$ rpki-client -vvvf rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft File: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft (raw, json) Hash identifier: x5qzleyIjOILH5aFXQZJCE/jqrJKT0TApRy3XFu4LZI= Subject key identifier: 2A:C6:84:09:68:C9:6C:29:33:E1:ED:7E:B7:98:70:D3:F0:48:14:D7 Authority key identifier: BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 Certificate issuer: /CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Certificate serial: 3AC85CBE4301BC292277D749FF1E571C85483BA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 14:42:31 +0000 Manifest this update: Sat 24 Oct 2026 14:37:31 +0000 Manifest next update: Sun 25 Oct 2026 18:13:31 +0000 Files and hashes: 1: BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl (hash: BWCtfRVPmaaOsR1yKnFITL+rXtqwZFq4oihWvl/Tj6s=) 2: 3130332e3136392e382e302f32332d3234203d3e20313432333436.roa (hash: InX610PRk4RjrPQDGJ9PHRqZSNIWPEj//hXhXRso8Zk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 18:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c8:5c:be:43:01:bc:29:22:77:d7:49:ff:1e:57:1c:85:48:3b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBDE7352B2BE0A912A0F5A456DC054758F6B6332 Validity Not Before: Oct 24 14:37:31 2026 GMT Not After : Oct 25 18:13:31 2026 GMT Subject: CN=2AC6840968C96C2933E1ED7EB79870D3F04814D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:18:76:ef:23:1e:6b:4d:c6:19:ed:5a:68: ee:84:4c:2f:ee:92:ed:a0:60:37:e0:61:e1:2d:6d: 87:b7:da:16:fc:83:9d:e7:f8:c7:31:a0:33:62:e7: 01:e2:f6:c0:e1:f3:18:e6:4c:2b:a7:40:4a:34:89: 43:e9:ba:2a:aa:14:7c:7a:a4:6b:f8:67:5f:a8:28: a4:7d:83:71:c1:3c:c1:ae:50:0e:d0:b8:7c:bc:bf: 9f:4c:76:49:d7:fb:42:b9:66:b7:b4:dc:c1:e5:2a: af:3f:f4:02:52:ba:21:2e:da:b4:46:44:a7:0f:d4: ef:b1:7c:7e:bb:82:c1:bc:12:b2:7a:aa:58:42:af: b8:2a:79:0f:14:f8:fd:a5:4b:ae:c4:cb:dd:70:84: 3a:ab:8c:b3:c2:83:80:63:9c:16:77:dc:1d:be:15: 87:ed:01:a6:c1:e4:87:4c:77:0a:d4:9c:e9:a6:88: 81:dd:b2:2d:c6:a7:1c:62:74:bd:98:f4:48:bb:62: 84:a6:90:c0:29:ad:44:d4:b9:9d:04:97:db:dc:a0: b6:0b:01:3b:7f:f8:89:ba:19:e3:80:e4:bc:7b:e4: 9a:15:b7:42:d9:a0:e0:23:f3:65:c5:26:01:28:ef: e1:67:92:51:e5:fe:41:30:fe:5a:64:08:6e:93:fa: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:84:09:68:C9:6C:29:33:E1:ED:7E:B7:98:70:D3:F0:48:14:D7 X509v3 Authority Key Identifier: keyid:BB:DE:73:52:B2:BE:0A:91:2A:0F:5A:45:6D:C0:54:75:8F:6B:63:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46cbb6ae-138e-4d2b-93f1-e6b23e6fe8fb/0/BBDE7352B2BE0A912A0F5A456DC054758F6B6332.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e5:6b:25:f6:91:7d:a4:36:b5:43:2c:c7:87:67:66:e2:2a: c0:65:d1:1a:92:e3:8a:86:ca:94:02:f3:df:c8:cc:79:e6:62: a5:bc:7d:76:74:ac:c0:99:6b:75:49:81:cf:13:85:6c:44:f0: 13:0d:39:81:3a:5c:c6:76:4f:fb:37:4e:0a:0a:4e:ff:b9:d6: b1:59:66:97:13:2c:0c:35:18:64:df:ee:91:b5:10:ab:3c:4b: 77:72:c7:d0:d1:e3:c5:34:8b:26:b6:ac:88:2c:3e:21:a1:d0: d8:b9:71:2e:ac:4d:2b:11:d5:b1:d1:c8:82:3e:17:c1:80:6d: a2:75:7e:5d:40:39:dc:a1:38:bb:37:83:0e:79:00:83:67:f5: ff:83:10:a4:9f:03:3a:ff:f1:e4:77:cf:af:e8:9f:00:25:0f: e8:33:a9:04:76:cb:2b:26:ee:ff:3f:d7:4c:d0:dd:3a:46:c6: 57:6c:48:4e:69:37:68:62:fd:7c:6d:45:dd:85:29:08:e8:16: 3a:48:d6:69:6b:c3:56:77:15:3f:5b:60:8f:87:9f:81:4f:21: 7a:88:8a:7f:0b:1c:8c:22:f3:68:2e:05:1d:c7:cd:88:af:e1: 4e:22:d7:b8:ff:cd:66:e4:ec:cc:61:f7:21:46:c5:ff:53:3e: ae:54:29:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOshcvkMBvCkid9dJ/x5XHIVIO6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4 RjZCNjMzMjAeFw0yNjEwMjQxNDM3MzFaFw0yNjEwMjUxODEzMzFaMDMxMTAvBgNV BAMTKDJBQzY4NDA5NjhDOTZDMjkzM0UxRUQ3RUI3OTg3MEQzRjA0ODE0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zhh27yMea03GGe1aaO6ETC/u ku2gYDfgYeEtbYe32hb8g53n+McxoDNi5wHi9sDh8xjmTCunQEo0iUPpuiqqFHx6 pGv4Z1+oKKR9g3HBPMGuUA7QuHy8v59MdknX+0K5Zre03MHlKq8/9AJSuiEu2rRG RKcP1O+xfH67gsG8ErJ6qlhCr7gqeQ8U+P2lS67Ey91whDqrjLPCg4BjnBZ33B2+ FYftAabB5IdMdwrUnOmmiIHdsi3GpxxidL2Y9Ei7YoSmkMAprUTUuZ0El9vcoLYL ATt/+Im6GeOA5Lx75JoVt0LZoOAj82XFJgEo7+FnklHl/kEw/lpkCG6T+u8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKsaECWjJbCkz4e1+t5hw0/BIFNcwHwYDVR0j BBgwFoAUu95zUrK+CpEqD1pFbcBUdY9rYzIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDZjYmI2YWUtMTM4ZS00ZDJiLTkzZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJC MkJFMEE5MTJBMEY1QTQ1NkRDMDU0NzU4RjZCNjMzMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkRFNzM1MkIyQkUwQTkxMkEwRjVBNDU2REMwNTQ3NThGNkI2 MzMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDZjYmI2YWUtMTM4ZS00ZDJiLTkz ZjEtZTZiMjNlNmZlOGZiLzAvQkJERTczNTJCMkJFMEE5MTJBMEY1QTQ1NkRDMDU0 NzU4RjZCNjMzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABflayX2kX2kNrVDLMeHZ2biKsBl0RqS44qG ypQC89/IzHnmYqW8fXZ0rMCZa3VJgc8ThWxE8BMNOYE6XMZ2T/s3TgoKTv+51rFZ ZpcTLAw1GGTf7pG1EKs8S3dyx9DR48U0iya2rIgsPiGh0Ni5cS6sTSsR1bHRyII+ F8GAbaJ1fl1AOdyhOLs3gw55AINn9f+DEKSfAzr/8eR3z6/onwAlD+gzqQR2yysm 7v8/10zQ3TpGxldsSE5pN2hi/XxtRd2FKQjoFjpI1mlrw1Z3FT9bYI+Hn4FPIXqI in8LHIwi82guBR3HzYiv4U4i17j/zWbk7Mxh9yFGxf9TPq5UKWQ= -----END CERTIFICATE-----Generated at Sun Oct 25 03:19:53 2026 by rpki-client