqpCvK7/5WessstiN3iIwNgkBmv2Z4CmZKKD9U7LGLsfPKD88XMTDLxYXR3Y3L4H +yjmI5zXiHWUMpPwwYn5b4ZJ6UYmqoNHuPTmE/gc61trxtjdcA5SzD4xmNnKrphZ ZBtvCWiIwsoaIRJpHX+2JaiaXnLorHXzYurziB3qsfilmoE4WkVIj5yB1t56uasK VVdG8CtaJLsJpOWiJPmpOmrmJtp4GC9w1ejd5M0AzWgkD3/u4tt2tKVZoxvQ/cQg vRJCEoY1s1DLT4SgOygNVwPuaNEC4ja7nZaltgIKm+Cky0feBTBiBMAo9qjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf1ZX4OM2lVj5w0c+/N2q2gzkEMMwHwYDVR0j BBgwFoAUu95zUrK+CpEqD1pFbcBUdY9rYzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZjYmI2YWUtMTM4ZS00ZDJiLTkzZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJC MkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4RjZCNjMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkRFNzM1MkIyQkUwQTkxMkEwRjVBNDU2REMwNTQ3NThGNkI2 MzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0 NzU4RjZCNjMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLTKI4e/wbiSP8CRGDbpoMwGyOTBTZ80Iez kMFY7cpXKzstYpv+n0k88fw8T15oVF5vfAnHO8cvqOiDlRihjdEcr30PRWBvaP5G JCuilqAw1uypRubLtzu9PkuLoenur5bo/Ub6A0LRth5V0gG7MXmoZlSVSGBEj0hq VrkXQbbZL2cH69FTlOCGahl10PpvpDfjx9Boa/30XBhdGV1IoijCTfQeTAr5hmzK ndE6/ck4k/fpoJLQ64HeluaFBAMSPSkslpLG27fOuZD2fq8LlI1Edibhv35bLVV+ 30JMVcyk5US3pL5626vqNsbBwQiLUO/8nKSsb1SYR0VNT9IxwhE= -----END CERTIFICATE-----Generated at Sun Nov 15 21:51:16 2026 by rpki-client