$ rpki-client -vvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json) Hash identifier: KpJQWbFoEsCep2LV3FKS9GArdfB9AS5Dwj1zBuKp4Gg= Subject key identifier: 35:A9:D4:D2:1A:A6:76:1B:B5:49:A3:8A:5D:3D:92:65:35:01:3C:C8 Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Certificate serial: 0A7C9C8E324058779BA8A501CADE2429C00CCD4F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:18:34 +0000 Manifest this update: Tue 02 Jun 2026 15:13:34 +0000 Manifest next update: Wed 03 Jun 2026 15:22:34 +0000 Files and hashes: 1: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=) 2: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: zyKWvRa7KyhONeIWXo2HRyZ2bSBorXCPuEPnxQXwBI8=) 3: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=) 4: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 15:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7c:9c:8e:32:40:58:77:9b:a8:a5:01:ca:de:24:29:c0:0c:cd:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Validity Not Before: Jun 2 15:13:34 2026 GMT Not After : Jun 3 15:22:34 2026 GMT Subject: CN=35A9D4D21AA6761BB549A38A5D3D926535013CC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:13:c5:ee:a2:f5:af:4a:2a:9c:b8:c0:d1: 6b:11:f4:9a:94:f3:4f:e9:2d:86:78:c6:77:14:94: 3e:ef:45:b6:2b:68:35:d9:dd:63:d7:aa:ac:93:9a: 2d:2b:c2:0a:7c:b1:b7:c1:d2:e8:45:4d:17:bf:2a: 21:95:ab:69:f6:c2:f0:a8:11:e0:bb:85:c1:72:54: 60:07:cc:5e:fd:90:05:1d:9d:2d:8a:37:51:ce:c2: 2a:16:9e:c5:e4:df:16:ff:d7:a9:53:7f:e1:90:aa: 16:36:2b:79:5c:f1:a2:47:18:c6:96:ba:06:2f:3d: c7:a2:c5:91:ec:b7:eb:2a:01:42:5a:38:4a:97:6a: e7:ab:88:6a:77:d2:68:1c:97:94:ea:c3:92:6f:50: 8a:68:e2:29:40:a0:f2:a8:3c:bb:b7:74:d9:20:d9: b0:26:00:74:0a:4c:e1:82:d0:6f:d0:a2:67:93:0e: e1:2c:c9:0e:76:6f:68:38:7a:f6:a3:06:83:9b:2f: 27:64:2b:87:11:55:44:03:67:64:02:3f:97:37:d4: 63:94:c0:70:a0:35:6a:2e:17:ce:45:22:d4:4c:f9: c7:af:96:88:47:1a:9a:db:40:84:77:da:a3:20:bc: 65:d6:aa:4e:65:83:9d:67:95:47:40:8e:65:15:a3: 3d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A9:D4:D2:1A:A6:76:1B:B5:49:A3:8A:5D:3D:92:65:35:01:3C:C8 X509v3 Authority Key Identifier: keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:8f:b5:c3:3c:00:a0:3a:1c:f2:68:79:3d:c6:57:8b:c8:3a: 7e:6a:f3:e1:b2:4f:71:0a:b7:49:1a:e0:ed:f7:e2:22:0d:54: 16:98:fe:81:43:00:c9:be:ce:f8:04:bb:30:da:41:07:ab:5a: 4d:46:50:7e:65:93:97:0f:6b:57:f6:53:4e:36:8a:3a:6e:14: 04:bd:46:00:de:c1:a9:dd:b8:0b:23:a2:8e:cd:5c:9c:fa:06: 09:79:f2:32:fc:c3:49:ce:dd:de:18:b0:10:a7:66:e1:9d:e0: 11:f9:41:a8:a9:93:8b:df:d3:a0:cc:45:72:52:cf:ce:f0:fa: a5:41:07:59:50:bc:b1:aa:05:43:b4:73:7b:4d:72:93:5b:5d: 5a:d9:df:69:4f:74:d1:ec:8d:b0:60:f8:af:30:8d:75:2c:29: f4:b1:3d:cb:7e:74:40:5b:12:2c:d1:77:13:af:06:67:ee:7f: de:a3:8c:47:39:c9:b1:3e:ea:24:36:8b:ec:66:db:c8:3c:36: cf:b0:6d:94:1c:3c:56:27:b8:1b:3d:a2:91:94:91:f0:2a:46: de:95:dd:f4:fe:12:9a:66:49:fb:be:f8:97:78:5f:ab:60:d7: 12:10:5c:0c:87:97:fa:35:d6:99:4e:fd:82:4a:00:57:e4:6f: 81:64:51:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnycjjJAWHebqKUByt4kKcAMzU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF NEZGQkFCODAeFw0yNjA2MDIxNTEzMzRaFw0yNjA2MDMxNTIyMzRaMDMxMTAvBgNV BAMTKDM1QTlENEQyMUFBNjc2MUJCNTQ5QTM4QTVEM0Q5MjY1MzUwMTNDQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HxPF7qL1r0oqnLjA0WsR9JqU 80/pLYZ4xncUlD7vRbYraDXZ3WPXqqyTmi0rwgp8sbfB0uhFTRe/KiGVq2n2wvCo EeC7hcFyVGAHzF79kAUdnS2KN1HOwioWnsXk3xb/16lTf+GQqhY2K3lc8aJHGMaW ugYvPceixZHst+sqAUJaOEqXaueriGp30mgcl5Tqw5JvUIpo4ilAoPKoPLu3dNkg 2bAmAHQKTOGC0G/QomeTDuEsyQ52b2g4evajBoObLydkK4cRVUQDZ2QCP5c31GOU wHCgNWouF85FItRM+cevlohHGprbQIR32qMgvGXWqk5lg51nlUdAjmUVoz0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNanU0hqmdhu1SaOKXT2SZTUBPMgwHwYDVR0j BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3 NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC QUI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VD NkVFNEZGQkFCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuPtcM8AKA6HPJoeT3GV4vIOn5q8+GyT3EK t0ka4O334iINVBaY/oFDAMm+zvgEuzDaQQerWk1GUH5lk5cPa1f2U042ijpuFAS9 RgDewanduAsjoo7NXJz6Bgl58jL8w0nO3d4YsBCnZuGd4BH5Qaipk4vf06DMRXJS z87w+qVBB1lQvLGqBUO0c3tNcpNbXVrZ32lPdNHsjbBg+K8wjXUsKfSxPct+dEBb EizRdxOvBmfuf96jjEc5ybE+6iQ2i+xm28g8Ns+wbZQcPFYnuBs9opGUkfAqRt6V 3fT+EppmSfu++Jd4X6tg1xIQXAyHl/o11plO/YJKAFfkb4FkUXU= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:45 2026 by rpki-client