$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: RJKRTeEni8IpWH4oeWcQxrKLj5MsncWL+KxQKSQcjUk= Subject key identifier: BC:44:4C:B3:F6:CB:B6:79:04:6E:E2:35:40:F6:46:1E:1E:D5:0B:20 Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 185EADFA2C79B8EAE8F5C63A9DB254A211F60528 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:41:51 +0000 Manifest this update: Tue 02 Jun 2026 13:36:51 +0000 Manifest next update: Wed 03 Jun 2026 16:32:51 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) 2: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: JudRlzrNuzIIfkOjFK3I7oN5QX4uPjUnaDTNqjNWmbM=) 3: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5e:ad:fa:2c:79:b8:ea:e8:f5:c6:3a:9d:b2:54:a2:11:f6:05:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Jun 2 13:36:51 2026 GMT Not After : Jun 3 16:32:51 2026 GMT Subject: CN=BC444CB3F6CBB679046EE23540F6461E1ED50B20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:01:23:fa:79:3c:33:ca:73:bd:54:8b:13: b1:a1:41:a4:d7:0b:0f:1e:f9:f6:4c:79:cc:72:0c: 3c:9b:cb:f3:4c:ee:3c:08:15:d1:3e:05:33:9f:69: 85:c9:60:b4:45:31:67:54:e7:75:dc:54:10:6f:72: b0:9c:08:3a:35:8b:29:02:2b:4e:af:df:71:0b:4a: 7c:3b:a2:f0:41:a6:e8:18:4d:18:e2:1b:92:fe:ec: 59:1a:65:11:be:50:6b:79:44:a6:47:d4:4c:44:d2: 3b:79:ba:e4:f1:5d:6b:d3:a1:65:4a:34:5f:45:99: 3e:f1:3c:ad:fb:2a:c5:4f:dc:62:85:09:88:8b:ad: 6f:a0:a7:cd:3f:c2:b8:82:a8:86:f6:13:ad:56:83: 27:be:61:79:04:81:4e:cc:75:83:68:47:87:09:ec: 9a:3e:2a:b6:cc:56:82:88:e4:6c:bd:af:96:b0:0f: 24:c3:ce:79:d5:18:c4:e3:f7:a2:fb:b7:7a:bd:67: 77:86:6a:65:ba:ac:9f:82:a6:39:14:b2:3d:b1:13: 0b:fb:61:c4:16:fd:d1:3e:0c:96:0a:9f:96:80:96: 6b:bb:94:cf:29:bf:fd:be:5f:6f:0f:27:92:db:bf: 6a:96:e4:a3:fa:5a:81:f9:d4:09:c8:93:39:f8:92: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:44:4C:B3:F6:CB:B6:79:04:6E:E2:35:40:F6:46:1E:1E:D5:0B:20 X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9c:21:64:1f:d9:21:6d:4a:34:0e:03:d0:c8:96:44:88:5e: 82:67:62:30:5a:4c:52:18:13:2f:9e:b4:a8:c5:02:bf:a0:8d: cd:41:77:74:e7:99:46:6c:f2:fc:b2:4d:b0:78:15:92:55:8b: 5e:f8:0a:93:58:8b:0e:2a:37:7b:67:8d:16:f9:02:ef:84:33: 47:33:1f:7b:cd:51:62:c8:4d:48:37:02:ae:c6:63:f2:96:f5: 51:56:ae:67:71:49:a8:13:8a:71:54:52:2b:00:a0:86:d9:7a: 22:ff:c0:85:0e:e0:c7:67:11:dd:de:2b:ce:16:1b:53:c2:21: c8:7e:6c:ed:e0:12:be:01:18:55:87:a6:53:cf:6e:f3:f7:44: 54:ec:54:45:a3:c2:df:09:3e:45:3c:2c:c4:b5:b4:01:35:a6: c7:1f:f6:4e:a6:f4:2e:cb:41:fe:11:28:cc:8b:40:e8:95:c8: 16:9e:4e:68:85:9f:53:41:9a:7e:42:70:f5:50:ea:5b:de:68: 21:82:fb:86:d6:5f:63:20:9c:84:15:cd:f2:30:68:08:4b:67: ba:b6:77:0e:95:ce:34:f1:4f:32:1b:96:52:d2:7b:07:76:70: 37:c6:8c:af:6d:a2:cb:58:86:e2:e9:c7:c4:00:14:6a:2e:f5: 16:1f:a0:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGF6t+ix5uOro9cY6nbJUohH2BSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA2MDIxMzM2NTFaFw0yNjA2MDMxNjMyNTFaMDMxMTAvBgNV BAMTKEJDNDQ0Q0IzRjZDQkI2NzkwNDZFRTIzNTQwRjY0NjFFMUVENTBCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTwEj+nk8M8pzvVSLE7GhQaTX Cw8e+fZMecxyDDyby/NM7jwIFdE+BTOfaYXJYLRFMWdU53XcVBBvcrCcCDo1iykC K06v33ELSnw7ovBBpugYTRjiG5L+7FkaZRG+UGt5RKZH1ExE0jt5uuTxXWvToWVK NF9FmT7xPK37KsVP3GKFCYiLrW+gp80/wriCqIb2E61Wgye+YXkEgU7MdYNoR4cJ 7Jo+KrbMVoKI5Gy9r5awDyTDznnVGMTj96L7t3q9Z3eGamW6rJ+CpjkUsj2xEwv7 YcQW/dE+DJYKn5aAlmu7lM8pv/2+X28PJ5Lbv2qW5KP6WoH51AnIkzn4kssRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvERMs/bLtnkEbuI1QPZGHh7VCyAwHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGcIWQf2SFtSjQOA9DIlkSIXoJnYjBaTFIY Ey+etKjFAr+gjc1Bd3TnmUZs8vyyTbB4FZJVi174CpNYiw4qN3tnjRb5Au+EM0cz H3vNUWLITUg3Aq7GY/KW9VFWrmdxSagTinFUUisAoIbZeiL/wIUO4MdnEd3eK84W G1PCIch+bO3gEr4BGFWHplPPbvP3RFTsVEWjwt8JPkU8LMS1tAE1pscf9k6m9C7L Qf4RKMyLQOiVyBaeTmiFn1NBmn5CcPVQ6lveaCGC+4bWX2MgnIQVzfIwaAhLZ7q2 dw6VzjTxTzIbllLSewd2cDfGjK9tostYhuLpx8QAFGou9RYfoP4= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:28 2026 by rpki-client