$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: P7g736EJluOXfmNtDsrvTFXm/Y0rFLN1DzEotLgnw2g= Subject key identifier: 7C:87:56:60:A3:2C:7C:57:4D:15:8D:D5:C3:5B:6C:21:BD:5B:3C:80 Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 449BA838F41C606C32ED7AC2F860D3F71B13FBB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 13 Signing time: Fri 15 May 2026 20:25:52 +0000 Manifest this update: Fri 15 May 2026 20:20:52 +0000 Manifest next update: Sat 16 May 2026 22:59:52 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 4: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: gBBVEiEnOqxWE3krsP9On+cI3/CQTVbbWNic9Wp8pfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 22:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9b:a8:38:f4:1c:60:6c:32:ed:7a:c2:f8:60:d3:f7:1b:13:fb:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: May 15 20:20:52 2026 GMT Not After : May 16 22:59:52 2026 GMT Subject: CN=7C875660A32C7C574D158DD5C35B6C21BD5B3C80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:82:e5:10:e2:5f:07:26:c6:aa:fa:b7:2e: db:cb:a5:d7:db:39:1e:12:ad:d6:6d:b5:89:e0:26: 4f:8f:ac:a5:0f:b9:b9:59:9d:51:08:7d:41:6f:47: 15:d7:f9:85:40:91:45:4d:b3:fd:43:3c:3d:3d:ea: bf:04:07:b4:9c:88:ce:8d:96:a4:46:2c:ba:58:c8: 2b:0e:0d:4e:b5:69:04:f9:47:08:4e:68:37:e9:8b: b1:34:77:22:87:bc:5f:6b:0d:b1:33:75:4b:65:2a: 12:bb:5a:ac:5e:53:ff:cf:39:3a:2f:2a:52:12:ef: b7:6d:98:50:1d:33:56:d5:45:e3:37:64:1b:70:9e: a8:d3:24:56:29:71:82:c4:c2:1c:85:57:9f:07:08: 72:02:b6:a4:c3:f9:66:de:e8:0d:e6:8f:94:ea:23: c2:e8:3e:97:2e:06:17:4b:ff:6c:ac:6c:49:8a:65: 4a:d3:0b:5a:0a:f1:1c:e7:6d:83:73:ea:05:78:ee: a7:1c:fc:10:6f:5f:b3:61:e8:d6:8e:e8:8e:0b:16: ab:80:98:28:b3:46:45:48:34:df:da:8b:52:1d:21: be:86:76:44:e5:ea:84:92:38:d0:85:d2:de:01:15: b5:61:66:d8:b9:25:6c:b1:c2:d8:c1:d4:0b:27:e3: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:87:56:60:A3:2C:7C:57:4D:15:8D:D5:C3:5B:6C:21:BD:5B:3C:80 X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3b:65:d3:3f:ea:46:71:a2:8d:0f:39:6d:4c:26:4c:24:ae: ea:5e:4c:fb:eb:46:8b:b7:b8:b7:80:e4:a4:de:fc:ef:8e:de: aa:f4:90:9e:46:23:ea:b6:d0:6a:4c:b9:ca:e0:a8:ec:09:84: f5:1b:8c:f9:fd:27:40:38:9c:9f:a5:78:af:05:9a:81:81:9d: 3d:65:f2:b4:f2:8f:a0:4f:8d:1c:62:66:74:e0:45:a4:07:49: 14:20:d3:83:33:fd:ef:4d:15:57:a9:d8:87:34:be:a9:cb:e4: ce:65:0f:5e:e2:e5:a2:95:5d:f4:a5:4d:ec:89:d0:6d:70:37: 7d:4a:7e:cc:c5:ca:49:c5:e4:9d:4a:62:02:a9:01:6a:f0:b2: e7:87:87:63:c0:7d:93:6c:5c:5f:cf:17:5e:c2:0b:4f:57:48: 42:81:f8:69:8b:e8:96:d7:4e:d2:f5:58:bc:85:50:9a:cb:66: 0a:28:36:ec:d1:57:25:5f:a0:62:e5:70:8e:44:2b:f6:75:14: 93:79:cd:1c:d4:e3:ae:0f:67:6e:0a:b9:13:f6:67:b7:82:9f: 2e:fc:90:6e:86:fa:1d:33:f2:4d:72:1e:56:72:83:45:36:6e: 21:24:05:2a:af:2d:d5:98:19:d9:89:cb:f6:48:83:71:dd:d0: ab:64:52:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJuoOPQcYGwy7XrC+GDT9xsT+7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA1MTUyMDIwNTJaFw0yNjA1MTYyMjU5NTJaMDMxMTAvBgNV BAMTKDdDODc1NjYwQTMyQzdDNTc0RDE1OERENUMzNUI2QzIxQkQ1QjNDODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvoLlEOJfBybGqvq3LtvLpdfb OR4SrdZttYngJk+PrKUPublZnVEIfUFvRxXX+YVAkUVNs/1DPD096r8EB7SciM6N lqRGLLpYyCsODU61aQT5RwhOaDfpi7E0dyKHvF9rDbEzdUtlKhK7WqxeU//POTov KlIS77dtmFAdM1bVReM3ZBtwnqjTJFYpcYLEwhyFV58HCHICtqTD+Wbe6A3mj5Tq I8LoPpcuBhdL/2ysbEmKZUrTC1oK8RznbYNz6gV47qcc/BBvX7Nh6NaO6I4LFquA mCizRkVINN/ai1IdIb6GdkTl6oSSONCF0t4BFbVhZti5JWyxwtjB1Asn4xiTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfIdWYKMsfFdNFY3Vw1tsIb1bPIAwHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIE7ZdM/6kZxoo0POW1MJkwkrupeTPvrRou3 uLeA5KTe/O+O3qr0kJ5GI+q20GpMucrgqOwJhPUbjPn9J0A4nJ+leK8FmoGBnT1l 8rTyj6BPjRxiZnTgRaQHSRQg04Mz/e9NFVep2Ic0vqnL5M5lD17i5aKVXfSlTeyJ 0G1wN31KfszFyknF5J1KYgKpAWrwsueHh2PAfZNsXF/PF17CC09XSEKB+GmL6JbX TtL1WLyFUJrLZgooNuzRVyVfoGLlcI5EK/Z1FJN5zRzU464PZ24KuRP2Z7eCny78 kG6G+h0z8k1yHlZyg0U2biEkBSqvLdWYGdmJy/ZIg3Hd0KtkUuA= -----END CERTIFICATE-----Generated at Sat May 16 15:35:06 2026 by rpki-client