$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: gYxPF+V6QK+FyE49JccWM8PJZ0r6j6Aaf5YYHcciHmY= Subject key identifier: 34:75:77:5E:54:4E:9D:35:11:2A:38:B7:01:C3:82:FA:C2:F3:D5:AE Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 7FB72C5646419D8B9512F373B52786D7C8563DC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:52:47 +0000 Manifest this update: Thu 23 Jul 2026 22:47:47 +0000 Manifest next update: Sat 25 Jul 2026 00:53:47 +0000 Files and hashes: 1: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 2: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) 3: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: FYq1A7veukFAdFCORxeLTPLBR9RKq9Bk/vgu1Am80pU=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:2c:56:46:41:9d:8b:95:12:f3:73:b5:27:86:d7:c8:56:3d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Jul 23 22:47:47 2026 GMT Not After : Jul 25 00:53:47 2026 GMT Subject: CN=3475775E544E9D35112A38B701C382FAC2F3D5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4b:1d:c4:67:60:b0:1d:03:a0:6c:61:18:8c: 8b:1f:b3:69:0f:a1:9b:7a:53:e5:11:3c:a8:78:59: b1:b1:8e:ef:6e:3c:96:8a:e5:5e:6f:e9:a0:9c:87: d4:b7:f7:6d:a8:07:ec:3e:ed:fc:8b:66:23:7d:dc: 38:0d:69:a1:9f:24:b7:e0:bb:4a:03:49:7b:ec:96: f4:c1:f0:87:77:64:22:dc:69:78:e6:98:70:25:16: f2:44:81:ac:4d:39:6a:08:10:58:c9:b5:8b:3f:8b: 43:de:20:e4:05:f9:a5:3f:cb:6d:07:8a:61:37:c8: 6a:b1:bc:45:cd:4a:9f:a6:d6:44:84:3b:15:50:3d: 0b:bb:b9:62:74:fd:74:81:25:7a:15:66:c3:c6:c8: a1:fb:47:af:4f:1c:e5:0a:52:dc:ee:35:7b:88:a1: cc:7e:2c:a5:fe:70:34:72:3e:2b:30:77:1f:fc:a8: 52:13:2a:42:38:9e:45:37:50:fe:84:9d:3c:4d:5a: 3a:3b:b9:ed:a9:4c:30:1a:68:55:9b:d7:9f:b9:c1: 23:aa:07:a6:12:d9:39:ba:57:3b:5f:cd:bc:e2:e3: 8a:28:5e:32:41:83:d4:f6:d5:2b:67:a7:35:1f:96: e1:4f:f4:f9:0d:a8:be:f7:3c:3f:c7:37:f7:a1:eb: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:77:5E:54:4E:9D:35:11:2A:38:B7:01:C3:82:FA:C2:F3:D5:AE X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:04:7a:46:73:46:9b:d2:7d:c9:9b:45:d2:65:91:b4:b0:c5: cd:96:46:cb:f8:e6:ed:c0:ac:ec:56:9f:44:1c:c3:e5:f2:36: dc:68:a7:3c:a3:07:42:02:11:67:5b:01:d0:7b:fc:94:35:2e: 77:e0:f6:f3:82:e8:64:4e:5e:92:60:35:75:e0:d3:0b:c9:97: cd:16:9c:fe:b6:f1:54:70:47:35:e2:c5:17:af:af:c2:3a:13: a8:09:68:b3:f1:95:85:e1:27:c1:67:d6:47:48:a6:5a:fa:24: ca:ea:e5:35:02:19:b4:e0:65:46:1a:9e:fa:b2:4b:62:58:af: c7:2d:96:9c:67:cb:93:37:ba:11:fd:8f:cd:60:4e:94:36:65: 7d:a1:ba:78:29:0d:5f:5f:69:7b:96:e8:4f:ca:d0:48:53:d9: 83:d1:9d:21:45:76:69:99:63:82:1f:04:ac:e7:fb:0e:00:95: 0b:d4:18:0a:8d:c4:09:d8:e5:2c:c9:11:90:4f:85:86:91:cf: d2:4a:1d:14:54:55:7d:92:49:99:bd:94:1d:32:80:0e:df:93: 68:67:1a:92:c1:45:a3:2f:71:d9:ff:31:ec:92:b0:46:fc:79: 0a:1b:8d:ab:76:44:dc:98:46:da:a1:3a:2c:dd:4e:91:b6:74: 48:6d:9c:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7csVkZBnYuVEvNztSeG18hWPckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA3MjMyMjQ3NDdaFw0yNjA3MjUwMDUzNDdaMDMxMTAvBgNV BAMTKDM0NzU3NzVFNTQ0RTlEMzUxMTJBMzhCNzAxQzM4MkZBQzJGM0Q1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSx3EZ2CwHQOgbGEYjIsfs2kP oZt6U+URPKh4WbGxju9uPJaK5V5v6aCch9S3922oB+w+7fyLZiN93DgNaaGfJLfg u0oDSXvslvTB8Id3ZCLcaXjmmHAlFvJEgaxNOWoIEFjJtYs/i0PeIOQF+aU/y20H imE3yGqxvEXNSp+m1kSEOxVQPQu7uWJ0/XSBJXoVZsPGyKH7R69PHOUKUtzuNXuI ocx+LKX+cDRyPiswdx/8qFITKkI4nkU3UP6EnTxNWjo7ue2pTDAaaFWb15+5wSOq B6YS2Tm6Vztfzbzi44ooXjJBg9T21StnpzUfluFP9PkNqL73PD/HN/eh61iDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNHV3XlROnTURKji3AcOC+sLz1a4wHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4EekZzRpvSfcmbRdJlkbSwxc2WRsv45u3A rOxWn0Qcw+XyNtxopzyjB0ICEWdbAdB7/JQ1Lnfg9vOC6GROXpJgNXXg0wvJl80W nP628VRwRzXixRevr8I6E6gJaLPxlYXhJ8Fn1kdIplr6JMrq5TUCGbTgZUYanvqy S2JYr8ctlpxny5M3uhH9j81gTpQ2ZX2hungpDV9faXuW6E/K0EhT2YPRnSFFdmmZ Y4IfBKzn+w4AlQvUGAqNxAnY5SzJEZBPhYaRz9JKHRRUVX2SSZm9lB0ygA7fk2hn GpLBRaMvcdn/MeySsEb8eQobjat2RNyYRtqhOizdTpG2dEhtnAo= -----END CERTIFICATE-----Generated at Fri Jul 24 18:03:13 2026 by rpki-client