$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: Wjd+ZYLk5+umh2uqpjZxE+qk4PSD+jc93cmTem1Tg/A= Subject key identifier: FA:9D:06:1A:D6:77:B4:F5:6B:8C:FD:84:8A:7D:C6:0C:91:E9:16:96 Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 4B65BF9614A91B0B9BCCEE944F1DB523DC8ADBF7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: FE Signing time: Mon 09 Nov 2026 23:09:42 +0000 Manifest this update: Mon 09 Nov 2026 23:04:42 +0000 Manifest next update: Tue 10 Nov 2026 23:53:42 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) 2: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 3: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: jO3qD2c47OKRqcOMSHxz4/msZk72rBwnARpxUnmFMkY=) 4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:bf:96:14:a9:1b:0b:9b:cc:ee:94:4f:1d:b5:23:dc:8a:db:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Nov 9 23:04:42 2026 GMT Not After : Nov 10 23:53:42 2026 GMT Subject: CN=FA9D061AD677B4F56B8CFD848A7DC60C91E91696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:51:5f:93:69:05:c9:dd:6e:af:91:48:b4: ad:a7:ca:7c:28:16:dc:4c:57:7e:6e:54:b0:b8:ea: e0:61:9c:47:36:38:1b:a3:6b:93:8b:5a:64:9d:01: fc:bd:38:66:8d:f5:51:d2:6f:e7:68:25:c7:17:c4: 61:be:63:28:93:71:18:00:2d:fb:8e:af:6d:70:5a: c9:34:4e:1c:3d:31:85:49:6f:dd:a2:71:18:58:f5: 2d:da:de:67:f3:54:5e:12:88:c0:54:91:26:1c:3f: 37:d8:0e:12:b7:5b:6c:7b:c2:87:67:a4:b6:0a:c4: ab:d4:27:2f:5b:75:46:38:4d:3e:70:65:08:d2:47: e5:08:d8:99:16:fa:0d:96:05:b2:a5:89:f6:5b:78: 46:2d:56:e8:a2:50:cc:de:21:10:35:8a:46:6e:e3: f9:5a:2c:07:13:2c:53:86:03:dc:3a:0d:68:bc:95: f7:9f:2a:70:b4:a4:87:70:ed:74:34:46:28:c4:8a: 23:b3:fc:3e:68:fa:53:da:b0:61:5f:2d:e9:e9:34: ce:68:9a:c6:9a:bd:69:f0:e9:d9:60:48:8d:0c:62: 34:97:3c:b9:da:1e:c8:05:2d:6f:42:41:76:79:82: ec:b9:4b:33:16:75:b3:35:89:75:64:42:f0:1a:b5: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9D:06:1A:D6:77:B4:F5:6B:8C:FD:84:8A:7D:C6:0C:91:E9:16:96 X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:7d:11:20:f3:48:3a:5f:d4:52:54:60:92:5e:b1:4e:79:ea: 26:9b:b6:33:7b:10:99:af:62:b1:e9:b4:e9:57:16:06:4b:2f: 04:c8:fa:0d:9d:52:b2:82:31:e3:a4:35:27:41:c2:cc:a3:26: 23:61:00:58:4c:99:22:33:73:9c:40:9e:17:76:e3:3c:9a:c6: 16:e2:d1:0b:50:48:84:7e:29:88:88:d6:11:a5:f1:ce:ad:85: c9:b5:e8:ac:40:fe:60:9e:63:67:b4:65:27:9f:e3:b1:4e:f7: ab:af:cb:df:41:c8:c7:ad:75:89:73:00:96:df:01:48:01:a6: 89:b9:a7:57:f9:98:70:42:11:2d:64:2a:b4:59:6d:53:cf:bd: f6:d3:4f:ae:14:be:b0:84:69:40:01:89:ab:e1:6e:e3:fc:2f: 9f:8f:0c:ab:5c:5f:df:c6:3b:4a:a7:02:03:64:74:17:99:56: 77:98:8c:5a:13:09:89:ec:d9:ce:09:92:2f:fa:0e:21:5a:84: 77:e3:d1:76:0f:13:f8:a5:cb:9b:26:74:0c:5a:01:30:9a:2e: d9:9b:16:d6:bb:9a:81:72:f2:93:d9:03:86:8a:fb:b3:61:45: 2b:e3:2d:ce:69:37:6c:78:96:88:7f:21:4f:26:9e:a2:57:57: ce:83:57:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2W/lhSpGwubzO6UTx21I9yK2/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjExMDkyMzA0NDJaFw0yNjExMTAyMzUzNDJaMDMxMTAvBgNV BAMTKEZBOUQwNjFBRDY3N0I0RjU2QjhDRkQ4NDhBN0RDNjBDOTFFOTE2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7VFfk2kFyd1ur5FItK2nynwo FtxMV35uVLC46uBhnEc2OBuja5OLWmSdAfy9OGaN9VHSb+doJccXxGG+YyiTcRgA LfuOr21wWsk0Thw9MYVJb92icRhY9S3a3mfzVF4SiMBUkSYcPzfYDhK3W2x7wodn pLYKxKvUJy9bdUY4TT5wZQjSR+UI2JkW+g2WBbKlifZbeEYtVuiiUMzeIRA1ikZu 4/laLAcTLFOGA9w6DWi8lfefKnC0pIdw7XQ0RijEiiOz/D5o+lPasGFfLenpNM5o msaavWnw6dlgSI0MYjSXPLnaHsgFLW9CQXZ5guy5SzMWdbM1iXVkQvAatXTlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+p0GGtZ3tPVrjP2Ein3GDJHpFpYwHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJ9ESDzSDpf1FJUYJJesU556iabtjN7EJmv YrHptOlXFgZLLwTI+g2dUrKCMeOkNSdBwsyjJiNhAFhMmSIzc5xAnhd24zyaxhbi 0QtQSIR+KYiI1hGl8c6thcm16KxA/mCeY2e0ZSef47FO96uvy99ByMetdYlzAJbf AUgBpom5p1f5mHBCES1kKrRZbVPPvfbTT64UvrCEaUABiavhbuP8L5+PDKtcX9/G O0qnAgNkdBeZVneYjFoTCYns2c4Jki/6DiFahHfj0XYPE/ily5smdAxaATCaLtmb Fta7moFy8pPZA4aK+7NhRSvjLc5pN2x4loh/IU8mnqJXV86DV1A= -----END CERTIFICATE-----Generated at Tue Nov 10 03:30:27 2026 by rpki-client