$ rpki-client -vvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json) Hash identifier: M52z9w8t7E07Jn274Ix7E8YQ2XaIhkTlvlXvzGSdzE8= Subject key identifier: AF:D4:B9:43:CC:53:75:E3:39:8A:FF:A1:88:3E:81:25:DF:E7:B7:64 Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA Certificate serial: 7C6715378F5907178EA0FF0C936A847E21670FA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 20:24:56 +0000 Manifest this update: Thu 23 Jul 2026 20:19:56 +0000 Manifest next update: Fri 24 Jul 2026 22:37:56 +0000 Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: chDr8IGmpShZ3u1egl2+/pdcF+AeepZWrLsZ0GXZ49Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:67:15:37:8f:59:07:17:8e:a0:ff:0c:93:6a:84:7e:21:67:0f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA Validity Not Before: Jul 23 20:19:56 2026 GMT Not After : Jul 24 22:37:56 2026 GMT Subject: CN=AFD4B943CC5375E3398AFFA1883E8125DFE7B764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:de:3b:31:cc:6f:76:aa:52:66:aa:06:d5: 8d:88:c6:09:83:1e:9d:80:ee:21:18:90:1c:77:f9: 06:8c:76:8f:02:87:99:82:71:80:0d:42:42:68:f2: 9b:b1:18:c0:40:53:31:f0:39:4c:bd:51:94:bc:34: 4b:14:1e:c3:6e:2c:69:d2:8d:12:dc:e2:57:a1:6e: aa:1e:30:e9:64:7f:52:9d:91:34:b6:5f:ce:60:5a: 5d:28:7c:68:fc:cf:c5:5d:55:54:37:2b:bf:fe:2e: 2d:be:8c:8c:93:55:95:82:d8:31:0a:d5:d1:30:e6: c4:b6:14:b9:e5:d1:81:88:0b:7f:b3:32:8d:fd:ce: 4a:53:58:9b:ef:b2:b0:a3:51:38:6d:66:cb:c3:4a: 10:48:d4:1a:2e:23:bf:c0:0f:31:d2:a8:5a:a1:6f: 50:67:da:d8:d9:98:f3:4a:71:4b:e9:29:9e:40:e5: dd:5e:a0:c4:8d:bf:9d:bb:05:b7:5d:fe:e2:dc:5d: 2b:b3:77:ed:61:14:76:65:81:1b:f2:ac:5e:4f:16: aa:78:36:3c:34:f3:3d:ab:0e:e2:1f:68:96:37:4b: 4b:81:7b:3a:75:59:79:53:c7:a7:6d:47:1f:5b:32: de:26:6b:33:93:a7:41:68:13:51:24:4e:5b:c3:5b: 53:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:B9:43:CC:53:75:E3:39:8A:FF:A1:88:3E:81:25:DF:E7:B7:64 X509v3 Authority Key Identifier: keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3f:47:a1:64:33:72:32:cf:09:14:27:85:08:b2:4a:44:07: cd:93:46:0d:a0:19:42:23:08:2b:db:c1:ac:4e:90:19:d8:50: c4:c4:6d:36:3c:db:1a:17:59:2b:ab:6d:9a:8b:8c:65:3b:f4: 32:5f:4a:2d:f3:10:f3:dc:89:d5:f7:60:49:a5:5f:a9:28:b3: 1f:64:1d:d2:da:40:07:7f:4d:68:86:98:cc:14:0b:4e:ba:c6: 54:d1:02:5f:d2:98:84:b0:8a:87:1c:1f:60:46:17:b4:e2:bf: a2:a3:d1:26:87:5c:e7:61:b2:98:55:2b:9a:73:1e:10:05:43: 5b:48:b6:55:ec:ae:5b:fb:57:8b:e5:96:92:3f:36:db:c3:31: 2b:5f:69:27:20:34:93:45:7a:84:a6:62:27:c3:bc:e0:b2:f5: 45:31:de:97:01:e4:94:cf:aa:92:d0:f0:12:d0:7e:c6:f1:7d: 7a:e7:7a:99:51:97:14:6c:a0:63:a7:88:f0:87:3c:eb:41:2c: 5b:35:47:aa:8a:c1:8f:eb:e0:b9:5f:05:b1:c2:7f:63:0a:e4: 5c:b3:42:a9:bd:6c:13:16:79:ae:6a:78:31:a2:a3:57:5b:17: 2e:82:dd:f5:c3:d3:d3:ab:65:4a:1b:a3:b6:9d:8c:2e:45:a2: e3:9f:ef:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfGcVN49ZBxeOoP8Mk2qEfiFnD6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgwODUx Njk4MDlCQTAeFw0yNjA3MjMyMDE5NTZaFw0yNjA3MjQyMjM3NTZaMDMxMTAvBgNV BAMTKEFGRDRCOTQzQ0M1Mzc1RTMzOThBRkZBMTg4M0U4MTI1REZFN0I3NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwt47McxvdqpSZqoG1Y2IxgmD Hp2A7iEYkBx3+QaMdo8Ch5mCcYANQkJo8puxGMBAUzHwOUy9UZS8NEsUHsNuLGnS jRLc4lehbqoeMOlkf1KdkTS2X85gWl0ofGj8z8VdVVQ3K7/+Li2+jIyTVZWC2DEK 1dEw5sS2FLnl0YGIC3+zMo39zkpTWJvvsrCjUThtZsvDShBI1BouI7/ADzHSqFqh b1Bn2tjZmPNKcUvpKZ5A5d1eoMSNv527Bbdd/uLcXSuzd+1hFHZlgRvyrF5PFqp4 Njw08z2rDuIfaJY3S0uBezp1WXlTx6dtRx9bMt4mazOTp0FoE1EkTlvDW1MjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr9S5Q8xTdeM5iv+hiD6BJd/nt2QwHwYDVR0j BBgwFoAUu9DNZDbKeTv/QzkiqMOAhRaYCbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiOTI2ZTAtNmM2Yi00ODU1LWE3NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQz NkNBNzkzQkZGNDMzOTIyQThDMzgwODUxNjk4MDlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQwQ0Q2NDM2Q0E3OTNCRkY0MzM5MjJBOEMzODA4NTE2OTgw OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgw ODUxNjk4MDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHg/R6FkM3IyzwkUJ4UIskpEB82TRg2gGUIj CCvbwaxOkBnYUMTEbTY82xoXWSurbZqLjGU79DJfSi3zEPPcidX3YEmlX6kosx9k HdLaQAd/TWiGmMwUC066xlTRAl/SmISwioccH2BGF7Tiv6Kj0SaHXOdhsphVK5pz HhAFQ1tItlXsrlv7V4vllpI/NtvDMStfaScgNJNFeoSmYifDvOCy9UUx3pcB5JTP qpLQ8BLQfsbxfXrneplRlxRsoGOniPCHPOtBLFs1R6qKwY/r4LlfBbHCf2MK5Fyz Qqm9bBMWea5qeDGio1dbFy6C3fXD09OrZUobo7adjC5FouOf73g= -----END CERTIFICATE-----Generated at Fri Jul 24 12:46:48 2026 by rpki-client