$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: i0kU5/8npxMPjfliPNZuHsFFTBFBD8pQfzNuOHwkRN8= Subject key identifier: 2B:AA:23:5F:B8:64:4D:66:F6:3F:07:89:6A:65:AF:E9:A1:FC:C8:CF Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 2A3791FC862A23957A75ACFEC0EE62BD7F944CAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: BF Signing time: Wed 23 Sep 2026 09:58:34 +0000 Manifest this update: Wed 23 Sep 2026 09:53:34 +0000 Manifest next update: Thu 24 Sep 2026 11:58:34 +0000 Files and hashes: 1: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) 2: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: zA6dZwEmTcnxaHJDBUzeciua1y+8AffbB7SLKIVBtpw=) 3: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) 4: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:37:91:fc:86:2a:23:95:7a:75:ac:fe:c0:ee:62:bd:7f:94:4c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: Sep 23 09:53:34 2026 GMT Not After : Sep 24 11:58:34 2026 GMT Subject: CN=2BAA235FB8644D66F63F07896A65AFE9A1FCC8CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c9:87:4c:76:c5:87:73:66:d3:81:a8:08:b2: fd:52:57:d5:51:44:50:46:2d:21:c1:05:c2:ae:ad: 1b:82:00:a7:ab:cf:87:3e:56:76:ba:d8:84:d7:78: e2:40:7d:87:20:a9:69:f5:98:82:bf:2c:42:b5:d8: 54:d1:b1:0f:2c:5d:cf:cd:f5:e9:8d:a0:7e:a0:ad: f4:a7:02:be:c9:99:97:e1:f8:93:02:19:24:93:71: be:fc:cf:d2:07:c6:10:96:bd:76:f3:69:f7:b9:14: b4:5a:68:0a:be:ad:c3:8a:56:d2:40:d9:06:50:8e: 02:e4:ff:24:b5:89:ec:3b:ef:36:89:ce:ee:76:d6: dc:4d:9e:b5:cc:24:f4:dd:f7:66:40:ca:4e:44:e2: 6f:c2:d1:cd:55:32:83:c7:26:0d:92:ca:e1:dd:ed: e6:44:3f:cd:20:8a:9f:41:54:3a:8b:c6:39:85:b9: 85:d4:61:f2:7c:50:ea:3e:b9:5a:91:15:cb:02:f3: 70:76:8e:22:3b:64:98:b5:e2:44:78:9a:bf:1b:68: 09:2a:a7:cd:33:a2:dc:08:cd:05:2d:6b:37:b3:1c: 4b:03:3b:70:8c:cf:f5:32:1b:0c:f7:32:9a:96:72: e2:28:f2:c2:6d:ac:64:1f:49:d1:aa:90:b2:ae:35: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AA:23:5F:B8:64:4D:66:F6:3F:07:89:6A:65:AF:E9:A1:FC:C8:CF X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4c:d6:56:33:8a:23:0e:bc:a9:1a:e1:4f:69:be:60:67:ae: 56:3f:83:7a:f5:3c:91:a7:1f:9f:48:28:0d:77:92:8f:62:be: fa:36:c2:61:4d:d7:d4:9f:b7:25:96:57:21:d9:e1:09:53:16: 7a:6f:94:8b:75:bf:f1:ad:4f:b4:a2:57:ff:62:a6:fd:41:3d: f9:a7:54:e4:b6:f2:59:93:a1:0e:8a:2f:57:51:29:b0:b4:75: ba:d3:92:64:af:4d:c1:f8:a2:42:08:5b:2d:52:4d:dc:70:6f: 51:a7:df:10:dc:85:cd:a2:99:c6:4e:bb:a3:54:fb:72:02:1f: 26:21:13:a1:cf:62:81:eb:26:e9:2a:13:1b:0f:06:56:06:fc: 67:78:2b:03:7a:61:2a:ee:b8:4a:ad:c4:1b:1c:72:7b:be:df: 74:18:cb:4c:c1:4f:66:99:36:11:76:a3:23:4a:8b:ed:f5:ac: a5:17:70:49:d2:be:60:4f:b9:d3:73:51:96:d9:28:27:1c:40: 04:fd:fc:95:67:72:7c:0d:2e:c8:11:fc:82:89:45:42:00:62: f5:e4:39:91:e8:be:98:06:1f:75:5a:cb:16:16:3e:45:a0:1e: 61:5e:5d:f8:1c:5d:53:6c:ff:bc:99:fa:ce:b9:d8:48:42:f6: c4:67:46:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjeR/IYqI5V6daz+wO5ivX+UTKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA5MjMwOTUzMzRaFw0yNjA5MjQxMTU4MzRaMDMxMTAvBgNV BAMTKDJCQUEyMzVGQjg2NDRENjZGNjNGMDc4OTZBNjVBRkU5QTFGQ0M4Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7yYdMdsWHc2bTgagIsv1SV9VR RFBGLSHBBcKurRuCAKerz4c+Vna62ITXeOJAfYcgqWn1mIK/LEK12FTRsQ8sXc/N 9emNoH6grfSnAr7JmZfh+JMCGSSTcb78z9IHxhCWvXbzafe5FLRaaAq+rcOKVtJA 2QZQjgLk/yS1iew77zaJzu521txNnrXMJPTd92ZAyk5E4m/C0c1VMoPHJg2SyuHd 7eZEP80gip9BVDqLxjmFuYXUYfJ8UOo+uVqRFcsC83B2jiI7ZJi14kR4mr8baAkq p80zotwIzQUtazezHEsDO3CMz/UyGwz3MpqWcuIo8sJtrGQfSdGqkLKuNbtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6ojX7hkTWb2PweJamWv6aH8yM8wHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlM1lYziiMOvKka4U9pvmBnrlY/g3r1PJGn H59IKA13ko9ivvo2wmFN19SftyWWVyHZ4QlTFnpvlIt1v/GtT7SiV/9ipv1BPfmn VOS28lmToQ6KL1dRKbC0dbrTkmSvTcH4okIIWy1STdxwb1Gn3xDchc2imcZOu6NU +3ICHyYhE6HPYoHrJukqExsPBlYG/Gd4KwN6YSruuEqtxBsccnu+33QYy0zBT2aZ NhF2oyNKi+31rKUXcEnSvmBPudNzUZbZKCccQAT9/JVncnwNLsgR/IKJRUIAYvXk OZHovpgGH3VayxYWPkWgHmFeXfgcXVNs/7yZ+s652EhC9sRnRv0= -----END CERTIFICATE-----Generated at Wed Sep 23 22:14:23 2026 by rpki-client