$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: qF+BkuVOf37kmuEG2Suf7Tu+s2RgJpzO3pe9T8/lCtE= Subject key identifier: D2:49:BC:BD:EC:87:FC:B2:C8:19:ED:F7:9B:F6:F8:3C:DB:D3:26:0A Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 07DE5B8B9D544DE8415D4C17ABB79E5B9980CEDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:15:04 +0000 Manifest this update: Tue 12 May 2026 19:10:04 +0000 Manifest next update: Wed 13 May 2026 21:42:04 +0000 Files and hashes: 1: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: DfiortwtVQOqpwhp1L0usczENLfbmViIR3uro6PWzjo=) 2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 4: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:de:5b:8b:9d:54:4d:e8:41:5d:4c:17:ab:b7:9e:5b:99:80:ce:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: May 12 19:10:04 2026 GMT Not After : May 13 21:42:04 2026 GMT Subject: CN=D249BCBDEC87FCB2C819EDF79BF6F83CDBD3260A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:df:be:a6:85:0b:61:59:95:c0:a9:88:64: 9b:ab:03:b7:9e:ef:ce:bd:8c:2a:89:b8:6e:bb:35: 50:54:f3:f3:04:4d:72:23:03:d3:e8:7b:8b:fe:d2: 36:bf:66:06:ac:4e:43:66:c3:33:68:2f:21:c4:68: a3:b4:34:26:41:e8:d2:4f:ee:25:bc:78:6e:d5:9e: 64:9b:b8:0b:19:f9:b8:ff:37:b1:a5:63:7e:63:3d: 9c:a4:f0:f0:3d:f7:e3:50:61:d9:2f:49:d6:2a:ee: e4:96:3e:6a:e5:9f:c2:5b:a9:06:ba:4c:53:e6:6d: a3:77:6c:d3:1e:77:4a:8b:59:4b:ea:c8:03:67:da: c9:f8:b2:70:cf:24:4b:0e:0f:94:af:49:d5:ed:29: e5:0b:e1:c1:ff:4e:13:14:cf:3e:29:46:79:02:0b: 66:90:1f:36:a3:04:bf:0d:60:5a:a8:cb:03:b5:7b: 8a:1a:8a:14:ca:50:6a:8b:84:4f:0f:46:ff:e2:e6: b2:04:3e:70:88:de:35:1c:48:6c:e9:d5:4b:fa:28: f3:9d:5d:cd:3c:b6:4e:93:37:4e:83:b5:2d:86:73: f1:bd:c9:f8:2b:10:87:f9:0e:9b:80:bd:e5:38:29: a8:33:78:cc:97:98:47:d5:26:cf:82:1b:86:a0:06: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:49:BC:BD:EC:87:FC:B2:C8:19:ED:F7:9B:F6:F8:3C:DB:D3:26:0A X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:fb:56:b1:3a:04:22:1f:96:62:9d:95:0e:97:36:4f:7b:ca: 37:55:26:64:e4:53:00:78:17:81:42:b0:bc:28:58:1c:a0:b5: 93:d3:64:aa:4e:c9:22:80:ee:0f:34:2a:be:6f:26:b4:46:af: c2:59:67:c0:8a:b8:56:e8:66:98:80:fb:b1:6e:49:0a:fb:a2: 1f:9c:4d:df:f1:40:31:cc:a5:4d:ac:33:3d:4e:8c:6a:c8:e9: 02:53:c6:41:df:91:18:05:f6:71:cd:b8:33:f0:3f:5d:b6:17: 08:9c:e6:a3:bb:6c:00:8b:ce:9a:f8:80:f4:33:27:32:37:5f: fe:a2:a1:22:32:98:a9:48:9c:6e:49:e6:4f:90:1a:0d:14:cd: e2:e2:37:7b:3b:91:9d:fe:0a:b1:fa:52:03:9d:0b:63:20:c8: a1:54:98:74:a0:08:09:87:9f:17:e5:07:c6:78:bf:64:91:4a: ef:26:c0:a1:6b:1b:bc:3d:f1:1f:b5:1d:81:2a:2f:99:12:18: 0b:10:d1:7b:04:88:96:81:53:56:9d:08:4b:e0:98:7e:66:72: c8:60:50:b7:b5:76:40:c8:e9:4e:53:3e:d9:ab:5e:69:0d:1b: 3e:b7:d1:02:09:62:5f:b5:9a:1c:f3:6d:d3:9d:b5:51:9a:c8: 95:c6:7f:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB95bi51UTehBXUwXq7eeW5mAztswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA1MTIxOTEwMDRaFw0yNjA1MTMyMTQyMDRaMDMxMTAvBgNV BAMTKEQyNDlCQ0JERUM4N0ZDQjJDODE5RURGNzlCRjZGODNDREJEMzI2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p9++poULYVmVwKmIZJurA7ee 7869jCqJuG67NVBU8/METXIjA9Poe4v+0ja/ZgasTkNmwzNoLyHEaKO0NCZB6NJP 7iW8eG7VnmSbuAsZ+bj/N7GlY35jPZyk8PA99+NQYdkvSdYq7uSWPmrln8JbqQa6 TFPmbaN3bNMed0qLWUvqyANn2sn4snDPJEsOD5SvSdXtKeUL4cH/ThMUzz4pRnkC C2aQHzajBL8NYFqoywO1e4oaihTKUGqLhE8PRv/i5rIEPnCI3jUcSGzp1Uv6KPOd Xc08tk6TN06DtS2Gc/G9yfgrEIf5DpuAveU4KagzeMyXmEfVJs+CG4agBmKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0km8veyH/LLIGe33m/b4PNvTJgowHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD7VrE6BCIflmKdlQ6XNk97yjdVJmTkUwB4 F4FCsLwoWBygtZPTZKpOySKA7g80Kr5vJrRGr8JZZ8CKuFboZpiA+7FuSQr7oh+c Td/xQDHMpU2sMz1OjGrI6QJTxkHfkRgF9nHNuDPwP122Fwic5qO7bACLzpr4gPQz JzI3X/6ioSIymKlInG5J5k+QGg0UzeLiN3s7kZ3+CrH6UgOdC2MgyKFUmHSgCAmH nxflB8Z4v2SRSu8mwKFrG7w98R+1HYEqL5kSGAsQ0XsEiJaBU1adCEvgmH5mcshg ULe1dkDI6U5TPtmrXmkNGz630QIJYl+1mhzzbdOdtVGayJXGf6A= -----END CERTIFICATE-----Generated at Wed May 13 05:58:15 2026 by rpki-client