$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: QAqLSC/+MRjzdnvN7UccoKlQ3P+7fLilYdvP7qPblOY= Subject key identifier: ED:9A:FB:EF:BC:B6:2A:34:35:64:F0:44:E9:19:3D:EE:69:88:C4:F5 Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 20A34E8D3AF7A3FB19029D835EA44F5D17B1EB91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 14:44:22 +0000 Manifest this update: Wed 23 Sep 2026 14:39:22 +0000 Manifest next update: Thu 24 Sep 2026 16:31:22 +0000 Files and hashes: 1: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 2: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 3: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 4: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 5: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 6: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 7: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: zL4/Li/Oi0lNu8Rt+V1P0U+muehlvvf5R8fCnjnV9fY=) 8: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 9: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 10: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) 11: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 12: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 13: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 14: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a3:4e:8d:3a:f7:a3:fb:19:02:9d:83:5e:a4:4f:5d:17:b1:eb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Sep 23 14:39:22 2026 GMT Not After : Sep 24 16:31:22 2026 GMT Subject: CN=ED9AFBEFBCB62A343564F044E9193DEE6988C4F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a0:8e:32:f7:b4:2a:7d:11:3f:1e:ee:18:5e: 16:33:3c:29:ae:be:d5:42:c7:46:35:e5:67:af:4f: e6:8b:3e:9e:61:72:0c:d2:5f:a2:7e:b0:70:57:35: 0b:bd:3f:c1:a7:0c:e0:92:30:31:6c:22:c7:13:c1: 70:a7:0c:34:32:b6:5c:62:85:ce:f0:79:ef:c2:e2: 1f:66:5b:37:7a:5a:cc:e3:5d:24:e8:5b:99:63:b6: 69:67:60:51:65:fa:cb:e8:5c:43:8b:a8:5d:4e:32: 8e:b1:f6:32:08:6c:73:01:d1:c0:f9:ec:54:14:72: b3:b8:a8:c9:c1:2d:e1:af:c9:fb:fe:43:7a:32:f1: 9e:00:01:c5:39:bd:83:66:1e:9b:ce:3e:a5:f4:3f: 43:2d:1a:a6:0b:9a:a1:c0:25:38:de:86:48:cc:cd: fe:f3:6f:97:0d:fc:dd:b7:47:b3:b0:33:07:80:89: 82:f4:0d:a7:8a:f9:ee:5b:f3:b5:76:57:78:77:a3: ad:30:7a:78:4f:f7:1c:ef:0b:0b:ae:47:7e:cc:7b: 96:d8:cd:59:bd:02:5b:d5:e0:14:4b:0f:13:51:7d: e6:70:e1:51:5c:b4:9b:d4:ab:32:cc:00:dc:e5:bb: 90:79:1c:48:f2:4e:3b:04:c1:f9:4e:6b:9c:79:36: 44:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9A:FB:EF:BC:B6:2A:34:35:64:F0:44:E9:19:3D:EE:69:88:C4:F5 X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:5b:9e:6a:ac:3c:47:36:f5:bf:87:a8:63:07:10:71:dc:f1: b4:bb:e7:99:e4:0b:49:30:da:23:bd:16:79:61:f8:f9:24:7f: dc:9d:38:fa:da:b0:ea:bd:c2:10:93:14:2a:15:86:a6:af:47: 50:87:93:1d:45:17:e1:2c:fb:dd:68:d6:b4:a1:42:66:da:2d: d1:7a:58:e0:4c:df:54:69:27:02:c0:fe:f2:5d:05:04:b8:f4: b2:13:5a:89:c3:01:f5:11:fb:10:7f:73:fc:67:b5:d3:a7:e0: 1f:e2:48:9c:53:79:42:96:74:d4:b8:32:28:32:21:44:29:76: d0:b8:63:df:c9:c5:63:f1:81:a2:f5:59:ba:09:72:ed:50:d3: b2:f9:52:ab:49:a6:69:20:c8:f9:9f:c8:7d:9f:2a:d1:22:db: e1:49:6a:60:4c:cb:6e:81:30:31:2a:c9:a2:c5:28:65:ed:33: 3b:3e:53:3f:52:35:90:66:38:2a:83:36:47:a0:6c:1d:8e:8f: 5f:27:e8:3e:c9:c9:0f:ce:6a:7e:aa:3e:3d:c9:b4:2a:e0:20: a2:21:d9:0f:02:96:80:9a:a4:ac:4e:71:11:05:54:a7:e0:d4: 3e:a9:72:74:67:cc:b7:34:af:99:c6:44:83:7c:f0:c6:41:f1: 92:3a:b7:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKNOjTr3o/sZAp2DXqRPXRex65EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA5MjMxNDM5MjJaFw0yNjA5MjQxNjMxMjJaMDMxMTAvBgNV BAMTKEVEOUFGQkVGQkNCNjJBMzQzNTY0RjA0NEU5MTkzREVFNjk4OEM0RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCoI4y97QqfRE/Hu4YXhYzPCmu vtVCx0Y15WevT+aLPp5hcgzSX6J+sHBXNQu9P8GnDOCSMDFsIscTwXCnDDQytlxi hc7wee/C4h9mWzd6WszjXSToW5ljtmlnYFFl+svoXEOLqF1OMo6x9jIIbHMB0cD5 7FQUcrO4qMnBLeGvyfv+Q3oy8Z4AAcU5vYNmHpvOPqX0P0MtGqYLmqHAJTjehkjM zf7zb5cN/N23R7OwMweAiYL0DaeK+e5b87V2V3h3o60wenhP9xzvCwuuR37Me5bY zVm9AlvV4BRLDxNRfeZw4VFctJvUqzLMANzlu5B5HEjyTjsEwflOa5x5NkTRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Zr777y2KjQ1ZPBE6Rk97mmIxPUwHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJbnmqsPEc29b+HqGMHEHHc8bS755nkC0kw 2iO9Fnlh+Pkkf9ydOPrasOq9whCTFCoVhqavR1CHkx1FF+Es+91o1rShQmbaLdF6 WOBM31RpJwLA/vJdBQS49LITWonDAfUR+xB/c/xntdOn4B/iSJxTeUKWdNS4Migy IUQpdtC4Y9/JxWPxgaL1WboJcu1Q07L5UqtJpmkgyPmfyH2fKtEi2+FJamBMy26B MDEqyaLFKGXtMzs+Uz9SNZBmOCqDNkegbB2Oj18n6D7JyQ/Oan6qPj3JtCrgIKIh 2Q8CloCapKxOcREFVKfg1D6pcnRnzLc0r5nGRIN88MZB8ZI6t5k= -----END CERTIFICATE-----Generated at Thu Sep 24 04:21:31 2026 by rpki-client