$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: UlckrUsRP4CXLqboPpU2yfS4vNJWDHDMb8T/4fGCePc= Subject key identifier: 59:7F:2E:2F:A0:23:08:BE:BE:62:52:3A:5A:70:F6:B0:D8:50:2D:B6 Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 2BE7F06E735FB38E3630F70408A53BB7EB2C313E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 60 Signing time: Sun 12 Jul 2026 16:24:46 +0000 Manifest this update: Sun 12 Jul 2026 16:19:46 +0000 Manifest next update: Mon 13 Jul 2026 16:58:46 +0000 Files and hashes: 1: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: hLKF+wEQM2gzsNNZaSqkTgcVlIPp4kMh4d2585TqfcU=) 2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 4: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 16:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:e7:f0:6e:73:5f:b3:8e:36:30:f7:04:08:a5:3b:b7:eb:2c:31:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Jul 12 16:19:46 2026 GMT Not After : Jul 13 16:58:46 2026 GMT Subject: CN=597F2E2FA02308BEBE62523A5A70F6B0D8502DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:fa:33:70:46:ea:0d:e7:ce:92:56:3a:a9: 26:6f:cd:53:f3:37:b0:eb:e3:4e:48:60:92:8d:ed: 48:76:a9:69:74:72:cb:7c:9e:b6:65:da:bf:69:44: 12:05:0e:cf:3d:9c:3c:ea:88:09:2e:d4:18:45:2e: 13:dc:14:c9:84:e2:58:49:12:f8:5f:54:51:d5:e1: 52:8e:74:2e:9e:b2:3f:05:9e:f1:c8:f3:60:32:aa: 96:c7:f4:4c:1b:0f:24:82:87:18:bb:2a:47:de:e4: 56:a3:e1:7c:bb:bc:3a:dd:76:2d:28:e8:ce:c4:8d: 5b:da:39:53:c7:29:59:1b:9d:e4:28:63:43:ef:60: 6b:31:12:98:69:de:eb:19:f8:81:0e:08:95:2a:3e: 21:d5:ae:94:14:20:31:9c:47:c6:a2:d4:e4:4c:3e: 1a:db:03:93:07:8c:04:37:6e:8d:09:a9:ed:b2:99: f4:cc:37:c9:0d:2e:44:4e:4a:53:77:60:a1:1e:f4: 4f:cd:8d:f7:fb:14:e7:84:1d:00:b9:36:a4:e3:a8: 02:76:86:8d:5a:c8:06:9c:49:31:00:cd:02:3d:0e: 43:7c:5e:5f:9c:43:2b:09:fe:06:43:d4:00:d3:6b: 37:8d:86:e4:8c:8e:9c:62:b4:ec:d5:78:e8:f9:17: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7F:2E:2F:A0:23:08:BE:BE:62:52:3A:5A:70:F6:B0:D8:50:2D:B6 X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ee:35:bb:bd:31:fe:b9:3a:8d:a4:67:7b:ff:2b:4b:a0:35: 33:23:46:0a:0e:58:7c:97:98:4d:ff:bb:e1:18:a0:b6:06:79: 2c:c9:a6:95:ad:0a:90:7b:9b:44:04:d2:47:1e:62:f7:f9:b4: 44:0d:ab:c6:4f:44:2c:c0:12:42:b9:c9:c6:5f:d4:09:e1:5b: 0c:de:3c:c4:7f:8e:30:ef:3b:04:86:ed:41:66:29:3f:d9:d6: 7a:84:df:58:05:d9:63:2c:6f:6b:b4:83:fa:34:0a:54:59:61: 9e:6e:41:05:8a:e0:f3:69:76:83:c7:40:1b:25:02:bb:2e:a7: b6:3f:96:db:7b:a2:f5:6c:9f:0e:c1:0f:4f:37:ee:6d:c6:69: c4:46:fe:cd:1c:d8:e1:69:1b:19:c0:0c:1b:a9:fb:3b:f4:af: c9:9e:0a:2e:0f:38:47:ee:dc:3b:d3:41:22:12:f6:f0:c1:3f: bf:ee:90:a7:c6:8f:ee:d2:3f:2b:d3:9e:2a:fe:4a:d4:85:19: 01:76:5c:47:97:2b:51:ba:72:31:43:c3:09:ea:1b:e1:d2:f0: 52:c9:f0:15:db:e5:fc:bf:e1:f1:59:90:55:8f:61:d2:3d:de: 84:73:3b:35:cb:39:4f:80:e0:3c:b8:2d:da:8d:43:2f:69:84: a0:e6:8f:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+fwbnNfs442MPcECKU7t+ssMT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA3MTIxNjE5NDZaFw0yNjA3MTMxNjU4NDZaMDMxMTAvBgNV BAMTKDU5N0YyRTJGQTAyMzA4QkVCRTYyNTIzQTVBNzBGNkIwRDg1MDJEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BPozcEbqDefOklY6qSZvzVPz N7Dr405IYJKN7Uh2qWl0cst8nrZl2r9pRBIFDs89nDzqiAku1BhFLhPcFMmE4lhJ EvhfVFHV4VKOdC6esj8FnvHI82AyqpbH9EwbDySChxi7Kkfe5Faj4Xy7vDrddi0o 6M7EjVvaOVPHKVkbneQoY0PvYGsxEphp3usZ+IEOCJUqPiHVrpQUIDGcR8ai1ORM PhrbA5MHjAQ3bo0Jqe2ymfTMN8kNLkROSlN3YKEe9E/Njff7FOeEHQC5NqTjqAJ2 ho1ayAacSTEAzQI9DkN8Xl+cQysJ/gZD1ADTazeNhuSMjpxitOzVeOj5F/XHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWX8uL6AjCL6+YlI6WnD2sNhQLbYwHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvuNbu9Mf65Oo2kZ3v/K0ugNTMjRgoOWHyX mE3/u+EYoLYGeSzJppWtCpB7m0QE0kceYvf5tEQNq8ZPRCzAEkK5ycZf1AnhWwze PMR/jjDvOwSG7UFmKT/Z1nqE31gF2WMsb2u0g/o0ClRZYZ5uQQWK4PNpdoPHQBsl Arsup7Y/ltt7ovVsnw7BD0837m3GacRG/s0c2OFpGxnADBup+zv0r8meCi4POEfu 3DvTQSIS9vDBP7/ukKfGj+7SPyvTnir+StSFGQF2XEeXK1G6cjFDwwnqG+HS8FLJ 8BXb5fy/4fFZkFWPYdI93oRzOzXLOU+A4Dy4LdqNQy9phKDmj88= -----END CERTIFICATE-----Generated at Mon Jul 13 09:49:51 2026 by rpki-client