$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: 7bgN+dmaRuxJfUhBR7khyrmw8A7lDPfnzE/oNMR8HvY= Subject key identifier: 5A:FF:94:6F:87:7F:84:A1:63:21:E2:C3:D5:A2:68:35:92:FB:BB:5A Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 44FD448069CEFFACC8C0D309DBF4895B4A8EB441 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 22:53:36 +0000 Manifest this update: Fri 19 Jun 2026 22:48:36 +0000 Manifest next update: Sat 20 Jun 2026 23:57:36 +0000 Files and hashes: 1: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: rYrtt/kQtzKMSmbuX6O3FBU6Flv+VTxgaj4/i8BGSUk=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fd:44:80:69:ce:ff:ac:c8:c0:d3:09:db:f4:89:5b:4a:8e:b4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Jun 19 22:48:36 2026 GMT Not After : Jun 20 23:57:36 2026 GMT Subject: CN=5AFF946F877F84A16321E2C3D5A2683592FBBB5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5d:6d:4e:10:10:65:c6:57:06:67:3d:b8:16: df:0d:c7:b9:0a:84:50:3c:e3:0b:3d:9d:aa:1d:6b: 68:47:38:78:9d:ee:a9:56:20:fd:5e:8f:6c:8c:bf: ed:7a:53:b9:5a:c5:b9:93:98:a6:5d:3a:36:f9:d1: dd:b6:57:62:a8:fe:1c:57:eb:a1:6c:a9:0c:e4:f7: 5a:80:2c:64:d5:46:c9:1a:c6:7e:d1:5d:be:1b:bf: ff:f5:44:ba:a9:96:72:0a:13:6d:f0:6c:92:d2:b2: 87:f6:b7:81:f1:a9:a3:5d:ab:f7:5a:2c:a2:68:22: 8b:92:bd:5e:7a:84:67:7d:92:72:d7:12:6c:08:5b: d6:52:b6:76:6f:d4:54:a2:c7:73:6f:a4:2d:23:85: 27:ec:9c:df:50:8b:84:2c:44:62:74:b2:da:0e:95: 16:19:a4:3d:3d:ec:f2:47:d6:c3:04:b4:3d:20:5a: ee:c9:5e:8c:80:70:7d:87:a3:fe:49:f6:57:56:0e: 6e:a1:ab:b8:9c:95:fd:49:6a:03:4f:31:91:19:c2: 28:34:48:f2:d6:22:7e:c8:81:5f:ce:ed:4d:e2:14: ee:74:83:18:e0:2c:17:51:ad:bf:05:75:ba:b4:8b: d1:57:4c:67:69:74:95:89:4b:16:03:d4:81:03:91: c7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FF:94:6F:87:7F:84:A1:63:21:E2:C3:D5:A2:68:35:92:FB:BB:5A X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:12:86:30:d6:5e:61:e3:d3:d7:5e:2b:22:25:28:62:1a:ac: 76:c7:68:2e:bd:9c:0c:d7:a9:a5:27:6f:52:74:af:58:28:60: e6:10:3b:7b:9b:44:66:06:9e:a4:6f:83:76:94:6a:c1:2d:d9: 5f:c9:d2:87:22:49:f6:3a:c8:20:92:74:40:c4:ff:88:7e:a5: bd:48:1f:6b:65:1d:8e:83:16:01:b8:a7:73:19:5b:4e:16:b5: b0:49:c2:21:81:60:aa:bc:59:3b:5f:6e:1a:e6:a5:e3:72:dc: 36:fa:ba:1d:3d:42:33:31:ba:74:69:51:cd:ff:10:49:79:87: 7e:89:8d:9d:d1:5d:80:e2:53:c3:9a:17:a7:1a:fb:0d:cc:0d: 98:ae:b3:1d:d8:71:50:93:54:79:16:31:37:3f:96:2f:80:4f: 4e:4b:9f:d8:d9:16:8d:d3:e1:13:e5:3b:05:bc:f4:69:cb:41: de:85:f7:f7:e6:aa:8b:a8:f4:d1:4d:9d:93:d5:dd:75:7d:63: df:7c:ee:be:bc:1d:de:41:dc:28:fa:3f:d4:41:ca:d5:52:a6: ec:de:93:ef:1e:de:4c:3a:c2:4f:17:d9:74:62:66:94:f0:56: 68:e3:0c:7a:c4:ca:3c:5c:6d:72:69:e3:5e:ee:28:02:09:13: 8b:57:0e:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURP1EgGnO/6zIwNMJ2/SJW0qOtEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA2MTkyMjQ4MzZaFw0yNjA2MjAyMzU3MzZaMDMxMTAvBgNV BAMTKDVBRkY5NDZGODc3Rjg0QTE2MzIxRTJDM0Q1QTI2ODM1OTJGQkJCNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxXW1OEBBlxlcGZz24Ft8Nx7kK hFA84ws9naoda2hHOHid7qlWIP1ej2yMv+16U7laxbmTmKZdOjb50d22V2Ko/hxX 66FsqQzk91qALGTVRskaxn7RXb4bv//1RLqplnIKE23wbJLSsof2t4HxqaNdq/da LKJoIouSvV56hGd9knLXEmwIW9ZStnZv1FSix3NvpC0jhSfsnN9Qi4QsRGJ0stoO lRYZpD097PJH1sMEtD0gWu7JXoyAcH2Ho/5J9ldWDm6hq7iclf1JagNPMZEZwig0 SPLWIn7IgV/O7U3iFO50gxjgLBdRrb8Fdbq0i9FXTGdpdJWJSxYD1IEDkccZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWv+Ub4d/hKFjIeLD1aJoNZL7u1owHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsShjDWXmHj09deKyIlKGIarHbHaC69nAzX qaUnb1J0r1goYOYQO3ubRGYGnqRvg3aUasEt2V/J0ociSfY6yCCSdEDE/4h+pb1I H2tlHY6DFgG4p3MZW04WtbBJwiGBYKq8WTtfbhrmpeNy3Db6uh09QjMxunRpUc3/ EEl5h36JjZ3RXYDiU8OaF6ca+w3MDZiusx3YcVCTVHkWMTc/li+AT05Ln9jZFo3T 4RPlOwW89GnLQd6F9/fmqouo9NFNnZPV3XV9Y9987r68Hd5B3Cj6P9RBytVSpuze k+8e3kw6wk8X2XRiZpTwVmjjDHrEyjxcbXJp417uKAIJE4tXDng= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:38 2026 by rpki-client