$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft File: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft (raw, json) Hash identifier: MdoMZ3E7CcvvKjcrjgtL+V0s2DuV8cK80S8hBfoR3eM= Subject key identifier: 8C:2D:8B:08:46:65:CA:DB:FE:07:78:B7:43:40:B3:A5:66:4A:FB:FA Authority key identifier: BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 Certificate issuer: /CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Certificate serial: 5CEAD3ECB497C80184A0E435CD47BB608AB31612 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:56:12 +0000 Manifest this update: Tue 12 May 2026 09:51:12 +0000 Manifest next update: Wed 13 May 2026 10:06:12 +0000 Files and hashes: 1: BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl (hash: Uvf3i4uNEoNsCe/HV7sCzdEttBQDU/LtAleiEtAyOOk=) 2: 3130332e3134342e33382e302f32342d3234203d3e20313339343234.roa (hash: vnuBG2aS4W7tq40+VdqRRoETLLV2uQRbtOl7x5fTejI=) 3: 3130332e3134342e33382e302f32332d3233203d3e20313339343234.roa (hash: F91ZeQFT+S+WNrAqYAYWz2zuD1F1VaaafmhJkwNLJp0=) 4: 3130332e3134342e33392e302f32342d3234203d3e20313339343234.roa (hash: Ddp99iEiqxgSmFTLQHQMXfkIYPgQQyvtEFD4USDAJlo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ea:d3:ec:b4:97:c8:01:84:a0:e4:35:cd:47:bb:60:8a:b3:16:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7 Validity Not Before: May 12 09:51:12 2026 GMT Not After : May 13 10:06:12 2026 GMT Subject: CN=8C2D8B084665CADBFE0778B74340B3A5664AFBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:0d:3e:ba:48:2e:b4:82:19:55:02:c5:21: 75:1f:d1:9f:b0:38:1d:59:48:e4:0e:47:71:47:b7: fe:c4:ad:a8:de:42:de:f4:a7:38:ff:25:b1:3f:16: 72:d8:10:85:fe:67:fd:ab:55:95:8f:91:02:0d:43: 9d:a2:04:d3:ac:96:bd:1f:ba:94:2e:62:89:b5:39: fb:fa:33:21:35:28:5e:7b:73:e2:d6:79:52:98:9b: 1f:98:eb:11:ae:02:51:8b:fb:30:98:0c:fe:27:88: 65:7c:5d:ba:f4:3a:4a:02:03:4f:e4:4e:d0:31:3e: 3a:28:7f:b2:b9:d7:67:89:3d:0d:23:44:a6:e6:06: c6:15:c0:27:20:da:22:d9:43:60:82:57:ca:07:dc: b0:50:33:18:90:ef:0a:c5:57:13:5d:f2:7d:1e:cf: 35:ef:10:60:3d:f7:e6:3c:82:48:57:18:fb:39:f1: 6a:46:49:90:38:22:87:d6:24:0e:67:56:a7:f6:58: 5b:48:c2:0b:95:53:0b:91:91:7e:f0:9e:d4:63:09: 1b:68:6c:65:54:c5:cf:98:25:6d:b2:98:e7:6d:20: f4:62:20:97:2e:a6:83:69:62:c1:c3:24:38:a3:4d: 92:18:d7:03:db:3e:58:46:73:99:08:7b:70:0b:82: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2D:8B:08:46:65:CA:DB:FE:07:78:B7:43:40:B3:A5:66:4A:FB:FA X509v3 Authority Key Identifier: keyid:BB:7A:58:4A:9F:BC:9B:64:2A:03:A4:8A:AA:46:45:EB:7F:B1:C2:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ab0a59a-61ba-462e-a82a-a202b7fb80f0/0/BB7A584A9FBC9B642A03A48AAA4645EB7FB1C2C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6d:96:06:10:88:d0:3c:31:a8:57:fc:8e:02:f9:2f:49:2f: e1:3d:dc:d8:34:c7:e4:35:e2:6c:8f:84:44:4c:ce:e4:62:70: 05:57:f5:9d:82:04:cd:5b:26:34:3d:7b:1f:7c:ae:2b:81:62: 23:9d:64:97:69:af:b8:4d:21:f3:be:b2:2c:39:ff:3f:87:c8: 56:90:3e:94:63:6b:f0:97:fb:10:bc:34:75:32:31:e8:b6:b2: 71:02:34:ef:e8:50:5a:9c:c2:ad:81:60:b6:54:9c:91:c4:3c: f4:9e:71:d8:e1:71:3d:67:6b:89:22:f8:60:d4:0c:66:59:36: 0b:af:c2:fb:27:7c:84:ec:82:20:8b:13:79:56:58:97:76:55: 72:b1:50:5c:1a:30:61:49:d0:4f:60:b9:39:8d:b1:37:f8:40: 66:70:0a:b3:80:d7:8a:a8:32:5e:e7:0b:52:80:89:ff:46:7d: e8:45:2d:14:be:87:9d:56:12:cd:92:a1:5b:0d:0c:34:cc:92: a1:0b:28:66:28:28:73:be:de:bc:91:d0:1f:f1:fc:c3:7c:7a: 44:b0:35:e0:37:1e:a5:04:7c:60:29:99:01:10:f5:eb:b8:39: 31:99:a5:d6:34:fa:8d:b6:14:10:6f:15:a8:8e:4a:e7:e7:65: 34:6a:a8:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOrT7LSXyAGEoOQ1zUe7YIqzFhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3 RkIxQzJDNzAeFw0yNjA1MTIwOTUxMTJaFw0yNjA1MTMxMDA2MTJaMDMxMTAvBgNV BAMTKDhDMkQ4QjA4NDY2NUNBREJGRTA3NzhCNzQzNDBCM0E1NjY0QUZCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+A0+ukgutIIZVQLFIXUf0Z+w OB1ZSOQOR3FHt/7ErajeQt70pzj/JbE/FnLYEIX+Z/2rVZWPkQINQ52iBNOslr0f upQuYom1Ofv6MyE1KF57c+LWeVKYmx+Y6xGuAlGL+zCYDP4niGV8Xbr0OkoCA0/k TtAxPjoof7K512eJPQ0jRKbmBsYVwCcg2iLZQ2CCV8oH3LBQMxiQ7wrFVxNd8n0e zzXvEGA99+Y8gkhXGPs58WpGSZA4IofWJA5nVqf2WFtIwguVUwuRkX7wntRjCRto bGVUxc+YJW2ymOdtIPRiIJcupoNpYsHDJDijTZIY1wPbPlhGc5kIe3ALgpr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjC2LCEZlytv+B3i3Q0CzpWZK+/owHwYDVR0j BBgwFoAUu3pYSp+8m2QqA6SKqkZF63+xwscwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiMGE1OWEtNjFiYS00NjJlLWE4MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5 RkJDOUI2NDJBMDNBNDhBQUE0NjQ1RUI3RkIxQzJDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjdBNTg0QTlGQkM5QjY0MkEwM0E0OEFBQTQ2NDVFQjdGQjFD MkM3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiMGE1OWEtNjFiYS00NjJlLWE4 MmEtYTIwMmI3ZmI4MGYwLzAvQkI3QTU4NEE5RkJDOUI2NDJBMDNBNDhBQUE0NjQ1 RUI3RkIxQzJDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACptlgYQiNA8MahX/I4C+S9JL+E93Ng0x+Q1 4myPhERMzuRicAVX9Z2CBM1bJjQ9ex98riuBYiOdZJdpr7hNIfO+siw5/z+HyFaQ PpRja/CX+xC8NHUyMei2snECNO/oUFqcwq2BYLZUnJHEPPSecdjhcT1na4ki+GDU DGZZNguvwvsnfITsgiCLE3lWWJd2VXKxUFwaMGFJ0E9guTmNsTf4QGZwCrOA14qo Ml7nC1KAif9GfehFLRS+h51WEs2SoVsNDDTMkqELKGYoKHO+3ryR0B/x/MN8ekSw NeA3HqUEfGApmQEQ9eu4OTGZpdY0+o22FBBvFaiOSufnZTRqqPo= -----END CERTIFICATE-----Generated at Tue May 12 22:53:06 2026 by rpki-client