$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json) Hash identifier: o70P6ZSssQ5NYMqSd32bF/FouRKUYYVRA0TeKWoKnNs= Subject key identifier: 65:F3:5F:37:3B:47:20:40:18:F4:EB:3D:E3:1F:F0:2D:65:9F:44:A5 Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA Certificate serial: 085948B609E172703DBBB6EE7731FFED8EC2FC6F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft Manifest number: 73 Signing time: Tue 28 Jul 2026 11:41:14 +0000 Manifest this update: Tue 28 Jul 2026 11:36:14 +0000 Manifest next update: Wed 29 Jul 2026 15:38:14 +0000 Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: RDrpniDcvZMETllue+pjFPPQ5SzMoxHcJ3hQsetFfOU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:59:48:b6:09:e1:72:70:3d:bb:b6:ee:77:31:ff:ed:8e:c2:fc:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA Validity Not Before: Jul 28 11:36:14 2026 GMT Not After : Jul 29 15:38:14 2026 GMT Subject: CN=65F35F373B47204018F4EB3DE31FF02D659F44A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:46:b0:87:11:a6:7b:41:81:7f:a3:22:9f: 84:33:76:9e:a1:1b:a3:00:c2:14:8b:b9:2e:50:5a: 49:b9:d5:47:10:cd:2c:c2:43:b7:b8:cd:8f:8d:ea: 0f:81:c2:2e:3b:35:ca:bb:7e:1c:c2:6d:93:9b:52: 8b:db:c3:7b:5a:1c:93:d9:41:a6:ee:ac:53:fc:9d: a8:e2:57:21:f2:8e:8f:36:c3:ae:28:5d:af:45:9a: cf:30:1b:0c:d0:2b:6f:65:43:07:f7:e9:0f:c0:4a: ca:47:3c:da:74:74:44:c8:55:f8:56:77:cb:90:3e: bc:c9:d3:64:6d:a2:30:a6:09:60:53:63:5e:53:84: 5a:16:e7:7f:dc:af:7c:a3:16:ba:0d:88:8c:f1:dc: c5:c6:e5:a0:97:4d:a7:cb:6a:38:1b:d6:83:3f:d6: 29:44:b3:f3:46:92:f6:1c:25:71:b8:7c:d4:2d:72: 40:cf:6d:57:11:d7:46:9d:c4:ad:83:d9:eb:27:0f: 7f:2c:cd:65:3d:bb:52:a9:a3:29:e4:94:a6:4a:35: 74:69:1e:b2:fd:c9:6a:90:1f:f0:6d:f5:98:41:57: 7d:1e:d6:c4:d5:4b:9e:b6:5f:49:c3:55:2a:a7:34: 1a:a7:7f:2b:f5:ba:1a:3d:5f:94:96:c5:f6:40:ae: 83:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F3:5F:37:3B:47:20:40:18:F4:EB:3D:E3:1F:F0:2D:65:9F:44:A5 X509v3 Authority Key Identifier: keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f0:f5:87:d5:44:66:98:b3:76:52:72:7f:9e:fa:d9:35:8b: a4:db:ec:33:1f:14:68:d4:25:27:2c:3c:9d:1f:bc:47:23:f5: ae:7f:6d:02:42:92:63:a2:10:7b:af:cf:a2:c7:df:8e:3e:fe: 56:15:55:14:bd:8f:15:47:de:35:c0:8d:f2:0a:0e:c7:90:25: 00:d4:0e:4f:d8:1e:e5:aa:c7:c6:b5:2c:3d:cb:5e:ba:ce:f6: a4:f9:64:b2:64:0a:7e:e8:b1:75:2f:1c:38:79:03:8e:d7:81: 9f:fa:14:97:f3:5e:22:63:a3:66:3f:b6:85:80:b9:7a:38:32: 08:09:36:07:9d:7c:2e:4d:ac:de:b8:cc:d2:52:5c:41:ff:d8: 38:5a:a2:ed:a0:5b:ba:a5:14:0e:dc:f4:73:11:2e:53:4a:2f: ae:93:a8:ce:99:c7:9c:55:c7:80:8c:a2:75:95:7c:ed:ea:e2: 4a:86:b7:66:d9:2b:01:92:59:ba:4b:f5:a8:23:d7:0d:f0:68: 46:4a:00:52:86:65:45:d0:3d:6c:a8:67:41:a5:94:4a:d1:71: 0f:66:58:7b:15:9d:df:ca:70:2c:9a:aa:84:24:79:53:1c:33: 13:97:f1:79:c5:41:99:91:77:83:0c:be:df:70:fe:df:34:ed: e5:9e:18:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFlItgnhcnA9u7budzH/7Y7C/G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgwODUx Njk4MDlCQTAeFw0yNjA3MjgxMTM2MTRaFw0yNjA3MjkxNTM4MTRaMDMxMTAvBgNV BAMTKDY1RjM1RjM3M0I0NzIwNDAxOEY0RUIzREUzMUZGMDJENjU5RjQ0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnUawhxGme0GBf6Min4Qzdp6h G6MAwhSLuS5QWkm51UcQzSzCQ7e4zY+N6g+Bwi47Ncq7fhzCbZObUovbw3taHJPZ QaburFP8najiVyHyjo82w64oXa9Fms8wGwzQK29lQwf36Q/ASspHPNp0dETIVfhW d8uQPrzJ02RtojCmCWBTY15ThFoW53/cr3yjFroNiIzx3MXG5aCXTafLajgb1oM/ 1ilEs/NGkvYcJXG4fNQtckDPbVcR10adxK2D2esnD38szWU9u1KpoynklKZKNXRp HrL9yWqQH/Bt9ZhBV30e1sTVS562X0nDVSqnNBqnfyv1uho9X5SWxfZAroP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfNfNztHIEAY9Os94x/wLWWfRKUwHwYDVR0j BBgwFoAUu9DNZDbKeTv/QzkiqMOAhRaYCbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiOTI2ZTAtNmM2Yi00ODU1LWE3NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQz NkNBNzkzQkZGNDMzOTIyQThDMzgwODUxNjk4MDlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQwQ0Q2NDM2Q0E3OTNCRkY0MzM5MjJBOEMzODA4NTE2OTgw OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgw ODUxNjk4MDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATw9YfVRGaYs3ZScn+e+tk1i6Tb7DMfFGjU JScsPJ0fvEcj9a5/bQJCkmOiEHuvz6LH344+/lYVVRS9jxVH3jXAjfIKDseQJQDU Dk/YHuWqx8a1LD3LXrrO9qT5ZLJkCn7osXUvHDh5A47XgZ/6FJfzXiJjo2Y/toWA uXo4MggJNgedfC5NrN64zNJSXEH/2Dhaou2gW7qlFA7c9HMRLlNKL66TqM6Zx5xV x4CMonWVfO3q4kqGt2bZKwGSWbpL9agj1w3waEZKAFKGZUXQPWyoZ0GllErRcQ9m WHsVnd/KcCyaqoQkeVMcMxOX8XnFQZmRd4MMvt9w/t807eWeGIQ= -----END CERTIFICATE-----Generated at Tue Jul 28 19:55:46 2026 by rpki-client