$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft File: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft (raw, json) Hash identifier: Apm1hQAwFcvnXrdT8sdbwH+pCHIW7lPvN4NGDjYKV7M= Subject key identifier: DD:E8:DF:44:0F:35:F0:C2:2F:B6:33:62:B3:F4:91:DF:E6:F5:B8:53 Authority key identifier: BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 Certificate issuer: /CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Certificate serial: 0F46C2960FC2A49031FA87F67362A9171D878E8D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 17:03:35 +0000 Manifest this update: Wed 02 Sep 2026 16:58:35 +0000 Manifest next update: Thu 03 Sep 2026 18:50:35 +0000 Files and hashes: 1: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: InX610PRk4RjrPQDGJ9PHRqZSNIWPEj//hXhXRso8Zk=) 2: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl (hash: 8VA/mDVqmMJfx7JKrbTdmSol5c7VF29GxJgSZycUlt4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 18:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:46:c2:96:0f:c2:a4:90:31:fa:87:f6:73:62:a9:17:1d:87:8e:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Validity Not Before: Sep 2 16:58:35 2026 GMT Not After : Sep 3 18:50:35 2026 GMT Subject: CN=DDE8DF440F35F0C22FB63362B3F491DFE6F5B853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:fa:e2:14:e8:1e:e4:c2:83:92:57:3c:03: 29:af:52:0c:d1:69:66:06:44:42:0f:a5:9a:93:6a: 36:7d:f7:41:7b:7a:63:22:5b:31:e0:70:72:b7:9d: 4a:a1:93:c5:7c:57:5c:20:8d:23:69:ea:86:f1:23: 4b:05:e2:80:70:df:5d:33:3d:2b:a6:8f:a3:e1:4d: bd:93:b2:c6:e0:37:aa:2f:7a:56:c0:b9:ce:4f:46: 06:e0:45:da:06:ac:ec:7d:8c:fb:85:2d:38:98:fa: 72:e9:8c:cb:2a:eb:49:9d:e4:54:ea:37:6f:82:97: b2:cc:fb:d8:c1:b4:10:b9:b7:d9:ac:60:23:e0:44: 54:27:c5:2b:c3:97:35:e3:14:1b:cb:28:30:82:f5: 2e:dd:98:7d:44:e8:5a:48:6d:43:cf:f2:67:9f:0e: a4:d2:bf:9a:7c:4f:1b:8f:f0:1a:f0:71:4e:db:e8: 52:91:c2:44:c8:07:19:87:2a:9c:18:90:65:29:77: fa:fd:52:0a:d7:8a:a5:72:d4:58:97:db:9a:fe:1d: 61:8f:7b:35:81:57:17:ea:39:19:29:51:72:5a:6f: e6:99:17:c8:a3:c1:f9:7b:6d:07:43:ab:7f:12:3f: a9:48:97:8a:86:b6:c8:18:87:f7:50:fc:2d:e7:c3: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E8:DF:44:0F:35:F0:C2:2F:B6:33:62:B3:F4:91:DF:E6:F5:B8:53 X509v3 Authority Key Identifier: keyid:BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4b:97:1f:6a:8b:62:da:a7:9e:c7:ef:e1:4d:57:3c:95:f6: 45:63:13:14:18:a0:c4:15:2b:bf:01:fc:5a:3d:fe:c1:42:99: 54:04:84:74:48:0b:68:c0:eb:80:f2:f6:3e:61:19:39:45:e3: 08:e5:8b:72:01:ec:dc:52:0d:a4:12:03:50:d2:f7:a8:f9:f2: 13:5f:f0:da:23:25:4f:35:19:14:64:95:14:86:2c:7e:5e:01: b9:44:8f:5d:13:3b:13:07:11:cd:36:5a:aa:c4:9c:9c:0b:9d: bc:40:29:43:21:b0:0e:30:ad:89:48:76:f2:67:81:50:6d:32: d8:cc:8b:e1:80:4e:9d:3a:c7:e9:47:ff:38:f9:e5:01:03:0c: be:50:62:16:73:4a:b9:cf:93:43:16:29:d9:9c:14:e6:48:ae: d4:0a:07:ad:24:f7:80:f8:4c:09:fa:6c:8b:2e:88:18:9c:34: cc:06:f1:84:28:c0:dd:44:a8:d7:29:3e:34:b5:21:26:2f:7a: 15:22:b1:32:07:39:93:5e:3f:29:93:42:be:f7:11:a7:49:6d: 14:5a:1f:02:41:e5:79:47:93:02:72:5e:76:09:3c:e9:86:bc: 32:7c:73:9e:ca:31:72:4a:77:3e:0a:2b:a4:7a:73:cb:0a:b3: 25:77:8b:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0bClg/CpJAx+of2c2KpFx2Hjo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4 RjZCNjMzMjAeFw0yNjA5MDIxNjU4MzVaFw0yNjA5MDMxODUwMzVaMDMxMTAvBgNV BAMTKERERThERjQ0MEYzNUYwQzIyRkI2MzM2MkIzRjQ5MURGRTZGNUI4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkK/riFOge5MKDklc8AymvUgzR aWYGREIPpZqTajZ990F7emMiWzHgcHK3nUqhk8V8V1wgjSNp6obxI0sF4oBw310z PSumj6PhTb2TssbgN6ovelbAuc5PRgbgRdoGrOx9jPuFLTiY+nLpjMsq60md5FTq N2+Cl7LM+9jBtBC5t9msYCPgRFQnxSvDlzXjFBvLKDCC9S7dmH1E6FpIbUPP8mef DqTSv5p8TxuP8BrwcU7b6FKRwkTIBxmHKpwYkGUpd/r9UgrXiqVy1FiX25r+HWGP ezWBVxfqORkpUXJab+aZF8ijwfl7bQdDq38SP6lIl4qGtsgYh/dQ/C3nw3uXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ejfRA818MIvtjNis/SR3+b1uFMwHwYDVR0j BBgwFoAUu95zUrK+CpEqD1pFbcBUdY9rYzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZjYmI2YWUtMTM4ZS00ZDJiLTkzZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJC MkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4RjZCNjMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkRFNzM1MkIyQkUwQTkxMkEwRjVBNDU2REMwNTQ3NThGNkI2 MzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0 NzU4RjZCNjMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZLlx9qi2Lap57H7+FNVzyV9kVjExQYoMQV K78B/Fo9/sFCmVQEhHRIC2jA64Dy9j5hGTlF4wjli3IB7NxSDaQSA1DS96j58hNf 8NojJU81GRRklRSGLH5eAblEj10TOxMHEc02WqrEnJwLnbxAKUMhsA4wrYlIdvJn gVBtMtjMi+GATp06x+lH/zj55QEDDL5QYhZzSrnPk0MWKdmcFOZIrtQKB60k94D4 TAn6bIsuiBicNMwG8YQowN1EqNcpPjS1ISYvehUisTIHOZNePymTQr73EadJbRRa HwJB5XlHkwJyXnYJPOmGvDJ8c57KMXJKdz4KK6R6c8sKsyV3i0A= -----END CERTIFICATE-----Generated at Thu Sep 3 05:56:32 2026 by rpki-client