$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: 2bfEu0XwzaMt0VhHbG7EfYadzOzSP4m82eNmFugzjW4= Subject key identifier: 8E:8E:37:D5:7B:1B:9B:6D:C8:5C:E7:69:86:47:E7:F7:6E:8F:8A:61 Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 7288CD565679E7AC7B4101DD0A70662EC3627B5C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:35:27 +0000 Manifest this update: Thu 17 Sep 2026 01:30:27 +0000 Manifest next update: Fri 18 Sep 2026 05:23:27 +0000 Files and hashes: 1: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: A6/GTQ+r068+VG30/8o0bXXs2Mp38DSN2L0I6MUKOFU=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 05:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:88:cd:56:56:79:e7:ac:7b:41:01:dd:0a:70:66:2e:c3:62:7b:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: Sep 17 01:30:27 2026 GMT Not After : Sep 18 05:23:27 2026 GMT Subject: CN=8E8E37D57B1B9B6DC85CE7698647E7F76E8F8A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:43:a1:36:df:4e:31:aa:85:b0:70:3a:84:d7: 77:f3:96:b0:d8:05:77:dd:f6:0d:9a:f4:39:65:7a: ab:b1:de:ed:8a:6d:89:15:83:5d:ea:73:94:1b:06: 3d:0a:f4:c5:ab:d1:68:ca:ea:f1:09:66:d5:c9:3f: 89:83:10:fd:d8:0c:40:bc:02:49:fb:23:6f:63:5a: 57:21:2a:4c:70:02:ae:c6:8b:aa:c5:51:55:b0:f6: 0b:51:1d:9c:dd:ce:8a:09:47:c2:8c:68:f1:3f:9e: 4e:1d:18:16:fc:90:4e:2b:8f:1a:2d:71:37:f1:40: d8:a6:9c:8b:44:72:d7:bc:5a:03:33:b5:28:71:73: cc:ff:59:46:36:c0:6b:31:7e:8a:ab:57:bd:cd:fe: 3c:e8:b3:55:f3:93:20:34:5d:fc:5f:1c:ea:1f:5f: d6:dd:70:b0:03:9a:f0:32:88:4d:a6:c2:6f:fc:7d: 89:6f:4f:fe:ca:d3:99:a8:35:ac:14:0b:ab:df:37: 67:5e:08:3f:c3:44:e7:e2:17:c2:60:a4:52:4d:23: 7d:6e:6e:b5:fd:aa:c7:84:3d:9f:30:60:f9:e8:9f: f2:81:1e:db:d8:8e:68:9d:ad:71:c1:ab:f7:02:61: d5:08:6e:5d:15:f8:75:8b:ab:c5:cc:e5:bb:2d:9d: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8E:37:D5:7B:1B:9B:6D:C8:5C:E7:69:86:47:E7:F7:6E:8F:8A:61 X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a4:f2:b9:c9:c9:e6:52:c4:46:53:52:0b:33:39:ca:df:90: ba:ba:13:4e:47:4f:ba:ed:38:1e:95:14:ee:9f:3c:9d:ae:fb: 9a:a2:8f:18:63:cb:1a:2e:d3:22:6e:25:da:6b:1b:c8:6f:f4: 20:72:81:c4:35:2e:69:c8:cc:c7:d1:b0:86:79:31:81:0b:e6: 0b:30:b9:e1:55:6e:9b:25:4d:b7:52:e0:fe:d2:70:09:42:af: 9b:69:26:77:a3:2a:f7:38:b2:18:40:a1:8a:3c:0f:0c:d6:90: 7a:b1:29:b2:9a:14:ac:a7:de:fd:71:13:4e:50:a5:92:14:ae: d0:46:f1:c4:f2:5e:88:38:7d:34:62:a1:63:04:f6:04:ae:31: 71:75:7f:8b:60:a9:b9:a2:a2:ae:eb:e1:c4:b0:fe:94:79:af: b9:1b:58:0d:de:de:f4:c5:4a:c0:6b:85:6b:10:66:80:de:83: a9:54:b2:38:91:ce:ba:02:4e:f5:c8:7f:4f:2f:91:49:e9:eb: 9e:74:b4:12:1f:4d:60:bd:13:53:f4:ca:59:21:0c:15:2d:91: 6f:2f:e4:a2:08:16:bd:81:6b:77:9e:5a:33:41:9e:1e:96:47: 07:03:3b:46:12:8a:14:5d:32:39:36:fa:88:24:33:7a:6b:33: 4c:f1:b2:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcojNVlZ556x7QQHdCnBmLsNie1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA5MTcwMTMwMjdaFw0yNjA5MTgwNTIzMjdaMDMxMTAvBgNV BAMTKDhFOEUzN0Q1N0IxQjlCNkRDODVDRTc2OTg2NDdFN0Y3NkU4RjhBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuQ6E2304xqoWwcDqE13fzlrDY BXfd9g2a9Dllequx3u2KbYkVg13qc5QbBj0K9MWr0WjK6vEJZtXJP4mDEP3YDEC8 Akn7I29jWlchKkxwAq7Gi6rFUVWw9gtRHZzdzooJR8KMaPE/nk4dGBb8kE4rjxot cTfxQNimnItEcte8WgMztShxc8z/WUY2wGsxfoqrV73N/jzos1XzkyA0XfxfHOof X9bdcLADmvAyiE2mwm/8fYlvT/7K05moNawUC6vfN2deCD/DROfiF8JgpFJNI31u brX9qseEPZ8wYPnon/KBHtvYjmidrXHBq/cCYdUIbl0V+HWLq8XM5bstnSMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjo431Xsbm23IXOdphkfn926PimEwHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCk8rnJyeZSxEZTUgszOcrfkLq6E05HT7rt OB6VFO6fPJ2u+5qijxhjyxou0yJuJdprG8hv9CBygcQ1LmnIzMfRsIZ5MYEL5gsw ueFVbpslTbdS4P7ScAlCr5tpJnejKvc4shhAoYo8DwzWkHqxKbKaFKyn3v1xE05Q pZIUrtBG8cTyXog4fTRioWME9gSuMXF1f4tgqbmioq7r4cSw/pR5r7kbWA3e3vTF SsBrhWsQZoDeg6lUsjiRzroCTvXIf08vkUnp6550tBIfTWC9E1P0ylkhDBUtkW8v 5KIIFr2Ba3eeWjNBnh6WRwcDO0YSihRdMjk2+ogkM3prM0zxsvQ= -----END CERTIFICATE-----Generated at Thu Sep 17 19:18:28 2026 by rpki-client