$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: 2QXOJEGC8tQsTZmvEStiaNtOBc0tYu0gnkJ30PvokxU= Subject key identifier: 2A:CE:A8:FD:3B:C7:27:05:B4:CE:43:F7:1C:F5:FD:8C:D2:59:CB:CD Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 510CFE85558ECB661284C165FDB98A920794CE3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:00:09 +0000 Manifest this update: Mon 21 Sep 2026 14:55:09 +0000 Manifest next update: Tue 22 Sep 2026 18:12:09 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 2: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: 4PLp2pcXu8ZPxfy5CpWBPNO1YUYWfMfDgDasHVpTM6M=) 3: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 4: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0c:fe:85:55:8e:cb:66:12:84:c1:65:fd:b9:8a:92:07:94:ce:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Sep 21 14:55:09 2026 GMT Not After : Sep 22 18:12:09 2026 GMT Subject: CN=2ACEA8FD3BC72705B4CE43F71CF5FD8CD259CBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:11:5a:ce:18:6d:97:e3:35:5d:61:fc:3a: 85:b4:26:db:02:dc:33:b7:e8:cd:19:b2:18:f7:18: 23:38:13:bc:45:78:00:39:9a:e1:2f:b4:12:7e:bc: 3d:17:45:62:6e:61:7b:89:e9:eb:ae:35:64:ef:e8: a4:05:c6:43:22:dc:86:ec:87:a9:46:2d:ae:13:8e: 6a:51:30:2f:69:0a:76:32:cf:f4:0b:64:de:5e:fb: e5:ad:50:5a:71:08:91:e9:6d:ce:fd:d1:e8:bb:70: 28:e7:7d:c1:64:07:43:e4:6d:9d:ad:86:bd:5a:55: d3:9b:e5:b6:78:6b:46:1c:d0:3a:c8:13:6d:17:92: ba:df:d5:75:d4:b3:f7:34:7c:29:de:d7:c4:8e:b0: 34:ab:90:cc:3a:bc:e1:67:87:e0:0f:ab:57:3f:02: a6:9f:9e:13:b5:06:2d:01:61:00:6f:f0:f4:a3:54: 9d:89:56:52:e7:03:c2:9b:e3:93:b8:39:6d:94:09: 88:9f:eb:d4:37:e0:91:31:93:fa:d4:87:47:54:60: 4d:0e:28:ab:58:2e:3e:36:ab:1a:9a:8c:91:f2:90: 0b:a7:50:01:4c:21:0c:19:3a:9b:cd:51:b2:eb:50: 66:56:d7:73:d1:0a:95:16:2d:3c:8b:74:b7:f9:5c: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CE:A8:FD:3B:C7:27:05:B4:CE:43:F7:1C:F5:FD:8C:D2:59:CB:CD X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:0d:5f:d4:8f:30:db:62:31:75:50:99:a1:8d:40:0b:c8:f4: f5:d2:0f:53:55:dd:3d:45:19:f7:0e:07:59:37:04:83:e0:2a: 27:46:3b:da:79:00:9d:e6:32:09:32:a1:5d:ca:f8:30:ba:d1: ed:4f:0c:77:e5:63:15:a8:89:02:c3:55:81:37:24:e8:69:7e: 14:1c:7c:ae:ba:58:50:86:db:94:e6:73:88:87:c4:bd:13:3c: 29:bd:61:b4:79:54:1a:86:0b:5b:04:e8:10:c7:fb:97:30:99: 37:c2:d7:0d:98:27:dc:c2:a9:83:d7:7e:c5:cd:ea:20:bc:b3: 0b:c2:f2:33:5b:30:99:76:2d:37:ff:ce:37:dd:b9:46:af:bc: 6b:5c:21:37:0e:2c:bb:63:aa:74:1b:7f:97:03:15:d8:72:32: f9:8e:52:05:85:b4:6c:93:61:61:3d:19:66:f6:30:5e:d1:81: a0:15:ab:ae:3a:b7:a6:ea:cd:a9:6e:c9:38:4b:bf:ae:76:c0: 03:af:3f:8e:19:21:57:fd:e8:4d:4f:b5:a8:a4:ed:17:1c:4c: e8:49:c4:b6:2e:e5:ab:6e:84:a5:5f:ff:0f:2a:fc:22:34:ff: d5:92:37:24:a1:1d:96:f9:51:23:54:3f:77:d2:e5:6f:58:e0: 50:83:a9:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQz+hVWOy2YShMFl/bmKkgeUzj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA5MjExNDU1MDlaFw0yNjA5MjIxODEyMDlaMDMxMTAvBgNV BAMTKDJBQ0VBOEZEM0JDNzI3MDVCNENFNDNGNzFDRjVGRDhDRDI1OUNCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEhFazhhtl+M1XWH8OoW0JtsC 3DO36M0Zshj3GCM4E7xFeAA5muEvtBJ+vD0XRWJuYXuJ6euuNWTv6KQFxkMi3Ibs h6lGLa4TjmpRMC9pCnYyz/QLZN5e++WtUFpxCJHpbc790ei7cCjnfcFkB0PkbZ2t hr1aVdOb5bZ4a0Yc0DrIE20Xkrrf1XXUs/c0fCne18SOsDSrkMw6vOFnh+APq1c/ AqafnhO1Bi0BYQBv8PSjVJ2JVlLnA8Kb45O4OW2UCYif69Q34JExk/rUh0dUYE0O KKtYLj42qxqajJHykAunUAFMIQwZOpvNUbLrUGZW13PRCpUWLTyLdLf5XMf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKs6o/TvHJwW0zkP3HPX9jNJZy80wHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHYNX9SPMNtiMXVQmaGNQAvI9PXSD1NV3T1F GfcOB1k3BIPgKidGO9p5AJ3mMgkyoV3K+DC60e1PDHflYxWoiQLDVYE3JOhpfhQc fK66WFCG25Tmc4iHxL0TPCm9YbR5VBqGC1sE6BDH+5cwmTfC1w2YJ9zCqYPXfsXN 6iC8swvC8jNbMJl2LTf/zjfduUavvGtcITcOLLtjqnQbf5cDFdhyMvmOUgWFtGyT YWE9GWb2MF7RgaAVq646t6bqzaluyThLv652wAOvP44ZIVf96E1Ptaik7RccTOhJ xLYu5atuhKVf/w8q/CI0/9WSNyShHZb5USNUP3fS5W9Y4FCDqew= -----END CERTIFICATE-----Generated at Tue Sep 22 12:38:26 2026 by rpki-client