$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft File: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft (raw, json) Hash identifier: 2myzoFc+omfL2+83rBe7Pcdufaj4xZuB6X49Xr+0qHs= Subject key identifier: 7B:79:E8:5E:C7:EF:28:DB:A1:CD:A2:55:E9:8B:AB:70:79:A5:E9:10 Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 Certificate issuer: /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Certificate serial: 6B4B826276681735C62668A0CB99A26FA5FBAAB8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 16:54:59 +0000 Manifest this update: Fri 24 Jul 2026 16:49:59 +0000 Manifest next update: Sat 25 Jul 2026 20:28:59 +0000 Files and hashes: 1: BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl (hash: ta2Rot5G8GtWzsZF6eAyAY6GhRrBa2SWwwj0uRQgnC8=) 2: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: 6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=) 3: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: 0H11plf2Bn8hJJZxYW/6XGpYLtnI0akJzX9hfzpkAzI=) 4: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: 3u1tfqbWAutOzbjNtj1zkUtXnquxkp3A15BxaZdt89Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4b:82:62:76:68:17:35:c6:26:68:a0:cb:99:a2:6f:a5:fb:aa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4 Validity Not Before: Jul 24 16:49:59 2026 GMT Not After : Jul 25 20:28:59 2026 GMT Subject: CN=7B79E85EC7EF28DBA1CDA255E98BAB7079A5E910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:b8:c7:b7:b7:04:49:62:9b:e2:58:c1:45: f1:e2:b0:9e:ee:b8:87:fb:3d:08:61:66:6a:55:c4: 88:8a:8c:ea:5a:5f:66:6c:af:51:83:84:7c:33:b5: 3d:7f:3a:72:24:30:cd:a0:e7:2b:64:ac:5a:ca:34: 5d:39:3c:c7:f1:e6:68:37:b0:24:66:7d:65:e8:8e: d8:b3:5c:a6:bb:f2:10:9a:c3:9c:af:97:e8:a8:3d: 0f:2f:3c:03:86:25:32:c7:db:8e:7f:f3:2a:1a:60: 1a:dd:4e:4c:6c:1b:6a:91:b0:0d:ac:1c:cc:6a:f0: d0:38:c9:b4:18:87:10:c5:0e:27:67:99:5c:3b:08: 9d:39:82:e8:e8:6a:7a:a5:f9:84:ce:68:00:5c:31: 3a:af:a5:5f:d0:23:8d:0f:98:94:1e:62:db:63:c3: fa:4a:08:a0:79:3c:c4:c6:11:ce:b9:79:a7:3e:b9: 6f:1f:e0:aa:74:bf:f3:4e:f5:a8:af:60:67:55:c2: 0a:06:c9:99:77:7a:48:ad:24:91:0e:15:e6:c4:81: ca:ae:4f:8c:87:4a:0a:08:cf:5f:ac:44:60:ff:51: 65:d6:f2:93:c0:65:56:ba:40:52:b4:67:49:61:57: 43:e9:7e:08:e3:c1:e5:02:8a:fb:89:84:76:be:fd: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:79:E8:5E:C7:EF:28:DB:A1:CD:A2:55:E9:8B:AB:70:79:A5:E9:10 X509v3 Authority Key Identifier: keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b4:be:b6:a7:99:91:a4:8d:16:cc:9d:43:60:59:5f:d8:aa: 80:93:22:ea:26:88:42:a0:51:d4:b2:22:b4:b8:f2:96:9f:26: 60:db:e9:37:b8:1a:a3:43:04:6b:16:7a:85:5b:d8:9d:7d:24: 0d:84:f2:57:ee:1d:2b:12:02:6e:3e:14:93:3e:7c:ce:25:56: b8:7c:52:cd:88:e6:31:48:5a:a0:e0:ab:f3:ee:c4:e7:a6:d7: d9:b9:9e:4f:ff:6b:d9:da:93:6d:18:fc:1e:dd:37:f3:0d:64: 90:b6:08:ae:dc:ae:3b:13:92:b6:71:86:40:18:2d:7f:2c:6f: f9:26:49:75:57:ce:6d:05:74:6a:f6:74:e3:0b:e7:a1:05:da: c0:ab:7b:c4:1f:bb:32:1d:3f:ff:55:56:25:15:51:52:e9:72: 9c:44:6c:60:65:4d:41:7e:b7:c7:6e:26:4b:16:0c:38:ca:65: 1b:fe:07:22:a4:bd:98:fa:76:93:b2:65:ee:85:c9:99:8a:06: 2c:09:6b:d2:3b:ff:e6:a8:98:1c:3c:9f:4f:9d:94:f6:d1:d9: 58:ce:12:a1:06:e9:2d:3c:cd:79:46:7e:cf:c9:54:99:e6:de: 18:fd:06:b3:0f:9b:f5:68:6f:92:05:89:0f:fe:67:fb:b3:b1: 14:9c:72:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0uCYnZoFzXGJmigy5mib6X7qrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlE MDdFNUVCNDAeFw0yNjA3MjQxNjQ5NTlaFw0yNjA3MjUyMDI4NTlaMDMxMTAvBgNV BAMTKDdCNzlFODVFQzdFRjI4REJBMUNEQTI1NUU5OEJBQjcwNzlBNUU5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVLjHt7cESWKb4ljBRfHisJ7u uIf7PQhhZmpVxIiKjOpaX2Zsr1GDhHwztT1/OnIkMM2g5ytkrFrKNF05PMfx5mg3 sCRmfWXojtizXKa78hCaw5yvl+ioPQ8vPAOGJTLH245/8yoaYBrdTkxsG2qRsA2s HMxq8NA4ybQYhxDFDidnmVw7CJ05gujoanql+YTOaABcMTqvpV/QI40PmJQeYttj w/pKCKB5PMTGEc65eac+uW8f4Kp0v/NO9aivYGdVwgoGyZl3ekitJJEOFebEgcqu T4yHSgoIz1+sRGD/UWXW8pPAZVa6QFK0Z0lhV0PpfgjjweUCivuJhHa+/WwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3noXsfvKNuhzaJV6YurcHml6RAwHwYDVR0j BBgwFoAUu27kl5Xl/eHpglPjRIBnqdB+XrQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzY1Yjg0ZjItOTgwNC00NjcwLThiYmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5 NUU1RkRFMUU5ODI1M0UzNDQ4MDY3QTlEMDdFNUVCNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjZFRTQ5Nzk1RTVGREUxRTk4MjUzRTM0NDgwNjdBOUQwN0U1 RUI0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvQkI2RUU0OTc5NUU1RkRFMUU5ODI1M0UzNDQ4MDY3 QTlEMDdFNUVCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu0vranmZGkjRbMnUNgWV/YqoCTIuomiEKg UdSyIrS48pafJmDb6Te4GqNDBGsWeoVb2J19JA2E8lfuHSsSAm4+FJM+fM4lVrh8 Us2I5jFIWqDgq/PuxOem19m5nk//a9nak20Y/B7dN/MNZJC2CK7crjsTkrZxhkAY LX8sb/kmSXVXzm0FdGr2dOML56EF2sCre8QfuzIdP/9VViUVUVLpcpxEbGBlTUF+ t8duJksWDDjKZRv+ByKkvZj6dpOyZe6FyZmKBiwJa9I7/+aomBw8n0+dlPbR2VjO EqEG6S08zXlGfs/JVJnm3hj9BrMPm/Vob5IFiQ/+Z/uzsRSccr0= -----END CERTIFICATE-----Generated at Fri Jul 24 19:49:16 2026 by rpki-client