$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json) Hash identifier: fY/0b/CZ1rtl1Rc3AKNSeexNlco9QydNgmnBezC0At8= Subject key identifier: 05:43:AB:CB:2D:C9:8A:78:4E:DD:8C:FA:E3:BB:00:2C:B3:DB:69:8F Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA Certificate serial: 781B322B0E102156B7137921611371CDB0D9ECAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft Manifest number: C2 Signing time: Sat 26 Sep 2026 01:42:19 +0000 Manifest this update: Sat 26 Sep 2026 01:37:19 +0000 Manifest next update: Sun 27 Sep 2026 03:33:19 +0000 Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: OvH/z14ikCmjMxqFcHmyD43QI5Pm6ji5cHCI1R2zIbc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1b:32:2b:0e:10:21:56:b7:13:79:21:61:13:71:cd:b0:d9:ec:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA Validity Not Before: Sep 26 01:37:19 2026 GMT Not After : Sep 27 03:33:19 2026 GMT Subject: CN=0543ABCB2DC98A784EDD8CFAE3BB002CB3DB698F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:c9:1d:42:82:a9:9f:a6:29:ef:ce:83:ed: 55:e2:85:8a:d9:2e:72:b2:ce:36:ea:52:fd:e7:23: 50:e4:a1:6d:d2:a2:c5:0d:c8:50:cf:49:eb:25:c1: 6a:52:7b:e4:33:aa:80:ce:af:78:ee:81:16:21:9b: 6f:8a:6a:00:54:e5:9c:ce:9a:c6:22:f3:e5:fd:ab: 81:5b:55:42:8d:cc:62:6c:8d:98:a0:28:4c:86:b2: a7:9b:f0:9e:5e:dc:07:82:2b:be:e6:27:83:e4:dd: 98:8d:d8:ce:5d:87:d0:e5:c4:59:9b:03:84:8b:ef: 93:dd:f5:5a:66:57:88:96:cc:27:b2:d9:ec:1d:96: 24:a8:b8:04:9d:3e:3d:84:c1:0d:79:d4:58:e7:b8: 3d:17:b7:91:80:7c:35:70:cf:48:a8:95:90:46:5b: e3:dd:ad:1d:4a:a0:b8:51:c6:84:0b:d8:d4:41:dc: 17:85:62:a4:4b:3e:d8:85:a0:5a:4a:5a:c6:03:ba: 6f:f7:73:12:a4:ef:87:ec:cc:db:ee:4e:c1:8c:b1: ab:4f:aa:41:a6:57:17:37:6d:44:25:f1:b0:56:65: 59:2d:d8:32:67:71:e4:19:90:4c:bc:32:99:c1:e6: 98:45:f8:24:05:64:3f:e0:8d:9d:73:58:03:a5:73: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:43:AB:CB:2D:C9:8A:78:4E:DD:8C:FA:E3:BB:00:2C:B3:DB:69:8F X509v3 Authority Key Identifier: keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:1c:1c:62:94:8e:77:9a:c5:f4:c2:b5:0c:7d:bc:4f:c2:79: f6:03:28:c1:d9:3f:29:75:cd:92:ae:46:75:ea:e5:e3:90:72: 6f:c4:87:d3:51:ff:94:dd:ba:2e:aa:c3:c9:5e:ce:da:71:be: 56:5c:a4:62:a8:6b:b8:e8:71:d6:ed:f6:2c:63:51:a1:7a:3c: e9:1b:91:9d:b8:78:07:fa:42:a6:d6:c3:54:6a:2d:dc:ab:ce: 4a:ea:18:fc:94:7b:e5:e3:0b:10:de:ea:9a:17:93:c5:36:8e: 51:e9:d1:78:03:c9:bb:b3:ba:0a:09:b9:ca:c9:d5:00:ac:60: d6:fb:67:0e:f2:8d:51:20:55:1d:ed:56:1f:42:dc:12:eb:c9: 10:9e:35:7d:9a:54:1d:9c:7f:8f:ae:1c:4d:8d:bd:df:cc:c1: 28:e0:f1:63:f2:d3:a1:a9:aa:f0:4e:76:3d:67:8f:94:dd:7f: dd:38:d0:f2:96:cc:0d:ea:e5:72:d2:3c:6d:a1:b8:19:50:26: 94:d7:27:31:d6:e3:f4:4e:95:dc:22:35:09:f7:87:66:dc:7d: fe:5e:9d:7b:37:99:b5:2f:e6:8a:32:e5:5d:51:f4:d2:5f:b7: 64:43:a6:bb:ae:8b:74:8e:98:e5:c2:6b:86:61:04:cc:12:06: 2a:f2:9c:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBsyKw4QIVa3E3khYRNxzbDZ7KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgwODUx Njk4MDlCQTAeFw0yNjA5MjYwMTM3MTlaFw0yNjA5MjcwMzMzMTlaMDMxMTAvBgNV BAMTKDA1NDNBQkNCMkRDOThBNzg0RUREOENGQUUzQkIwMDJDQjNEQjY5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsRMkdQoKpn6Yp786D7VXihYrZ LnKyzjbqUv3nI1DkoW3SosUNyFDPSeslwWpSe+QzqoDOr3jugRYhm2+KagBU5ZzO msYi8+X9q4FbVUKNzGJsjZigKEyGsqeb8J5e3AeCK77mJ4Pk3ZiN2M5dh9DlxFmb A4SL75Pd9VpmV4iWzCey2ewdliSouASdPj2EwQ151FjnuD0Xt5GAfDVwz0iolZBG W+PdrR1KoLhRxoQL2NRB3BeFYqRLPtiFoFpKWsYDum/3cxKk74fszNvuTsGMsatP qkGmVxc3bUQl8bBWZVkt2DJnceQZkEy8MpnB5phF+CQFZD/gjZ1zWAOlc/oHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBUOryy3JinhO3Yz647sALLPbaY8wHwYDVR0j BBgwFoAUu9DNZDbKeTv/QzkiqMOAhRaYCbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiOTI2ZTAtNmM2Yi00ODU1LWE3NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQz NkNBNzkzQkZGNDMzOTIyQThDMzgwODUxNjk4MDlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQwQ0Q2NDM2Q0E3OTNCRkY0MzM5MjJBOEMzODA4NTE2OTgw OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgw ODUxNjk4MDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALccHGKUjneaxfTCtQx9vE/CefYDKMHZPyl1 zZKuRnXq5eOQcm/Eh9NR/5Tdui6qw8leztpxvlZcpGKoa7jocdbt9ixjUaF6POkb kZ24eAf6QqbWw1RqLdyrzkrqGPyUe+XjCxDe6poXk8U2jlHp0XgDybuzugoJucrJ 1QCsYNb7Zw7yjVEgVR3tVh9C3BLryRCeNX2aVB2cf4+uHE2Nvd/MwSjg8WPy06Gp qvBOdj1nj5Tdf9040PKWzA3q5XLSPG2huBlQJpTXJzHW4/ROldwiNQn3h2bcff5e nXs3mbUv5ooy5V1R9NJft2RDpruui3SOmOXCa4ZhBMwSBirynIQ= -----END CERTIFICATE-----Generated at Sat Sep 26 06:35:10 2026 by rpki-client