$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json) Hash identifier: xAqzfKIXfUt0Wqr8poatgWABBGjSBLzLvRSit5EBYzI= Subject key identifier: 3F:A4:77:54:99:D6:68:EF:08:25:66:86:14:E9:05:10:B0:B0:2F:4C Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Certificate serial: 0C003DE93B856835BF91AE6D4D0610320654455B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 04:25:58 +0000 Manifest this update: Mon 09 Nov 2026 04:20:58 +0000 Manifest next update: Tue 10 Nov 2026 07:57:58 +0000 Files and hashes: 1: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=) 2: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=) 3: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: m2JFq7Fw86/GJQUXDlQESI97HyRK+aHGm5b8O6pucek=) 4: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 07:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:00:3d:e9:3b:85:68:35:bf:91:ae:6d:4d:06:10:32:06:54:45:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Validity Not Before: Nov 9 04:20:58 2026 GMT Not After : Nov 10 07:57:58 2026 GMT Subject: CN=3FA4775499D668EF0825668614E90510B0B02F4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:f2:06:d0:a9:b6:1e:04:86:2f:95:4d:aa: b2:88:47:de:55:bd:88:fe:b6:18:13:3b:f0:20:89: 2c:97:7a:19:c5:91:52:93:b2:2d:14:7c:70:c4:7d: f3:52:55:89:12:93:a1:f4:96:fb:e1:96:1b:7d:eb: 59:c6:84:b3:e4:4b:80:98:d2:21:b7:a7:9f:36:c1: 36:a0:6b:8a:8e:c5:27:b2:53:23:2b:20:f1:fd:2a: 9b:31:06:65:50:a3:45:12:0e:b7:2d:29:44:27:49: ae:e9:35:cb:16:ed:f2:1c:36:74:46:f6:1e:36:da: ab:02:4c:0a:f1:35:ca:eb:ee:f4:55:86:87:9c:b4: 07:04:6d:3a:e0:00:d5:38:e2:47:41:22:00:b7:1a: 90:a9:b7:0f:20:06:55:4b:e3:2f:4b:f3:31:cb:ca: 35:05:3c:0a:ee:b0:19:09:8b:93:7a:3a:42:04:0f: 8e:ee:93:5b:62:3a:e3:01:ff:88:69:c1:c6:e6:77: ce:f4:0e:73:a9:86:de:0a:8b:7b:45:85:49:62:7c: dc:3b:1c:4d:1a:ec:6f:8d:5b:71:d1:19:42:56:40: 1d:af:f8:ae:9a:9b:88:e8:46:24:e3:64:27:6a:ba: 9b:14:f3:69:27:33:23:bb:94:11:15:77:90:70:90: 44:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A4:77:54:99:D6:68:EF:08:25:66:86:14:E9:05:10:B0:B0:2F:4C X509v3 Authority Key Identifier: keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:59:31:3a:c1:89:e4:21:29:b0:77:2d:43:83:26:8c:96:2c: 7e:5f:89:08:8f:ab:3f:19:5a:9c:d8:83:3d:9e:58:4a:41:7a: 01:d7:07:f9:3b:58:3c:41:13:b4:1b:79:8a:4e:ae:50:ba:c0: 6a:99:09:f6:d6:da:ce:c2:b1:4b:0f:ef:cf:dd:8e:81:df:8a: 76:c4:c9:d2:ec:7a:6d:f4:66:9f:b1:9b:ed:33:0b:78:33:55: a5:8e:cc:04:26:55:a0:79:9a:50:de:6e:de:01:4b:8e:55:62: fd:2e:fa:29:ce:7a:f6:24:c7:26:ca:48:ee:64:99:8c:ec:9b: 14:db:fe:2d:07:7a:22:8c:e1:31:af:3c:d3:f0:6e:11:3c:06: c3:45:57:fd:49:cd:81:a9:6b:4f:25:f3:a9:63:64:43:45:6b: d8:2f:fe:ea:fd:c0:c3:6e:c7:a3:9d:52:ee:f6:cc:5f:63:b9: 32:4a:76:16:54:bd:8c:c9:18:f1:31:f0:05:45:4e:60:d1:f1: cf:65:04:77:21:3e:f9:d7:d8:db:83:23:ef:1c:bd:24:24:cd: d2:e0:c4:79:34:fe:72:05:30:56:31:bc:b2:c2:b1:2c:be:7a: 84:8b:f6:25:38:fb:4e:f3:cc:fc:90:22:56:aa:ac:ea:85:0f: 51:19:f8:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDAA96TuFaDW/ka5tTQYQMgZURVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF NEZGQkFCODAeFw0yNjExMDkwNDIwNThaFw0yNjExMTAwNzU3NThaMDMxMTAvBgNV BAMTKDNGQTQ3NzU0OTlENjY4RUYwODI1NjY4NjE0RTkwNTEwQjBCMDJGNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxfIG0Km2HgSGL5VNqrKIR95V vYj+thgTO/AgiSyXehnFkVKTsi0UfHDEffNSVYkSk6H0lvvhlht961nGhLPkS4CY 0iG3p582wTaga4qOxSeyUyMrIPH9KpsxBmVQo0USDrctKUQnSa7pNcsW7fIcNnRG 9h422qsCTArxNcrr7vRVhoectAcEbTrgANU44kdBIgC3GpCptw8gBlVL4y9L8zHL yjUFPArusBkJi5N6OkIED47uk1tiOuMB/4hpwcbmd870DnOpht4Ki3tFhUlifNw7 HE0a7G+NW3HRGUJWQB2v+K6am4joRiTjZCdqupsU82knMyO7lBEVd5BwkERRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6R3VJnWaO8IJWaGFOkFELCwL0wwHwYDVR0j BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3 NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC QUI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VD NkVFNEZGQkFCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABZMTrBieQhKbB3LUODJoyWLH5fiQiPqz8Z WpzYgz2eWEpBegHXB/k7WDxBE7QbeYpOrlC6wGqZCfbW2s7CsUsP78/djoHfinbE ydLsem30Zp+xm+0zC3gzVaWOzAQmVaB5mlDebt4BS45VYv0u+inOevYkxybKSO5k mYzsmxTb/i0HeiKM4TGvPNPwbhE8BsNFV/1JzYGpa08l86ljZENFa9gv/ur9wMNu x6OdUu72zF9juTJKdhZUvYzJGPEx8AVFTmDR8c9lBHchPvnX2NuDI+8cvSQkzdLg xHk0/nIFMFYxvLLCsSy+eoSL9iU4+07zzPyQIlaqrOqFD1EZ+JA= -----END CERTIFICATE-----Generated at Mon Nov 9 23:35:40 2026 by rpki-client