$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft File: BB322B002A297F8520DD12064BEB9ACA71727712.mft (raw, json) Hash identifier: 9mEO5Zx1d7k2BAxpgRLRM26r6xekaj1HPuOzKBOaGdw= Subject key identifier: 1D:D6:1D:96:65:A6:71:AE:55:33:37:A4:65:75:5A:B7:C2:7A:4B:E4 Authority key identifier: BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 Certificate issuer: /CN=BB322B002A297F8520DD12064BEB9ACA71727712 Certificate serial: 4107A906F3742127B46C704CBD8B463F021C4C2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 10:02:22 +0000 Manifest this update: Thu 23 Jul 2026 09:57:22 +0000 Manifest next update: Fri 24 Jul 2026 12:40:22 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: vRniZffLsrR39+YMBuuOMWA3xEVH1whiIwlxoJ0FXP8=) 2: BB322B002A297F8520DD12064BEB9ACA71727712.crl (hash: QJpg33rWLxwSum6+JIupyDLXFTMheskys3HIxBMsk84=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:07:a9:06:f3:74:21:27:b4:6c:70:4c:bd:8b:46:3f:02:1c:4c:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB322B002A297F8520DD12064BEB9ACA71727712 Validity Not Before: Jul 23 09:57:22 2026 GMT Not After : Jul 24 12:40:22 2026 GMT Subject: CN=1DD61D9665A671AE553337A465755AB7C27A4BE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:ea:8f:24:42:ab:46:0c:fc:79:12:d6:e6: e5:7a:38:7a:02:be:c1:02:8d:ee:cd:6b:b2:5c:f3: 0b:78:58:51:3a:c3:b0:a5:17:f0:1b:7e:e4:74:36: 8c:47:9a:5a:36:05:a0:32:2a:00:8c:19:d4:13:0a: 63:7e:13:fb:4b:48:f1:70:67:6c:23:ca:d2:c6:fb: df:d6:e5:9e:c1:e2:3b:1c:50:00:28:99:c9:ee:1a: 77:fb:25:42:58:1a:18:06:f1:24:35:8c:91:03:d0: bd:87:81:63:03:c2:87:58:ae:a7:cc:c8:95:56:75: 5c:7a:26:1d:bf:32:67:27:b6:aa:15:06:32:58:ab: 3e:c2:b8:0f:73:fb:dd:c5:6a:c1:dd:b6:77:49:55: 44:36:83:df:88:0a:ac:82:10:99:2f:4f:27:b5:5c: 88:9e:c1:6e:c4:d6:55:cb:e4:b4:b3:13:d5:27:08: a5:dc:a8:58:c5:26:64:10:1d:ab:97:d8:e4:44:45: 5a:cf:e1:22:c8:16:56:2b:91:4b:a1:6e:6d:e0:07: 65:11:70:76:cc:74:c4:df:3d:e3:9c:4f:65:51:66: c4:45:b4:15:6c:f5:7f:d7:55:3a:70:19:34:35:70: c9:07:f8:6c:d9:ae:61:21:05:4e:5f:c7:2d:a1:3a: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:1D:96:65:A6:71:AE:55:33:37:A4:65:75:5A:B7:C2:7A:4B:E4 X509v3 Authority Key Identifier: keyid:BB:32:2B:00:2A:29:7F:85:20:DD:12:06:4B:EB:9A:CA:71:72:77:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB322B002A297F8520DD12064BEB9ACA71727712.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/BB322B002A297F8520DD12064BEB9ACA71727712.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b0:45:d0:a2:a9:ae:0b:34:40:9d:23:f0:6c:ea:e0:22:df: 09:8c:e5:f8:73:04:77:cb:ac:ec:0a:84:c2:43:82:f4:91:be: 8f:3d:74:2d:a9:9a:d2:1b:1f:0d:5f:5b:b6:92:cd:d8:72:a2: b7:a0:64:cd:63:ac:e9:6a:0e:a7:f3:2d:83:1c:bf:c5:14:ae: d6:59:7f:b2:84:1b:bf:da:6b:90:99:76:e5:49:ba:c9:2c:e9: bd:df:2d:59:82:f4:92:27:21:4c:27:54:3f:12:53:26:7e:f8: 39:70:ef:65:ba:23:76:f1:cb:4b:20:6a:6d:f4:07:49:43:e1: bb:90:26:e7:91:53:ab:84:fa:6f:9b:2a:91:f9:c1:8e:e6:2f: 89:70:06:ad:8b:45:21:e4:33:aa:11:59:40:28:40:c4:05:bc: bf:d8:03:46:52:76:39:db:a3:7f:ca:67:a5:5a:f2:9d:ac:e7: 4f:1c:d5:da:5d:f5:9f:9e:aa:b7:44:18:5e:b9:76:24:d0:7c: d9:e3:ee:d9:7b:0f:1c:51:b4:75:e0:8a:ac:a3:e2:1f:6e:5d: d0:38:2b:0a:30:18:83:67:5a:96:fa:60:5b:87:5a:91:2c:82: d2:a3:3d:41:61:f5:06:df:d8:2d:ff:a7:51:2c:b6:08:9c:1f: e8:fb:22:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQepBvN0ISe0bHBMvYtGPwIcTCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3 MTcyNzcxMjAeFw0yNjA3MjMwOTU3MjJaFw0yNjA3MjQxMjQwMjJaMDMxMTAvBgNV BAMTKDFERDYxRDk2NjVBNjcxQUU1NTMzMzdBNDY1NzU1QUI3QzI3QTRCRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybuqPJEKrRgz8eRLW5uV6OHoC vsECje7Na7Jc8wt4WFE6w7ClF/AbfuR0NoxHmlo2BaAyKgCMGdQTCmN+E/tLSPFw Z2wjytLG+9/W5Z7B4jscUAAomcnuGnf7JUJYGhgG8SQ1jJED0L2HgWMDwodYrqfM yJVWdVx6Jh2/MmcntqoVBjJYqz7CuA9z+93FasHdtndJVUQ2g9+ICqyCEJkvTye1 XIiewW7E1lXL5LSzE9UnCKXcqFjFJmQQHauX2ORERVrP4SLIFlYrkUuhbm3gB2UR cHbMdMTfPeOcT2VRZsRFtBVs9X/XVTpwGTQ1cMkH+GzZrmEhBU5fxy2hOt6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdYdlmWmca5VMzekZXVat8J6S+QwHwYDVR0j BBgwFoAUuzIrACopf4Ug3RIGS+uaynFydxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmNmMzVhNDctMmNjZS00ODdmLWFhMjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAy QTI5N0Y4NTIwREQxMjA2NEJFQjlBQ0E3MTcyNzcxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjMyMkIwMDJBMjk3Rjg1MjBERDEyMDY0QkVCOUFDQTcxNzI3 NzEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvQkIzMjJCMDAyQTI5N0Y4NTIwREQxMjA2NEJFQjlB Q0E3MTcyNzcxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK6wRdCiqa4LNECdI/Bs6uAi3wmM5fhzBHfL rOwKhMJDgvSRvo89dC2pmtIbHw1fW7aSzdhyoregZM1jrOlqDqfzLYMcv8UUrtZZ f7KEG7/aa5CZduVJusks6b3fLVmC9JInIUwnVD8SUyZ++Dlw72W6I3bxy0sgam30 B0lD4buQJueRU6uE+m+bKpH5wY7mL4lwBq2LRSHkM6oRWUAoQMQFvL/YA0ZSdjnb o3/KZ6Va8p2s508c1dpd9Z+eqrdEGF65diTQfNnj7tl7DxxRtHXgiqyj4h9uXdA4 KwowGINnWpb6YFuHWpEsgtKjPUFh9Qbf2C3/p1EstgicH+j7IjE= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:36 2026 by rpki-client