$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: 0fjy0ckLzy+f9iAbRoCRjejiiirVgUzhOPXJN1Kv+kY= Subject key identifier: E6:40:9B:9E:6C:6C:97:5E:28:16:18:83:32:77:DF:53:9C:FF:1E:01 Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 0AF51908F8765C6170C40DBFBFA69AB71E07CD11 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 06:15:27 +0000 Manifest this update: Thu 03 Sep 2026 06:10:27 +0000 Manifest next update: Fri 04 Sep 2026 08:29:27 +0000 Files and hashes: 1: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) 2: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: dioVXdIde85jnF6lgTZq08Tq6ZuC+GXyjKKzY56rY7w=) 3: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f5:19:08:f8:76:5c:61:70:c4:0d:bf:bf:a6:9a:b7:1e:07:cd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Sep 3 06:10:27 2026 GMT Not After : Sep 4 08:29:27 2026 GMT Subject: CN=E6409B9E6C6C975E281618833277DF539CFF1E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f0:09:42:80:cc:a4:d3:d0:8f:77:f3:d3:58: ff:a0:c0:54:8b:d7:47:6d:8a:ad:96:73:8a:b1:7d: ee:18:36:f1:6a:e9:ae:a2:67:b2:ea:8f:da:77:3b: af:28:f9:74:ed:f2:de:4e:ff:f7:16:41:14:13:b5: cf:c6:d3:10:a1:51:ba:32:9b:5c:47:eb:1c:07:c3: c7:d0:c9:83:33:85:f1:56:fb:85:1e:31:b5:de:3b: 2e:91:33:5b:ef:5b:93:93:7b:71:08:b5:8f:c2:74: 0f:69:29:d3:02:05:34:e7:f7:73:e3:12:91:f4:84: 0f:a4:9d:fb:46:7a:90:0f:22:96:02:cf:eb:68:aa: b1:68:9c:a6:ed:01:63:27:0c:1a:db:48:a5:0e:d9: 2d:82:7d:a9:f1:1e:d2:fd:63:91:82:8f:f5:a3:bd: 8e:b7:e7:df:f8:64:2d:62:84:39:86:f5:70:fc:cc: 0f:f8:7d:c8:7b:22:05:c8:08:63:af:59:e1:8c:d4: 66:95:20:84:58:8d:7b:1f:ea:37:05:d5:d7:10:53: d4:5e:0e:f2:a0:32:21:ec:d8:67:5a:0c:a8:eb:8c: 91:59:a2:7b:2c:b8:f8:f1:9d:30:d3:93:03:a8:cc: 25:f7:09:54:70:4c:35:f5:82:2a:b4:2f:03:02:48: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:9B:9E:6C:6C:97:5E:28:16:18:83:32:77:DF:53:9C:FF:1E:01 X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f0:c7:31:ac:fd:f8:9d:e6:6e:1b:63:46:59:02:a0:11:0c: 1f:94:c4:54:f4:7c:46:c6:62:44:d6:11:28:b0:58:2d:e5:fd: b0:c0:b5:85:3e:5a:33:7b:7b:d1:7d:be:99:96:14:a6:7e:d1: 3d:66:57:ed:79:da:56:11:77:8f:50:7c:0d:76:53:0d:26:f9: 16:82:3d:63:05:e3:b0:6e:ce:3d:f4:d2:e4:b6:9b:03:e4:58: e2:bd:e6:55:cf:9c:bc:b4:e3:b3:7d:97:8f:17:92:75:b6:b5: 24:c8:e9:53:ab:87:cc:a1:a4:d3:5a:31:1d:3b:54:05:1d:e5: 33:4d:69:81:a4:4a:40:cc:fa:0a:4d:f9:02:0c:05:da:2f:e6: f3:ef:b3:2a:47:72:23:94:da:8d:1e:cb:04:b7:26:25:37:e5: ed:92:94:41:cd:7c:16:d3:ac:3c:b0:05:5a:1e:29:47:99:54: 63:6d:80:73:e3:ce:9b:80:f3:d3:f9:a9:bc:8e:cd:0c:f2:8d: 67:0e:61:48:9c:68:28:dd:86:8d:7b:f4:cf:d8:7d:2d:86:32: c7:aa:c8:0f:8c:eb:05:32:72:8f:34:7e:1a:54:3b:55:52:d8: b3:45:d1:8c:d9:04:e5:db:56:c8:b6:eb:29:bd:fe:d9:49:21: 57:07:3e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvUZCPh2XGFwxA2/v6aatx4HzREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA5MDMwNjEwMjdaFw0yNjA5MDQwODI5MjdaMDMxMTAvBgNV BAMTKEU2NDA5QjlFNkM2Qzk3NUUyODE2MTg4MzMyNzdERjUzOUNGRjFFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd8AlCgMyk09CPd/PTWP+gwFSL 10dtiq2Wc4qxfe4YNvFq6a6iZ7Lqj9p3O68o+XTt8t5O//cWQRQTtc/G0xChUboy m1xH6xwHw8fQyYMzhfFW+4UeMbXeOy6RM1vvW5OTe3EItY/CdA9pKdMCBTTn93Pj EpH0hA+knftGepAPIpYCz+toqrFonKbtAWMnDBrbSKUO2S2CfanxHtL9Y5GCj/Wj vY6359/4ZC1ihDmG9XD8zA/4fch7IgXICGOvWeGM1GaVIIRYjXsf6jcF1dcQU9Re DvKgMiHs2GdaDKjrjJFZonssuPjxnTDTkwOozCX3CVRwTDX1giq0LwMCSApDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5kCbnmxsl14oFhiDMnffU5z/HgEwHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfwxzGs/fid5m4bY0ZZAqARDB+UxFT0fEbG YkTWESiwWC3l/bDAtYU+WjN7e9F9vpmWFKZ+0T1mV+152lYRd49QfA12Uw0m+RaC PWMF47Buzj300uS2mwPkWOK95lXPnLy047N9l48XknW2tSTI6VOrh8yhpNNaMR07 VAUd5TNNaYGkSkDM+gpN+QIMBdov5vPvsypHciOU2o0eywS3JiU35e2SlEHNfBbT rDywBVoeKUeZVGNtgHPjzpuA89P5qbyOzQzyjWcOYUicaCjdho179M/YfS2GMseq yA+M6wUyco80fhpUO1VS2LNF0YzZBOXbVsi26ym9/tlJIVcHPgg= -----END CERTIFICATE-----Generated at Thu Sep 3 09:48:41 2026 by rpki-client