$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: G/kxaPkySmULRQD3/Zuj+B7T9lrx/CgeNdTnPdHjcKA= Subject key identifier: 82:F7:6A:34:FA:88:CF:73:3C:3B:CF:1E:0F:3C:2E:2E:33:30:F7:01 Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 2B2D08A34A83B5611FD79B1579E461D15889C936 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: BC Signing time: Mon 21 Sep 2026 05:13:08 +0000 Manifest this update: Mon 21 Sep 2026 05:08:08 +0000 Manifest next update: Tue 22 Sep 2026 06:22:08 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 2: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) 3: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: AhfktM33Vjxcywj2x9O4A/NfLS0guE9Ujgmo2dnqY4s=) 4: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:2d:08:a3:4a:83:b5:61:1f:d7:9b:15:79:e4:61:d1:58:89:c9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Sep 21 05:08:08 2026 GMT Not After : Sep 22 06:22:08 2026 GMT Subject: CN=82F76A34FA88CF733C3BCF1E0F3C2E2E3330F701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5c:e0:ef:23:02:ee:36:65:fd:0b:52:98:10: 76:93:b2:d4:86:a3:e5:7e:5e:8d:2a:20:81:53:cf: 53:23:16:a6:40:a9:50:9e:70:a0:f6:24:bb:1a:ca: 60:d3:9c:4d:c3:8d:af:2b:f9:97:45:39:cd:3f:2d: b7:73:54:12:85:17:58:b6:7c:9f:8d:04:a3:84:20: e6:bc:a0:38:cd:9f:db:51:9c:37:35:3f:0a:0e:1b: a6:25:ae:c4:e5:73:06:b4:d0:36:f2:42:47:7e:d3: d2:2e:ba:57:7b:df:db:f3:8b:fc:ba:42:db:64:cb: 8b:7b:c9:73:4d:c1:87:e4:06:0e:bb:37:26:3e:d7: d9:97:65:31:bf:4d:39:ba:1f:b2:61:db:62:1f:e1: 2e:c2:9f:8e:5d:7d:92:3a:a2:4e:09:c7:9e:4d:8b: 54:5f:dc:7f:01:ae:ca:a3:67:05:b7:d5:ce:7d:15: dc:db:25:0a:99:a0:5c:49:b1:a7:35:ab:4f:04:ee: d0:ab:b8:bd:6f:6e:f5:bd:db:b0:c3:8f:32:0a:8a: 28:36:1c:ce:4d:55:70:cc:ee:eb:ec:71:4a:8f:82: 41:81:39:32:12:7e:d2:a9:a4:3e:02:9d:e7:52:4c: 53:84:b9:ec:f1:f8:d2:0b:bb:a7:a3:23:dd:7c:1f: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F7:6A:34:FA:88:CF:73:3C:3B:CF:1E:0F:3C:2E:2E:33:30:F7:01 X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6f:8f:bb:41:ad:a6:2b:8c:41:7d:4e:0d:a2:fe:c2:a0:46: b2:f1:f3:f9:ce:83:87:44:3a:18:18:8c:c6:57:7c:2f:0a:1a: 0b:b4:cb:62:8b:47:3d:40:2c:4f:00:b6:3e:8b:ac:5c:41:9e: 16:be:1f:c0:cb:0a:c8:0d:38:49:43:cc:d8:6c:40:d2:d6:8d: 56:ee:88:55:c1:91:41:ad:8e:be:c8:3c:6e:5e:e9:6c:ba:23: 8f:a3:cc:9e:59:05:05:76:03:3a:ea:c1:34:62:fa:a1:da:38: df:eb:49:c6:71:82:2c:95:ac:37:a8:76:5d:ee:8a:52:a2:d8: 91:0f:f5:d8:0e:64:e2:11:71:a7:d1:88:a0:8c:0b:47:76:38: 11:55:dc:7f:fc:c1:27:aa:1b:06:fa:43:53:b9:97:9a:e4:a3: e7:44:32:f9:cb:9d:cf:dd:32:2d:db:13:8e:c6:0c:71:a6:d5: 5c:26:9d:b9:03:3a:55:13:a6:4d:7a:b4:e9:af:c7:18:2b:66: 6a:84:20:dd:ea:97:35:70:41:8a:52:4a:ba:37:18:5d:73:ee: 50:9a:f3:22:5e:3d:32:64:22:0e:17:87:a1:ad:a6:96:c7:79: c7:1b:cb:a2:01:c6:91:38:30:e0:2e:74:41:02:35:7e:36:44: 08:6b:d5:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKy0Io0qDtWEf15sVeeRh0ViJyTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA5MjEwNTA4MDhaFw0yNjA5MjIwNjIyMDhaMDMxMTAvBgNV BAMTKDgyRjc2QTM0RkE4OENGNzMzQzNCQ0YxRTBGM0MyRTJFMzMzMEY3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXODvIwLuNmX9C1KYEHaTstSG o+V+Xo0qIIFTz1MjFqZAqVCecKD2JLsaymDTnE3Dja8r+ZdFOc0/LbdzVBKFF1i2 fJ+NBKOEIOa8oDjNn9tRnDc1PwoOG6YlrsTlcwa00DbyQkd+09Iuuld739vzi/y6 Qttky4t7yXNNwYfkBg67NyY+19mXZTG/TTm6H7Jh22If4S7Cn45dfZI6ok4Jx55N i1Rf3H8BrsqjZwW31c59FdzbJQqZoFxJsac1q08E7tCruL1vbvW927DDjzIKiig2 HM5NVXDM7uvscUqPgkGBOTISftKppD4CnedSTFOEuezx+NILu6ejI918Hyt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvdqNPqIz3M8O88eDzwuLjMw9wEwHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtvj7tBraYrjEF9Tg2i/sKgRrLx8/nOg4dE OhgYjMZXfC8KGgu0y2KLRz1ALE8Atj6LrFxBnha+H8DLCsgNOElDzNhsQNLWjVbu iFXBkUGtjr7IPG5e6Wy6I4+jzJ5ZBQV2AzrqwTRi+qHaON/rScZxgiyVrDeodl3u ilKi2JEP9dgOZOIRcafRiKCMC0d2OBFV3H/8wSeqGwb6Q1O5l5rko+dEMvnLnc/d Mi3bE47GDHGm1VwmnbkDOlUTpk16tOmvxxgrZmqEIN3qlzVwQYpSSro3GF1z7lCa 8yJePTJkIg4Xh6GtppbHeccby6IBxpE4MOAudEECNX42RAhr1Qw= -----END CERTIFICATE-----Generated at Mon Sep 21 09:08:42 2026 by rpki-client