$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft File: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft (raw, json) Hash identifier: 2qlEMLOcZ0HUwfBkmBoEitll6vnwrteSWNl4QUQ3b10= Subject key identifier: 87:D8:AC:83:58:D6:90:36:14:28:2E:99:50:8F:C8:8C:7D:2A:90:56 Authority key identifier: BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 Certificate issuer: /CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Certificate serial: 2D5A8223629EA5DF52265A329C5BE28EB4BE663F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:53:40 +0000 Manifest this update: Mon 21 Sep 2026 17:48:40 +0000 Manifest next update: Tue 22 Sep 2026 19:32:40 +0000 Files and hashes: 1: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl (hash: uszyKe8m6jNMEtF14ElgB3613tFWXM9k37gb6CBgyPI=) 2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: InX610PRk4RjrPQDGJ9PHRqZSNIWPEj//hXhXRso8Zk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5a:82:23:62:9e:a5:df:52:26:5a:32:9c:5b:e2:8e:b4:be:66:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Validity Not Before: Sep 21 17:48:40 2026 GMT Not After : Sep 22 19:32:40 2026 GMT Subject: CN=87D8AC8358D6903614282E99508FC88C7D2A9056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7a:7f:a5:40:d8:f3:8b:25:74:4f:1c:61:b5: 43:9a:76:e3:a2:5f:a0:d7:f5:b0:2c:5b:9b:0a:9d: e5:5b:77:47:fd:c4:10:42:ee:2f:98:b5:4c:3c:e9: 33:b8:ab:92:cb:ad:e5:36:1a:f3:46:b8:af:30:5f: c4:af:c5:82:b6:49:42:96:8d:28:c1:87:f8:cc:cb: 17:63:f8:33:b9:cb:c4:ff:69:e4:bc:a5:af:d3:eb: 9a:42:8c:a6:a2:07:36:d5:5c:a0:3e:d2:7d:f2:cc: 58:45:b0:d5:da:82:5f:da:87:d6:21:c8:85:22:50: 10:6b:9e:15:79:85:8c:da:a1:a7:3e:17:d2:3d:75: 5c:50:94:ce:66:87:a2:3b:d7:3b:c5:59:da:47:7e: 0b:da:14:30:22:94:7e:81:ff:f1:73:85:a8:96:16: 37:82:85:62:85:0a:99:11:95:84:c2:20:a7:ee:31: 86:de:7f:70:a7:7c:66:27:f4:02:59:7b:b1:98:09: 0d:b1:c0:3c:b0:b6:a8:e9:70:3a:c6:49:2d:ce:5c: 81:0b:cb:6d:dd:7b:51:89:4b:4e:ce:ea:c7:93:4c: 80:fd:41:c5:9b:63:84:aa:68:7c:5d:ed:f2:c3:39: 8a:88:7f:80:56:9c:09:82:b6:f0:71:72:c6:35:fc: 30:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D8:AC:83:58:D6:90:36:14:28:2E:99:50:8F:C8:8C:7D:2A:90:56 X509v3 Authority Key Identifier: keyid:BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cc:54:69:7c:54:fd:78:1a:25:a7:ca:a2:73:19:9e:30:e7: 50:60:c0:a1:dd:16:ce:b1:d4:6b:63:79:5c:c2:d2:0d:b4:eb: cb:ca:de:da:b8:97:3f:c0:65:dd:de:55:24:02:44:1a:a9:59: 9e:54:4f:8d:62:20:29:df:ab:5f:f5:0b:eb:c8:94:7e:77:5b: 38:65:02:39:d3:aa:33:eb:75:f1:3a:53:0f:44:a4:84:9b:70: cc:09:97:11:82:03:fc:2b:1d:a9:63:ec:7c:e8:8b:43:eb:28: f7:e0:9f:00:c3:ca:ff:e3:6e:a7:57:8c:1d:37:32:f8:fe:66: 5f:0d:e1:6d:76:01:2f:3a:44:43:45:b7:62:4e:18:c8:5d:9f: f2:76:20:4a:4a:ce:4b:7f:c9:0d:d2:08:f7:d7:2d:c0:32:21: 2c:69:de:ad:e3:ad:a7:2a:b0:79:6b:0e:6c:66:bb:37:88:c6: 15:ff:51:dc:46:ce:ad:2b:a6:4d:0e:99:a2:22:94:c9:73:a4: b4:c5:3c:e9:53:98:2e:2a:90:9c:6a:7d:6d:35:63:b5:31:db: 4e:e9:fc:a8:f0:8d:e8:b1:64:02:a3:82:c5:11:1a:9c:57:83: ac:ec:da:22:87:1d:97:a4:6a:30:97:68:0f:83:dd:87:8f:85: 7b:4a:72:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVqCI2Kepd9SJloynFvijrS+Zj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4 RjZCNjMzMjAeFw0yNjA5MjExNzQ4NDBaFw0yNjA5MjIxOTMyNDBaMDMxMTAvBgNV BAMTKDg3RDhBQzgzNThENjkwMzYxNDI4MkU5OTUwOEZDODhDN0QyQTkwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnen+lQNjziyV0TxxhtUOaduOi X6DX9bAsW5sKneVbd0f9xBBC7i+YtUw86TO4q5LLreU2GvNGuK8wX8SvxYK2SUKW jSjBh/jMyxdj+DO5y8T/aeS8pa/T65pCjKaiBzbVXKA+0n3yzFhFsNXagl/ah9Yh yIUiUBBrnhV5hYzaoac+F9I9dVxQlM5mh6I71zvFWdpHfgvaFDAilH6B//FzhaiW FjeChWKFCpkRlYTCIKfuMYbef3CnfGYn9AJZe7GYCQ2xwDywtqjpcDrGSS3OXIEL y23de1GJS07O6seTTID9QcWbY4SqaHxd7fLDOYqIf4BWnAmCtvBxcsY1/DCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh9isg1jWkDYUKC6ZUI/IjH0qkFYwHwYDVR0j BBgwFoAUu95zUrK+CpEqD1pFbcBUdY9rYzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZjYmI2YWUtMTM4ZS00ZDJiLTkzZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJC MkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4RjZCNjMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkRFNzM1MkIyQkUwQTkxMkEwRjVBNDU2REMwNTQ3NThGNkI2 MzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0 NzU4RjZCNjMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7MVGl8VP14GiWnyqJzGZ4w51BgwKHdFs6x 1GtjeVzC0g2068vK3tq4lz/AZd3eVSQCRBqpWZ5UT41iICnfq1/1C+vIlH53Wzhl AjnTqjPrdfE6Uw9EpISbcMwJlxGCA/wrHalj7Hzoi0PrKPfgnwDDyv/jbqdXjB03 Mvj+Zl8N4W12AS86RENFt2JOGMhdn/J2IEpKzkt/yQ3SCPfXLcAyISxp3q3jracq sHlrDmxmuzeIxhX/UdxGzq0rpk0OmaIilMlzpLTFPOlTmC4qkJxqfW01Y7Ux207p /KjwjeixZAKjgsURGpxXg6zs2iKHHZekajCXaA+D3YePhXtKcs4= -----END CERTIFICATE-----Generated at Tue Sep 22 05:36:06 2026 by rpki-client