$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: desCcEcyGeBzpzL7gWvIPWaWzSWM20qQ0veqZtkXzSI= Subject key identifier: 50:92:E6:FB:3D:6E:E5:64:6B:3F:F6:8A:28:83:3C:5F:BF:ED:90:EC Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 1858EAF6C6C475035E5E7EF0C27D51E135330D29 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 18:06:26 +0000 Manifest this update: Sat 13 Jun 2026 18:01:26 +0000 Manifest next update: Sun 14 Jun 2026 20:45:26 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 2: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: T6zwgWBcvInGjfi8h1AhydWzTf3uTLtdFjHl7EFcfyo=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 4: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:58:ea:f6:c6:c4:75:03:5e:5e:7e:f0:c2:7d:51:e1:35:33:0d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Jun 13 18:01:26 2026 GMT Not After : Jun 14 20:45:26 2026 GMT Subject: CN=5092E6FB3D6EE5646B3FF68A28833C5FBFED90EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:12:a7:4a:97:d8:47:16:0a:a2:b7:82:18:db: 8d:af:db:13:e3:8b:0c:d7:28:99:d7:15:bc:0e:a1: ab:1a:0a:17:72:94:63:07:90:f7:18:ff:27:58:2a: f6:85:e4:c4:41:45:fb:e8:31:dc:b4:b6:63:43:0f: 64:e0:c3:2c:c0:f4:2b:b9:37:be:3e:c3:b3:3a:c5: 32:d8:60:1f:77:ba:e7:03:28:08:0c:13:cb:6e:76: 21:04:a4:2a:8d:5b:0f:aa:25:c1:c5:59:1a:be:9d: be:c2:6f:6c:b8:66:96:b9:c3:69:93:c3:5f:ac:91: 5b:38:ff:91:13:88:79:15:65:42:e8:43:ad:83:8c: 81:29:e9:81:7d:e5:0f:83:b8:e4:aa:37:43:5c:94: 45:d2:0a:ef:a5:31:9f:50:01:07:68:35:89:af:2b: f3:1b:d3:5e:42:56:a9:a7:0c:19:d4:8e:bb:5e:91: 60:71:50:ee:84:dd:b5:05:37:de:0e:a8:b7:dd:35: 2e:af:65:b8:6b:20:27:02:de:a8:2a:7d:f5:52:6e: ab:56:03:70:a3:0f:49:7e:6a:94:75:79:e8:6e:8b: 41:83:10:1f:66:cc:4a:05:b6:e4:01:a3:41:64:0d: 3a:df:d3:da:f9:cc:b0:6e:f3:60:c2:1c:fa:e4:60: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:92:E6:FB:3D:6E:E5:64:6B:3F:F6:8A:28:83:3C:5F:BF:ED:90:EC X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:da:dd:97:fb:e3:21:ea:86:28:32:50:d1:98:9b:6d:cc: 56:86:5d:49:c1:1d:70:fe:35:82:88:18:da:70:3b:f3:1a:de: 56:99:c9:18:bb:95:7a:21:07:55:90:a6:b0:af:ae:e7:0a:88: b6:23:de:20:69:fa:c2:78:b8:6d:c5:a9:f7:e0:5d:06:83:a3: 74:90:ab:90:85:b1:c1:6c:cc:ab:8f:18:90:86:ed:56:71:48: c5:cf:84:10:aa:3c:4f:d9:b1:8f:92:ed:06:e5:1f:c5:2c:9a: de:40:63:cb:8f:da:32:6e:89:d2:bc:fe:71:6c:3b:34:64:0e: 9a:4b:6c:d2:d5:7d:a9:f2:1d:bd:77:81:1b:c4:da:3a:e6:36: f2:f6:78:21:ac:17:7d:0a:2e:00:ac:62:c3:93:5d:11:fa:38: 06:b5:90:82:51:a4:1b:f1:03:1f:84:ba:17:31:fe:9c:85:13: ba:27:72:f1:e2:31:a4:3f:bd:c9:af:63:4c:4d:00:fc:0a:1f: 65:58:57:90:e5:5a:17:8f:e4:ab:c1:bb:77:4a:7d:19:bc:a6: cf:c5:55:7c:2b:6f:b0:28:d8:5f:d2:f8:6d:41:74:38:7d:a6: 9f:6f:49:68:fc:d8:2a:22:2d:73:fe:5e:d5:73:e9:d8:3b:12: 8e:eb:6f:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFjq9sbEdQNeXn7wwn1R4TUzDSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA2MTMxODAxMjZaFw0yNjA2MTQyMDQ1MjZaMDMxMTAvBgNV BAMTKDUwOTJFNkZCM0Q2RUU1NjQ2QjNGRjY4QTI4ODMzQzVGQkZFRDkwRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEqdKl9hHFgqit4IY242v2xPj iwzXKJnXFbwOoasaChdylGMHkPcY/ydYKvaF5MRBRfvoMdy0tmNDD2TgwyzA9Cu5 N74+w7M6xTLYYB93uucDKAgME8tudiEEpCqNWw+qJcHFWRq+nb7Cb2y4Zpa5w2mT w1+skVs4/5ETiHkVZULoQ62DjIEp6YF95Q+DuOSqN0NclEXSCu+lMZ9QAQdoNYmv K/Mb015CVqmnDBnUjrtekWBxUO6E3bUFN94OqLfdNS6vZbhrICcC3qgqffVSbqtW A3CjD0l+apR1eehui0GDEB9mzEoFtuQBo0FkDTrf09r5zLBu82DCHPrkYMMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJLm+z1u5WRrP/aKKIM8X7/tkOwwHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECQ2t2X++Mh6oYoMlDRmJttzFaGXUnBHXD+ NYKIGNpwO/Ma3laZyRi7lXohB1WQprCvrucKiLYj3iBp+sJ4uG3FqffgXQaDo3SQ q5CFscFszKuPGJCG7VZxSMXPhBCqPE/ZsY+S7QblH8Usmt5AY8uP2jJuidK8/nFs OzRkDppLbNLVfanyHb13gRvE2jrmNvL2eCGsF30KLgCsYsOTXRH6OAa1kIJRpBvx Ax+Euhcx/pyFE7oncvHiMaQ/vcmvY0xNAPwKH2VYV5DlWheP5KvBu3dKfRm8ps/F VXwrb7Ao2F/S+G1BdDh9pp9vSWj82CoiLXP+XtVz6dg7Eo7rb8E= -----END CERTIFICATE-----Generated at Sun Jun 14 02:01:09 2026 by rpki-client