$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: UP9uhtW0GEmVHDVaV4RFUo9w1j3yAqC6PRWMoISBx1o= Subject key identifier: 34:3F:C0:2D:C3:20:D0:3D:74:1D:7E:3B:DE:E3:C5:81:A3:E2:5E:F1 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 7FEE3151F0380770F36C3405554E1E9344C17B91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: BB Signing time: Sat 19 Sep 2026 19:36:40 +0000 Manifest this update: Sat 19 Sep 2026 19:31:40 +0000 Manifest next update: Sun 20 Sep 2026 22:37:40 +0000 Files and hashes: 1: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 2: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: uPUA9mKTUlD8oBggJ0Pm++YrnSygTAVq8yZc8r9sQ70=) 3: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 4: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 5: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 6: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 7: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 8: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) 9: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 10: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 11: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 12: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) 13: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 14: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Sep 2026 22:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ee:31:51:f0:38:07:70:f3:6c:34:05:55:4e:1e:93:44:c1:7b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Sep 19 19:31:40 2026 GMT Not After : Sep 20 22:37:40 2026 GMT Subject: CN=343FC02DC320D03D741D7E3BDEE3C581A3E25EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:ac:45:38:a4:23:09:18:10:e1:a5:f0:d3: f2:df:cb:fd:0d:86:4b:19:94:06:48:be:30:00:19: bf:a2:e5:bd:1d:60:b7:90:ec:2f:ee:89:34:e0:52: 5f:79:71:ae:e3:9e:91:8f:2c:ad:f6:b2:34:6d:3f: 81:c8:95:5c:28:45:b4:df:fc:d2:b0:95:61:84:6c: 04:04:d0:15:39:34:b9:20:9c:59:4a:7a:e5:03:cf: 47:e5:b8:b1:c8:1b:64:ba:21:78:67:83:b1:f0:af: d5:ee:0d:50:3a:b6:4e:b1:bf:3a:07:26:8f:74:37: 02:64:45:f2:43:58:97:53:b7:73:a8:8f:9b:cf:d1: fa:ad:9b:fc:6b:6b:ee:6e:0f:90:69:3a:cd:1c:fe: 3b:f3:e6:11:9e:e1:ac:a3:df:83:a5:57:6b:e8:0c: 60:03:90:56:16:20:3b:3e:0c:d4:8f:1f:95:7c:6f: 7a:b2:3d:98:ea:7a:53:fd:7e:34:cb:94:ba:39:03: 57:db:fc:56:49:99:98:93:8a:4d:14:4f:bf:8f:66: 00:37:42:97:9b:e5:81:37:b5:7d:99:00:07:bd:2c: 7a:6b:94:fc:7b:9b:c1:5e:93:a3:7d:3a:b7:a0:e9: 4d:3f:1a:c8:34:f3:90:75:df:86:c4:28:f5:bd:7c: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3F:C0:2D:C3:20:D0:3D:74:1D:7E:3B:DE:E3:C5:81:A3:E2:5E:F1 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:7c:d0:0c:49:ae:90:34:65:64:c3:ff:60:55:d5:d9:41:0a: 66:20:1e:35:de:76:20:60:ec:d6:bc:09:aa:e3:fa:0c:8e:c7: 30:60:6f:15:31:97:f6:ff:b0:f4:30:55:cc:f1:37:d2:e5:63: 2a:ac:35:7e:c9:13:82:e7:18:84:3d:15:a9:a8:d2:50:43:42: 48:e0:af:7a:78:d9:db:cb:c6:e4:98:c1:83:7c:ce:39:c1:a6: fc:e5:c4:24:10:fd:87:fe:6c:27:8b:b7:9e:2f:8c:50:20:7c: 09:32:a5:81:b9:5f:cb:7b:54:99:87:86:ad:20:22:60:46:69: ef:66:f7:de:5e:a0:ad:a8:1b:a2:3d:e0:a0:ae:89:f8:4d:92: f5:4d:81:a0:28:9b:36:9a:df:71:3a:c1:57:88:2e:e1:c1:45: ae:cf:59:4c:c3:cf:09:05:77:20:aa:67:9d:23:02:01:5b:85: 97:11:14:a7:87:e5:f0:de:30:f0:51:75:da:98:1b:23:f9:6d: eb:23:04:3f:29:aa:1b:e7:10:ca:bc:fd:49:01:25:bb:66:68: 4a:97:6d:63:9d:39:ec:69:e1:2c:40:7f:17:66:a9:16:c7:9f: 02:2a:ad:c2:2c:80:92:cd:98:70:07:71:9c:86:62:35:22:db: e1:4d:93:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf+4xUfA4B3DzbDQFVU4ek0TBe5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA5MTkxOTMxNDBaFw0yNjA5MjAyMjM3NDBaMDMxMTAvBgNV BAMTKDM0M0ZDMDJEQzMyMEQwM0Q3NDFEN0UzQkRFRTNDNTgxQTNFMjVFRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxe6xFOKQjCRgQ4aXw0/Lfy/0N hksZlAZIvjAAGb+i5b0dYLeQ7C/uiTTgUl95ca7jnpGPLK32sjRtP4HIlVwoRbTf /NKwlWGEbAQE0BU5NLkgnFlKeuUDz0fluLHIG2S6IXhng7Hwr9XuDVA6tk6xvzoH Jo90NwJkRfJDWJdTt3Ooj5vP0fqtm/xra+5uD5BpOs0c/jvz5hGe4ayj34OlV2vo DGADkFYWIDs+DNSPH5V8b3qyPZjqelP9fjTLlLo5A1fb/FZJmZiTik0UT7+PZgA3 Qpeb5YE3tX2ZAAe9LHprlPx7m8Fek6N9Oreg6U0/Gsg085B134bEKPW9fH7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUND/ALcMg0D10HX473uPFgaPiXvEwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK580AxJrpA0ZWTD/2BV1dlBCmYgHjXediBg 7Na8Carj+gyOxzBgbxUxl/b/sPQwVczxN9LlYyqsNX7JE4LnGIQ9Famo0lBDQkjg r3p42dvLxuSYwYN8zjnBpvzlxCQQ/Yf+bCeLt54vjFAgfAkypYG5X8t7VJmHhq0g ImBGae9m995eoK2oG6I94KCuifhNkvVNgaAomzaa33E6wVeILuHBRa7PWUzDzwkF dyCqZ50jAgFbhZcRFKeH5fDeMPBRddqYGyP5besjBD8pqhvnEMq8/UkBJbtmaEqX bWOdOexp4SxAfxdmqRbHnwIqrcIsgJLNmHAHcZyGYjUi2+FNk1s= -----END CERTIFICATE-----Generated at Sun Sep 20 16:47:41 2026 by rpki-client