$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: MDhKlhNYpfYvs+lHQ612oQaT/JAHZwATNMmqzrmA4fs= Subject key identifier: 3A:10:66:CF:32:27:91:AC:34:F3:4F:0B:D1:07:C0:C9:C6:94:D5:1D Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 5651772E899C54D911DDE6F603AD04F4A6051F53 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 03:03:00 +0000 Manifest this update: Fri 24 Jul 2026 02:58:00 +0000 Manifest next update: Sat 25 Jul 2026 06:41:00 +0000 Files and hashes: 1: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 2: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) 3: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: RdQfoHR/SxOKPD4jR94LmSkHqwO1PjwNkQT0h1w1Vo8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:51:77:2e:89:9c:54:d9:11:dd:e6:f6:03:ad:04:f4:a6:05:1f:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Jul 24 02:58:00 2026 GMT Not After : Jul 25 06:41:00 2026 GMT Subject: CN=3A1066CF322791AC34F34F0BD107C0C9C694D51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ad:a9:9e:34:46:84:51:ce:d8:7f:ac:48:c5: bb:cc:7e:26:89:bf:e4:1b:77:e6:f4:0c:15:99:b6: 07:cb:6b:eb:c2:d9:41:01:c4:58:08:ec:43:2d:04: 9e:8e:ab:b1:36:d7:fb:f8:1e:43:39:fa:81:65:db: 5d:91:f6:b0:fa:44:80:28:ef:c3:85:5b:41:a7:b2: 33:68:5a:b5:67:af:e5:65:3d:a6:e4:bc:b7:8a:ce: 96:5e:79:9f:3a:33:1d:2b:5d:14:b9:20:d3:a9:77: 86:77:10:21:aa:73:5e:d5:69:a6:ad:67:10:86:1c: 19:47:b4:a5:e0:2c:c9:06:6e:b2:3c:93:a3:96:d6: 4b:ff:a3:87:80:40:0c:2d:e4:f2:cb:69:48:fc:68: 4d:6a:42:b5:36:92:43:d6:7b:40:de:69:57:43:53: 99:01:51:84:f8:90:86:98:b8:45:4b:5e:5f:a2:47: 22:9f:38:d1:b5:9d:64:bf:5c:40:7c:37:0e:c5:fe: 12:21:8a:1c:ad:59:b6:95:0d:2d:c9:0c:6c:9b:d8: c4:da:79:42:de:91:fc:0b:b6:1a:df:9f:d8:9e:e6: 47:26:d4:58:a3:bd:1f:69:be:49:d1:25:1f:be:77: 77:de:f9:fc:a2:8a:ec:86:30:79:68:6a:ea:f9:1a: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:10:66:CF:32:27:91:AC:34:F3:4F:0B:D1:07:C0:C9:C6:94:D5:1D X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:53:ad:52:bf:a1:56:3f:3b:2b:e6:5d:a9:a4:b0:78:d3:13: 4a:a3:ec:db:b0:9d:6b:bc:52:3e:ff:15:b9:2d:c4:0f:e0:fc: f4:d7:94:5a:5c:60:2d:0a:d9:94:b8:9f:d6:a5:38:14:ef:3d: 26:c8:be:25:25:03:69:d3:c2:1b:a2:5b:c5:46:89:fe:5e:96: 09:4d:d2:d6:24:c6:b5:fe:71:e3:de:b8:1f:91:5e:fb:4e:1b: cc:ac:f4:d4:6f:ed:d5:67:b4:50:72:cc:89:9d:0f:6d:d3:a6: 1c:ec:61:df:be:bc:ac:92:1b:be:03:40:2a:d4:e2:26:4c:b0: 5f:2a:02:9f:44:cc:53:62:49:09:de:0f:0d:8b:6f:e9:e4:3c: 16:77:56:33:45:c1:09:cb:78:fd:42:75:6a:8a:c0:c6:33:b9: 9c:7a:5e:cc:7a:78:03:95:90:53:af:be:61:6f:95:33:14:59: 1e:64:45:da:61:02:56:4f:7f:6f:af:19:87:90:ee:80:f6:18: 2e:d0:c1:b4:7c:2d:fa:db:b4:fb:0e:a7:c7:3a:fc:45:52:86: 38:6b:2d:c6:36:9c:82:ff:d1:ce:50:7e:ff:25:f5:7b:b2:d4: 7c:04:c9:d1:d0:d5:4a:1c:33:3a:bf:19:ac:31:5d:f3:fe:d4: e2:72:b3:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVlF3LomcVNkR3eb2A60E9KYFH1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA3MjQwMjU4MDBaFw0yNjA3MjUwNjQxMDBaMDMxMTAvBgNV BAMTKDNBMTA2NkNGMzIyNzkxQUMzNEYzNEYwQkQxMDdDMEM5QzY5NEQ1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0rameNEaEUc7Yf6xIxbvMfiaJ v+Qbd+b0DBWZtgfLa+vC2UEBxFgI7EMtBJ6Oq7E21/v4HkM5+oFl212R9rD6RIAo 78OFW0GnsjNoWrVnr+VlPabkvLeKzpZeeZ86Mx0rXRS5INOpd4Z3ECGqc17Vaaat ZxCGHBlHtKXgLMkGbrI8k6OW1kv/o4eAQAwt5PLLaUj8aE1qQrU2kkPWe0DeaVdD U5kBUYT4kIaYuEVLXl+iRyKfONG1nWS/XEB8Nw7F/hIhihytWbaVDS3JDGyb2MTa eULekfwLthrfn9ie5kcm1FijvR9pvknRJR++d3fe+fyiiuyGMHloaur5GofTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhBmzzInkaw0808L0QfAycaU1R0wHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZTrVK/oVY/OyvmXamksHjTE0qj7NuwnWu8 Uj7/FbktxA/g/PTXlFpcYC0K2ZS4n9alOBTvPSbIviUlA2nTwhuiW8VGif5elglN 0tYkxrX+cePeuB+RXvtOG8ys9NRv7dVntFByzImdD23TphzsYd++vKySG74DQCrU 4iZMsF8qAp9EzFNiSQneDw2Lb+nkPBZ3VjNFwQnLeP1CdWqKwMYzuZx6Xsx6eAOV kFOvvmFvlTMUWR5kRdphAlZPf2+vGYeQ7oD2GC7QwbR8LfrbtPsOp8c6/EVShjhr LcY2nIL/0c5Qfv8l9Xuy1HwEydHQ1UocMzq/GawxXfP+1OJys/s= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:31 2026 by rpki-client