$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: Taa7DSEOcgPEd7y9l+8BUtml2lViA82SoKjTlH3Lbgw= Subject key identifier: 27:FE:79:87:08:0E:3F:FE:79:4D:AA:62:80:AE:36:A5:8B:F0:21:E1 Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 65B451E374A36F3E5F91448482786AA66FA97B0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:30:01 +0000 Manifest this update: Wed 23 Sep 2026 19:25:01 +0000 Manifest next update: Thu 24 Sep 2026 19:32:01 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) 2: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: Wdk7iQyz3+MdXXyMX4f7GPjPuuDYTr6W6YjGYv7eayI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b4:51:e3:74:a3:6f:3e:5f:91:44:84:82:78:6a:a6:6f:a9:7b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: Sep 23 19:25:01 2026 GMT Not After : Sep 24 19:32:01 2026 GMT Subject: CN=27FE7987080E3FFE794DAA6280AE36A58BF021E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:20:97:35:53:05:f7:9b:45:09:c5:0a:3f: 79:fe:48:06:33:61:c9:ae:8a:e5:09:12:6f:75:de: 00:8c:fc:cd:c0:52:86:7e:b0:59:0d:0c:2b:b7:74: 86:fe:43:1a:44:2c:06:a9:3c:b0:0d:cf:76:89:5d: 55:71:45:3e:b6:69:30:8c:4f:f3:8c:31:38:ff:61: e7:76:c4:1d:eb:ed:f1:72:3d:1b:b3:0e:03:5b:ab: 50:32:f6:dc:70:25:60:d1:fa:7e:ee:b7:52:96:7f: de:1f:28:b3:6f:9c:d1:40:16:7c:e2:e7:a1:f5:fd: 67:be:95:26:2a:4a:53:2d:64:31:7b:08:f7:64:0c: 17:65:2f:de:f4:a4:f8:55:bc:c7:2e:be:25:7b:98: 37:f4:ed:c3:1b:c2:55:02:a5:72:0b:c3:ec:e1:24: 1c:94:6b:62:d6:fd:c6:73:66:ed:d0:01:ec:cc:34: a5:34:1c:12:d1:2b:bb:b8:00:99:cc:5a:75:52:1f: ed:82:67:32:da:c1:5f:3f:08:c1:5d:57:46:8a:75: c0:c5:bf:24:6e:36:17:cc:e0:d9:a0:30:e9:08:6f: c5:cb:89:35:4f:6e:b0:e1:ea:2f:ec:14:9d:98:79: a9:65:45:9f:ab:88:8b:f6:a8:d8:7a:7d:46:c8:bd: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FE:79:87:08:0E:3F:FE:79:4D:AA:62:80:AE:36:A5:8B:F0:21:E1 X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:db:00:1c:f9:97:13:47:18:9c:15:3d:d4:01:ad:c9:93: 46:a5:76:9b:f1:42:a1:bc:ac:be:b3:3b:58:d2:5d:13:03:ef: bb:fc:99:51:35:bc:5c:36:5f:c2:b1:e0:e9:9b:09:3d:07:37: 6e:92:3a:88:08:a9:d9:2c:93:5c:34:97:e4:11:c6:50:69:59: 36:02:ed:68:c6:ac:ce:3f:c5:f8:97:2f:d7:28:ff:3a:76:9a: d4:ef:d4:20:3d:78:85:01:ca:e8:28:a6:16:bf:5e:66:be:52: b8:dd:3b:c0:24:12:7e:36:c2:67:57:d6:4f:09:d7:df:d1:49: d8:85:df:98:0d:90:29:76:ce:21:33:99:3f:cb:a0:b9:32:0d: 35:ae:93:42:23:0d:25:ff:43:ca:91:e5:67:a2:f0:bf:b5:00: 52:60:35:df:71:da:43:91:31:c8:f0:91:f0:9d:ad:9a:7c:34: 20:ea:2d:6a:40:49:99:f9:5d:20:9d:6f:50:38:17:38:b1:93: dd:a1:7c:8c:b1:29:e5:05:42:0b:8d:2e:61:df:18:69:37:0a: 25:8d:9c:89:bf:48:ac:9d:df:da:61:54:41:ac:9f:bc:06:40: e0:32:09:05:a9:fc:ea:f0:8a:b3:b1:b2:ba:74:5f:7c:fa:7e: 5e:2c:39:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbRR43Sjbz5fkUSEgnhqpm+pewowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA5MjMxOTI1MDFaFw0yNjA5MjQxOTMyMDFaMDMxMTAvBgNV BAMTKDI3RkU3OTg3MDgwRTNGRkU3OTREQUE2MjgwQUUzNkE1OEJGMDIxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAyCXNVMF95tFCcUKP3n+SAYz YcmuiuUJEm913gCM/M3AUoZ+sFkNDCu3dIb+QxpELAapPLANz3aJXVVxRT62aTCM T/OMMTj/Yed2xB3r7fFyPRuzDgNbq1Ay9txwJWDR+n7ut1KWf94fKLNvnNFAFnzi 56H1/We+lSYqSlMtZDF7CPdkDBdlL970pPhVvMcuviV7mDf07cMbwlUCpXILw+zh JByUa2LW/cZzZu3QAezMNKU0HBLRK7u4AJnMWnVSH+2CZzLawV8/CMFdV0aKdcDF vyRuNhfM4NmgMOkIb8XLiTVPbrDh6i/sFJ2YeallRZ+riIv2qNh6fUbIvfs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/55hwgOP/55TapigK42pYvwIeEwHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaB2wAc+ZcTRxicFT3UAa3Jk0aldpvxQqG8 rL6zO1jSXRMD77v8mVE1vFw2X8Kx4OmbCT0HN26SOogIqdksk1w0l+QRxlBpWTYC 7WjGrM4/xfiXL9co/zp2mtTv1CA9eIUByugopha/Xma+UrjdO8AkEn42wmdX1k8J 19/RSdiF35gNkCl2ziEzmT/LoLkyDTWuk0IjDSX/Q8qR5Wei8L+1AFJgNd9x2kOR McjwkfCdrZp8NCDqLWpASZn5XSCdb1A4Fzixk92hfIyxKeUFQguNLmHfGGk3CiWN nIm/SKyd39phVEGsn7wGQOAyCQWp/OrwirOxsrp0X3z6fl4sOdA= -----END CERTIFICATE-----Generated at Thu Sep 24 10:43:43 2026 by rpki-client