$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: 8d93I69ZVmTjhiQBVjdPtW7NT5ves1nPacQgwBrpVtQ= Subject key identifier: 70:56:FC:CE:8B:DD:C6:AA:23:37:17:00:78:D5:ED:84:4D:EA:5A:6A Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 21D3CD7D54E9EBC938D926893C32BEE0F2BE38BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 06:51:39 +0000 Manifest this update: Tue 03 Nov 2026 06:46:39 +0000 Manifest next update: Wed 04 Nov 2026 07:45:39 +0000 Files and hashes: 1: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: U/bo+MOLXIJFscyFa1jpTWJuXb7TFYawqTI2z2AYqcI=) 2: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) 3: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) 4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 07:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d3:cd:7d:54:e9:eb:c9:38:d9:26:89:3c:32:be:e0:f2:be:38:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Nov 3 06:46:39 2026 GMT Not After : Nov 4 07:45:39 2026 GMT Subject: CN=7056FCCE8BDDC6AA2337170078D5ED844DEA5A6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:61:d7:58:fd:ff:79:67:d7:d2:31:60:63: 48:7e:62:3d:9e:92:e9:80:48:3d:5f:22:da:a3:0b: 2b:08:df:2e:93:02:23:50:4a:a0:20:86:40:7f:24: 82:c5:1d:f1:44:6f:bc:8e:4b:d7:24:5c:fb:4a:a4: 5f:b6:51:2b:d5:b6:69:ea:24:09:2d:4b:50:64:54: 14:85:e9:57:a0:85:e9:0f:a9:58:d7:d5:2a:53:3f: 7d:12:4c:40:de:03:dc:01:80:cb:68:65:31:1c:9c: c9:6d:52:8c:a7:15:e8:9d:83:f1:87:fc:40:99:97: 5e:68:ca:85:a8:23:6b:ac:a4:2a:24:e3:16:c8:31: d3:f5:91:0a:ba:71:ea:a1:54:9e:ae:ca:7e:12:1f: 6f:24:af:c4:6a:bf:50:3c:ba:3e:59:84:be:92:a4: 64:16:85:91:50:41:1f:a2:01:36:f7:e2:40:d6:bc: 6b:ce:34:de:8d:32:50:0e:4f:86:59:40:de:59:16: e7:04:ee:5f:f7:af:b8:99:77:25:c2:ea:e2:da:d3: 6e:18:ac:b3:3b:82:8e:7c:ba:15:09:12:52:db:f1: 04:2f:ec:7e:df:62:99:7c:c7:e0:ee:36:05:02:c2: 60:5d:17:ea:de:f7:f1:6b:60:b0:79:e7:2a:2e:6b: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:56:FC:CE:8B:DD:C6:AA:23:37:17:00:78:D5:ED:84:4D:EA:5A:6A X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:66:91:5c:19:a3:54:a0:a6:c1:9b:c9:01:f1:14:2b:3a:0c: 18:5d:68:b6:a9:77:a3:1f:90:f9:46:59:47:dc:f7:ca:23:c6: 49:34:35:b2:54:37:2d:46:fa:04:90:bd:e4:6f:2f:fe:b3:3e: 92:9c:42:00:bb:66:6d:43:d5:5d:29:85:27:27:94:82:f1:c7: 8a:6d:3e:fa:d6:86:ff:a5:97:cd:58:00:3b:7c:af:7f:2e:75: f7:eb:e2:b0:a9:fa:af:4c:03:b3:51:d0:fa:ac:d3:8a:1a:2c: 4a:45:a0:be:ca:5b:17:8e:fc:b1:2f:4e:d2:58:5d:c7:dd:65: 19:a6:e1:56:f2:05:44:2b:95:f2:67:09:6f:78:b7:aa:03:08: fb:52:fc:79:2e:76:7e:64:69:f5:5f:3a:65:7b:c0:40:d3:6a: 53:d6:c3:0f:19:6e:c7:3b:c5:79:3f:55:e5:50:1a:8a:be:03: ae:f1:9a:2c:fd:6f:f6:bb:fe:34:05:30:f0:e5:2c:ce:5d:6d: 71:5d:2c:dc:2c:29:30:fd:e3:e0:be:e1:00:f8:56:5c:8e:4e: dc:c2:12:15:f0:80:4d:56:21:17:0e:2e:34:2f:23:61:f6:d1: 8e:f4:bb:68:c2:af:cd:59:da:1f:a1:a7:35:04:df:75:fb:f8: 35:c8:38:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdPNfVTp68k42SaJPDK+4PK+OL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjExMDMwNjQ2MzlaFw0yNjExMDQwNzQ1MzlaMDMxMTAvBgNV BAMTKDcwNTZGQ0NFOEJEREM2QUEyMzM3MTcwMDc4RDVFRDg0NERFQTVBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+WHXWP3/eWfX0jFgY0h+Yj2e kumASD1fItqjCysI3y6TAiNQSqAghkB/JILFHfFEb7yOS9ckXPtKpF+2USvVtmnq JAktS1BkVBSF6VeghekPqVjX1SpTP30STEDeA9wBgMtoZTEcnMltUoynFeidg/GH /ECZl15oyoWoI2uspCok4xbIMdP1kQq6ceqhVJ6uyn4SH28kr8Rqv1A8uj5ZhL6S pGQWhZFQQR+iATb34kDWvGvONN6NMlAOT4ZZQN5ZFucE7l/3r7iZdyXC6uLa024Y rLM7go58uhUJElLb8QQv7H7fYpl8x+DuNgUCwmBdF+re9/FrYLB55youa+9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFb8zovdxqojNxcAeNXthE3qWmowHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVmkVwZo1SgpsGbyQHxFCs6DBhdaLapd6Mf kPlGWUfc98ojxkk0NbJUNy1G+gSQveRvL/6zPpKcQgC7Zm1D1V0phScnlILxx4pt PvrWhv+ll81YADt8r38udffr4rCp+q9MA7NR0Pqs04oaLEpFoL7KWxeO/LEvTtJY XcfdZRmm4VbyBUQrlfJnCW94t6oDCPtS/Hkudn5kafVfOmV7wEDTalPWww8Zbsc7 xXk/VeVQGoq+A67xmiz9b/a7/jQFMPDlLM5dbXFdLNwsKTD94+C+4QD4VlyOTtzC EhXwgE1WIRcOLjQvI2H20Y70u2jCr81Z2h+hpzUE33X7+DXIODY= -----END CERTIFICATE-----Generated at Tue Nov 3 12:05:13 2026 by rpki-client