$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: rxq2FXfaBy8znZlIVsA71jNpXijg4n7ZkTnHQ7d+L7M= Subject key identifier: 2A:84:A3:A6:47:EB:EA:4A:B3:25:8D:14:CD:F2:AF:84:53:EC:40:F6 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 2889F560B860BC9282CDD669B983E7728DDC6E30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 02:08:44 +0000 Manifest this update: Wed 29 Jul 2026 02:03:44 +0000 Manifest next update: Thu 30 Jul 2026 05:14:44 +0000 Files and hashes: 1: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 2: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 3: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: Ak/00n/6rKL2puv/yJlFrl0oMnDwhSTcqgvWAdbMvgU=) 4: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 5: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 6: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 7: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 8: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) 9: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 10: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 11: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 12: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 13: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) 14: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:89:f5:60:b8:60:bc:92:82:cd:d6:69:b9:83:e7:72:8d:dc:6e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Jul 29 02:03:44 2026 GMT Not After : Jul 30 05:14:44 2026 GMT Subject: CN=2A84A3A647EBEA4AB3258D14CDF2AF8453EC40F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:e2:fc:45:11:73:00:e9:73:ae:6c:bb:bf: b7:c2:3f:b2:46:30:78:9c:a4:11:22:2e:12:49:96: b2:1a:de:60:19:cc:5f:17:bb:5d:26:16:35:55:4c: 74:7c:94:63:2b:ce:ef:4e:52:94:6f:97:35:a3:9d: 8c:69:b3:17:90:f4:62:1f:c1:69:50:3a:cd:39:06: fa:62:16:e5:e0:f3:1d:4d:eb:e8:2b:d7:9a:69:75: 97:0e:13:ec:b4:11:49:43:12:97:02:3d:74:10:c8: 67:ad:cd:6e:89:f8:7f:e4:1f:5a:29:9a:3e:46:d0: 06:f2:21:28:01:a7:df:39:bd:0d:e3:02:72:41:97: 31:71:6a:4a:9b:a1:fb:2a:95:68:c2:c4:98:ed:c0: 8e:4d:e9:a4:8f:c3:44:ca:08:9d:b4:60:cc:af:a3: b2:4c:7c:f0:4a:d4:03:1e:40:16:18:96:00:8f:a6: fd:b9:7e:b9:8e:1a:ca:0c:8d:cd:1b:df:10:b1:b9: 54:75:ca:fd:72:2d:5c:75:52:2e:20:e5:df:de:5d: 05:1e:51:d0:ef:dc:18:c3:72:2c:42:83:1a:e8:f3: 8e:31:3f:a9:2c:11:8e:9a:94:95:ec:e8:d8:ef:c6: 4c:5e:10:20:32:f2:5f:89:f5:52:3c:d6:90:b5:0b: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:84:A3:A6:47:EB:EA:4A:B3:25:8D:14:CD:F2:AF:84:53:EC:40:F6 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:34:bf:b9:d8:b9:39:7b:60:1e:a3:d6:5f:f3:53:46:a9:b9: af:13:1c:3a:0d:89:f0:87:20:78:0b:9e:6b:39:21:0d:9f:9f: d5:36:e9:67:d8:1c:97:c3:05:cf:66:74:e3:2b:7e:00:b4:4c: 72:f1:db:4f:e6:e3:13:d6:ee:6a:eb:49:d2:7b:12:9a:9b:0a: 72:e7:ff:e2:5a:ac:2e:fe:2d:cb:3c:8d:2c:28:17:da:1e:9a: 70:32:bc:e5:af:d2:15:7f:b4:58:f8:ea:89:35:39:2d:99:31: 3f:67:a7:a2:2c:9a:e4:11:50:a3:a5:0c:03:30:28:a2:63:30: de:01:18:38:01:a4:12:11:f5:5b:bc:5f:be:28:3e:9e:63:e8: 9c:2a:8d:aa:ca:63:f2:98:c3:79:e3:04:1d:fc:e3:bb:d9:29: d2:40:b9:d9:b8:d1:8c:9e:f1:2a:54:be:79:97:32:97:ee:6e: 0a:6b:45:6c:77:be:87:1f:09:9a:f3:61:b9:5b:49:af:93:97: 42:00:10:c3:cc:d4:ef:bb:f7:49:ce:5a:7c:ba:3f:30:40:2b: ad:0f:59:1a:16:4f:bb:50:1c:7b:7e:84:00:82:9b:f3:ae:a3: b8:58:00:ec:ea:c2:80:aa:f7:6d:f9:d6:de:3e:89:c5:3b:81: 8e:0f:c4:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIn1YLhgvJKCzdZpuYPnco3cbjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA3MjkwMjAzNDRaFw0yNjA3MzAwNTE0NDRaMDMxMTAvBgNV BAMTKDJBODRBM0E2NDdFQkVBNEFCMzI1OEQxNENERjJBRjg0NTNFQzQwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChieL8RRFzAOlzrmy7v7fCP7JG MHicpBEiLhJJlrIa3mAZzF8Xu10mFjVVTHR8lGMrzu9OUpRvlzWjnYxpsxeQ9GIf wWlQOs05BvpiFuXg8x1N6+gr15ppdZcOE+y0EUlDEpcCPXQQyGetzW6J+H/kH1op mj5G0AbyISgBp985vQ3jAnJBlzFxakqbofsqlWjCxJjtwI5N6aSPw0TKCJ20YMyv o7JMfPBK1AMeQBYYlgCPpv25frmOGsoMjc0b3xCxuVR1yv1yLVx1Ui4g5d/eXQUe UdDv3BjDcixCgxro844xP6ksEY6alJXs6NjvxkxeECAy8l+J9VI81pC1CxBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKoSjpkfr6kqzJY0UzfKvhFPsQPYwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE0v7nYuTl7YB6j1l/zU0apua8THDoNifCH IHgLnms5IQ2fn9U26WfYHJfDBc9mdOMrfgC0THLx20/m4xPW7mrrSdJ7EpqbCnLn /+JarC7+Lcs8jSwoF9oemnAyvOWv0hV/tFj46ok1OS2ZMT9np6IsmuQRUKOlDAMw KKJjMN4BGDgBpBIR9Vu8X74oPp5j6JwqjarKY/KYw3njBB3847vZKdJAudm40Yye 8SpUvnmXMpfubgprRWx3vocfCZrzYblbSa+Tl0IAEMPM1O+790nOWny6PzBAK60P WRoWT7tQHHt+hACCm/Ouo7hYAOzqwoCq92351t4+icU7gY4PxH0= -----END CERTIFICATE-----Generated at Wed Jul 29 14:08:05 2026 by rpki-client