$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json) Hash identifier: L+H8HFQyIJt94ng4lvT7Zp4OAojMMuW/VKCjUDiYFw8= Subject key identifier: AB:91:4E:4F:4E:F5:7D:3D:EB:D2:07:C9:10:B8:83:91:54:C7:8E:18 Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA Certificate serial: 51850F290BDF3BF7DA727BD5EF4BFA5777F9D2CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 01:21:20 +0000 Manifest this update: Sat 20 Jun 2026 01:16:20 +0000 Manifest next update: Sun 21 Jun 2026 02:26:20 +0000 Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: wOiff4SrwsIpvzlQ2E+YMgn58q+lf2NuEJUHrfpid2Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:85:0f:29:0b:df:3b:f7:da:72:7b:d5:ef:4b:fa:57:77:f9:d2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA Validity Not Before: Jun 20 01:16:20 2026 GMT Not After : Jun 21 02:26:20 2026 GMT Subject: CN=AB914E4F4EF57D3DEBD207C910B8839154C78E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:dd:a9:cd:0e:88:3e:33:b8:b1:26:a4:79: 82:3e:09:85:36:6e:dc:0a:f7:7e:60:f0:7a:90:e9: 98:d2:36:b0:31:f2:4f:3d:ee:a6:b3:03:ec:50:66: d4:65:fa:ce:4f:0a:b0:f7:95:7c:ed:16:93:70:2d: 44:5b:27:af:78:72:19:b0:f9:2b:d6:14:90:e8:62: a1:f8:8a:28:9a:11:3f:11:e7:69:07:a0:ea:42:7d: 74:cf:05:1f:0c:f5:a1:20:0d:05:80:ce:aa:77:67: 91:9e:e0:d3:89:66:2a:c7:32:af:52:13:ff:77:e1: 2b:82:f9:d6:a9:d8:53:c5:bb:ab:34:60:ec:b1:79: 29:77:6d:71:9e:e3:c9:01:10:eb:ab:fd:11:54:14: df:0a:78:96:44:f5:82:ab:43:8f:36:c9:fe:af:e5: 4f:54:e7:9f:dd:89:2a:7b:bb:a2:7f:65:da:5e:ee: 23:6b:96:d3:c1:e6:9b:87:d0:51:45:30:d3:45:a7: 03:71:91:88:8a:95:0e:7e:c3:13:e2:c0:04:0a:8f: e8:44:61:d7:cd:9d:30:05:18:c0:de:6f:01:1a:a7: f7:ce:e5:1b:90:75:11:ae:ca:31:d6:e1:dc:c7:b4: 03:7f:8d:2a:af:5a:70:67:21:55:5d:fe:03:93:8d: 91:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:91:4E:4F:4E:F5:7D:3D:EB:D2:07:C9:10:B8:83:91:54:C7:8E:18 X509v3 Authority Key Identifier: keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:39:40:7c:f9:4d:40:13:5c:4a:14:56:94:66:33:b2:bc:01: e0:0a:11:d1:f3:8e:2c:0c:7a:0d:aa:08:5b:17:58:e8:98:c3: d9:37:ed:bd:e4:b9:68:3c:d4:37:90:03:c2:d1:04:39:1e:20: 6f:1f:49:4a:11:19:95:f7:29:10:a2:7f:d8:89:09:84:05:00: 43:25:d3:b6:af:32:ec:bd:2a:14:b1:79:a5:08:93:01:fa:bf: 30:34:f4:e5:6f:79:2d:20:71:cd:f6:a4:14:97:18:4f:73:a6: df:03:2a:36:da:ea:8d:93:8e:2b:b0:25:f1:d1:28:f7:9f:21: 11:fc:03:3f:6e:c3:0e:b8:a3:46:95:33:cc:2a:14:76:80:ff: 0e:3b:d1:56:89:db:af:28:0a:4a:0c:0a:cb:a1:49:b2:9d:95: de:09:e7:9d:54:4b:fb:9e:f6:46:cc:97:04:b2:0e:5d:38:61: fd:34:d4:80:2a:84:c7:08:de:c5:cc:6b:1e:1e:82:8c:a6:04: f7:70:cb:26:44:11:90:11:f5:98:8c:79:b6:da:59:c8:10:65: e5:2a:e9:e6:92:fd:94:7c:7d:41:5e:08:e0:37:6f:d3:8c:d9: 9c:b6:04:99:ea:50:64:5c:fa:23:62:19:23:00:17:c4:e2:a9: 63:4d:4b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYUPKQvfO/facnvV70v6V3f50s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgwODUx Njk4MDlCQTAeFw0yNjA2MjAwMTE2MjBaFw0yNjA2MjEwMjI2MjBaMDMxMTAvBgNV BAMTKEFCOTE0RTRGNEVGNTdEM0RFQkQyMDdDOTEwQjg4MzkxNTRDNzhFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPt92pzQ6IPjO4sSakeYI+CYU2 btwK935g8HqQ6ZjSNrAx8k897qazA+xQZtRl+s5PCrD3lXztFpNwLURbJ694chmw +SvWFJDoYqH4iiiaET8R52kHoOpCfXTPBR8M9aEgDQWAzqp3Z5Ge4NOJZirHMq9S E/934SuC+dap2FPFu6s0YOyxeSl3bXGe48kBEOur/RFUFN8KeJZE9YKrQ482yf6v 5U9U55/diSp7u6J/Zdpe7iNrltPB5puH0FFFMNNFpwNxkYiKlQ5+wxPiwAQKj+hE YdfNnTAFGMDebwEap/fO5RuQdRGuyjHW4dzHtAN/jSqvWnBnIVVd/gOTjZFVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq5FOT071fT3r0gfJELiDkVTHjhgwHwYDVR0j BBgwFoAUu9DNZDbKeTv/QzkiqMOAhRaYCbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiOTI2ZTAtNmM2Yi00ODU1LWE3NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQz NkNBNzkzQkZGNDMzOTIyQThDMzgwODUxNjk4MDlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQwQ0Q2NDM2Q0E3OTNCRkY0MzM5MjJBOEMzODA4NTE2OTgw OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgw ODUxNjk4MDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADU5QHz5TUATXEoUVpRmM7K8AeAKEdHzjiwM eg2qCFsXWOiYw9k37b3kuWg81DeQA8LRBDkeIG8fSUoRGZX3KRCif9iJCYQFAEMl 07avMuy9KhSxeaUIkwH6vzA09OVveS0gcc32pBSXGE9zpt8DKjba6o2TjiuwJfHR KPefIRH8Az9uww64o0aVM8wqFHaA/w470VaJ268oCkoMCsuhSbKdld4J551US/ue 9kbMlwSyDl04Yf001IAqhMcI3sXMax4egoymBPdwyyZEEZAR9ZiMebbaWcgQZeUq 6eaS/ZR8fUFeCOA3b9OM2Zy2BJnqUGRc+iNiGSMAF8TiqWNNSw0= -----END CERTIFICATE-----Generated at Sat Jun 20 09:11:19 2026 by rpki-client