$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: JgGG5ljRaqXu6jtu4e8gfcpPwH4t5a1laG6sFtmFHFk= Subject key identifier: 73:E8:90:9B:BA:EE:E5:71:CA:65:E1:DA:DC:49:58:E9:A8:38:BB:DC Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 3773C7F8059B2EEA55320260FBB6DD9332BF2187 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:44:17 +0000 Manifest this update: Tue 12 May 2026 18:39:17 +0000 Manifest next update: Wed 13 May 2026 20:48:17 +0000 Files and hashes: 1: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: gDh5n2l0YTgyeECXK13d3ry8jFqtaHKzcVr+uz2Usas=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:73:c7:f8:05:9b:2e:ea:55:32:02:60:fb:b6:dd:93:32:bf:21:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: May 12 18:39:17 2026 GMT Not After : May 13 20:48:17 2026 GMT Subject: CN=73E8909BBAEEE571CA65E1DADC4958E9A838BBDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:66:f6:15:a8:2a:d1:e9:3d:bb:22:51:e3: 5c:a6:e2:7c:d3:53:64:2a:46:75:b7:a8:d2:89:3b: b5:c0:a7:aa:f0:8c:d5:52:a6:f7:62:a5:94:45:65: a1:e3:fd:5e:ea:81:64:4e:22:a2:e9:7a:5d:6e:5c: be:cd:69:40:08:21:14:23:c7:9c:ed:6f:e9:1c:19: ed:7e:52:c0:d5:9d:e3:ad:d5:ca:63:83:18:44:46: b6:38:e5:71:37:65:5c:d4:b0:10:a5:69:7d:5c:0f: 5a:94:a0:b6:d1:b4:fc:43:12:65:2e:77:61:fa:2f: 13:e0:45:6e:93:e4:5e:86:49:51:2f:6a:1c:d2:8e: 3a:e8:87:69:21:5c:77:e1:ca:9b:46:85:a4:34:c4: 71:1b:13:b6:78:80:80:9a:16:e1:2b:a1:68:26:a9: 6c:3d:d9:cb:ee:66:ce:ab:31:9c:62:90:bd:a4:90: 69:e1:76:00:46:84:51:69:f1:23:f2:c0:fe:43:0b: 46:32:fe:75:71:15:32:6c:a5:7d:e9:ee:62:0e:67: a5:41:cf:eb:72:31:13:fa:3f:e3:c7:9e:0c:ff:af: 48:8a:2d:31:32:13:f6:10:c0:16:c2:6a:2c:e2:71: e2:e4:39:53:67:0d:26:64:08:44:7c:a6:bc:22:07: c9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E8:90:9B:BA:EE:E5:71:CA:65:E1:DA:DC:49:58:E9:A8:38:BB:DC X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0c:03:8f:d3:76:83:a9:94:8f:56:20:52:9c:0a:b4:71:74: 8e:45:32:eb:48:e7:f1:6b:dd:eb:12:59:ad:a6:35:95:69:24: 89:36:26:94:61:14:d1:f1:25:71:48:09:e8:01:9f:6e:7f:2a: 20:7c:3d:67:72:ca:1a:9a:f5:f1:2b:c3:8b:cd:74:34:89:6e: a0:51:05:8e:c7:3d:94:30:0b:24:53:e0:88:87:cf:6e:45:cb: f5:5d:74:79:e4:6b:67:f4:7e:a2:60:59:e4:7d:dd:6e:dc:59: c0:48:4d:7b:b2:ac:ad:0b:46:34:24:5b:44:96:26:d9:23:d1: ba:44:e3:87:7a:04:b4:82:96:18:5c:cf:6a:1c:97:1c:d0:c4: 10:9a:de:df:a9:3d:d8:0c:76:aa:b8:16:57:48:f5:9d:38:c0: 95:9a:98:cf:e5:da:5c:60:fe:08:47:ba:b7:7b:48:a0:81:7b: 93:ea:67:27:41:e6:f7:0f:b0:3d:b8:5b:eb:e8:03:9b:81:51: fd:2a:dd:3b:33:8a:97:13:33:6f:76:33:ac:a9:93:ce:75:69: 44:5a:ab:e8:5a:49:f5:0e:49:a0:74:b0:3d:ff:50:a4:d7:73: 6c:bc:24:cc:c0:a4:f5:fa:31:ea:0e:e4:df:74:52:b1:0e:28: e4:c7:ff:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3PH+AWbLupVMgJg+7bdkzK/IYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA1MTIxODM5MTdaFw0yNjA1MTMyMDQ4MTdaMDMxMTAvBgNV BAMTKDczRTg5MDlCQkFFRUU1NzFDQTY1RTFEQURDNDk1OEU5QTgzOEJCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WGb2Fagq0ek9uyJR41ym4nzT U2QqRnW3qNKJO7XAp6rwjNVSpvdipZRFZaHj/V7qgWROIqLpel1uXL7NaUAIIRQj x5ztb+kcGe1+UsDVneOt1cpjgxhERrY45XE3ZVzUsBClaX1cD1qUoLbRtPxDEmUu d2H6LxPgRW6T5F6GSVEvahzSjjroh2khXHfhyptGhaQ0xHEbE7Z4gICaFuEroWgm qWw92cvuZs6rMZxikL2kkGnhdgBGhFFp8SPywP5DC0Yy/nVxFTJspX3p7mIOZ6VB z+tyMRP6P+PHngz/r0iKLTEyE/YQwBbCaiziceLkOVNnDSZkCER8prwiB8lDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+iQm7ru5XHKZeHa3ElY6ag4u9wwHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEMA4/TdoOplI9WIFKcCrRxdI5FMutI5/Fr 3esSWa2mNZVpJIk2JpRhFNHxJXFICegBn25/KiB8PWdyyhqa9fErw4vNdDSJbqBR BY7HPZQwCyRT4IiHz25Fy/VddHnka2f0fqJgWeR93W7cWcBITXuyrK0LRjQkW0SW Jtkj0bpE44d6BLSClhhcz2oclxzQxBCa3t+pPdgMdqq4FldI9Z04wJWamM/l2lxg /ghHurd7SKCBe5PqZydB5vcPsD24W+voA5uBUf0q3TszipcTM292M6ypk851aURa q+haSfUOSaB0sD3/UKTXc2y8JMzApPX6MeoO5N90UrEOKOTH/+s= -----END CERTIFICATE-----Generated at Wed May 13 02:15:21 2026 by rpki-client