$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: b3HT+RrbxRXN+rZSY96CGMPIgqwaD4EbUH0ns2zw7bw= Subject key identifier: 70:7E:73:F4:7A:6D:54:61:69:3C:C4:A9:E3:67:C1:8F:1E:83:74:F8 Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 72750814723D7D41A6CBCAA5B2BCB4E72404982B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:19:54 +0000 Manifest this update: Tue 21 Jul 2026 03:14:54 +0000 Manifest next update: Wed 22 Jul 2026 06:50:54 +0000 Files and hashes: 1: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: wuOeEMIuETvh7WAznQ7t6fkB7sCDFfoKvvyYLC2CIOU=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:75:08:14:72:3d:7d:41:a6:cb:ca:a5:b2:bc:b4:e7:24:04:98:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: Jul 21 03:14:54 2026 GMT Not After : Jul 22 06:50:54 2026 GMT Subject: CN=707E73F47A6D5461693CC4A9E367C18F1E8374F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:3b:8b:1f:3f:2a:a0:c4:c1:b7:e4:eb:63: b5:ff:ff:d0:65:0d:3d:34:a6:a7:c2:48:22:01:88: 99:0f:cd:8f:c2:74:1e:80:bd:e1:4c:8e:60:6c:98: 3e:cf:27:43:8c:47:90:b1:bf:66:98:b1:d2:e5:e6: d2:85:b0:b9:93:e9:f5:26:69:ff:37:29:fa:bc:91: cb:64:31:22:58:59:c4:f0:de:c4:fb:33:d2:30:73: 65:5d:53:a6:e7:f5:d9:14:70:b7:7e:58:c3:b3:86: 62:d9:d5:44:06:98:51:10:15:14:4e:fc:a0:68:19: cd:c0:9c:ef:26:d9:38:3c:58:21:d8:44:ad:80:24: da:66:ae:c4:c5:7f:a7:af:57:76:bc:ca:9f:cb:ad: e8:c3:da:b3:be:c7:59:a3:ba:7c:19:d6:3d:dc:4c: 17:71:ca:30:52:15:ad:f5:27:05:50:0c:a1:a3:09: 2b:67:38:33:22:78:30:b6:53:7f:b7:4f:ee:39:48: 0e:88:bf:8b:32:32:1c:1b:d5:c1:ed:a9:50:46:bb: d7:82:27:6f:49:28:32:b1:da:33:e8:7a:36:f3:52: 49:42:70:7d:5b:df:c8:58:0e:6b:da:73:19:0b:a0: 6c:c7:9f:fe:06:17:82:d9:c3:53:6e:c5:44:ec:67: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7E:73:F4:7A:6D:54:61:69:3C:C4:A9:E3:67:C1:8F:1E:83:74:F8 X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:75:e2:d9:5f:6d:57:e2:de:e1:59:1e:49:2a:fd:b7:a8:fc: 4c:d6:54:cf:ed:bd:7f:16:25:ff:a2:31:e8:6c:1b:e2:1c:2e: 00:05:63:fa:01:fb:66:d2:79:60:26:f3:0b:48:ed:a1:33:c9: 5a:86:e5:e1:1a:d7:5a:0d:86:09:ed:1f:fb:5b:7f:2d:24:29: 25:8a:60:71:94:12:f1:62:f8:9c:1b:99:f7:6a:b0:a8:7e:55: a8:47:22:dd:29:fc:e6:61:71:d7:55:52:c0:4a:b0:74:ae:f7: c7:66:37:92:27:0c:f9:ae:9b:6f:20:ff:a8:01:ec:8a:5e:f2: d3:ff:f2:63:b9:f5:47:9f:00:12:ed:d1:88:fc:1a:ff:6a:25: cc:6b:46:07:c9:e4:1b:de:4c:e4:bc:9c:3a:b7:1a:82:7c:6a: 34:39:cf:e2:9c:7a:cf:83:9b:25:90:93:3b:54:8b:dc:fd:e3: 6a:07:bd:c4:36:98:df:ff:bb:8e:9e:66:87:4e:45:87:4a:a6: 2f:11:99:2b:e0:46:5d:d7:69:26:56:f8:34:d2:b3:8d:25:1d: 6f:df:4d:74:e6:8d:36:53:cd:66:1a:ed:6d:14:a6:aa:dd:88: 9c:4c:d7:de:e9:54:84:97:cf:3d:9d:d4:52:53:db:c5:68:87: 9b:e7:2f:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnUIFHI9fUGmy8qlsry05yQEmCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA3MjEwMzE0NTRaFw0yNjA3MjIwNjUwNTRaMDMxMTAvBgNV BAMTKDcwN0U3M0Y0N0E2RDU0NjE2OTNDQzRBOUUzNjdDMThGMUU4Mzc0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBzuLHz8qoMTBt+TrY7X//9Bl DT00pqfCSCIBiJkPzY/CdB6AveFMjmBsmD7PJ0OMR5Cxv2aYsdLl5tKFsLmT6fUm af83Kfq8kctkMSJYWcTw3sT7M9Iwc2VdU6bn9dkUcLd+WMOzhmLZ1UQGmFEQFRRO /KBoGc3AnO8m2Tg8WCHYRK2AJNpmrsTFf6evV3a8yp/LrejD2rO+x1mjunwZ1j3c TBdxyjBSFa31JwVQDKGjCStnODMieDC2U3+3T+45SA6Iv4syMhwb1cHtqVBGu9eC J29JKDKx2jPoejbzUklCcH1b38hYDmvacxkLoGzHn/4GF4LZw1NuxUTsZxr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcH5z9HptVGFpPMSp42fBjx6DdPgwHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV14tlfbVfi3uFZHkkq/beo/EzWVM/tvX8W Jf+iMehsG+IcLgAFY/oB+2bSeWAm8wtI7aEzyVqG5eEa11oNhgntH/tbfy0kKSWK YHGUEvFi+JwbmfdqsKh+VahHIt0p/OZhcddVUsBKsHSu98dmN5InDPmum28g/6gB 7Ipe8tP/8mO59UefABLt0Yj8Gv9qJcxrRgfJ5BveTOS8nDq3GoJ8ajQ5z+Kces+D myWQkztUi9z942oHvcQ2mN//u46eZodORYdKpi8RmSvgRl3XaSZW+DTSs40lHW/f TXTmjTZTzWYa7W0UpqrdiJxM197pVISXzz2d1FJT28Voh5vnLwI= -----END CERTIFICATE-----Generated at Tue Jul 21 06:33:06 2026 by rpki-client