$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: lEF+F369V5lJRjUxyuKUfNjZ6wdOX6TtwxInOHhkd08= Subject key identifier: 82:99:D7:5A:AE:47:0A:BD:6F:28:0F:BB:1A:37:80:75:9E:1D:F6:4A Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 098707BE84632B926E4BE43F18B766395A40A3D3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 18:48:56 +0000 Manifest this update: Thu 24 Sep 2026 18:43:56 +0000 Manifest next update: Fri 25 Sep 2026 21:02:56 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 3: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 4: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: eMB9vl/QF++fuCRb6FNyi4td3k7frJeKR2At0XgaCqo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 21:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:87:07:be:84:63:2b:92:6e:4b:e4:3f:18:b7:66:39:5a:40:a3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Sep 24 18:43:56 2026 GMT Not After : Sep 25 21:02:56 2026 GMT Subject: CN=8299D75AAE470ABD6F280FBB1A3780759E1DF64A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:f5:7e:fa:4d:22:05:29:36:55:82:c3:cc: 0e:92:96:1d:88:0a:89:2f:a4:6c:22:3a:8b:19:34: 55:91:06:23:14:c9:70:ad:f8:1b:7d:08:bf:f3:e2: d1:f4:ef:1d:09:5f:8d:a7:b5:26:3c:66:44:42:da: a1:4b:dc:79:59:de:6d:62:de:86:2c:fb:ac:11:23: ea:e3:30:5d:5b:b2:e6:b1:30:d3:5f:ab:6a:e6:04: 2f:b6:e3:d7:6a:59:23:e9:04:1a:db:c0:62:26:9d: ee:b3:c4:06:8a:91:d0:57:c6:01:91:54:94:4b:92: 62:5e:9a:2f:5e:85:28:96:a7:9d:dd:87:e2:72:33: 5a:6d:ab:6e:44:81:1d:63:fe:9e:b6:be:f8:6a:41: 8e:a4:e0:a9:5d:cd:bb:d0:0f:64:7c:78:2e:ad:60: 9e:d9:10:2d:92:fd:5d:99:db:82:ec:aa:6a:04:07: e6:c5:b9:f4:f7:42:d2:9a:0b:ec:cf:10:a7:51:ed: b2:19:02:e2:84:78:e8:5f:ed:71:a6:05:45:fd:0c: 8e:99:d2:fc:72:e5:c3:d0:64:b7:63:1a:bc:d3:80: 0a:e4:48:07:6e:85:fb:82:49:b5:f3:1d:1d:d4:66: 3c:e3:52:e2:e2:c9:f2:9f:45:08:01:e0:ad:e6:29: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:99:D7:5A:AE:47:0A:BD:6F:28:0F:BB:1A:37:80:75:9E:1D:F6:4A X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2e:63:5e:c0:97:7c:25:36:0d:a4:e7:a5:af:76:1f:7f:bf: 87:32:82:83:ce:87:f4:b8:62:e5:fc:b0:e6:64:55:fd:f7:a0: 4d:37:0e:62:c9:7e:82:22:68:37:56:7c:cf:51:3c:db:08:e3: e0:a6:32:5a:03:7f:51:cb:94:f1:8b:d3:10:6a:7d:6d:94:b6: 35:17:1d:ad:e1:d2:3e:a6:e0:23:ac:e1:80:55:73:0b:d4:fb: c9:7e:0a:8b:5f:dc:7f:74:fa:ff:d9:32:ce:1d:fa:35:04:ee: a5:22:82:cb:f1:c3:cb:96:86:73:9a:7c:62:cc:4a:4b:71:cb: 41:d1:45:43:1b:85:87:9e:bd:d7:22:b4:fe:98:77:78:2d:04: 8a:0d:45:52:60:a5:bd:cf:16:54:b6:1f:1c:6a:6d:e5:08:7a: 48:3a:81:a4:3a:32:09:cb:52:51:14:4d:2a:5b:b6:6b:68:7d: 2c:6d:ef:86:97:a7:d1:ab:d4:84:4d:c5:40:4b:16:d7:b2:60: 08:7d:fc:62:3d:15:59:2e:bb:46:9a:df:d8:5e:aa:5e:bc:c7: 7f:50:09:02:de:fc:6c:39:ad:98:12:9b:db:9b:43:c1:29:4c: 4c:61:f7:84:8b:d1:cb:05:f3:fa:ff:2e:bb:4c:84:75:b6:eb: b1:83:b3:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYcHvoRjK5JuS+Q/GLdmOVpAo9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA5MjQxODQzNTZaFw0yNjA5MjUyMTAyNTZaMDMxMTAvBgNV BAMTKDgyOTlENzVBQUU0NzBBQkQ2RjI4MEZCQjFBMzc4MDc1OUUxREY2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14vV++k0iBSk2VYLDzA6Slh2I CokvpGwiOosZNFWRBiMUyXCt+Bt9CL/z4tH07x0JX42ntSY8ZkRC2qFL3HlZ3m1i 3oYs+6wRI+rjMF1bsuaxMNNfq2rmBC+249dqWSPpBBrbwGImne6zxAaKkdBXxgGR VJRLkmJemi9ehSiWp53dh+JyM1ptq25EgR1j/p62vvhqQY6k4KldzbvQD2R8eC6t YJ7ZEC2S/V2Z24LsqmoEB+bFufT3QtKaC+zPEKdR7bIZAuKEeOhf7XGmBUX9DI6Z 0vxy5cPQZLdjGrzTgArkSAduhfuCSbXzHR3UZjzjUuLiyfKfRQgB4K3mKSwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgpnXWq5HCr1vKA+7GjeAdZ4d9kowHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAguY17Al3wlNg2k56Wvdh9/v4cygoPOh/S4 YuX8sOZkVf33oE03DmLJfoIiaDdWfM9RPNsI4+CmMloDf1HLlPGL0xBqfW2UtjUX Ha3h0j6m4COs4YBVcwvU+8l+Cotf3H90+v/ZMs4d+jUE7qUigsvxw8uWhnOafGLM Sktxy0HRRUMbhYeevdcitP6Yd3gtBIoNRVJgpb3PFlS2HxxqbeUIekg6gaQ6MgnL UlEUTSpbtmtofSxt74aXp9Gr1IRNxUBLFteyYAh9/GI9FVkuu0aa39heql68x39Q CQLe/Gw5rZgSm9ubQ8EpTExh94SL0csF8/r/LrtMhHW267GDs0A= -----END CERTIFICATE-----Generated at Fri Sep 25 05:12:01 2026 by rpki-client