$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: iGRHb/fklDxTVgrYz7wqsETmbZPh+mOQ7iFeJYqAWAE= Subject key identifier: 0C:13:74:0F:91:7E:4F:F8:3C:41:E5:E4:8C:03:D6:F5:31:C7:C9:9C Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 34FC315083CE034E16D646A838A9B83D21C75ED2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 05:51:45 +0000 Manifest this update: Sun 27 Sep 2026 05:46:45 +0000 Manifest next update: Mon 28 Sep 2026 08:58:45 +0000 Files and hashes: 1: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 3: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: Te0C2GHBgzTXQKTy3sQ2rTvjO3dUngWqDIkTIrcRZyg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fc:31:50:83:ce:03:4e:16:d6:46:a8:38:a9:b8:3d:21:c7:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: Sep 27 05:46:45 2026 GMT Not After : Sep 28 08:58:45 2026 GMT Subject: CN=0C13740F917E4FF83C41E5E48C03D6F531C7C99C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:1e:dd:28:d7:20:30:52:28:9b:43:6f:60: 3d:b1:6d:61:a1:f1:41:8b:8a:52:9f:24:86:8c:ab: d7:d4:a5:20:d1:2f:33:7c:9e:fe:63:e2:b6:b2:73: 20:ef:cd:b5:cc:54:2a:c6:8f:69:99:94:11:bf:9f: 82:7c:64:fb:68:f9:8d:8c:25:67:fc:5a:2c:0e:de: e4:1f:cc:05:a0:45:15:cd:62:1b:d1:de:61:31:57: 82:53:a3:87:d1:60:17:11:26:73:cc:e4:05:4f:e0: ba:4d:ac:c2:1d:08:ad:d3:da:23:5e:01:9d:86:1f: 97:23:bd:79:44:93:1c:34:a8:3e:6d:e8:4c:1b:e0: ee:55:84:d1:3f:37:26:8e:52:29:68:c6:50:28:5e: 92:6d:b2:68:56:5e:6b:fe:1f:cd:5b:72:64:6d:6d: 8f:a5:6d:cf:8a:dd:06:02:83:de:91:6c:33:97:0b: 28:17:55:22:70:88:8a:84:2a:f9:c3:3c:c4:96:b9: 59:37:e4:f7:8b:55:1d:ee:d9:66:18:88:16:21:46: a7:40:f5:d3:81:46:50:89:9f:4a:0e:10:a2:5d:80: 22:44:16:51:e8:cf:80:f4:1c:26:c1:85:22:8f:1f: 90:22:4f:c2:3a:6c:7e:8b:e5:5f:04:3f:22:13:8d: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:13:74:0F:91:7E:4F:F8:3C:41:E5:E4:8C:03:D6:F5:31:C7:C9:9C X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e4:8b:a2:b0:42:07:d0:74:3a:9e:86:2a:c8:c6:9a:48:8c: 8d:fe:37:44:58:c9:62:09:f4:c1:b5:d8:3a:3c:af:b3:0b:fe: 54:22:9f:da:ec:a9:17:ba:1d:38:8f:7a:39:18:40:9f:f8:7d: 91:25:e1:49:b8:95:47:fe:99:6a:c1:d7:be:24:25:17:21:75: a5:db:80:91:7a:a4:df:c4:46:48:db:a8:68:9d:0c:22:3c:39: 6f:b1:fb:fa:78:06:ce:09:0f:87:ff:6d:84:88:b7:8e:2a:6d: da:49:8e:64:a1:e3:0d:61:72:06:a4:88:51:9a:31:dc:40:02: 8f:f5:97:31:77:3b:6e:ed:80:f4:cd:31:1c:1c:d7:e6:17:51: a1:76:ec:b4:2f:c0:d7:ce:24:a4:32:9c:68:74:85:d2:05:d8: 33:cd:0d:c8:00:f9:61:67:9c:2e:91:2b:bb:ad:7b:c1:3e:7d: 9f:f6:7d:c5:79:a4:1c:51:87:35:fb:bc:35:5d:ff:cf:1e:d5: 66:1d:b2:6d:22:ab:c7:ad:3a:e2:dd:e1:3a:74:c4:3b:ba:e2: 7b:94:d9:08:7e:6f:c3:fe:fc:01:bf:96:c3:77:8b:fe:35:a5: eb:3c:a4:f6:eb:5a:e4:95:37:01:ce:22:1c:c9:72:cb:5b:3f: 0b:89:b9:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPwxUIPOA04W1kaoOKm4PSHHXtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA5MjcwNTQ2NDVaFw0yNjA5MjgwODU4NDVaMDMxMTAvBgNV BAMTKDBDMTM3NDBGOTE3RTRGRjgzQzQxRTVFNDhDMDNENkY1MzFDN0M5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdWh7dKNcgMFIom0NvYD2xbWGh 8UGLilKfJIaMq9fUpSDRLzN8nv5j4raycyDvzbXMVCrGj2mZlBG/n4J8ZPto+Y2M JWf8WiwO3uQfzAWgRRXNYhvR3mExV4JTo4fRYBcRJnPM5AVP4LpNrMIdCK3T2iNe AZ2GH5cjvXlEkxw0qD5t6Ewb4O5VhNE/NyaOUiloxlAoXpJtsmhWXmv+H81bcmRt bY+lbc+K3QYCg96RbDOXCygXVSJwiIqEKvnDPMSWuVk35PeLVR3u2WYYiBYhRqdA 9dOBRlCJn0oOEKJdgCJEFlHoz4D0HCbBhSKPH5AiT8I6bH6L5V8EPyITjYOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBN0D5F+T/g8QeXkjAPW9THHyZwwHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDki6KwQgfQdDqehirIxppIjI3+N0RYyWIJ 9MG12Do8r7ML/lQin9rsqRe6HTiPejkYQJ/4fZEl4Um4lUf+mWrB174kJRchdaXb gJF6pN/ERkjbqGidDCI8OW+x+/p4Bs4JD4f/bYSIt44qbdpJjmSh4w1hcgakiFGa MdxAAo/1lzF3O27tgPTNMRwc1+YXUaF27LQvwNfOJKQynGh0hdIF2DPNDcgA+WFn nC6RK7ute8E+fZ/2fcV5pBxRhzX7vDVd/88e1WYdsm0iq8etOuLd4Tp0xDu64nuU 2Qh+b8P+/AG/lsN3i/41pes8pPbrWuSVNwHOIhzJcstbPwuJuRE= -----END CERTIFICATE-----Generated at Sun Sep 27 14:53:10 2026 by rpki-client