$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: Sqwsfc/p3qHriBbFp60fDxf8aIkbX3P37o0SFIXtceY= Subject key identifier: F5:7F:98:4A:31:3A:AD:C8:90:AA:35:B7:F1:79:8A:58:9F:62:B0:E7 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 63B31DD58FF500A9557D5BC8B143C26EE76DA0FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 15:53:54 +0000 Manifest this update: Sat 13 Jun 2026 15:48:54 +0000 Manifest next update: Sun 14 Jun 2026 16:41:54 +0000 Files and hashes: 1: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) 2: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 3: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 4: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 5: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 6: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 7: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) 8: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 9: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 10: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 11: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: CuhRuUJHIz7TeQO2564og7mLSQqzF0rYb99riAICa3A=) 12: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 13: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 14: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b3:1d:d5:8f:f5:00:a9:55:7d:5b:c8:b1:43:c2:6e:e7:6d:a0:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Jun 13 15:48:54 2026 GMT Not After : Jun 14 16:41:54 2026 GMT Subject: CN=F57F984A313AADC890AA35B7F1798A589F62B0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f2:05:9e:f6:d3:02:73:ba:58:b2:e3:52:6f: dd:79:76:4f:6e:68:b8:a6:3c:dd:8a:14:a9:54:dd: 45:d0:34:af:04:09:1b:d8:ef:79:26:ff:fe:1f:d8: 8f:f8:1c:bb:ac:94:24:e1:ef:9f:40:e5:ba:c2:b3: f3:d6:4f:30:72:1a:db:80:d8:e8:d9:ae:e9:d8:e1: ca:2c:c4:cb:75:74:d0:9c:39:49:cb:a1:13:74:5f: 6b:08:d3:f9:d0:9c:90:97:14:8b:66:45:5f:ee:16: 0f:e2:1a:fd:e4:5b:b3:9a:69:da:1d:2c:7e:39:8d: d1:99:b7:a7:35:11:52:b3:9b:99:67:8f:f1:3a:b1: b6:bb:ae:52:e6:23:61:90:ab:25:2f:54:49:1a:6e: 24:86:ac:cb:02:1a:c3:82:6d:95:ab:7d:e0:55:e8: 01:09:5c:4e:87:a4:12:52:89:ae:14:1f:f7:03:6f: cd:c2:0e:f8:03:62:d2:22:7c:4a:8f:fb:bc:26:8d: 5b:cd:6d:c9:01:ee:45:6a:6d:d7:a2:ae:bc:40:be: e0:df:a3:1b:f9:53:e3:6a:34:83:b9:48:89:39:57: bd:4e:9a:0c:00:af:78:fd:5d:06:08:2e:1f:f6:36: d2:92:f2:d0:a3:a2:db:0b:e1:9a:4a:68:18:f9:02: 8c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7F:98:4A:31:3A:AD:C8:90:AA:35:B7:F1:79:8A:58:9F:62:B0:E7 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:4d:30:da:40:6c:5c:a1:6c:45:23:ef:8b:ef:21:bc:0d:8e: 61:bc:30:47:cb:2d:4e:b8:96:49:7d:e9:0a:a4:31:ed:fa:07: 37:74:5c:eb:e9:67:68:1d:a9:f3:03:c8:06:34:0f:75:b7:3c: 5c:f3:c6:f6:7a:33:89:2d:36:4a:80:1c:65:f1:ce:a2:90:9e: 0e:29:4a:bd:29:6f:4b:60:26:52:b0:91:4b:6d:45:83:d0:3e: 1b:e3:ac:31:74:b5:39:0d:20:02:29:4a:0a:24:15:f9:86:0f: 79:40:2e:17:90:a4:bb:4b:d6:bf:3c:be:85:fa:c0:9d:6d:2f: 43:6f:25:83:be:25:7b:1a:0f:dc:3d:6d:05:51:2b:d0:82:4b: 85:99:f7:db:8b:7e:57:63:1b:77:23:fe:36:e7:15:31:34:35: 14:18:ca:b2:c6:65:38:20:a4:a9:e0:01:9f:79:05:6c:35:ed: 88:42:74:ef:ee:2e:ec:88:12:a8:98:a4:8a:74:d9:ef:7d:e9: 00:bf:1c:db:e8:85:25:85:07:02:8a:a3:51:79:ce:2e:d5:cf: 6e:44:99:f4:0f:00:90:31:28:d7:c4:9c:44:cc:70:94:45:b1: df:9d:60:a5:45:90:ea:cd:0a:74:5a:c1:92:63:db:80:74:04: 74:5d:c0:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7Md1Y/1AKlVfVvIsUPCbudtoPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA2MTMxNTQ4NTRaFw0yNjA2MTQxNjQxNTRaMDMxMTAvBgNV BAMTKEY1N0Y5ODRBMzEzQUFEQzg5MEFBMzVCN0YxNzk4QTU4OUY2MkIwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa8gWe9tMCc7pYsuNSb915dk9u aLimPN2KFKlU3UXQNK8ECRvY73km//4f2I/4HLuslCTh759A5brCs/PWTzByGtuA 2OjZrunY4cosxMt1dNCcOUnLoRN0X2sI0/nQnJCXFItmRV/uFg/iGv3kW7Oaadod LH45jdGZt6c1EVKzm5lnj/E6sba7rlLmI2GQqyUvVEkabiSGrMsCGsOCbZWrfeBV 6AEJXE6HpBJSia4UH/cDb83CDvgDYtIifEqP+7wmjVvNbckB7kVqbdeirrxAvuDf oxv5U+NqNIO5SIk5V71OmgwAr3j9XQYILh/2NtKS8tCjotsL4ZpKaBj5AoyfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9X+YSjE6rciQqjW38XmKWJ9isOcwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBNMNpAbFyhbEUj74vvIbwNjmG8MEfLLU64 lkl96QqkMe36Bzd0XOvpZ2gdqfMDyAY0D3W3PFzzxvZ6M4ktNkqAHGXxzqKQng4p Sr0pb0tgJlKwkUttRYPQPhvjrDF0tTkNIAIpSgokFfmGD3lALheQpLtL1r88voX6 wJ1tL0NvJYO+JXsaD9w9bQVRK9CCS4WZ99uLfldjG3cj/jbnFTE0NRQYyrLGZTgg pKngAZ95BWw17YhCdO/uLuyIEqiYpIp02e996QC/HNvohSWFBwKKo1F5zi7Vz25E mfQPAJAxKNfEnETMcJRFsd+dYKVFkOrNCnRawZJj24B0BHRdwCA= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:41 2026 by rpki-client