$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: muCJ3Bh+XVcXItKWgXfHmn2MdSVpfx2UFz9HJubBZws= Subject key identifier: 07:22:39:AD:58:A8:CA:07:57:CA:50:1E:49:92:E8:A1:BA:9F:E1:4F Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 5DCD2EE5717763ABA0E9B42173092B51C46D3E84 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: B6 Signing time: Wed 16 Sep 2026 19:23:09 +0000 Manifest this update: Wed 16 Sep 2026 19:18:09 +0000 Manifest next update: Thu 17 Sep 2026 21:18:09 +0000 Files and hashes: 1: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) 2: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 3: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: 436G8Rshmg/85Wsht+4mpwysMkkZEFSwBvtfInovlzo=) 4: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:cd:2e:e5:71:77:63:ab:a0:e9:b4:21:73:09:2b:51:c4:6d:3e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Sep 16 19:18:09 2026 GMT Not After : Sep 17 21:18:09 2026 GMT Subject: CN=072239AD58A8CA0757CA501E4992E8A1BA9FE14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:df:36:99:7a:9c:68:da:2b:4f:8c:1b:da: 76:bb:ba:2e:58:c2:eb:f1:ac:0c:f2:17:59:79:cd: 81:67:fa:36:3a:6c:65:93:15:c6:e3:eb:f0:d7:0e: 69:e6:a0:bb:1e:8b:86:a1:aa:c0:5b:79:28:72:d8: 2a:5a:64:3a:ad:c1:6c:b1:59:67:54:66:14:b1:ba: 48:a1:ac:28:a8:99:81:04:0b:ca:d8:cc:41:69:9f: cc:62:9c:1b:9c:40:1f:fa:13:51:a3:dc:26:06:17: ca:72:54:05:41:1d:1e:47:c8:81:79:33:53:fa:9d: 98:b2:ae:b5:28:7a:3d:62:73:f5:ff:5a:b4:67:a5: 27:f6:b7:8e:32:19:b9:4b:07:b9:7c:e2:ba:62:7d: 9b:e2:40:90:51:1a:7f:82:ab:18:9a:4e:2f:70:60: 78:e0:3a:1a:1a:d7:9f:d3:1d:cc:a6:f5:8f:50:bc: 28:4f:44:16:83:6d:50:2e:0e:65:06:41:e3:7c:e0: 2a:81:31:02:5e:b1:2a:d9:cd:54:cf:8b:a0:14:35: af:57:3e:7b:2e:a7:b9:b7:cb:81:eb:d1:6d:9d:d7: 93:fd:03:d6:11:66:e4:73:88:ff:ff:1b:88:0d:e8: f2:6a:4b:e6:e4:46:24:4f:e8:a1:36:07:e7:a1:d5: ec:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:22:39:AD:58:A8:CA:07:57:CA:50:1E:49:92:E8:A1:BA:9F:E1:4F X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f4:8b:93:f1:88:03:c9:09:08:7e:20:ff:19:c6:80:b5:08: 23:5a:0a:d8:3f:57:8e:ce:23:e5:6d:81:27:81:d3:08:78:18: 1b:8b:32:5a:e5:a9:1a:8c:73:0e:c6:8d:bb:86:8d:af:8f:a0: d9:1f:36:63:be:f9:f9:c1:f0:40:e4:cc:25:fc:5d:48:88:48: 66:21:ed:2a:3b:a9:6d:8e:5c:fe:f2:4a:01:d0:74:b1:7f:44: d8:a8:aa:33:24:12:c8:1e:1d:57:df:a7:5b:83:40:89:3b:5e: da:44:20:e1:ea:9f:16:84:fe:89:69:e4:65:0b:65:2b:74:bc: 46:96:38:8c:9a:bb:61:f4:6d:d6:2e:fe:4b:f8:75:c7:5b:17: bb:d9:a7:dd:c2:91:f6:af:3d:3d:e4:8b:1d:a0:d8:57:0e:bf: bc:34:80:8e:2f:77:1f:6d:1d:64:1d:c5:dc:da:01:d6:03:2f: eb:f8:62:10:89:59:22:3a:92:37:24:76:47:17:78:c7:51:c4: fe:3a:07:08:8a:11:c9:5d:65:6b:f5:85:12:72:7e:4d:fe:22: 1e:cc:fe:c5:d8:86:a1:3d:64:5b:bc:81:57:e1:48:2b:53:e8: dc:9a:dd:03:c4:c7:1c:09:b2:2b:30:1e:e5:38:53:e5:06:71: 48:8a:7d:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc0u5XF3Y6ug6bQhcwkrUcRtPoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA5MTYxOTE4MDlaFw0yNjA5MTcyMTE4MDlaMDMxMTAvBgNV BAMTKDA3MjIzOUFENThBOENBMDc1N0NBNTAxRTQ5OTJFOEExQkE5RkUxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHt82mXqcaNorT4wb2na7ui5Y wuvxrAzyF1l5zYFn+jY6bGWTFcbj6/DXDmnmoLsei4ahqsBbeShy2CpaZDqtwWyx WWdUZhSxukihrCiomYEEC8rYzEFpn8xinBucQB/6E1Gj3CYGF8pyVAVBHR5HyIF5 M1P6nZiyrrUoej1ic/X/WrRnpSf2t44yGblLB7l84rpifZviQJBRGn+CqxiaTi9w YHjgOhoa15/THcym9Y9QvChPRBaDbVAuDmUGQeN84CqBMQJesSrZzVTPi6AUNa9X Pnsup7m3y4Hr0W2d15P9A9YRZuRziP//G4gN6PJqS+bkRiRP6KE2B+eh1ewDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUByI5rVioygdXylAeSZLoobqf4U8wHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABT0i5PxiAPJCQh+IP8ZxoC1CCNaCtg/V47O I+VtgSeB0wh4GBuLMlrlqRqMcw7GjbuGja+PoNkfNmO++fnB8EDkzCX8XUiISGYh 7So7qW2OXP7ySgHQdLF/RNioqjMkEsgeHVffp1uDQIk7XtpEIOHqnxaE/olp5GUL ZSt0vEaWOIyau2H0bdYu/kv4dcdbF7vZp93CkfavPT3kix2g2FcOv7w0gI4vdx9t HWQdxdzaAdYDL+v4YhCJWSI6kjckdkcXeMdRxP46BwiKEcldZWv1hRJyfk3+Ih7M /sXYhqE9ZFu8gVfhSCtT6Nya3QPExxwJsiswHuU4U+UGcUiKfa8= -----END CERTIFICATE-----Generated at Thu Sep 17 08:24:32 2026 by rpki-client