$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json) Hash identifier: HBWEmbg+ysrExLMIhtO4NJTBawXmU9/kN/kbFTXm2pI= Subject key identifier: CB:96:8D:50:03:23:FA:59:2F:7A:D5:A9:4A:AC:FC:14:2F:E1:BB:51 Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Certificate serial: 65DD83B3D79F758C91311AAFCF2460693D94E8D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft Manifest number: BE Signing time: Sun 20 Sep 2026 18:19:25 +0000 Manifest this update: Sun 20 Sep 2026 18:14:25 +0000 Manifest next update: Mon 21 Sep 2026 21:00:25 +0000 Files and hashes: 1: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: nX4cdQmat9J2Oj5i3zZyboEcO1TQIGkh89t+YhdKQdc=) 2: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=) 3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=) 4: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:dd:83:b3:d7:9f:75:8c:91:31:1a:af:cf:24:60:69:3d:94:e8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Validity Not Before: Sep 20 18:14:25 2026 GMT Not After : Sep 21 21:00:25 2026 GMT Subject: CN=CB968D500323FA592F7AD5A94AACFC142FE1BB51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:33:47:2e:df:c4:ba:1f:d7:9a:89:5c:10: 57:f4:62:11:25:d8:3e:bf:68:0e:a6:bb:51:57:8d: 2c:71:2c:fa:0b:22:06:42:85:86:8e:88:e1:c1:0f: 0f:61:ce:a6:97:da:9b:fd:c9:4d:1e:7c:9d:74:e5: 69:dc:0b:b8:50:da:af:ae:0b:0c:6d:4e:e3:d2:7a: e5:f3:37:e6:a2:3c:0a:22:9c:6f:2e:de:d6:c7:93: 89:ef:85:aa:9f:fc:0c:28:cc:a8:02:36:b9:84:90: da:39:6f:f0:65:fc:ce:9f:a4:48:d1:89:2d:89:09: 50:d4:c9:af:e6:f5:b4:f4:d5:ac:8b:58:3b:f3:ad: 21:1c:26:7d:19:93:bf:4b:3a:dc:dd:0e:7e:f1:24: 53:8e:b3:28:ce:75:96:e8:f0:f0:86:8e:a4:e4:06: 0a:62:d4:4b:a3:1b:0d:9d:b4:55:26:ae:fd:a5:1e: 0d:01:d6:66:cd:fa:4f:74:b9:92:da:fd:22:4a:b9: 13:5d:f7:6e:26:56:a9:0b:19:ea:c8:03:80:b5:22: 6b:1d:dc:87:4f:c4:39:e5:65:04:f8:87:a1:ac:ec: e0:63:e2:b2:07:0d:fe:76:c1:4e:25:e5:95:84:05: 47:da:1a:c4:cb:1d:80:93:72:22:09:04:a5:f9:a1: c7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:96:8D:50:03:23:FA:59:2F:7A:D5:A9:4A:AC:FC:14:2F:E1:BB:51 X509v3 Authority Key Identifier: keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:20:81:16:4a:d3:a0:4a:69:45:16:3a:ec:34:0e:d8:95:0b: 36:eb:96:67:b9:ac:35:86:61:ee:32:11:54:e9:ff:82:3d:bd: 00:1a:fa:5a:87:62:b5:46:b9:f0:64:25:7d:18:5a:8c:3b:1a: 35:19:ac:7b:84:d1:51:f9:63:36:02:21:15:5f:70:9b:8a:1f: 0c:a6:c6:75:03:df:3e:52:84:c9:58:35:e8:0c:65:88:38:d7: c4:30:57:f4:52:6e:bf:44:5f:d0:53:7f:27:72:8d:48:90:73: 70:a2:f6:2e:2b:c9:79:62:38:73:92:44:52:70:3d:60:ba:27: 60:4e:59:1e:60:eb:39:ce:f2:91:6d:d5:c0:41:96:12:20:07: ea:17:31:bb:fc:60:39:9c:cd:33:35:d3:78:07:14:90:d1:68: 44:7c:51:92:d1:51:e4:b5:75:40:3b:e7:42:a6:51:f3:e4:f4: 19:01:29:a0:a4:50:34:59:63:8d:57:aa:ec:34:79:eb:99:35: da:60:01:32:10:af:1d:a2:60:c2:2c:5f:1c:29:0d:3c:11:53: 4f:9b:7c:53:7b:c7:e4:fa:e9:2f:88:b7:37:14:e3:99:cd:e0: 22:db:80:c9:18:84:52:0b:6d:f2:52:3c:ba:fb:79:54:59:ea: 17:da:65:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZd2Ds9efdYyRMRqvzyRgaT2U6NYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF NEZGQkFCODAeFw0yNjA5MjAxODE0MjVaFw0yNjA5MjEyMTAwMjVaMDMxMTAvBgNV BAMTKENCOTY4RDUwMDMyM0ZBNTkyRjdBRDVBOTRBQUNGQzE0MkZFMUJCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5+zNHLt/Euh/XmolcEFf0YhEl 2D6/aA6mu1FXjSxxLPoLIgZChYaOiOHBDw9hzqaX2pv9yU0efJ105WncC7hQ2q+u CwxtTuPSeuXzN+aiPAoinG8u3tbHk4nvhaqf/AwozKgCNrmEkNo5b/Bl/M6fpEjR iS2JCVDUya/m9bT01ayLWDvzrSEcJn0Zk79LOtzdDn7xJFOOsyjOdZbo8PCGjqTk Bgpi1EujGw2dtFUmrv2lHg0B1mbN+k90uZLa/SJKuRNd924mVqkLGerIA4C1Imsd 3IdPxDnlZQT4h6Gs7OBj4rIHDf52wU4l5ZWEBUfaGsTLHYCTciIJBKX5ocfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy5aNUAMj+lkvetWpSqz8FC/hu1EwHwYDVR0j BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3 NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC QUI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VD NkVFNEZGQkFCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkggRZK06BKaUUWOuw0DtiVCzbrlme5rDWG Ye4yEVTp/4I9vQAa+lqHYrVGufBkJX0YWow7GjUZrHuE0VH5YzYCIRVfcJuKHwym xnUD3z5ShMlYNegMZYg418QwV/RSbr9EX9BTfydyjUiQc3Ci9i4ryXliOHOSRFJw PWC6J2BOWR5g6znO8pFt1cBBlhIgB+oXMbv8YDmczTM103gHFJDRaER8UZLRUeS1 dUA750KmUfPk9BkBKaCkUDRZY41Xquw0eeuZNdpgATIQrx2iYMIsXxwpDTwRU0+b fFN7x+T66S+ItzcU45nN4CLbgMkYhFILbfJSPLr7eVRZ6hfaZek= -----END CERTIFICATE-----Generated at Mon Sep 21 10:18:18 2026 by rpki-client