$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: Zvt5U1uJNmsBQR8J8Rg6P4zy6585se86a1Xtw1KTApA= Subject key identifier: 79:0C:4F:77:89:51:C3:5D:84:D7:12:FE:45:FE:BE:CE:C4:61:C8:96 Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 2BE14976ACBE5E33A9F8247B3C2568BF4F48EA99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 09:00:13 +0000 Manifest this update: Sat 24 Oct 2026 08:55:13 +0000 Manifest next update: Sun 25 Oct 2026 10:35:13 +0000 Files and hashes: 1: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: c9fM7rymz+Dp/hmQtAPCYv3AH9pTr13etRXoL5qlSEE=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 10:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e1:49:76:ac:be:5e:33:a9:f8:24:7b:3c:25:68:bf:4f:48:ea:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Oct 24 08:55:13 2026 GMT Not After : Oct 25 10:35:13 2026 GMT Subject: CN=790C4F778951C35D84D712FE45FEBECEC461C896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:5e:91:8b:ca:d9:15:ff:ed:40:f8:34:f0: 52:b8:4b:72:02:f9:d6:c8:59:0d:2e:93:7f:1b:69: 7c:3e:d5:a1:0b:48:9c:d0:7b:09:72:3b:b5:d0:f1: e9:67:84:c2:fc:80:31:b7:ad:2b:40:73:0b:b8:d9: 5a:7c:f0:04:64:ef:0d:0a:a1:d4:28:35:12:28:a2: f7:2f:b2:07:6c:5a:ec:f7:3e:78:6c:6d:4c:e2:c7: 3e:a1:cd:20:43:b6:1b:85:1a:22:6f:19:bd:20:e3: 59:0a:fa:47:4d:c4:56:2d:1a:96:23:b1:7f:f7:a3: 81:e1:49:43:45:41:ee:e4:7e:63:f2:d4:0f:cc:bc: e5:18:2e:53:aa:db:e0:42:88:7a:ce:a6:8e:08:56: 32:61:db:69:ba:7b:b6:e3:7a:16:56:05:17:1a:6b: f0:95:0d:ed:58:57:1f:4d:2a:96:4e:78:fa:15:6b: 7e:03:06:95:28:04:66:4f:fa:1c:9c:89:74:3e:dc: f4:bb:5a:9e:73:af:81:c2:0c:d8:9c:c0:d8:91:cf: 64:0e:36:c9:41:ea:00:c4:ea:af:a2:fb:0b:3d:94: 65:7d:4c:ae:d1:ee:2a:ce:d8:d8:f0:1e:e2:db:09: 18:1d:26:d1:fe:ea:77:cc:63:29:0e:35:e7:f4:87: 4b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0C:4F:77:89:51:C3:5D:84:D7:12:FE:45:FE:BE:CE:C4:61:C8:96 X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:cb:14:8e:77:94:54:38:0c:02:1c:37:47:4b:f1:09:b7:ad: ee:0f:0f:6a:37:3e:36:64:b9:0c:52:02:36:52:ed:c1:c1:02: 09:a2:cf:bd:9f:ec:c9:c3:52:8f:a9:5b:17:fc:d9:8b:47:36: 07:1e:49:9c:94:ec:64:99:8d:56:aa:1b:5a:a5:04:62:56:f5: f1:74:72:4e:5b:13:83:4c:41:53:52:62:e7:5d:3f:fe:be:b6: 54:d9:36:cf:c3:5f:35:1f:03:d7:46:97:2a:f4:0c:8c:5e:81: f8:ea:73:bb:56:3f:27:92:4b:bc:0c:93:74:db:32:21:0b:75: f9:c7:41:7b:40:50:82:c0:c0:46:99:8c:b3:83:cd:5c:ee:7b: b6:fd:27:ad:29:f6:f8:c7:6a:77:bc:42:fa:7b:f6:78:fd:f0: 9e:65:3a:98:c7:19:6c:e4:a4:b9:81:91:6b:49:4c:79:c2:0c: 0d:37:49:d5:c1:47:7c:bb:4e:01:39:95:98:d5:f9:d3:77:67: f4:07:52:37:fa:c5:ee:f1:ea:85:9f:bc:bd:f5:5c:55:14:a6: 0f:3a:2f:18:99:ea:fa:4b:06:72:30:a9:bf:b6:32:e9:b3:74: 32:0b:49:1a:92:6f:24:cb:9c:24:64:2f:39:a3:99:bf:65:da: eb:ee:54:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+FJdqy+XjOp+CR7PCVov09I6pkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjEwMjQwODU1MTNaFw0yNjEwMjUxMDM1MTNaMDMxMTAvBgNV BAMTKDc5MEM0Rjc3ODk1MUMzNUQ4NEQ3MTJGRTQ1RkVCRUNFQzQ2MUM4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnV6Ri8rZFf/tQPg08FK4S3IC +dbIWQ0uk38baXw+1aELSJzQewlyO7XQ8elnhML8gDG3rStAcwu42Vp88ARk7w0K odQoNRIoovcvsgdsWuz3PnhsbUzixz6hzSBDthuFGiJvGb0g41kK+kdNxFYtGpYj sX/3o4HhSUNFQe7kfmPy1A/MvOUYLlOq2+BCiHrOpo4IVjJh22m6e7bjehZWBRca a/CVDe1YVx9NKpZOePoVa34DBpUoBGZP+hyciXQ+3PS7Wp5zr4HCDNicwNiRz2QO NslB6gDE6q+i+ws9lGV9TK7R7irO2NjwHuLbCRgdJtH+6nfMYykONef0h0s1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQxPd4lRw12E1xL+Rf6+zsRhyJYwHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADLFI53lFQ4DAIcN0dL8Qm3re4PD2o3PjZk uQxSAjZS7cHBAgmiz72f7MnDUo+pWxf82YtHNgceSZyU7GSZjVaqG1qlBGJW9fF0 ck5bE4NMQVNSYuddP/6+tlTZNs/DXzUfA9dGlyr0DIxegfjqc7tWPyeSS7wMk3Tb MiELdfnHQXtAUILAwEaZjLODzVzue7b9J60p9vjHane8Qvp79nj98J5lOpjHGWzk pLmBkWtJTHnCDA03SdXBR3y7TgE5lZjV+dN3Z/QHUjf6xe7x6oWfvL31XFUUpg86 LxiZ6vpLBnIwqb+2MumzdDILSRqSbyTLnCRkLzmjmb9l2uvuVBA= -----END CERTIFICATE-----Generated at Sun Oct 25 01:45:03 2026 by rpki-client