$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft File: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft (raw, json) Hash identifier: w0FUQLlPuKlQIlCwJhjYTyNLu8dAcdtsQetOfCvQyFc= Subject key identifier: B8:98:F1:8C:AF:FB:75:11:41:D3:00:70:88:A2:86:23:66:9E:B7:8E Authority key identifier: BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 Certificate issuer: /CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Certificate serial: 59AE38F1C9FA7CB3A70AD8179E65C005469F904A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 08:36:24 +0000 Manifest this update: Thu 24 Sep 2026 08:31:24 +0000 Manifest next update: Fri 25 Sep 2026 12:23:24 +0000 Files and hashes: 1: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: nUugKOdExMFJnvFh04jHSO3wCeesIumGtVFPqxZ7JUo=) 2: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: q4GFRcWVs+Ai4gXERrwVrrYZbhWnp7v5yT7e4NRdMGk=) 3: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: O7Jg3ekrKiPlwDIBfPqMERpdUxButyek7mBs/PaEfvA=) 4: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: 29cKBY9SmIDNcy8Up3JMwSzyFn85kJNfVtGR4zVqHOo=) 5: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: IgZVkE+S6069w73+w/n6imuTngD34gWEV6HPl2N+lmw=) 6: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: xGj0e4XQ4vJ8oWerZ4jXagNlyhy1gxpkEDp9VKKcLHc=) 7: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: IcQvSAJGT5F2NpZZwUWfDRfWyeJTixApL9YTKNnPovc=) 8: BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl (hash: fwLEOyMrJFdrS9DJ2D54fSIOASaQKd31fJJ/98rScNE=) 9: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: mb6stKBonjjNRvfMm98TbumJRAVflg9hiU378+4IYt4=) 10: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: Gh74rlG6cZiGWXdiLt7turdRPANg8uysBJZ/a1V4u3c=) 11: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: nVBnDB0/UQIhvlZknFXMulW4aEJQqLigk7J0WBCftGQ=) 12: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: m7aYtnxqmO5yLH8RFKNeSd1PMgjIrrVpH7VORkZBuSQ=) 13: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: W57jnxb8I7PewGJC2zTEjUBxKopfhpmR1Iwvxvyuls4=) 14: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: UdoPkZ+2AOHg3vZbgjXSJjipAK97nm8TlruCo/DcsiI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ae:38:f1:c9:fa:7c:b3:a7:0a:d8:17:9e:65:c0:05:46:9f:90:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67 Validity Not Before: Sep 24 08:31:24 2026 GMT Not After : Sep 25 12:23:24 2026 GMT Subject: CN=B898F18CAFFB751141D3007088A28623669EB78E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:53:21:49:da:40:0d:7b:f4:ba:88:f7:6d: 5e:23:b5:09:c2:eb:e2:f9:25:c0:c6:92:5b:cf:e3: c7:15:71:e2:68:fa:ae:5e:b5:41:30:13:ea:30:da: cc:ef:57:cd:8c:8b:a7:4c:74:44:7d:4f:d2:bb:df: 6c:7b:c3:dc:1c:67:3b:59:98:43:a2:7a:83:4b:a5: d8:5b:d1:11:0e:fe:08:a4:e6:63:a3:d9:e0:e6:67: 57:dd:64:da:eb:a3:09:af:14:b8:2e:88:2e:84:74: 53:bc:da:47:1d:a3:d4:21:55:ba:ff:6b:f9:81:38: 20:6c:a7:3e:b4:66:41:4d:f0:e2:d1:3a:04:d8:8a: 64:ac:61:86:7d:b0:09:f8:f1:1e:84:9c:47:3c:d8: ae:01:74:d7:a5:21:51:42:da:6d:33:2e:c8:13:82: 3b:1f:53:fc:79:53:e2:9c:55:fb:9d:7c:2f:d0:7a: ad:88:f6:ab:9d:af:5b:77:26:82:c7:47:14:a2:ff: 52:92:dc:bd:2b:3d:0c:60:68:1e:13:fe:d1:fe:1a: 42:1d:e8:0d:d2:48:8b:d8:48:a2:df:31:a1:4a:c3: 7a:6b:a7:b3:f0:a9:25:68:74:78:6c:a5:62:5c:8a: c5:f5:52:fc:cb:bb:95:b4:6c:b8:78:0a:69:76:b1: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:F1:8C:AF:FB:75:11:41:D3:00:70:88:A2:86:23:66:9E:B7:8E X509v3 Authority Key Identifier: keyid:BB:93:3B:FB:2B:0C:8A:3A:BD:4E:55:48:5B:CC:D9:E7:B4:48:6E:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/BB933BFB2B0C8A3ABD4E55485BCCD9E7B4486E67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e0:ce:47:2d:27:04:d1:04:ec:65:a2:e0:48:9c:eb:ec:ca: 10:1a:59:04:9e:1a:9a:ee:ec:83:e7:4a:ab:0b:db:64:60:fe: 16:2e:f2:b0:4c:70:17:5e:5d:74:d6:fa:3d:ac:04:45:2e:d6: 56:33:62:6d:9b:18:21:f7:8b:4a:15:16:b5:29:7e:0f:56:d0: aa:61:d6:f4:7a:9a:ce:a9:d1:14:67:2b:df:06:c0:f0:5a:7e: 99:31:ee:1f:44:26:eb:79:ff:6f:75:40:96:71:9d:03:c0:0a: 3a:aa:33:eb:53:3c:57:de:99:b0:91:59:48:8e:a7:5d:b2:de: 9a:dd:53:b1:75:bf:32:9f:11:a9:75:39:42:8b:4e:f1:22:68: fc:df:e2:7f:87:99:1f:82:15:7a:8e:bc:a8:68:49:5c:aa:f6: 5c:33:7e:0e:a4:2c:4d:9e:db:c8:5a:af:2e:79:b9:90:60:7b: 4b:6f:2e:be:17:ae:1d:12:d2:ad:16:c3:64:c8:a1:0f:de:c2: 84:83:a3:ac:bf:12:ef:38:af:86:21:aa:08:c1:0f:71:e3:b5: a0:29:7d:26:64:ce:75:b3:75:d3:de:51:e7:c0:c9:d4:12:1b: b4:7d:8d:c1:d6:d3:26:d2:2b:9c:38:a1:10:b3:5e:da:d1:cc: 24:03:63:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWa448cn6fLOnCtgXnmXABUafkEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdC NDQ4NkU2NzAeFw0yNjA5MjQwODMxMjRaFw0yNjA5MjUxMjIzMjRaMDMxMTAvBgNV BAMTKEI4OThGMThDQUZGQjc1MTE0MUQzMDA3MDg4QTI4NjIzNjY5RUI3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgVlMhSdpADXv0uoj3bV4jtQnC 6+L5JcDGklvP48cVceJo+q5etUEwE+ow2szvV82Mi6dMdER9T9K732x7w9wcZztZ mEOieoNLpdhb0REO/gik5mOj2eDmZ1fdZNrrowmvFLguiC6EdFO82kcdo9QhVbr/ a/mBOCBspz60ZkFN8OLROgTYimSsYYZ9sAn48R6EnEc82K4BdNelIVFC2m0zLsgT gjsfU/x5U+KcVfudfC/Qeq2I9qudr1t3JoLHRxSi/1KS3L0rPQxgaB4T/tH+GkId 6A3SSIvYSKLfMaFKw3prp7PwqSVodHhspWJcisX1UvzLu5W0bLh4Cml2sZXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJjxjK/7dRFB0wBwiKKGI2aet44wHwYDVR0j BBgwFoAUu5M7+ysMijq9TlVIW8zZ57RIbmcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWFiYTRlNTktZmIzMS00MWI1LTg4ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIy QjBDOEEzQUJENEU1NTQ4NUJDQ0Q5RTdCNDQ4NkU2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjkzM0JGQjJCMEM4QTNBQkQ0RTU1NDg1QkNDRDlFN0I0NDg2 RTY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvQkI5MzNCRkIyQjBDOEEzQUJENEU1NTQ4NUJDQ0Q5 RTdCNDQ4NkU2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfgzkctJwTRBOxlouBInOvsyhAaWQSeGpru 7IPnSqsL22Rg/hYu8rBMcBdeXXTW+j2sBEUu1lYzYm2bGCH3i0oVFrUpfg9W0Kph 1vR6ms6p0RRnK98GwPBafpkx7h9EJut5/291QJZxnQPACjqqM+tTPFfembCRWUiO p12y3prdU7F1vzKfEal1OUKLTvEiaPzf4n+HmR+CFXqOvKhoSVyq9lwzfg6kLE2e 28hary55uZBge0tvLr4Xrh0S0q0Ww2TIoQ/ewoSDo6y/Eu84r4YhqgjBD3HjtaAp fSZkznWzddPeUefAydQSG7R9jcHW0ybSK5w4oRCzXtrRzCQDYzI= -----END CERTIFICATE-----Generated at Fri Sep 25 03:59:45 2026 by rpki-client