$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: VxXCFudJZYSvTI4BT6lOz2cbG7Cn+cAIqjbDJ5F0w2I= Subject key identifier: 9B:AB:63:7C:05:5D:CF:74:6D:41:F5:BA:A2:BD:02:D2:7F:63:3D:FA Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 1DD83BDF947EBC5D126598FB004E4EA5DB8E47A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 13:33:14 +0000 Manifest this update: Tue 28 Jul 2026 13:28:14 +0000 Manifest next update: Wed 29 Jul 2026 16:06:14 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 3: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 4: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: EM4zm5xUQtp4joHuyoAYwIRWJfxuni+kojsPL8hRG7E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d8:3b:df:94:7e:bc:5d:12:65:98:fb:00:4e:4e:a5:db:8e:47:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Jul 28 13:28:14 2026 GMT Not After : Jul 29 16:06:14 2026 GMT Subject: CN=9BAB637C055DCF746D41F5BAA2BD02D27F633DFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:d2:aa:9e:b0:a8:aa:1d:ab:50:db:0b:a2: 0c:9e:c9:ed:9b:98:cb:83:de:fe:3e:0b:b7:9e:68: c5:79:39:d9:4a:be:4a:b0:71:99:ac:63:e3:33:8e: fa:63:75:55:cb:ee:c8:60:ec:b9:e0:c6:1d:e3:e8: a8:40:9f:79:8f:cf:ba:48:61:65:60:6c:62:4d:1e: 86:77:5f:a8:43:c7:98:c1:93:a7:bd:a5:95:69:95: 79:e3:fd:fc:62:12:4a:55:55:d4:7f:d8:0f:ab:75: fa:15:4a:84:04:f1:f7:37:6d:6d:d4:6b:16:bb:ea: 9e:57:90:68:ed:d2:f0:f5:a0:2a:35:d8:a9:e6:dc: 7e:90:de:e8:14:a5:2a:ca:8b:bb:58:f4:10:21:e7: 87:10:1c:21:38:64:28:16:95:cb:e0:73:8c:03:aa: 80:f2:04:27:d0:20:eb:a3:2f:5d:1d:05:85:bf:53: e3:14:31:c1:14:5d:84:8e:a6:c8:0a:0d:d1:d3:10: b0:07:7d:f7:49:7e:85:e3:b1:bc:70:57:3c:77:47: 1d:c1:72:8c:8b:9b:6f:b5:ce:5e:e2:ee:df:07:6a: d0:e5:3d:7c:c8:55:32:ea:db:50:d3:6e:df:5b:d2: d4:05:ff:12:09:bf:0f:52:66:70:b0:f5:0e:48:0b: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:63:7C:05:5D:CF:74:6D:41:F5:BA:A2:BD:02:D2:7F:63:3D:FA X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:be:7d:b8:4c:dc:0c:34:c7:bf:7f:a6:37:e8:b0:18:11:29: 58:22:f8:05:b2:14:ac:53:c4:0a:93:20:61:c9:e1:8a:d0:c1: be:0d:ee:59:d2:82:a1:b3:cd:20:2f:5a:52:b2:ab:44:26:93: a0:64:d7:eb:0b:3d:15:f2:a4:d0:2a:50:e8:57:be:a4:ad:7f: 99:90:17:e5:1d:11:47:51:47:9f:c2:2b:64:87:ca:ad:55:42: 63:da:17:90:43:42:ca:9b:48:ce:03:9b:00:8a:3a:3a:d0:38: f7:be:57:f0:2b:3e:48:27:82:25:a7:f9:27:dc:8d:63:ae:b3: 8e:57:cf:a5:73:05:43:5d:45:d5:ba:99:a2:84:28:39:f1:9c: 8a:06:bd:09:ed:a7:27:c6:f4:7a:68:30:88:fd:9e:64:56:b2: 37:63:28:2f:7c:64:96:d3:5d:07:34:66:63:bc:16:4d:29:e5: e1:37:b3:cd:8a:97:3e:9d:df:1b:89:a0:af:66:b9:61:a4:94: 9d:fd:36:8f:ab:1d:bf:ce:fc:f1:d0:d6:26:99:bb:c2:cc:80: 97:a1:15:a5:50:fe:0e:9c:a9:c8:b8:74:da:f1:42:dc:df:e4: 24:8e:f3:0a:7e:93:0a:b1:ef:d1:99:9a:ec:cb:bd:56:cf:b3: e7:cd:c8:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdg735R+vF0SZZj7AE5OpduOR6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA3MjgxMzI4MTRaFw0yNjA3MjkxNjA2MTRaMDMxMTAvBgNV BAMTKDlCQUI2MzdDMDU1RENGNzQ2RDQxRjVCQUEyQkQwMkQyN0Y2MzNERkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JdKqnrCoqh2rUNsLogyeye2b mMuD3v4+C7eeaMV5OdlKvkqwcZmsY+MzjvpjdVXL7shg7Lngxh3j6KhAn3mPz7pI YWVgbGJNHoZ3X6hDx5jBk6e9pZVplXnj/fxiEkpVVdR/2A+rdfoVSoQE8fc3bW3U axa76p5XkGjt0vD1oCo12Knm3H6Q3ugUpSrKi7tY9BAh54cQHCE4ZCgWlcvgc4wD qoDyBCfQIOujL10dBYW/U+MUMcEUXYSOpsgKDdHTELAHffdJfoXjsbxwVzx3Rx3B coyLm2+1zl7i7t8HatDlPXzIVTLq21DTbt9b0tQF/xIJvw9SZnCw9Q5IC13FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6tjfAVdz3RtQfW6or0C0n9jPfowHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALW+fbhM3Aw0x79/pjfosBgRKVgi+AWyFKxT xAqTIGHJ4YrQwb4N7lnSgqGzzSAvWlKyq0Qmk6Bk1+sLPRXypNAqUOhXvqStf5mQ F+UdEUdRR5/CK2SHyq1VQmPaF5BDQsqbSM4DmwCKOjrQOPe+V/ArPkgngiWn+Sfc jWOus45Xz6VzBUNdRdW6maKEKDnxnIoGvQntpyfG9HpoMIj9nmRWsjdjKC98ZJbT XQc0ZmO8Fk0p5eE3s82Klz6d3xuJoK9muWGklJ39No+rHb/O/PHQ1iaZu8LMgJeh FaVQ/g6cqci4dNrxQtzf5CSO8wp+kwqx79GZmuzLvVbPs+fNyLI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:11:58 2026 by rpki-client