$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: +SHw5s9xdU9v3AnkvksIUYFGIsVeZWqpN6MKHDU2+IY= Subject key identifier: 6D:AA:D0:41:E0:15:3A:B5:40:6B:2D:88:A1:40:CA:44:E8:BA:E5:A9 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 1F3CC89FA1D2F49DFC3222FD491588FB2B716C23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: A2 Signing time: Mon 31 Aug 2026 15:23:24 +0000 Manifest this update: Mon 31 Aug 2026 15:18:24 +0000 Manifest next update: Tue 01 Sep 2026 17:58:24 +0000 Files and hashes: 1: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 2: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 3: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 4: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) 5: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: mcRUldasti/GysmqU2ltMwNN3y50l8T27PSELkGOTPg=) 6: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 7: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 8: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 9: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 10: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 11: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) 12: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 13: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 14: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 17:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3c:c8:9f:a1:d2:f4:9d:fc:32:22:fd:49:15:88:fb:2b:71:6c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Aug 31 15:18:24 2026 GMT Not After : Sep 1 17:58:24 2026 GMT Subject: CN=6DAAD041E0153AB5406B2D88A140CA44E8BAE5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:ee:84:e7:6b:eb:eb:82:f2:6b:58:a9:83: 4b:a2:a4:1f:9c:2f:e0:6b:5f:04:b1:c0:64:54:5c: 98:1d:6a:44:42:d4:67:c6:3b:eb:fe:67:ad:c9:b0: 89:cc:1a:89:a9:c3:4b:c8:5f:53:41:d9:ed:bc:90: dc:2b:b9:7e:f9:fd:b0:d7:45:37:6c:b5:ca:80:9b: c4:fa:77:9d:19:34:f1:15:61:e1:e9:3f:16:8c:86: c1:c1:ca:26:c4:21:0d:d8:62:29:bc:62:f6:bd:66: bf:05:42:14:c1:8e:4f:69:46:e3:d1:9b:7e:2f:41: 52:43:fb:25:79:1a:85:81:4e:93:88:99:58:75:95: 76:2a:e1:7d:b0:73:59:59:52:96:cb:68:17:27:45: ac:25:ac:79:68:1a:fe:f0:8a:07:15:88:52:f2:03: a2:6b:4d:fe:ee:f2:9c:6d:5d:01:77:78:f1:a0:08: 79:aa:af:75:f0:0b:79:11:5c:50:a7:b0:04:e6:16: 12:e3:2d:ce:db:d3:24:09:15:a0:91:ae:02:e9:64: 74:3b:b2:cb:e0:c9:d1:29:c0:b3:dd:41:b5:0e:bc: ad:7b:a6:9c:d8:bd:fd:6a:b0:48:95:15:a8:00:2b: 42:ca:a0:c2:4a:a3:d9:1c:8a:66:53:1e:0e:bc:c6: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AA:D0:41:E0:15:3A:B5:40:6B:2D:88:A1:40:CA:44:E8:BA:E5:A9 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e7:52:f7:32:43:2e:51:4b:75:95:29:aa:b9:87:a1:5e:10: 99:71:53:fe:48:d9:3c:e1:42:73:3d:f1:b8:cf:30:20:f7:c0: 65:07:b4:59:cc:3a:75:2d:77:d7:7c:c5:c3:92:0d:4b:20:cf: 10:d6:9f:60:f0:53:48:c3:6d:62:68:6b:25:db:e5:81:19:96: e2:25:82:cb:23:59:60:1a:4d:78:a0:e1:fd:8a:c3:8a:69:48: 01:de:4e:0a:08:29:0a:04:76:e0:20:e0:c1:e5:d6:ff:31:4c: 29:5a:17:2b:fe:9a:df:d1:1b:75:b9:f5:67:77:e0:7b:5a:ae: 89:35:c9:63:a0:95:64:95:4a:1a:73:f9:89:4f:f9:d2:51:34: b0:cc:92:b5:6e:b9:71:a2:e5:a4:ce:a8:32:8e:03:32:59:49: 82:e2:6e:1f:5d:0f:30:6f:75:ab:4e:3c:86:1b:cd:e7:6c:aa: 8d:0c:8c:04:36:f2:a3:bc:4b:03:51:cc:65:d2:0b:27:97:12: f9:11:10:67:8c:e7:49:ea:57:3b:16:9b:2f:e5:22:23:fa:38: 80:e9:e8:72:53:48:f5:4d:a1:42:91:ae:13:7b:dc:82:a8:16: 81:6b:9d:de:db:4a:ba:b9:81:f6:ec:aa:c9:1e:ce:0e:f7:b9: ad:d1:26:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzzIn6HS9J38MiL9SRWI+ytxbCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA4MzExNTE4MjRaFw0yNjA5MDExNzU4MjRaMDMxMTAvBgNV BAMTKDZEQUFEMDQxRTAxNTNBQjU0MDZCMkQ4OEExNDBDQTQ0RThCQUU1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bO6E52vr64Lya1ipg0uipB+c L+BrXwSxwGRUXJgdakRC1GfGO+v+Z63JsInMGompw0vIX1NB2e28kNwruX75/bDX RTdstcqAm8T6d50ZNPEVYeHpPxaMhsHByibEIQ3YYim8Yva9Zr8FQhTBjk9pRuPR m34vQVJD+yV5GoWBTpOImVh1lXYq4X2wc1lZUpbLaBcnRawlrHloGv7wigcViFLy A6JrTf7u8pxtXQF3ePGgCHmqr3XwC3kRXFCnsATmFhLjLc7b0yQJFaCRrgLpZHQ7 ssvgydEpwLPdQbUOvK17ppzYvf1qsEiVFagAK0LKoMJKo9kcimZTHg68xtcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbarQQeAVOrVAay2IoUDKROi65akwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7nUvcyQy5RS3WVKaq5h6FeEJlxU/5I2Tzh QnM98bjPMCD3wGUHtFnMOnUtd9d8xcOSDUsgzxDWn2DwU0jDbWJoayXb5YEZluIl gssjWWAaTXig4f2Kw4ppSAHeTgoIKQoEduAg4MHl1v8xTClaFyv+mt/RG3W59Wd3 4Htarok1yWOglWSVShpz+YlP+dJRNLDMkrVuuXGi5aTOqDKOAzJZSYLibh9dDzBv datOPIYbzedsqo0MjAQ28qO8SwNRzGXSCyeXEvkREGeM50nqVzsWmy/lIiP6OIDp 6HJTSPVNoUKRrhN73IKoFoFrnd7bSrq5gfbsqskezg73ua3RJrs= -----END CERTIFICATE-----Generated at Tue Sep 1 04:40:24 2026 by rpki-client