$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft File: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft (raw, json) Hash identifier: gSCXnAAhrdl9abPP0itnZdlkbKQgv/oaa2NGZrk29pE= Subject key identifier: AE:DA:F7:B3:97:4F:B1:E5:B1:60:E6:D6:C5:8F:F4:E1:CA:D1:AC:58 Authority key identifier: BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 Certificate issuer: /CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Certificate serial: 040A366E398D8074AC3B5E51D2D8090CF72AA944 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:01:40 +0000 Manifest this update: Tue 12 May 2026 16:56:39 +0000 Manifest next update: Wed 13 May 2026 20:56:39 +0000 Files and hashes: 1: BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl (hash: xPkVR17dXer7Cb8ww7MbuQqBEkcuu2UbX7b61qFinaA=) 2: 3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (hash: Fot8ZilmXoEXwJgknGrj6nqOxw2h+Q73N0sy/6pCylo=) 3: 323430323a613630303a3a2f33322d3332203d3e203137393936.roa (hash: 2gHk2oUIT4Gk+e3++M+jW/aDrug2C3STNX8iSp7wW4c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0a:36:6e:39:8d:80:74:ac:3b:5e:51:d2:d8:09:0c:f7:2a:a9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBEB72278FFF2BE285B07868FEF5FEAA0354E872 Validity Not Before: May 12 16:56:39 2026 GMT Not After : May 13 20:56:39 2026 GMT Subject: CN=AEDAF7B3974FB1E5B160E6D6C58FF4E1CAD1AC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a6:a6:68:64:ed:e5:2f:f6:17:c1:5e:73:e7: 9c:88:5f:10:18:fe:f1:7e:23:88:e3:5c:9e:e6:55: 9b:f4:8b:69:86:4b:ec:b9:0b:7f:0b:43:cf:4b:11: 0b:03:9e:03:41:30:db:2a:29:c3:49:9b:53:c5:d0: 83:c7:a0:2e:85:25:9a:63:93:08:e2:d0:41:1e:e0: 3c:90:a5:1d:19:a0:04:ed:56:cc:30:14:86:29:15: 8e:2b:c6:b9:55:fb:7a:5d:b9:7b:9a:d4:ed:f8:15: 73:0f:30:02:c0:4c:4a:43:fb:ba:33:68:d3:35:b9: 28:0a:8e:c5:4a:9f:58:cd:3c:4b:0b:b1:6d:a3:38: 2b:ec:d1:1f:36:36:71:5c:2e:bc:1e:45:46:61:14: d1:e5:93:da:56:a4:25:5a:33:d2:ad:c0:93:c8:06: 9f:bf:f7:32:68:61:d7:e1:9e:49:d3:20:d8:9a:5a: bd:a4:6a:55:73:db:c8:21:ac:c2:cf:c8:3e:04:77: 48:5a:41:ba:8c:20:64:90:35:ad:2e:35:ec:f2:f2: b2:5f:ae:83:04:27:5a:36:4b:f8:a9:7f:66:e2:08: e1:f9:b4:4f:c6:c4:8e:05:ec:57:96:a6:b4:96:20: 4d:a6:65:cf:00:1e:3a:71:af:24:ae:9f:c9:64:99: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DA:F7:B3:97:4F:B1:E5:B1:60:E6:D6:C5:8F:F4:E1:CA:D1:AC:58 X509v3 Authority Key Identifier: keyid:BB:EB:72:27:8F:FF:2B:E2:85:B0:78:68:FE:F5:FE:AA:03:54:E8:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/BBEB72278FFF2BE285B07868FEF5FEAA0354E872.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a8:84:34:e5:27:54:0f:12:cc:d0:6f:2c:17:cf:f4:6d:1f: a1:7b:5a:82:a8:96:b5:1f:b6:b0:47:fb:62:84:1d:4e:a1:d4: ac:e1:c3:fc:ad:fc:80:20:3d:de:27:8f:88:1e:96:e8:7a:00: ad:35:e0:6f:4d:b7:dd:dd:a7:db:db:64:24:71:b5:5a:c9:97: ee:28:75:de:43:ab:40:a1:a2:a0:b6:46:82:cd:1d:7c:12:66: 73:e1:1d:c9:c6:bf:b2:80:7c:66:d0:f3:ff:ad:64:22:82:2f: 8c:8c:ca:fa:da:55:0d:1e:57:0c:13:7e:d3:1a:c1:c6:d0:b2: eb:06:d0:41:f8:65:f9:0f:0f:5e:74:44:53:44:74:d5:c0:67: 6d:e8:be:85:cb:e1:01:14:5a:0c:3b:65:a4:41:8a:2b:b0:ef: c1:81:51:8e:11:31:7c:a1:8f:f5:ae:2b:ec:da:fe:62:42:9d: 1d:0c:1c:3c:a7:bc:64:7f:28:a8:8f:d9:d3:25:ee:96:fd:4f: e9:f2:cb:bd:a3:9a:b9:7a:42:e7:47:7f:81:78:24:fa:36:23: 62:c6:c0:04:65:b8:aa:e4:4c:87:7b:72:31:9c:29:ce:1a:c5: 0e:86:3d:ab:c6:e4:9c:70:97:16:20:42:f2:85:5d:0d:d6:50: 71:07:54:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBAo2bjmNgHSsO15R0tgJDPcqqUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEw MzU0RTg3MjAeFw0yNjA1MTIxNjU2MzlaFw0yNjA1MTMyMDU2MzlaMDMxMTAvBgNV BAMTKEFFREFGN0IzOTc0RkIxRTVCMTYwRTZENkM1OEZGNEUxQ0FEMUFDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVpqZoZO3lL/YXwV5z55yIXxAY /vF+I4jjXJ7mVZv0i2mGS+y5C38LQ89LEQsDngNBMNsqKcNJm1PF0IPHoC6FJZpj kwji0EEe4DyQpR0ZoATtVswwFIYpFY4rxrlV+3pduXua1O34FXMPMALATEpD+7oz aNM1uSgKjsVKn1jNPEsLsW2jOCvs0R82NnFcLrweRUZhFNHlk9pWpCVaM9KtwJPI Bp+/9zJoYdfhnknTINiaWr2kalVz28ghrMLPyD4Ed0haQbqMIGSQNa0uNezy8rJf roMEJ1o2S/ipf2biCOH5tE/GxI4F7FeWprSWIE2mZc8AHjpxrySun8lkmUiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrtr3s5dPseWxYObWxY/04crRrFgwHwYDVR0j BBgwFoAUu+tyJ4//K+KFsHho/vX+qgNU6HIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzNkMmYyZjgtMzUxMi00M2U1LWJlMTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4 RkZGMkJFMjg1QjA3ODY4RkVGNUZFQUEwMzU0RTg3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkVCNzIyNzhGRkYyQkUyODVCMDc4NjhGRUY1RkVBQTAzNTRF ODcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzNkMmYyZjgtMzUxMi00M2U1LWJl MTctYjExYjU4Zjk2MDgzLzAvQkJFQjcyMjc4RkZGMkJFMjg1QjA3ODY4RkVGNUZF QUEwMzU0RTg3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISohDTlJ1QPEszQbywXz/RtH6F7WoKolrUf trBH+2KEHU6h1Kzhw/yt/IAgPd4nj4geluh6AK014G9Nt93dp9vbZCRxtVrJl+4o dd5Dq0ChoqC2RoLNHXwSZnPhHcnGv7KAfGbQ8/+tZCKCL4yMyvraVQ0eVwwTftMa wcbQsusG0EH4ZfkPD150RFNEdNXAZ23ovoXL4QEUWgw7ZaRBiiuw78GBUY4RMXyh j/WuK+za/mJCnR0MHDynvGR/KKiP2dMl7pb9T+nyy72jmrl6QudHf4F4JPo2I2LG wARluKrkTId7cjGcKc4axQ6GPavG5JxwlxYgQvKFXQ3WUHEHVGI= -----END CERTIFICATE-----Generated at Wed May 13 02:27:13 2026 by rpki-client