$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: VpzajML9bOtPs8APn37/TFrly4xB1pJxd0eqBPf4nPg= Subject key identifier: B9:89:F4:40:B9:1C:CA:0C:86:31:5A:07:B1:21:26:E2:E9:6C:D0:B0 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 40E61AE23576DB9A56FB2E1F6B0198E4A809B0D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 13:10:57 +0000 Manifest this update: Sat 14 Nov 2026 13:05:57 +0000 Manifest next update: Sun 15 Nov 2026 14:33:57 +0000 Files and hashes: 1: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: FHpPztFTcIi3DKSN8f558ogp2FdgmF+SC1+gcZ82L4U=) 2: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 3: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 4: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 5: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 6: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) 7: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 8: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 9: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 10: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 11: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 12: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 13: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 14: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 14:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:e6:1a:e2:35:76:db:9a:56:fb:2e:1f:6b:01:98:e4:a8:09:b0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Nov 14 13:05:57 2026 GMT Not After : Nov 15 14:33:57 2026 GMT Subject: CN=B989F440B91CCA0C86315A07B12126E2E96CD0B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:ca:9a:0e:8b:42:88:7b:27:90:f5:28:54: d1:99:7f:e8:82:c8:d6:98:9c:74:06:05:a5:53:77: 51:8e:08:80:6b:ce:c4:36:62:50:f3:50:6f:36:ef: 82:dc:c8:64:ef:c4:87:f3:51:64:20:05:e6:7d:12: 7b:4c:ba:65:93:34:68:91:1a:c8:27:c7:a8:48:60: 74:c5:8a:08:fa:bd:55:e9:64:eb:d5:29:d1:ef:4a: db:43:a4:11:ca:40:a2:97:4a:72:6c:ba:f2:a8:d2: f2:8b:dc:31:22:23:27:9d:95:d5:25:48:9f:b5:0a: 1b:a2:6e:e2:4c:cd:c3:cd:1a:2a:3b:75:f8:22:2e: 44:8c:3a:14:53:7d:0f:f0:bf:de:2e:03:61:8c:14: 07:6a:1c:cb:37:f9:1f:0b:5f:63:1d:77:fa:bb:da: a4:5e:f7:26:b1:58:2f:e0:c7:44:a3:92:31:89:34: ea:eb:62:75:b3:de:f2:a7:0a:00:79:46:6d:84:fc: 34:a6:18:97:76:ef:18:e3:7d:cc:1f:7b:04:f8:70: de:ab:56:c4:07:c0:82:f2:96:08:66:d0:7e:46:fe: d7:1c:e8:ce:12:fe:25:58:96:78:72:2b:a3:7a:67: 62:9a:ba:a8:4e:9b:50:a7:7d:a6:c3:1a:2f:f9:2f: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:89:F4:40:B9:1C:CA:0C:86:31:5A:07:B1:21:26:E2:E9:6C:D0:B0 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:f7:0c:dd:8c:7b:fe:d8:2a:47:a1:3d:01:26:7f:39:03:07: ca:36:12:1a:df:69:e3:31:8d:14:96:a9:48:2f:bb:6f:be:1e: 86:fc:d3:8f:8f:53:c2:0f:c7:5d:34:b1:da:28:90:16:d3:d9: d2:5d:3c:26:32:c4:9b:b0:f9:78:63:e9:37:a0:66:6c:14:69: b0:ce:09:b9:18:cb:07:0a:8f:5d:07:09:8f:87:7d:1c:9a:9c: 4c:e9:c5:eb:6d:8b:1e:12:2c:c4:3b:be:60:ac:15:ce:c0:e6: b7:35:04:87:bd:39:3d:7e:5a:c2:e9:b9:e7:3a:87:09:54:c0: 0d:b4:ac:05:31:fe:64:58:93:58:85:02:40:7d:e9:e3:20:53: 22:be:44:d8:15:00:c8:c6:9c:b1:62:04:ae:99:1b:3c:3a:09: 52:f8:39:e9:2d:2f:e1:e9:de:69:b9:95:c9:ca:cf:22:0a:e2: 7b:97:44:31:91:c4:23:34:60:13:c7:80:3b:19:51:cf:8f:59: 27:82:8c:b8:d3:fe:26:b3:11:57:44:ca:84:92:a8:9d:40:96: 92:fa:4c:c2:f7:9c:7f:49:2d:a5:7c:49:5e:8c:9c:89:fb:2d: 8a:0a:cf:b4:c2:d7:71:01:32:b5:e4:d0:e6:5b:93:60:f2:2f: 09:f2:83:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQOYa4jV225pW+y4fawGY5KgJsNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjExMTQxMzA1NTdaFw0yNjExMTUxNDMzNTdaMDMxMTAvBgNV BAMTKEI5ODlGNDQwQjkxQ0NBMEM4NjMxNUEwN0IxMjEyNkUyRTk2Q0QwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyY8qaDotCiHsnkPUoVNGZf+iC yNaYnHQGBaVTd1GOCIBrzsQ2YlDzUG8274LcyGTvxIfzUWQgBeZ9EntMumWTNGiR Gsgnx6hIYHTFigj6vVXpZOvVKdHvSttDpBHKQKKXSnJsuvKo0vKL3DEiIyedldUl SJ+1ChuibuJMzcPNGio7dfgiLkSMOhRTfQ/wv94uA2GMFAdqHMs3+R8LX2Mdd/q7 2qRe9yaxWC/gx0SjkjGJNOrrYnWz3vKnCgB5Rm2E/DSmGJd27xjjfcwfewT4cN6r VsQHwILylghm0H5G/tcc6M4S/iVYlnhyK6N6Z2KauqhOm1CnfabDGi/5L6+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuYn0QLkcygyGMVoHsSEm4uls0LAwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKv3DN2Me/7YKkehPQEmfzkDB8o2EhrfaeMx jRSWqUgvu2++Hob804+PU8IPx100sdookBbT2dJdPCYyxJuw+Xhj6TegZmwUabDO CbkYywcKj10HCY+HfRyanEzpxettix4SLMQ7vmCsFc7A5rc1BIe9OT1+WsLpuec6 hwlUwA20rAUx/mRYk1iFAkB96eMgUyK+RNgVAMjGnLFiBK6ZGzw6CVL4OektL+Hp 3mm5lcnKzyIK4nuXRDGRxCM0YBPHgDsZUc+PWSeCjLjT/iazEVdEyoSSqJ1AlpL6 TML3nH9JLaV8SV6MnIn7LYoKz7TC13EBMrXk0OZbk2DyLwnyg5Q= -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:19 2026 by rpki-client