$ rpki-client -vvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: tM5yL/SS1c5iRraCATOdcRkfy/LBq6q6nfl+SBICf6o= Subject key identifier: 8B:32:6F:2B:20:1E:75:C3:4B:19:A9:27:ED:96:4C:68:4B:60:17:8F Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 0E4A6DF0A5CF08FFBD6796E06FF0098C30306E01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:58 +0000 Manifest this update: Tue 12 May 2026 20:06:58 +0000 Manifest next update: Wed 13 May 2026 20:50:58 +0000 Files and hashes: 1: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 2: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 3: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 4: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 5: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 6: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 7: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 8: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: 3bbqSGSZuvAkgRnE59FAbX/yOmNZUIPsHmZntEL2YNw=) 9: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 10: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 11: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) 12: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 13: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 14: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4a:6d:f0:a5:cf:08:ff:bd:67:96:e0:6f:f0:09:8c:30:30:6e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: May 12 20:06:58 2026 GMT Not After : May 13 20:50:58 2026 GMT Subject: CN=8B326F2B201E75C34B19A927ED964C684B60178F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:be:2a:dd:93:d3:ec:55:12:18:d7:7d:19: 16:55:05:3d:43:82:b2:c6:20:5f:f1:a1:4e:42:ba: cf:d1:dd:93:28:82:d4:8d:c0:a3:7f:07:a9:14:48: a8:91:9b:ba:6d:5f:85:af:cb:eb:03:49:83:53:ba: 8b:3e:b7:08:43:a2:fc:b8:c2:bd:4d:0f:9f:e7:a6: 72:1e:df:93:c3:02:de:68:bb:c1:b9:8a:54:f8:52: 25:ef:cf:b0:d1:65:16:8b:31:d4:43:36:33:be:1a: 8c:0a:f2:c4:d3:ba:c9:c7:db:17:ec:12:5d:67:6c: 51:19:20:a4:f3:4f:76:30:a0:b6:4d:be:ab:f5:cc: e4:69:29:9a:79:b7:c3:ed:c9:75:8c:eb:9e:54:29: ac:ca:cc:dc:e2:50:4c:49:5f:45:c7:91:12:f5:2c: 98:0a:13:eb:f7:c8:ca:1e:73:9c:17:8b:99:71:69: 2e:c2:b3:65:da:60:aa:e0:06:9b:ce:64:51:4f:b8: 87:e5:96:43:4e:0f:20:15:5d:7c:58:c3:7f:94:de: 04:67:7c:87:16:88:a8:f1:40:f8:2a:ea:94:12:10: 62:8c:26:4b:ed:49:2d:22:5e:f8:0b:e8:4f:e4:20: 85:f0:48:55:2a:ae:89:47:f4:52:c3:33:37:c5:db: 4f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:32:6F:2B:20:1E:75:C3:4B:19:A9:27:ED:96:4C:68:4B:60:17:8F X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:fe:87:b3:90:23:e0:c3:50:e9:fc:f6:f8:1e:f4:ab:24:97: dc:02:22:84:1e:df:0e:ab:65:aa:5a:70:6d:4d:f6:9a:36:30: 5e:1f:b6:13:7d:a8:98:eb:87:13:e8:5b:f6:d2:f2:62:9f:59: 7c:ab:31:c6:c8:3d:3f:e5:c5:3d:d6:a7:ec:a3:7d:07:a3:97: 16:04:85:1a:42:63:1d:ed:90:b3:9f:5a:c6:19:46:84:d8:0c: a5:54:d0:54:06:97:f3:14:96:91:91:72:bb:75:34:4d:c2:3f: 04:32:aa:aa:59:67:f4:6b:6b:15:bc:98:d3:66:41:2a:32:d5: a9:5a:f7:ef:83:e8:9e:31:23:56:3b:95:49:ed:17:f0:01:07: 1b:ca:e5:0c:dc:09:2b:f7:bb:5e:51:17:1d:bf:af:d0:d8:6a: 6b:dd:c0:ed:4f:ea:f4:21:56:c9:98:70:ed:89:1a:38:7b:f7: 5b:76:00:72:65:5f:3d:67:ec:0d:f3:69:70:17:ab:c9:f5:f8: fb:31:55:b8:49:0f:1d:a7:cd:2f:77:41:ec:1b:c8:b8:b1:c0: bb:5c:7d:34:44:6f:db:4f:27:5e:63:67:14:1c:52:c3:96:7b: d0:94:43:2b:1d:4b:0a:51:f4:26:a8:2f:5c:3a:35:c8:66:0f: db:79:55:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkpt8KXPCP+9Z5bgb/AJjDAwbgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA1MTIyMDA2NThaFw0yNjA1MTMyMDUwNThaMDMxMTAvBgNV BAMTKDhCMzI2RjJCMjAxRTc1QzM0QjE5QTkyN0VEOTY0QzY4NEI2MDE3OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hL4q3ZPT7FUSGNd9GRZVBT1D grLGIF/xoU5Cus/R3ZMogtSNwKN/B6kUSKiRm7ptX4Wvy+sDSYNTuos+twhDovy4 wr1ND5/npnIe35PDAt5ou8G5ilT4UiXvz7DRZRaLMdRDNjO+GowK8sTTusnH2xfs El1nbFEZIKTzT3YwoLZNvqv1zORpKZp5t8PtyXWM655UKazKzNziUExJX0XHkRL1 LJgKE+v3yMoec5wXi5lxaS7Cs2XaYKrgBpvOZFFPuIfllkNODyAVXXxYw3+U3gRn fIcWiKjxQPgq6pQSEGKMJkvtSS0iXvgL6E/kIIXwSFUqrolH9FLDMzfF208rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizJvKyAedcNLGakn7ZZMaEtgF48wHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMj+h7OQI+DDUOn89vge9Kskl9wCIoQe3w6r ZapacG1N9po2MF4fthN9qJjrhxPoW/bS8mKfWXyrMcbIPT/lxT3Wp+yjfQejlxYE hRpCYx3tkLOfWsYZRoTYDKVU0FQGl/MUlpGRcrt1NE3CPwQyqqpZZ/RraxW8mNNm QSoy1ala9++D6J4xI1Y7lUntF/ABBxvK5QzcCSv3u15RFx2/r9DYamvdwO1P6vQh VsmYcO2JGjh791t2AHJlXz1n7A3zaXAXq8n1+PsxVbhJDx2nzS93QewbyLixwLtc fTREb9tPJ15jZxQcUsOWe9CUQysdSwpR9CaoL1w6NchmD9t5VRw= -----END CERTIFICATE-----Generated at Tue May 12 22:46:52 2026 by rpki-client