$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: WJ8xZ9tn/QlQ15rNXPJC2f+eaQFwi15bvpSNnYL7H5g= Subject key identifier: 52:19:45:71:EE:C2:08:91:21:51:B4:FE:48:35:61:FB:43:63:6D:2B Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 1BBDC3446EC56346D9609A98227F6EF7A283A4B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:44:12 +0000 Manifest this update: Tue 16 Jun 2026 20:39:12 +0000 Manifest next update: Wed 17 Jun 2026 22:08:12 +0000 Files and hashes: 1: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: jiiJh14tJDjFebm0EZfWIOVqb4wbIU7+aOhialnxczY=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:bd:c3:44:6e:c5:63:46:d9:60:9a:98:22:7f:6e:f7:a2:83:a4:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Jun 16 20:39:12 2026 GMT Not After : Jun 17 22:08:12 2026 GMT Subject: CN=52194571EEC208912151B4FE483561FB43636D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:02:49:66:3e:ea:b7:61:40:27:4b:73:df: 8f:e2:41:a4:e6:be:19:cc:0c:ff:0f:f6:3c:e2:81: 6d:07:4e:68:c2:ca:43:ea:f3:3f:da:db:a1:b3:d2: 84:78:77:eb:8f:b6:7a:99:27:81:05:d3:2e:d1:a4: f9:75:be:ec:61:33:19:c1:96:18:4f:0f:66:0a:9a: 6a:ec:49:50:57:33:28:16:79:5a:cc:2c:32:18:fa: 04:55:f2:09:48:93:40:ba:e4:93:aa:d2:2b:29:20: 11:af:ee:d4:3a:7a:c8:40:e5:d1:ee:11:5a:55:dd: a4:e1:dc:a3:af:3b:b6:14:59:d4:cf:e7:57:c3:2f: 14:69:df:28:13:7c:13:8f:e8:fa:86:e5:78:d0:d9: 31:ae:aa:8d:66:44:a5:be:a3:f9:3f:a2:bf:91:36: 33:29:3a:1e:16:52:91:c9:be:62:5a:a9:9f:bf:a1: 87:71:e9:3e:b4:b9:e1:8c:e2:01:40:35:de:ac:fb: 00:16:c3:b5:47:29:4e:ed:31:18:13:57:e8:86:2e: 0c:60:d7:7e:3c:04:fb:d5:bd:5e:4f:ac:b8:65:0a: f9:4a:09:6b:eb:ca:8b:22:7a:09:de:aa:05:26:0d: 6f:eb:6c:35:36:39:99:1d:96:ad:4b:ba:c2:af:c8: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:19:45:71:EE:C2:08:91:21:51:B4:FE:48:35:61:FB:43:63:6D:2B X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0e:a1:11:59:2c:41:10:3e:5c:fe:f9:d6:cb:cd:ca:79:48: b8:a8:46:e4:b9:52:58:38:26:23:ea:9c:85:64:c4:b6:53:b6: d3:d5:be:40:b9:02:d8:01:01:48:67:0b:51:0d:81:07:d2:e4: 2e:f7:9f:21:39:35:78:f7:0f:62:8c:bf:65:8c:44:e0:41:82: 16:77:3d:a6:b3:e4:58:ff:0e:c6:de:bf:1d:80:a3:5f:d2:5b: 7f:f2:05:72:43:c8:d2:45:42:3b:54:cf:60:f0:93:4f:33:25: 01:b5:2b:30:48:4a:ff:cf:fc:6a:59:3a:98:f3:45:a7:76:db: 73:61:0e:17:a2:39:02:06:51:23:cd:fd:d5:29:94:03:81:80: 4c:b8:b0:d7:1b:b4:e1:ff:cb:65:80:91:f3:4b:a6:6c:af:af: 6f:75:37:38:6c:d8:75:04:bb:df:58:36:9c:a7:65:52:d1:16: 65:8c:80:6d:e2:94:f7:80:cb:49:36:94:3b:d5:d4:d6:70:3e: 17:9a:c5:e7:74:f7:e5:66:63:84:e7:b7:8b:d2:be:69:cf:72: ab:de:7a:e9:3e:90:9c:db:96:3e:a2:a3:f1:89:43:d6:60:ee: 04:ae:b5:af:0a:5b:4a:16:f4:80:09:27:69:e2:45:8f:e6:35: dc:f5:0d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG73DRG7FY0bZYJqYIn9u96KDpLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA2MTYyMDM5MTJaFw0yNjA2MTcyMjA4MTJaMDMxMTAvBgNV BAMTKDUyMTk0NTcxRUVDMjA4OTEyMTUxQjRGRTQ4MzU2MUZCNDM2MzZEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TwJJZj7qt2FAJ0tz34/iQaTm vhnMDP8P9jzigW0HTmjCykPq8z/a26Gz0oR4d+uPtnqZJ4EF0y7RpPl1vuxhMxnB lhhPD2YKmmrsSVBXMygWeVrMLDIY+gRV8glIk0C65JOq0ispIBGv7tQ6eshA5dHu EVpV3aTh3KOvO7YUWdTP51fDLxRp3ygTfBOP6PqG5XjQ2TGuqo1mRKW+o/k/or+R NjMpOh4WUpHJvmJaqZ+/oYdx6T60ueGM4gFANd6s+wAWw7VHKU7tMRgTV+iGLgxg 1348BPvVvV5PrLhlCvlKCWvryosiegneqgUmDW/rbDU2OZkdlq1LusKvyLAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhlFce7CCJEhUbT+SDVh+0NjbSswHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQOoRFZLEEQPlz++dbLzcp5SLioRuS5Ulg4 JiPqnIVkxLZTttPVvkC5AtgBAUhnC1ENgQfS5C73nyE5NXj3D2KMv2WMROBBghZ3 Paaz5Fj/Dsbevx2Ao1/SW3/yBXJDyNJFQjtUz2Dwk08zJQG1KzBISv/P/GpZOpjz Rad223NhDheiOQIGUSPN/dUplAOBgEy4sNcbtOH/y2WAkfNLpmyvr291Nzhs2HUE u99YNpynZVLRFmWMgG3ilPeAy0k2lDvV1NZwPheaxed09+VmY4Tnt4vSvmnPcqve euk+kJzblj6io/GJQ9Zg7gSuta8KW0oW9IAJJ2niRY/mNdz1DTg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:00 2026 by rpki-client