$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: nATZ/U+A0zHFywsKT4GbnpdcTibCSuOe8KtxE8ixihs= Subject key identifier: 1A:29:0F:2E:A6:A3:39:72:89:84:08:F6:84:C0:98:65:1D:34:F6:15 Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 36367C9624FB64E75ED81EB7E2FEF5FE5DE96321 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 23:13:14 +0000 Manifest this update: Thu 23 Jul 2026 23:08:14 +0000 Manifest next update: Fri 24 Jul 2026 23:56:14 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 2: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) 3: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) 4: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: PzRzPXEzBh8Yk+OHz+k1l+XuQMn20kL/HyU1Dvt13ec=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:56:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:36:7c:96:24:fb:64:e7:5e:d8:1e:b7:e2:fe:f5:fe:5d:e9:63:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Jul 23 23:08:14 2026 GMT Not After : Jul 24 23:56:14 2026 GMT Subject: CN=1A290F2EA6A33972898408F684C098651D34F615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:6b:ce:0f:cb:84:c1:a2:b8:6c:e3:fa:81: 1c:88:c5:72:34:18:9b:1a:ef:82:9b:d7:db:eb:51: 84:b4:5b:6c:0e:a2:58:39:c2:d8:33:11:88:d6:a5: 15:10:77:09:5f:d3:99:47:69:98:f2:18:e7:82:9a: f6:fe:60:ad:6b:fb:6f:ee:af:b3:d6:87:0c:9e:5f: a7:af:20:5d:16:cc:44:4f:67:c4:75:b2:d8:c0:03: a5:31:18:1c:59:06:47:26:d3:ea:a3:e2:a8:4d:34: b4:dc:b5:13:d5:44:49:07:d7:94:ee:b2:05:71:70: 70:36:4e:a6:66:b7:2b:31:48:e9:f9:6a:61:74:13: 2b:99:e1:d6:2c:96:ae:33:39:29:11:c9:98:35:39: d6:fd:2c:03:09:ca:62:45:ff:ea:f5:b9:bd:9c:1c: cc:68:b5:a0:7d:63:8e:6d:3d:cc:8a:10:cb:b5:d7: a9:59:78:2b:29:34:71:23:ef:c9:f1:c0:a1:6f:90: 9e:45:3c:3f:8f:ee:e0:4c:5a:18:1d:95:b7:32:6b: dc:73:cf:99:f6:ae:79:1f:28:db:03:b6:1d:4b:93: 27:d7:0a:04:3b:c5:75:2e:1a:b9:96:87:bc:58:13: 5f:27:5e:5a:7a:82:cf:3a:55:a4:e5:af:63:c1:66: 17:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:0F:2E:A6:A3:39:72:89:84:08:F6:84:C0:98:65:1D:34:F6:15 X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e9:3e:d9:e3:5d:91:82:83:77:f2:8c:88:5f:dc:3f:a3:e7: 26:81:3a:5b:80:16:29:12:62:70:63:49:1d:fa:7c:55:df:94: b6:f8:ee:96:68:7b:38:51:7e:a6:ee:76:84:43:f6:f9:e9:d3: cb:05:2b:0d:11:0d:7c:df:ea:94:4d:cb:36:19:ed:1c:7f:2c: 57:17:cc:5d:0f:00:b5:91:61:57:f3:18:dc:30:97:e2:0b:90: 9d:ac:6a:9b:90:2e:7a:1d:c8:82:21:1c:e8:34:b6:ad:ec:99: 86:3e:f4:ac:7f:e8:00:55:26:d4:1c:91:b5:b5:a6:38:6a:ce: 6b:b8:ac:8d:5e:65:a1:60:30:3d:4d:7e:df:8f:b9:c7:ee:d4: d6:7c:98:c2:84:15:4c:60:99:b9:d2:2d:39:55:9f:33:e9:6a: d2:e6:ff:54:ea:62:75:0c:a7:b6:b5:8b:7d:75:1a:bb:e5:2a: f6:1a:f9:d4:de:a4:71:d8:77:31:85:a7:51:c6:99:43:9d:56: 88:88:7b:b0:3a:38:79:8b:e3:c4:cb:e8:db:71:9b:4d:1a:bd: 7a:94:78:3d:dc:b3:a3:6c:b9:51:9f:3b:67:b9:82:37:42:70: b2:0e:9e:b4:65:54:66:29:b2:05:f8:1b:c7:5d:8c:43:15:2a: 16:18:d2:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjZ8liT7ZOde2B634v71/l3pYyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA3MjMyMzA4MTRaFw0yNjA3MjQyMzU2MTRaMDMxMTAvBgNV BAMTKDFBMjkwRjJFQTZBMzM5NzI4OTg0MDhGNjg0QzA5ODY1MUQzNEY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47WvOD8uEwaK4bOP6gRyIxXI0 GJsa74Kb19vrUYS0W2wOolg5wtgzEYjWpRUQdwlf05lHaZjyGOeCmvb+YK1r+2/u r7PWhwyeX6evIF0WzERPZ8R1stjAA6UxGBxZBkcm0+qj4qhNNLTctRPVREkH15Tu sgVxcHA2TqZmtysxSOn5amF0EyuZ4dYslq4zOSkRyZg1Odb9LAMJymJF/+r1ub2c HMxotaB9Y45tPcyKEMu116lZeCspNHEj78nxwKFvkJ5FPD+P7uBMWhgdlbcya9xz z5n2rnkfKNsDth1LkyfXCgQ7xXUuGrmWh7xYE18nXlp6gs86VaTlr2PBZheNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGikPLqajOXKJhAj2hMCYZR009hUwHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnpPtnjXZGCg3fyjIhf3D+j5yaBOluAFikS YnBjSR36fFXflLb47pZoezhRfqbudoRD9vnp08sFKw0RDXzf6pRNyzYZ7Rx/LFcX zF0PALWRYVfzGNwwl+ILkJ2sapuQLnodyIIhHOg0tq3smYY+9Kx/6ABVJtQckbW1 pjhqzmu4rI1eZaFgMD1Nft+Pucfu1NZ8mMKEFUxgmbnSLTlVnzPpatLm/1TqYnUM p7a1i311GrvlKvYa+dTepHHYdzGFp1HGmUOdVoiIe7A6OHmL48TL6Ntxm00avXqU eD3cs6NsuVGfO2e5gjdCcLIOnrRlVGYpsgX4G8ddjEMVKhYY0l0= -----END CERTIFICATE-----Generated at Fri Jul 24 10:43:48 2026 by rpki-client