$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: RjO/pBwjmUnwHxpueutWBMQhprJ9jOS8woPIzX1rslI= Subject key identifier: 81:7E:0B:EE:5B:52:D1:E7:39:52:35:FF:61:D3:EC:94:3A:D6:2B:4C Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 7B22B36C162192C98DD691FA555B7F92599690B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: EA Signing time: Sun 25 Oct 2026 07:05:12 +0000 Manifest this update: Sun 25 Oct 2026 07:00:12 +0000 Manifest next update: Mon 26 Oct 2026 11:04:12 +0000 Files and hashes: 1: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: 7Kn74SaPzpp0X/cn44INbFBJYRa4zq9cw2hyc02ot3A=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 11:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:22:b3:6c:16:21:92:c9:8d:d6:91:fa:55:5b:7f:92:59:96:90:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Oct 25 07:00:12 2026 GMT Not After : Oct 26 11:04:12 2026 GMT Subject: CN=817E0BEE5B52D1E7395235FF61D3EC943AD62B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:e4:7a:16:f8:74:b6:59:32:c5:96:40:26: 9d:b0:41:74:95:d5:c5:4f:47:4a:5a:26:19:6e:26: 6b:2b:d3:1e:49:27:4c:01:00:e5:70:9e:b3:3a:db: 01:b7:ff:b7:8c:27:dd:3f:b9:8c:b5:26:02:5f:93: ab:84:8b:25:c6:ec:9e:19:49:4d:f0:3b:c9:71:5f: ee:e6:28:c1:8c:d5:45:a1:ee:78:99:96:3a:24:57: d8:06:8e:69:39:ea:a6:4e:5c:d1:e0:b6:cc:55:cc: fd:e5:06:b7:65:9f:d7:92:de:95:f5:c7:e2:69:fc: 4a:15:44:31:f2:1f:a2:47:bb:6b:1d:72:12:2a:09: 9e:99:95:a5:cb:a8:33:76:03:90:d4:37:e6:6d:63: ab:51:41:af:e2:65:25:63:fa:4d:97:88:49:d4:0c: 7a:6e:c5:1b:23:c8:85:3d:e2:2d:4a:a3:46:30:ee: 6b:03:97:9c:03:42:81:18:61:28:1f:30:6f:bb:85: b9:8e:d7:14:e5:9f:17:d4:95:d8:e2:21:6e:d6:3a: ac:fe:0c:e9:47:6e:9d:33:2a:d0:03:19:a1:b6:3c: f1:74:42:36:4f:0e:f7:b0:44:c6:13:4a:8e:23:f7: b9:ea:e3:55:d6:04:18:7e:3b:92:65:51:cb:3c:b7: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7E:0B:EE:5B:52:D1:E7:39:52:35:FF:61:D3:EC:94:3A:D6:2B:4C X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8c:de:6d:20:b4:c4:33:a9:15:7c:fd:15:ab:26:1e:61:ca: 76:d3:4f:03:ea:3e:d9:7f:18:99:92:88:66:fd:2a:80:fd:b5: 2e:da:95:b7:2c:2b:f6:ba:eb:ff:fc:e8:c3:51:2a:6b:03:1f: 6e:0e:f9:67:07:8d:16:c1:99:21:a7:dc:09:dc:5a:13:6a:e3: c5:dd:d9:76:f1:10:59:89:f9:d7:00:9a:57:e3:cb:4a:ba:de: 20:e3:13:5f:68:ee:54:d0:57:2d:a4:2a:8f:b1:ab:56:30:0e: 6b:39:60:be:d8:33:fc:4b:3f:c7:78:a1:e2:2b:43:24:41:9c: e9:6a:9a:83:a3:62:e4:eb:82:5c:93:6f:9e:8e:c0:da:10:00: fc:83:75:13:d6:dc:d5:61:43:28:73:45:63:69:73:6d:36:90: cf:e3:4e:6c:8b:5a:7a:26:d4:5f:4c:62:98:28:2c:df:af:a3: 9b:09:9c:38:82:42:65:61:88:20:89:f1:f2:96:b7:5a:f9:c0: 95:51:6a:95:9b:b2:c1:8d:67:d0:7c:29:10:8f:5e:1c:7f:76: 81:13:88:45:15:31:0c:da:64:a6:40:11:59:85:c7:3f:a8:c2: 06:28:dc:f1:e4:e0:24:c1:00:ce:f8:bc:5d:34:38:e0:96:32: e9:c1:0c:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeyKzbBYhksmN1pH6VVt/klmWkLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjEwMjUwNzAwMTJaFw0yNjEwMjYxMTA0MTJaMDMxMTAvBgNV BAMTKDgxN0UwQkVFNUI1MkQxRTczOTUyMzVGRjYxRDNFQzk0M0FENjJCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24OR6Fvh0tlkyxZZAJp2wQXSV 1cVPR0paJhluJmsr0x5JJ0wBAOVwnrM62wG3/7eMJ90/uYy1JgJfk6uEiyXG7J4Z SU3wO8lxX+7mKMGM1UWh7niZljokV9gGjmk56qZOXNHgtsxVzP3lBrdln9eS3pX1 x+Jp/EoVRDHyH6JHu2sdchIqCZ6ZlaXLqDN2A5DUN+ZtY6tRQa/iZSVj+k2XiEnU DHpuxRsjyIU94i1Ko0Yw7msDl5wDQoEYYSgfMG+7hbmO1xTlnxfUldjiIW7WOqz+ DOlHbp0zKtADGaG2PPF0QjZPDvewRMYTSo4j97nq41XWBBh+O5JlUcs8t/MZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgX4L7ltS0ec5UjX/YdPslDrWK0wwHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6M3m0gtMQzqRV8/RWrJh5hynbTTwPqPtl/ GJmSiGb9KoD9tS7albcsK/a66//86MNRKmsDH24O+WcHjRbBmSGn3AncWhNq48Xd 2XbxEFmJ+dcAmlfjy0q63iDjE19o7lTQVy2kKo+xq1YwDms5YL7YM/xLP8d4oeIr QyRBnOlqmoOjYuTrglyTb56OwNoQAPyDdRPW3NVhQyhzRWNpc202kM/jTmyLWnom 1F9MYpgoLN+vo5sJnDiCQmVhiCCJ8fKWt1r5wJVRapWbssGNZ9B8KRCPXhx/doET iEUVMQzaZKZAEVmFxz+owgYo3PHk4CTBAM74vF00OOCWMunBDKM= -----END CERTIFICATE-----Generated at Mon Oct 26 02:25:47 2026 by rpki-client