
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json)
Hash identifier: kOcPCfjuv/lo3pR9qnO85zLjuffx4oR1i15tCJ1aX0M=
Subject key identifier: 69:8B:2A:B3:12:D4:F7:D4:A8:D9:9A:F7:AB:9E:79:B8:FA:D1:68:3F
Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Certificate serial: 4CB5AC32265FA9B08AB6EAD55685805E6B40787F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 23:12:38 +0000
Manifest this update: Wed 16 Sep 2026 23:07:38 +0000
Manifest next update: Fri 18 Sep 2026 02:05:38 +0000
Files and hashes: 1: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=)
2: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=)
3: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=)
4: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: 0ytyz1jAyLEpsSf8XHk0DE3dJBiu1kB66weDNqiV/O8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b5:ac:32:26:5f:a9:b0:8a:b6:ea:d5:56:85:80:5e:6b:40:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8
Validity
Not Before: Sep 16 23:07:38 2026 GMT
Not After : Sep 18 02:05:38 2026 GMT
Subject: CN=698B2AB312D4F7D4A8D99AF7AB9E79B8FAD1683F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:dd:13:e6:21:44:37:1d:a7:17:a8:a5:9f:
a0:95:16:9e:6d:65:d7:cb:84:3c:9f:59:78:db:76:
48:89:bb:00:bf:15:af:65:0e:55:9e:37:97:73:87:
13:14:81:11:83:31:f3:e1:17:1e:2f:0a:1d:03:13:
ec:eb:01:13:1d:5f:f0:99:31:ef:d0:90:ea:c2:fd:
51:95:a3:af:1a:7e:01:0f:d9:85:e8:fb:93:59:20:
8c:e1:82:6f:74:27:d6:97:19:d2:09:7a:4b:55:c1:
b0:df:01:d2:c0:09:60:75:fd:e0:08:79:5c:06:1e:
f0:a6:28:ce:ec:37:04:5e:8a:e7:86:d3:51:dc:37:
4c:04:ce:03:5c:12:f8:60:21:43:f7:6f:85:6e:14:
40:02:83:12:22:a5:69:22:ea:5a:63:2d:7e:94:64:
87:21:72:1b:71:66:29:f7:b9:2d:1b:d4:d0:76:41:
cb:5f:af:5f:cb:82:41:b2:a0:f6:d0:f4:16:5d:3b:
33:6a:99:8f:ba:3e:c7:60:4a:e0:cb:bb:62:4e:6e:
61:88:be:4d:43:34:48:ed:8b:de:90:ba:19:02:80:
b5:ed:5c:07:af:0d:48:88:25:42:7e:45:b4:d4:b2:
81:d2:46:77:48:0e:7d:9f:2d:45:e3:80:93:15:7d:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8B:2A:B3:12:D4:F7:D4:A8:D9:9A:F7:AB:9E:79:B8:FA:D1:68:3F
X509v3 Authority Key Identifier:
keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6a:bc:b8:91:8e:aa:08:10:02:e9:87:7e:f0:ff:d6:e8:5f:
fc:ad:9f:ea:0c:f1:78:76:11:6a:b5:ab:4f:48:30:95:0e:4f:
97:b3:96:8c:55:94:05:fa:e9:d4:0c:40:d8:23:f5:d0:8a:57:
d8:95:94:00:23:5f:65:9e:4a:27:f7:08:ed:ec:55:e8:bf:61:
83:d1:5d:f3:72:b2:31:60:11:46:c1:f8:c9:db:b9:c7:00:6c:
55:b0:85:a9:c3:c9:6f:b0:2f:cd:b8:0b:5d:65:13:f3:f2:18:
2e:d1:67:b2:7f:53:67:cb:7e:25:f9:98:e4:0a:1b:ca:cc:a0:
5b:24:8f:e5:36:a7:e0:89:1a:87:78:ac:ea:be:0e:fb:0a:c1:
e0:5c:a3:66:ec:00:b4:90:88:47:a5:4b:2a:a3:1d:69:c2:8d:
a5:a9:03:b6:74:ba:47:9d:34:b6:09:5e:cb:40:0e:8b:cf:a9:
c3:e8:8a:ff:f1:95:ed:35:bd:f7:a2:93:9a:cb:b3:d3:7f:62:
34:e7:80:9a:55:49:15:36:cf:a7:e5:a9:7e:69:8b:86:95:45:
46:b9:43:ae:f8:08:e1:72:ce:f9:de:c4:16:8d:0b:f2:be:8e:
d6:50:be:49:a2:1e:84:37:08:f7:ae:eb:1f:e3:8e:6a:20:34:
68:4c:60:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUTLWsMiZfqbCKturVVoWAXmtAeH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF
NEZGQkFCODAeFw0yNjA5MTYyMzA3MzhaFw0yNjA5MTgwMjA1MzhaMDMxMTAvBgNV
BAMTKDY5OEIyQUIzMTJENEY3RDRBOEQ5OUFGN0FCOUU3OUI4RkFEMTY4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/N0T5iFENx2nF6iln6CVFp5t
ZdfLhDyfWXjbdkiJuwC/Fa9lDlWeN5dzhxMUgRGDMfPhFx4vCh0DE+zrARMdX/CZ
Me/QkOrC/VGVo68afgEP2YXo+5NZIIzhgm90J9aXGdIJektVwbDfAdLACWB1/eAI
eVwGHvCmKM7sNwReiueG01HcN0wEzgNcEvhgIUP3b4VuFEACgxIipWki6lpjLX6U
ZIchchtxZin3uS0b1NB2Qctfr1/LgkGyoPbQ9BZdOzNqmY+6PsdgSuDLu2JObmGI
vk1DNEjti96QuhkCgLXtXAevDUiIJUJ+RbTUsoHSRndIDn2fLUXjgJMVfYjLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUaYsqsxLU99So2Zr3q555uPrRaD8wHwYDVR0j
BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3
NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC
QUI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi
MTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VD
NkVFNEZGQkFCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACNqvLiRjqoIEALph37w/9boX/ytn+oM8Xh2
EWq1q09IMJUOT5ezloxVlAX66dQMQNgj9dCKV9iVlAAjX2WeSif3CO3sVei/YYPR
XfNysjFgEUbB+MnbuccAbFWwhanDyW+wL824C11lE/PyGC7RZ7J/U2fLfiX5mOQK
G8rMoFskj+U2p+CJGod4rOq+DvsKweBco2bsALSQiEelSyqjHWnCjaWpA7Z0uked
NLYJXstADovPqcPoiv/xle01vfeik5rLs9N/YjTngJpVSRU2z6flqX5pi4aVRUa5
Q674COFyzvnexBaNC/K+jtZQvkmiHoQ3CPeu6x/jjmogNGhMYKE=
-----END CERTIFICATE-----
Generated at Thu Sep 17 08:25:15 2026 by rpki-client