$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: V6hCAlQ5qYm+DODOAuTepyL1nWOqufq67uVZ4jI62EU= Subject key identifier: 1F:B1:17:1D:E9:9A:48:41:3C:57:E3:62:69:86:55:11:2C:38:1C:65 Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 4B6296CEFBF36563364E1D073972543EF2515C78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:27:46 +0000 Manifest this update: Wed 23 Sep 2026 09:22:46 +0000 Manifest next update: Thu 24 Sep 2026 10:04:46 +0000 Files and hashes: 1: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) 2: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: HUQsWTF9xU9/0A8dskF8W2zm5rnUM4ND/Om2zvjp9cc=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:62:96:ce:fb:f3:65:63:36:4e:1d:07:39:72:54:3e:f2:51:5c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Sep 23 09:22:46 2026 GMT Not After : Sep 24 10:04:46 2026 GMT Subject: CN=1FB1171DE99A48413C57E362698655112C381C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:ec:e9:75:df:53:80:e2:4f:6d:3e:fd:47: db:29:c7:8c:2b:22:24:c4:57:04:d0:cb:e2:9c:5b: 62:85:4d:37:bd:8f:31:4a:09:a4:ec:e5:b0:8a:eb: ed:51:29:6e:7f:15:95:72:ed:e7:95:55:f3:a7:5f: 87:be:08:64:e9:4b:15:e3:95:32:c6:ec:71:a8:dd: 4a:2c:28:75:ae:43:0b:35:48:1f:b8:04:7c:a2:c8: 55:7d:a5:72:2c:bf:d3:60:c1:eb:c4:04:9a:fd:25: 05:c0:53:6d:8b:46:39:88:55:87:f4:8a:03:31:25: 96:04:48:c6:52:06:dd:15:77:15:48:7c:3c:4c:f0: 2d:d9:b6:56:50:62:5a:1c:f3:66:d7:39:49:62:d8: 04:b5:63:52:2c:da:94:5b:51:57:b0:b4:66:da:80: 0d:a0:f0:f8:05:d6:ba:04:be:ad:c2:dd:e0:cf:04: 0c:99:fd:97:7b:1f:06:dc:a2:ec:b4:84:fa:b0:e1: 38:66:d3:04:cc:b7:5e:b4:35:f5:74:27:79:4d:ab: 34:65:7f:bc:60:d3:3e:5d:90:e3:a0:bc:cd:16:bc: d3:9e:8d:28:73:a3:a3:c7:86:ab:06:99:d0:5e:c7: c3:59:53:16:96:c6:8d:5a:a4:af:12:da:9e:eb:bf: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B1:17:1D:E9:9A:48:41:3C:57:E3:62:69:86:55:11:2C:38:1C:65 X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ad:f3:56:3e:d1:98:49:4e:20:5c:fc:45:f0:7e:14:08:84: a9:1b:ea:a9:40:74:1c:21:9c:55:2e:45:10:45:fb:a4:22:c3: a6:53:0e:c3:86:aa:ee:98:0d:59:16:ce:b3:3c:a0:3c:5c:c1: 95:d7:55:f9:f2:51:95:c2:eb:72:ac:01:03:6e:eb:36:05:40: c4:af:6d:af:c6:ad:1c:2b:1a:4d:ba:54:87:5e:20:20:78:1b: eb:21:b6:6a:8f:82:ed:f7:a6:86:84:4e:d9:43:b0:e7:61:58: 7e:df:e4:d5:13:b2:20:c9:15:6c:87:37:28:f0:43:93:3f:63: 82:09:db:32:cf:f0:cc:53:b8:6a:53:65:f7:f7:6c:0f:88:e3: dc:18:4b:a4:e5:5b:09:f8:b1:4c:e7:44:06:e8:90:16:16:af: 50:d9:2a:dc:57:3d:1e:38:cd:c5:d9:e2:74:74:6a:a2:f5:e0: a3:8e:27:e8:c5:60:1c:21:43:05:24:d0:eb:a9:e5:e6:a2:12: 1e:08:7a:1d:55:c7:6e:33:94:4f:cd:8f:88:26:4d:ce:04:80: 54:45:aa:be:d2:42:e1:9d:52:80:50:6a:da:f2:cd:0b:d9:3e: e2:a1:19:53:09:ea:c6:d3:1b:08:52:3f:af:c3:49:a8:65:43: 7b:f7:9d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2KWzvvzZWM2Th0HOXJUPvJRXHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA5MjMwOTIyNDZaFw0yNjA5MjQxMDA0NDZaMDMxMTAvBgNV BAMTKDFGQjExNzFERTk5QTQ4NDEzQzU3RTM2MjY5ODY1NTExMkMzODFDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eezpdd9TgOJPbT79R9spx4wr IiTEVwTQy+KcW2KFTTe9jzFKCaTs5bCK6+1RKW5/FZVy7eeVVfOnX4e+CGTpSxXj lTLG7HGo3UosKHWuQws1SB+4BHyiyFV9pXIsv9NgwevEBJr9JQXAU22LRjmIVYf0 igMxJZYESMZSBt0VdxVIfDxM8C3ZtlZQYloc82bXOUli2AS1Y1Is2pRbUVewtGba gA2g8PgF1roEvq3C3eDPBAyZ/Zd7Hwbcouy0hPqw4Thm0wTMt160NfV0J3lNqzRl f7xg0z5dkOOgvM0WvNOejShzo6PHhqsGmdBex8NZUxaWxo1apK8S2p7rv4o/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7EXHemaSEE8V+NiaYZVESw4HGUwHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACut81Y+0ZhJTiBc/EXwfhQIhKkb6qlAdBwh nFUuRRBF+6Qiw6ZTDsOGqu6YDVkWzrM8oDxcwZXXVfnyUZXC63KsAQNu6zYFQMSv ba/GrRwrGk26VIdeICB4G+shtmqPgu33poaETtlDsOdhWH7f5NUTsiDJFWyHNyjw Q5M/Y4IJ2zLP8MxTuGpTZff3bA+I49wYS6TlWwn4sUznRAbokBYWr1DZKtxXPR44 zcXZ4nR0aqL14KOOJ+jFYBwhQwUk0Oup5eaiEh4Ieh1Vx24zlE/Nj4gmTc4EgFRF qr7SQuGdUoBQatryzQvZPuKhGVMJ6sbTGwhSP6/DSahlQ3v3ncg= -----END CERTIFICATE-----Generated at Thu Sep 24 03:17:28 2026 by rpki-client