$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: BqfKpsucf/KsHYPuQn2DWbcJ5p03hg6fpqee9kyzYjw= Subject key identifier: 67:64:E6:20:D5:92:FA:9D:6F:7E:EB:73:39:9C:8B:CA:61:5D:01:5E Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 7CD9A7D054432C774654CE150C76EA537B9DD25F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: BE Signing time: Mon 21 Sep 2026 20:01:10 +0000 Manifest this update: Mon 21 Sep 2026 19:56:10 +0000 Manifest next update: Tue 22 Sep 2026 22:26:10 +0000 Files and hashes: 1: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 2: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: 2zTYFQBe9EFXg4exNO6E0cXKslQqh9LtfUrW4W/oVmQ=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:26:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d9:a7:d0:54:43:2c:77:46:54:ce:15:0c:76:ea:53:7b:9d:d2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Sep 21 19:56:10 2026 GMT Not After : Sep 22 22:26:10 2026 GMT Subject: CN=6764E620D592FA9D6F7EEB73399C8BCA615D015E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:d9:63:62:2f:18:8e:c5:12:6f:49:25:ec: 1b:e3:08:1c:57:6a:ab:a8:8f:73:e3:68:31:04:66: 79:95:95:2d:9e:66:fe:8d:a9:30:b4:a6:7d:0e:fc: 11:2f:be:47:4d:e0:98:49:a7:41:a3:06:98:e6:cf: 28:22:ae:2d:46:b9:15:b4:d6:cf:82:02:dc:a5:41: 20:11:d7:37:46:98:f2:8e:95:34:4e:21:34:6c:4a: d8:7d:93:e9:48:91:bd:69:ac:8f:f0:3d:d1:69:0e: f8:00:a1:b8:fc:78:4b:51:17:f4:cf:eb:d5:7b:b6: 32:46:9e:35:78:ee:94:08:97:4d:ea:5e:9d:a4:af: 3e:5d:96:4d:d5:8f:06:2e:cf:6d:5c:34:2c:1d:c1: 62:e6:ce:45:15:22:d4:64:b0:c2:85:72:30:23:f6: 10:b6:fd:6a:d1:6d:5e:63:2d:0f:64:e2:fe:0b:49: 78:9f:5c:f4:e2:ce:6a:bf:53:74:3c:d8:ac:71:60: 56:73:28:f2:06:54:3a:28:da:24:87:63:63:e9:9b: f0:bc:22:db:77:59:ba:d7:74:25:c2:4f:d1:96:f7: c3:6e:ed:f3:6d:f6:07:28:83:59:7d:3e:01:d7:ff: cc:5d:b6:3f:dd:e2:47:6a:8a:a2:a5:3c:a6:46:89: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:64:E6:20:D5:92:FA:9D:6F:7E:EB:73:39:9C:8B:CA:61:5D:01:5E X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f8:13:40:35:cc:a7:8f:22:8a:16:2e:64:f0:7d:f7:c0:e3: 2a:ff:b7:f2:27:aa:d5:c8:26:91:50:0a:80:ca:41:42:56:03: 3d:56:3e:f6:56:32:42:ca:2b:a8:eb:8d:cb:7f:aa:58:2b:cd: c8:c1:dc:6a:c8:e6:1f:b0:d9:92:4a:d8:69:8f:64:13:0e:0f: 38:6b:6b:74:6b:d3:8f:67:c6:b6:6a:5d:fc:e4:b5:a1:bc:90: fa:73:4e:ef:b4:f0:0a:02:64:95:fa:a6:e9:90:83:6a:7f:56: f2:5f:5c:72:0a:54:25:a7:82:b5:91:10:58:7e:3e:47:dc:e9: d9:65:8c:73:f3:79:de:15:43:04:4a:c3:f4:88:d1:e6:d2:da: 4e:4e:ef:9f:99:c1:77:1c:bd:c9:e6:ba:ac:83:39:52:1e:ed: 3c:55:90:6c:20:c1:58:d9:01:18:0b:f3:de:88:7e:53:05:f8: d2:1e:4a:be:16:c1:7a:92:5a:d5:04:3d:aa:57:7a:20:14:18: eb:4d:2b:bf:6d:bb:46:96:b8:e9:ef:1c:19:0b:ef:0f:52:a0: 60:b8:dc:69:72:e1:c3:9a:62:01:1a:af:34:3f:d7:c4:ca:86: 69:03:f3:e2:72:62:ea:03:61:73:3a:62:cc:c2:bc:7a:c0:71: b1:94:0b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNmn0FRDLHdGVM4VDHbqU3ud0l8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA5MjExOTU2MTBaFw0yNjA5MjIyMjI2MTBaMDMxMTAvBgNV BAMTKDY3NjRFNjIwRDU5MkZBOUQ2RjdFRUI3MzM5OUM4QkNBNjE1RDAxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXtljYi8YjsUSb0kl7BvjCBxX aquoj3PjaDEEZnmVlS2eZv6NqTC0pn0O/BEvvkdN4JhJp0GjBpjmzygiri1GuRW0 1s+CAtylQSAR1zdGmPKOlTROITRsSth9k+lIkb1prI/wPdFpDvgAobj8eEtRF/TP 69V7tjJGnjV47pQIl03qXp2krz5dlk3VjwYuz21cNCwdwWLmzkUVItRksMKFcjAj 9hC2/WrRbV5jLQ9k4v4LSXifXPTizmq/U3Q82KxxYFZzKPIGVDoo2iSHY2Ppm/C8 Itt3WbrXdCXCT9GW98Nu7fNt9gcog1l9PgHX/8xdtj/d4kdqiqKlPKZGiU3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ2TmINWS+p1vfutzOZyLymFdAV4wHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH4E0A1zKePIooWLmTwfffA4yr/t/InqtXI JpFQCoDKQUJWAz1WPvZWMkLKK6jrjct/qlgrzcjB3GrI5h+w2ZJK2GmPZBMODzhr a3Rr049nxrZqXfzktaG8kPpzTu+08AoCZJX6pumQg2p/VvJfXHIKVCWngrWREFh+ Pkfc6dlljHPzed4VQwRKw/SI0ebS2k5O75+ZwXccvcnmuqyDOVIe7TxVkGwgwVjZ ARgL896IflMF+NIeSr4WwXqSWtUEPapXeiAUGOtNK79tu0aWuOnvHBkL7w9SoGC4 3Gly4cOaYgEarzQ/18TKhmkD8+JyYuoDYXM6YszCvHrAcbGUC5A= -----END CERTIFICATE-----Generated at Tue Sep 22 14:40:49 2026 by rpki-client