$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: p5C5xn6MMc3hhXEh7KzO3sqU8q/EhzOXo9Vk8DVbQj8= Subject key identifier: CC:A3:0F:5C:48:44:E5:F2:30:B9:EE:AB:5E:47:6C:1A:C3:C7:7B:71 Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 7BE73C7597A1B962CBCE528833591036F7D20817 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 19:43:03 +0000 Manifest this update: Tue 16 Jun 2026 19:38:03 +0000 Manifest next update: Wed 17 Jun 2026 21:57:03 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 2: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: KU83SC5WD55fGDuNCPqudLuQ4GbZ/FT5E/PwGluYAM8=) 3: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) 4: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e7:3c:75:97:a1:b9:62:cb:ce:52:88:33:59:10:36:f7:d2:08:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Jun 16 19:38:03 2026 GMT Not After : Jun 17 21:57:03 2026 GMT Subject: CN=CCA30F5C4844E5F230B9EEAB5E476C1AC3C77B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:75:f5:1a:c1:03:52:93:f3:95:b0:c2:1d: fe:85:1f:f8:d0:a5:e4:77:72:ed:cd:06:58:76:e8: 4a:17:78:2e:fc:8d:ee:9f:ec:92:73:81:96:89:0c: 2f:0a:a4:bd:95:13:3f:6d:af:3b:77:bc:4c:91:51: 2f:0d:34:6d:23:cf:61:7a:0d:fe:88:00:cf:01:f3: 0f:bf:12:b8:4e:82:bf:4d:6d:dc:3f:58:c3:07:5e: c8:72:b0:a9:05:fc:b9:83:15:cd:23:26:f6:c0:5f: de:7e:21:00:4a:57:4c:51:e8:db:2a:97:79:95:1a: f3:a8:26:de:e5:94:f5:42:8c:73:b3:d9:96:69:9a: 11:5e:9d:77:df:ee:b8:7e:49:a5:65:03:0d:2a:d4: bc:a5:ea:bd:7b:fe:d8:e2:64:52:e6:c4:b9:55:cc: 8d:7f:64:f7:10:c5:89:12:11:25:84:2d:ae:8d:62: e8:27:40:4f:4e:fd:33:25:43:ca:55:b2:ed:32:e6: fe:67:aa:3b:9b:ae:fb:0d:1a:30:77:a8:f9:d8:e1: 29:b6:97:39:27:9b:30:08:e2:e5:dc:3f:12:29:ea: e7:f8:01:73:54:ed:32:85:91:8f:22:81:ca:26:7d: c2:5d:5f:6c:86:62:70:e2:2c:42:34:61:b6:cf:45: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A3:0F:5C:48:44:E5:F2:30:B9:EE:AB:5E:47:6C:1A:C3:C7:7B:71 X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c7:fa:d0:67:38:7c:15:cd:4e:12:8d:02:0c:35:19:3d:9a: 46:3c:8e:c3:44:eb:e2:5d:6d:d8:4b:45:e5:a0:cb:0c:29:8a: c0:8b:8c:02:36:ad:22:ab:cc:79:c9:6d:bb:43:85:5e:5d:84: e3:59:b8:19:79:95:96:29:19:79:a1:19:f1:88:29:18:cf:1e: 24:d1:34:f6:ff:0e:2b:82:a2:4d:15:bb:fa:9f:86:d5:8f:65: f2:4e:5e:6f:4b:dd:14:1e:aa:72:c1:68:b3:2a:fe:a4:32:a3: 83:1c:21:8d:de:d8:82:38:9b:39:66:92:b1:1d:1a:04:ac:9f: b2:44:af:04:d0:98:8d:25:16:5d:85:5b:48:60:cd:0d:cf:97: 65:2a:9e:23:c0:26:88:25:e0:fb:4a:2b:37:b6:27:4e:31:92: f9:23:6d:0b:11:78:00:11:34:eb:56:99:43:08:03:83:a5:ab: 70:5b:1e:7c:f8:ec:bb:d0:37:83:32:6e:23:fb:18:ee:4c:ce: 4b:c9:33:40:2e:64:7e:88:93:55:e5:9c:be:88:4c:86:13:76: b6:c4:4c:d3:c9:9a:87:85:7d:16:6f:0f:55:36:33:5d:d3:e9: 72:c9:4e:98:6b:20:66:49:c2:00:6d:aa:33:05:00:b4:ed:5f: e1:f1:05:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+c8dZehuWLLzlKIM1kQNvfSCBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA2MTYxOTM4MDNaFw0yNjA2MTcyMTU3MDNaMDMxMTAvBgNV BAMTKENDQTMwRjVDNDg0NEU1RjIzMEI5RUVBQjVFNDc2QzFBQzNDNzdCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZHX1GsEDUpPzlbDCHf6FH/jQ peR3cu3NBlh26EoXeC78je6f7JJzgZaJDC8KpL2VEz9trzt3vEyRUS8NNG0jz2F6 Df6IAM8B8w+/ErhOgr9Nbdw/WMMHXshysKkF/LmDFc0jJvbAX95+IQBKV0xR6Nsq l3mVGvOoJt7llPVCjHOz2ZZpmhFenXff7rh+SaVlAw0q1Lyl6r17/tjiZFLmxLlV zI1/ZPcQxYkSESWELa6NYugnQE9O/TMlQ8pVsu0y5v5nqjubrvsNGjB3qPnY4Sm2 lzknmzAI4uXcPxIp6uf4AXNU7TKFkY8igcomfcJdX2yGYnDiLEI0YbbPRejrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzKMPXEhE5fIwue6rXkdsGsPHe3EwHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHH+tBnOHwVzU4SjQIMNRk9mkY8jsNE6+Jd bdhLReWgywwpisCLjAI2rSKrzHnJbbtDhV5dhONZuBl5lZYpGXmhGfGIKRjPHiTR NPb/DiuCok0Vu/qfhtWPZfJOXm9L3RQeqnLBaLMq/qQyo4McIY3e2II4mzlmkrEd GgSsn7JErwTQmI0lFl2FW0hgzQ3Pl2UqniPAJogl4PtKKze2J04xkvkjbQsReAAR NOtWmUMIA4Olq3BbHnz47LvQN4MybiP7GO5MzkvJM0AuZH6Ik1XlnL6ITIYTdrbE TNPJmoeFfRZvD1U2M13T6XLJTphrIGZJwgBtqjMFALTtX+HxBa8= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:34 2026 by rpki-client