$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft File: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft (raw, json) Hash identifier: QhxHCrH/mLi8P/PtCMKAGykQfvUh5xDEUQtz9C+qxDQ= Subject key identifier: 73:F5:91:5D:9A:50:B5:D5:BF:AB:6D:F4:12:66:D7:6C:BA:03:8E:80 Authority key identifier: BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 Certificate issuer: /CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Certificate serial: 2CCB4CCADDF3C290BCD3245D81FE30F9F4460043 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 18:49:14 +0000 Manifest this update: Wed 23 Sep 2026 18:44:14 +0000 Manifest next update: Thu 24 Sep 2026 20:23:14 +0000 Files and hashes: 1: 323030313a6466323a653463303a3a2f34382d3438203d3e20313531303131.roa (hash: W7n2JDD5ivxhi/6nEhgqfo99pkm7Hn+CBH17uMHEOxU=) 2: 3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (hash: AyU9dLRn2+0UVwta95ZZWn0+Wvuscs96qo1E0XirAYM=) 3: BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl (hash: avyv24PkrE0HH2PBduPdHnBu7JCsLjpx1SOu2rrUbII=) 4: 3130332e3232322e3235342e302f32342d3234203d3e20313531303131.roa (hash: m1k0AK6mRy+Mwv1J09v+vjwtPbeYTImxk1I5pN2FqiY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cb:4c:ca:dd:f3:c2:90:bc:d3:24:5d:81:fe:30:f9:f4:46:00:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8 Validity Not Before: Sep 23 18:44:14 2026 GMT Not After : Sep 24 20:23:14 2026 GMT Subject: CN=73F5915D9A50B5D5BFAB6DF41266D76CBA038E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:98:45:98:8f:4d:80:33:00:82:8d:d8:ff: 7a:62:a4:c8:2f:74:10:4d:63:c4:c4:75:0a:f0:30: 32:2e:e7:b8:8b:cf:85:ed:43:b4:a5:ee:78:b5:f6: ff:b5:39:08:d3:ad:59:68:b3:cb:c8:e0:df:94:10: d5:75:83:30:43:fa:84:6f:0b:28:0e:d6:5f:9b:ab: c7:e5:0f:a5:9e:f7:58:df:a7:51:ad:df:09:c8:96: ec:23:0a:e2:9d:95:a2:56:4a:5e:ec:86:fc:05:7d: 13:f4:69:86:de:57:99:4c:ad:38:32:30:35:4b:c2: 38:b6:3d:99:da:b3:5d:76:94:81:08:aa:4a:0a:84: 44:b0:ed:af:40:8b:a5:52:19:5d:6e:3a:fd:93:15: 07:e5:66:ea:08:9e:97:89:aa:33:22:c4:86:cd:67: a1:2b:ef:61:bc:f2:9c:47:ee:21:2b:59:03:98:34: b0:df:45:0b:23:0c:3d:af:91:02:07:32:95:8f:3b: 5d:34:86:c4:63:ef:f6:83:10:37:a2:91:aa:ac:8b: e1:0b:bc:ac:32:52:e9:45:d8:f8:c1:79:63:ba:f6: 3e:eb:18:ab:8d:de:ec:53:2c:77:a0:f9:6f:d9:ef: 2c:3f:a5:bc:26:50:b6:da:f3:7d:41:5e:21:51:be: 35:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:91:5D:9A:50:B5:D5:BF:AB:6D:F4:12:66:D7:6C:BA:03:8E:80 X509v3 Authority Key Identifier: keyid:BB:D4:E1:B6:77:6C:86:2F:7B:32:FC:50:35:87:EC:6E:E4:FF:BA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/BBD4E1B6776C862F7B32FC503587EC6EE4FFBAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ec:80:1a:a1:d8:70:41:10:fd:b6:ab:75:df:4b:be:7f:73: 70:87:9c:03:d9:2a:47:92:bd:6e:78:77:4a:61:57:8b:b6:6d: 6b:3b:03:32:4c:b9:c8:63:33:26:1c:7a:22:2b:b2:02:d2:10: fb:1b:70:c7:f1:ac:02:59:98:7d:59:60:c9:09:ae:b4:0c:c5: c5:89:a9:58:97:77:da:37:82:62:f2:7a:82:65:3d:b7:4e:f7: 1f:ac:43:e6:0b:43:ee:fe:49:80:7b:f4:c0:89:7a:98:34:1e: df:71:cb:5a:80:b9:72:69:b8:4a:2d:ea:b2:88:4a:81:95:af: 83:e1:22:c7:63:c0:ba:56:81:38:bc:f1:a0:97:13:73:11:f1: 09:db:ea:7a:17:b5:ed:40:45:c3:65:e4:f3:13:da:b3:56:cd: 3a:ce:01:30:96:48:6b:84:ad:b6:d2:77:08:31:eb:50:b4:52: a0:15:24:33:b9:19:8d:3d:43:68:0f:97:1b:3f:a7:72:bd:ff: 1d:a6:a9:8a:d2:0e:ef:5e:a5:77:82:59:99:ff:12:b6:21:6e: 22:19:dd:af:6f:6a:3a:d5:3d:2b:dc:18:18:53:92:b9:61:cf: d4:c2:a3:a5:fb:bd:e6:0b:eb:2a:fc:45:cf:8d:ad:01:93:54: e6:4f:e4:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULMtMyt3zwpC80yRdgf4w+fRGAEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVF NEZGQkFCODAeFw0yNjA5MjMxODQ0MTRaFw0yNjA5MjQyMDIzMTRaMDMxMTAvBgNV BAMTKDczRjU5MTVEOUE1MEI1RDVCRkFCNkRGNDEyNjZENzZDQkEwMzhFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRJhFmI9NgDMAgo3Y/3pipMgv dBBNY8TEdQrwMDIu57iLz4XtQ7Sl7ni19v+1OQjTrVlos8vI4N+UENV1gzBD+oRv CygO1l+bq8flD6We91jfp1Gt3wnIluwjCuKdlaJWSl7shvwFfRP0aYbeV5lMrTgy MDVLwji2PZnas112lIEIqkoKhESw7a9Ai6VSGV1uOv2TFQflZuoInpeJqjMixIbN Z6Er72G88pxH7iErWQOYNLDfRQsjDD2vkQIHMpWPO100hsRj7/aDEDeikaqsi+EL vKwyUulF2PjBeWO69j7rGKuN3uxTLHeg+W/Z7yw/pbwmULba831BXiFRvjWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc/WRXZpQtdW/q230EmbXbLoDjoAwHwYDVR0j BBgwFoAUu9Thtndshi97MvxQNYfsbuT/urgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzgwZGRlOTQtZTViZS00ZDI5LWJiMTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3 NzZDODYyRjdCMzJGQzUwMzU4N0VDNkVFNEZGQkFCOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQkQ0RTFCNjc3NkM4NjJGN0IzMkZDNTAzNTg3RUM2RUU0RkZC QUI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzgwZGRlOTQtZTViZS00ZDI5LWJi MTItNDVmYjVjMWQyYzc5LzAvQkJENEUxQjY3NzZDODYyRjdCMzJGQzUwMzU4N0VD NkVFNEZGQkFCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3sgBqh2HBBEP22q3XfS75/c3CHnAPZKkeS vW54d0phV4u2bWs7AzJMuchjMyYceiIrsgLSEPsbcMfxrAJZmH1ZYMkJrrQMxcWJ qViXd9o3gmLyeoJlPbdO9x+sQ+YLQ+7+SYB79MCJepg0Ht9xy1qAuXJpuEot6rKI SoGVr4PhIsdjwLpWgTi88aCXE3MR8Qnb6noXte1ARcNl5PMT2rNWzTrOATCWSGuE rbbSdwgx61C0UqAVJDO5GY09Q2gPlxs/p3K9/x2mqYrSDu9epXeCWZn/ErYhbiIZ 3a9vajrVPSvcGBhTkrlhz9TCo6X7veYL6yr8Rc+NrQGTVOZP5DA= -----END CERTIFICATE-----Generated at Thu Sep 24 01:03:46 2026 by rpki-client