$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft File: BBD0CD6436CA793BFF433922A8C38085169809BA.mft (raw, json) Hash identifier: eIIFHoZvArMBTPJrHGnbUz2lzfBiFhyy0rYIpAwh3sA= Subject key identifier: 50:D6:62:B6:A8:8C:29:14:B9:6E:04:E5:60:CA:39:9A:45:10:71:DC Authority key identifier: BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA Certificate issuer: /CN=BBD0CD6436CA793BFF433922A8C38085169809BA Certificate serial: 29E989748B2DBFF7A1640EF6B1F1424AE4091BD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 06:07:59 +0000 Manifest this update: Fri 25 Sep 2026 06:02:59 +0000 Manifest next update: Sat 26 Sep 2026 09:38:59 +0000 Files and hashes: 1: BBD0CD6436CA793BFF433922A8C38085169809BA.crl (hash: BHxqoVDJLOuhMxM9Cvi9DFDoMPw0Yn9h3SVLc/Y6IRk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 09:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e9:89:74:8b:2d:bf:f7:a1:64:0e:f6:b1:f1:42:4a:e4:09:1b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD0CD6436CA793BFF433922A8C38085169809BA Validity Not Before: Sep 25 06:02:59 2026 GMT Not After : Sep 26 09:38:59 2026 GMT Subject: CN=50D662B6A88C2914B96E04E560CA399A451071DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ad:13:33:38:b1:85:bb:17:d9:d3:af:7f:96: e6:a0:59:2d:cf:5d:d6:53:f0:54:2f:80:d7:2d:d7: 03:a1:f7:eb:c7:88:3e:b7:1a:20:d9:56:a3:d6:66: 1c:e9:9c:87:0f:e6:e2:10:9b:b0:82:2e:ba:95:bd: 6a:35:e2:3c:12:bb:0d:30:48:1f:8d:a2:13:e5:3e: 3b:bb:86:c3:77:44:ba:ac:18:c2:ed:ac:52:8a:18: 76:f9:d6:f5:40:43:a4:90:7f:c1:7d:54:cb:5c:dc: 3c:d3:49:cd:1c:74:bd:2e:df:0d:42:73:98:f5:67: ed:14:71:e0:1f:1f:44:9d:87:ee:da:72:b6:91:0c: b6:b8:b5:bb:a7:06:77:23:a4:6a:39:64:c6:a8:b8: b5:f3:7c:c4:56:78:5c:f9:bc:b5:a5:80:ec:b1:7a: ae:c7:bb:6f:5e:76:8d:60:ca:fc:0a:34:55:3b:ad: ab:f2:42:25:60:a5:cf:fe:ec:1d:99:43:9d:d0:02: 8b:42:cc:6b:b9:3f:75:b8:45:80:06:99:f7:62:af: 84:10:2c:a8:07:eb:c0:94:6c:22:d5:11:59:30:44: ed:de:91:45:2e:cc:29:64:fd:b6:79:05:15:e9:7e: fb:48:c3:61:91:68:0d:43:1d:f9:68:41:db:58:91: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D6:62:B6:A8:8C:29:14:B9:6E:04:E5:60:CA:39:9A:45:10:71:DC X509v3 Authority Key Identifier: keyid:BB:D0:CD:64:36:CA:79:3B:FF:43:39:22:A8:C3:80:85:16:98:09:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD0CD6436CA793BFF433922A8C38085169809BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/BBD0CD6436CA793BFF433922A8C38085169809BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b7:9a:e7:9e:9f:c1:59:66:8b:94:46:fb:59:07:70:da:8c: 22:72:1c:39:82:1a:0e:52:64:b0:7c:5e:90:8b:46:13:6b:49: a8:35:20:a1:51:62:87:99:29:21:ae:ca:fd:38:76:e1:fc:02: 67:f4:8e:2b:c6:f3:00:e8:93:8f:f7:1f:7b:a9:ae:21:16:a7: ab:e6:7f:66:53:5b:8a:06:19:fc:d0:e4:71:48:38:51:ba:48: c9:92:ca:e2:49:91:69:e9:7b:12:b6:1c:e4:07:39:40:55:f5: 14:b8:83:9c:81:d1:2b:33:b0:11:0c:bb:75:b1:ba:fa:da:1c: 64:f0:48:38:4e:11:25:33:28:81:ff:c9:48:f2:05:7e:02:31: 7f:15:eb:12:be:b5:95:fc:e1:f5:02:74:e5:66:08:ba:a9:ff: 46:fd:2b:38:8a:c7:bb:de:29:c4:77:24:64:c7:fb:45:a1:76: 3d:5a:ee:52:65:2f:cf:29:12:c8:61:3a:b1:86:f3:3c:7d:a0: 54:7c:2f:80:50:2d:9a:c0:4c:00:a9:b2:fe:96:fb:5e:8e:fb: 78:2c:ca:a5:ca:e2:1e:1e:b8:a1:f0:ae:36:04:0c:a1:3e:b7: 95:76:1e:b3:77:47:92:08:b8:30:a5:04:24:5f:1b:59:5d:2b: 91:32:bb:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKemJdIstv/ehZA72sfFCSuQJG9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgwODUx Njk4MDlCQTAeFw0yNjA5MjUwNjAyNTlaFw0yNjA5MjYwOTM4NTlaMDMxMTAvBgNV BAMTKDUwRDY2MkI2QTg4QzI5MTRCOTZFMDRFNTYwQ0EzOTlBNDUxMDcxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrRMzOLGFuxfZ069/luagWS3P XdZT8FQvgNct1wOh9+vHiD63GiDZVqPWZhzpnIcP5uIQm7CCLrqVvWo14jwSuw0w SB+NohPlPju7hsN3RLqsGMLtrFKKGHb51vVAQ6SQf8F9VMtc3DzTSc0cdL0u3w1C c5j1Z+0UceAfH0Sdh+7acraRDLa4tbunBncjpGo5ZMaouLXzfMRWeFz5vLWlgOyx eq7Hu29edo1gyvwKNFU7ravyQiVgpc/+7B2ZQ53QAotCzGu5P3W4RYAGmfdir4QQ LKgH68CUbCLVEVkwRO3ekUUuzClk/bZ5BRXpfvtIw2GRaA1DHfloQdtYkbPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUNZitqiMKRS5bgTlYMo5mkUQcdwwHwYDVR0j BBgwFoAUu9DNZDbKeTv/QzkiqMOAhRaYCbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzFiOTI2ZTAtNmM2Yi00ODU1LWE3NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQz NkNBNzkzQkZGNDMzOTIyQThDMzgwODUxNjk4MDlCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQwQ0Q2NDM2Q0E3OTNCRkY0MzM5MjJBOEMzODA4NTE2OTgw OUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvQkJEMENENjQzNkNBNzkzQkZGNDMzOTIyQThDMzgw ODUxNjk4MDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu3mueen8FZZouURvtZB3DajCJyHDmCGg5S ZLB8XpCLRhNrSag1IKFRYoeZKSGuyv04duH8Amf0jivG8wDok4/3H3upriEWp6vm f2ZTW4oGGfzQ5HFIOFG6SMmSyuJJkWnpexK2HOQHOUBV9RS4g5yB0SszsBEMu3Wx uvraHGTwSDhOESUzKIH/yUjyBX4CMX8V6xK+tZX84fUCdOVmCLqp/0b9KziKx7ve KcR3JGTH+0Whdj1a7lJlL88pEshhOrGG8zx9oFR8L4BQLZrATACpsv6W+16O+3gs yqXK4h4euKHwrjYEDKE+t5V2HrN3R5IIuDClBCRfG1ldK5Eyu3M= -----END CERTIFICATE-----Generated at Fri Sep 25 14:07:38 2026 by rpki-client