$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: efyzOfJuG6FNa9ZfQq0IMDgY4qVGNnUXdsJFgY1GKF4= Subject key identifier: A0:88:3D:6F:DB:5A:80:4E:3D:97:33:1D:5D:9A:E9:A5:6C:ED:DF:B7 Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 0F6453E6D28CD410EF9EB418680AC7F740141CCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:33:44 +0000 Manifest this update: Thu 03 Sep 2026 00:28:44 +0000 Manifest next update: Fri 04 Sep 2026 04:12:44 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 4: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: dFA0jIjfGID+FbfGCTdVmdVRiHolUprH5bBoPrkvDzk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:64:53:e6:d2:8c:d4:10:ef:9e:b4:18:68:0a:c7:f7:40:14:1c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Sep 3 00:28:44 2026 GMT Not After : Sep 4 04:12:44 2026 GMT Subject: CN=A0883D6FDB5A804E3D97331D5D9AE9A56CEDDFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:70:42:14:d9:d8:8c:44:5c:1b:7e:55:27:48: 3d:e5:6b:4f:dd:59:f0:e3:18:a5:4b:cc:c4:15:bb: 28:68:94:70:85:2b:57:01:59:7f:20:7c:ff:dc:39: 58:a6:81:c6:f5:1d:ee:0b:dd:51:46:87:30:a4:27: ed:6b:c1:4f:aa:e8:22:9a:d4:93:61:69:a2:ba:89: 2b:b4:73:99:7e:19:f7:ba:36:8e:a6:0b:34:96:21: 25:9e:3a:4a:80:da:9d:ea:cc:bd:c2:28:57:f0:5f: 65:8d:5d:68:fb:8c:68:8e:e8:d2:0d:78:0a:c4:13: 3b:55:3c:1b:7f:6e:d8:dc:55:83:0f:bc:c4:01:22: 2b:0a:ed:9c:98:dc:27:ad:f7:c5:73:17:3c:9a:e9: 59:bc:9a:98:ad:2c:b9:f7:bd:8b:db:f6:8d:19:26: 18:6e:cd:37:20:82:56:f8:db:d1:fe:3d:e5:57:48: d4:70:63:a0:cf:ce:3a:81:8a:da:e1:4f:d3:6c:76: c2:a3:18:59:bd:60:93:7d:a0:ae:75:e5:8b:0a:6a: 2c:3a:c4:20:79:65:69:2a:1d:d7:94:2b:a1:54:74: da:67:29:00:49:bb:b1:dc:56:8b:33:88:83:b7:ba: e3:4b:b6:48:72:82:e8:3b:62:38:0b:69:73:f5:1f: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:88:3D:6F:DB:5A:80:4E:3D:97:33:1D:5D:9A:E9:A5:6C:ED:DF:B7 X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:31:06:67:ca:ab:7b:56:db:c1:4b:6e:45:0a:4b:32:11:20: 02:5d:93:57:4f:3c:57:12:8e:13:81:c6:d4:20:83:93:f1:90: f9:89:e6:14:e7:ae:77:bd:00:d5:ba:da:38:74:8e:9d:da:7c: 98:cd:92:1d:b5:94:1f:6c:e9:2f:4b:06:9c:8b:89:69:c3:99: a4:66:98:37:b9:d3:fc:93:2e:62:2a:ac:ec:22:e2:66:f7:9e: 1c:d6:37:21:e0:72:f8:c7:6d:7a:6c:aa:25:0d:64:9f:a7:a7: 86:62:c9:b6:51:20:3d:ce:f9:d1:7e:43:1d:0a:ff:e5:42:47: a6:aa:26:6b:6e:e7:d1:84:cc:79:ac:6e:6f:90:25:0d:cd:13: d9:b2:0b:7a:a0:73:33:63:78:43:cf:86:20:9f:33:57:28:08: ca:f6:de:bc:12:48:f5:d3:9f:c1:b6:db:da:10:da:67:b3:96: cd:11:db:92:33:16:9e:e5:9d:62:7a:01:5b:98:29:9e:ef:bf: 2b:b8:14:b9:be:d4:6a:60:d0:52:14:37:d5:ea:6e:b4:c5:54: 36:9b:d3:a7:72:ff:0b:70:9c:ea:37:b5:e3:9c:df:9e:ed:dc: c4:72:d7:f2:c7:16:b8:0b:da:10:31:aa:dc:63:dc:c8:3c:63: 78:6d:e0:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2RT5tKM1BDvnrQYaArH90AUHM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA5MDMwMDI4NDRaFw0yNjA5MDQwNDEyNDRaMDMxMTAvBgNV BAMTKEEwODgzRDZGREI1QTgwNEUzRDk3MzMxRDVEOUFFOUE1NkNFRERGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacEIU2diMRFwbflUnSD3la0/d WfDjGKVLzMQVuyholHCFK1cBWX8gfP/cOVimgcb1He4L3VFGhzCkJ+1rwU+q6CKa 1JNhaaK6iSu0c5l+Gfe6No6mCzSWISWeOkqA2p3qzL3CKFfwX2WNXWj7jGiO6NIN eArEEztVPBt/btjcVYMPvMQBIisK7ZyY3Cet98VzFzya6Vm8mpitLLn3vYvb9o0Z JhhuzTcgglb429H+PeVXSNRwY6DPzjqBitrhT9NsdsKjGFm9YJN9oK515YsKaiw6 xCB5ZWkqHdeUK6FUdNpnKQBJu7HcVosziIO3uuNLtkhygug7YjgLaXP1HweNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoIg9b9tagE49lzMdXZrppWzt37cwHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkxBmfKq3tW28FLbkUKSzIRIAJdk1dPPFcS jhOBxtQgg5PxkPmJ5hTnrne9ANW62jh0jp3afJjNkh21lB9s6S9LBpyLiWnDmaRm mDe50/yTLmIqrOwi4mb3nhzWNyHgcvjHbXpsqiUNZJ+np4ZiybZRID3O+dF+Qx0K /+VCR6aqJmtu59GEzHmsbm+QJQ3NE9myC3qgczNjeEPPhiCfM1coCMr23rwSSPXT n8G229oQ2mezls0R25IzFp7lnWJ6AVuYKZ7vvyu4FLm+1Gpg0FIUN9XqbrTFVDab 06dy/wtwnOo3teOc357t3MRy1/LHFrgL2hAxqtxj3Mg8Y3ht4PM= -----END CERTIFICATE-----Generated at Thu Sep 3 03:14:51 2026 by rpki-client