$ rpki-client -vvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json) Hash identifier: n5A88oBMJ4Qrh7zRjJ2AzFF28ODMccWfjHSGCyKNfyk= Subject key identifier: C1:CA:3D:0A:FF:6C:F7:EF:C7:79:FF:85:16:5F:5B:20:A7:29:D0:EA Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Certificate serial: 344F1D95242BFA39CE2FEFC2E80169AC0073621F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:01:43 +0000 Manifest this update: Tue 12 May 2026 05:56:43 +0000 Manifest next update: Wed 13 May 2026 07:38:43 +0000 Files and hashes: 1: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: b+gQeoaJEDf4R8TnkgKPjVPvqqlU9srmR5ZqpemFB3w=) 2: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=) 3: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=) 4: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:4f:1d:95:24:2b:fa:39:ce:2f:ef:c2:e8:01:69:ac:00:73:62:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Validity Not Before: May 12 05:56:43 2026 GMT Not After : May 13 07:38:43 2026 GMT Subject: CN=C1CA3D0AFF6CF7EFC779FF85165F5B20A729D0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:c0:e6:6b:be:a4:ad:a6:c9:32:01:3f:00: 08:8d:03:ff:c6:31:55:14:d7:46:0c:29:bb:61:f8: f4:6d:63:ae:b2:ac:55:d5:cc:48:09:9a:14:46:e2: 82:10:68:77:c0:30:1c:6b:83:0c:fb:af:2f:88:2d: 40:db:09:1c:26:4b:c3:1b:00:1f:3e:d6:ba:c8:7d: 16:0c:d3:3c:af:41:09:16:63:cd:35:fc:30:99:1c: cc:0c:30:b3:bb:48:9e:c1:75:56:c6:b7:a8:2c:fc: 65:a6:9d:79:f9:75:c8:ef:5a:a1:28:cb:a4:e5:76: ea:46:c9:b9:07:4e:b2:e4:8e:1b:96:d9:ad:ea:91: 6d:fb:00:54:64:b7:5c:0e:2e:03:60:7e:78:1e:24: cd:70:68:86:c2:8a:80:60:77:0e:82:f9:49:b5:3b: d1:cf:23:d5:70:c5:5e:8c:88:86:95:2b:a0:48:5f: 47:fb:51:56:d1:9e:5a:90:9d:d7:a0:8c:56:dc:74: e2:c4:93:5d:78:86:4a:ba:49:c2:ac:d2:ed:57:e4: 91:58:e4:8a:8a:45:cb:44:4a:8e:44:44:3e:79:f8: af:6f:b3:42:ff:2b:55:c0:9b:8d:e7:a5:d9:a0:a2: c3:5d:9b:2a:97:3c:9f:97:d4:a6:89:9e:44:57:a2: 4f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CA:3D:0A:FF:6C:F7:EF:C7:79:FF:85:16:5F:5B:20:A7:29:D0:EA X509v3 Authority Key Identifier: keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9d:43:29:72:95:a9:10:de:12:6c:e1:f0:fe:82:75:14:8a: 6f:02:59:48:ad:9d:3f:93:01:1a:4a:fc:94:c2:3f:b0:17:3c: ce:ba:f9:76:11:e5:42:86:2f:88:8d:a9:af:63:68:19:1b:49: e9:17:90:db:74:6d:92:cc:ff:34:f6:d9:f7:36:64:03:32:f8: b0:bb:28:79:90:70:ef:9c:c8:cf:73:fa:ca:c0:d9:32:65:42: da:73:46:ef:ca:9d:e2:1e:a9:ad:c5:b7:33:61:4d:6e:e6:70: db:a6:b6:e8:46:56:e9:f6:ae:00:e3:e5:3b:22:8a:7a:75:92: 2b:bc:ac:3f:20:e4:df:b0:0e:be:ce:ac:06:fc:62:fb:c0:53: 82:f5:02:52:98:56:6d:76:0d:b0:43:75:97:b6:e8:f9:e8:36: ab:f1:ea:d9:1b:0c:a9:bc:01:e4:fd:c1:dd:f0:f2:c4:11:1f: 90:e8:aa:f6:68:87:38:54:00:63:07:f3:85:b1:21:5b:95:15: 45:44:8c:a0:9e:b4:55:60:a2:13:23:8e:80:c3:7d:41:10:2b: 53:42:5a:58:d0:88:d6:33:4a:bc:ee:9a:9c:ab:7e:01:88:cd: 63:06:8b:dd:f7:85:40:9a:6f:c3:55:bf:b6:04:d6:f7:6a:c3: 62:69:3c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNE8dlSQr+jnOL+/C6AFprABzYh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF NEZGQkFCODAeFw0yNjA1MTIwNTU2NDNaFw0yNjA1MTMwNzM4NDNaMDMxMTAvBgNV BAMTKEMxQ0EzRDBBRkY2Q0Y3RUZDNzc5RkY4NTE2NUY1QjIwQTcyOUQwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91MDma76krabJMgE/AAiNA//G MVUU10YMKbth+PRtY66yrFXVzEgJmhRG4oIQaHfAMBxrgwz7ry+ILUDbCRwmS8Mb AB8+1rrIfRYM0zyvQQkWY801/DCZHMwMMLO7SJ7BdVbGt6gs/GWmnXn5dcjvWqEo y6TldupGybkHTrLkjhuW2a3qkW37AFRkt1wOLgNgfngeJM1waIbCioBgdw6C+Um1 O9HPI9VwxV6MiIaVK6BIX0f7UVbRnlqQndegjFbcdOLEk114hkq6ScKs0u1X5JFY 5IqKRctESo5ERD55+K9vs0L/K1XAm43npdmgosNdmyqXPJ+X1KaJnkRXok8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwco9Cv9s9+/Hef+FFl9bIKcp0OowHwYDVR0j BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3 NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC QUI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VD NkVFNEZGQkFCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOdQylylakQ3hJs4fD+gnUUim8CWUitnT+T ARpK/JTCP7AXPM66+XYR5UKGL4iNqa9jaBkbSekXkNt0bZLM/zT22fc2ZAMy+LC7 KHmQcO+cyM9z+srA2TJlQtpzRu/KneIeqa3FtzNhTW7mcNumtuhGVun2rgDj5Tsi inp1kiu8rD8g5N+wDr7OrAb8YvvAU4L1AlKYVm12DbBDdZe26PnoNqvx6tkbDKm8 AeT9wd3w8sQRH5DoqvZohzhUAGMH84WxIVuVFUVEjKCetFVgohMjjoDDfUEQK1NC WljQiNYzSrzumpyrfgGIzWMGi933hUCab8NVv7YE1vdqw2JpPEM= -----END CERTIFICATE-----Generated at Tue May 12 23:55:33 2026 by rpki-client