$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json) Hash identifier: crfKYUZGCwDvNDs8XecHnZ2ENRoHtP/lrc9d2vxzIUc= Subject key identifier: 16:B7:98:38:29:55:B5:CC:0B:32:26:2C:6D:2E:D5:10:13:4C:D7:46 Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Certificate serial: 1401F38D527EEF2882BA262A7EF3022256010957 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft Manifest number: BE Signing time: Tue 22 Sep 2026 05:58:54 +0000 Manifest this update: Tue 22 Sep 2026 05:53:54 +0000 Manifest next update: Wed 23 Sep 2026 06:18:54 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=) 2: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: Fv0V86g80rtrHgQ3WaAqsQooRPiMG1v3e2sCrlpGnUU=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:01:f3:8d:52:7e:ef:28:82:ba:26:2a:7e:f3:02:22:56:01:09:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Validity Not Before: Sep 22 05:53:54 2026 GMT Not After : Sep 23 06:18:54 2026 GMT Subject: CN=16B798382955B5CC0B32262C6D2ED510134CD746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2b:bb:96:05:7d:bf:da:22:8e:7d:99:30:a3: 48:3f:5c:9e:a0:1e:89:b5:94:ea:c8:72:00:6c:2e: 73:8d:ee:25:61:a1:4e:f1:ec:12:2a:98:b5:15:cc: fc:24:48:c9:00:23:db:60:15:4f:f1:ef:72:ae:b4: d9:59:3b:9a:f1:b8:33:08:b0:94:2c:d8:01:34:d5: c2:0a:50:04:66:85:22:e1:7d:05:62:b4:9d:f0:9a: 66:11:f7:10:42:7e:9b:8f:09:4d:97:88:26:10:b2: d9:2b:8c:f1:90:dd:61:69:0d:9a:36:70:f1:44:d3: 52:e9:fe:ed:f3:0f:08:be:39:8c:04:4c:05:08:7f: 97:21:8a:99:2a:6c:99:d7:ff:05:ad:bb:ab:c8:6b: 59:bb:b0:36:3f:f8:fe:79:c5:10:b9:43:37:e8:72: 3d:f5:07:c5:51:d4:b9:c5:73:7d:be:2b:16:1e:9b: 94:10:22:19:bf:3e:35:ba:68:0d:1f:f1:04:9e:1b: 13:58:b3:d9:07:ee:c3:da:c3:e7:25:87:1f:36:d5: 7b:a5:21:b0:cc:32:df:e4:e7:d6:0a:55:db:4a:bd: 19:26:75:a9:5d:61:34:2b:d8:e2:5c:9e:08:b7:1d: db:4f:40:c6:78:98:c7:77:94:bd:e1:29:7d:ca:fa: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B7:98:38:29:55:B5:CC:0B:32:26:2C:6D:2E:D5:10:13:4C:D7:46 X509v3 Authority Key Identifier: keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:87:24:81:52:a8:e9:d3:00:30:12:6f:4b:75:75:03:93:8a: d6:8b:97:9e:21:b4:73:b9:77:e4:fe:b6:0a:21:ca:a1:45:b0: ee:52:62:42:e0:74:e0:f3:58:8e:c3:6d:bd:50:a9:30:68:fe: 82:67:e0:41:8d:95:3c:3c:a0:08:a8:68:65:13:2c:8b:e7:14: 31:e6:d8:b2:12:ef:75:2b:32:9f:8b:00:f8:20:76:d3:4d:e5: aa:23:8d:f9:e9:b0:29:64:2a:0a:0b:86:f4:32:79:21:f6:04: 76:ee:bf:78:e1:7d:f1:5f:46:c1:fe:28:ba:71:08:09:a5:c5: 24:25:ee:c2:c5:2b:be:0b:96:70:0f:2f:0a:1c:d2:74:f5:78: 4d:d6:9b:c5:12:e3:48:7e:a2:af:ea:d7:8a:7b:68:a4:af:d0: 6b:dd:d2:d5:76:fa:ce:08:61:0a:d6:02:ff:c2:11:16:c9:af: 1f:3b:ac:0f:ee:df:69:f4:c4:fa:4d:52:ee:a6:01:df:fd:53: 50:60:f1:1d:ee:20:02:52:3e:3a:67:13:9c:04:b3:71:32:f3: 6c:59:47:ec:96:e0:f5:bf:de:b8:2f:69:01:03:44:46:26:74: ba:92:dc:24:d0:3b:ec:15:5c:cf:53:df:21:9c:ef:0d:b4:ac: 9a:c1:94:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFAHzjVJ+7yiCuiYqfvMCIlYBCVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdC MkRCRjI0MzAeFw0yNjA5MjIwNTUzNTRaFw0yNjA5MjMwNjE4NTRaMDMxMTAvBgNV BAMTKDE2Qjc5ODM4Mjk1NUI1Q0MwQjMyMjYyQzZEMkVENTEwMTM0Q0Q3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyK7uWBX2/2iKOfZkwo0g/XJ6g Hom1lOrIcgBsLnON7iVhoU7x7BIqmLUVzPwkSMkAI9tgFU/x73KutNlZO5rxuDMI sJQs2AE01cIKUARmhSLhfQVitJ3wmmYR9xBCfpuPCU2XiCYQstkrjPGQ3WFpDZo2 cPFE01Lp/u3zDwi+OYwETAUIf5chipkqbJnX/wWtu6vIa1m7sDY/+P55xRC5Qzfo cj31B8VR1LnFc32+KxYem5QQIhm/PjW6aA0f8QSeGxNYs9kH7sPaw+clhx821Xul IbDMMt/k59YKVdtKvRkmdaldYTQr2OJcngi3HdtPQMZ4mMd3lL3hKX3K+gaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFreYOClVtcwLMiYsbS7VEBNM10YwHwYDVR0j BBgwFoAUuru2L017B2/Ky/+BBybO97Lb8kMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYzNWE0NTEtYzMwNC00NWY1LWI3ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0 RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdCMkRCRjI0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCQjYyRjREN0IwNzZGQ0FDQkZGODEwNzI2Q0VGN0IyREJG MjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNF RjdCMkRCRjI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeHJIFSqOnTADASb0t1dQOTitaLl54htHO5 d+T+tgohyqFFsO5SYkLgdODzWI7Dbb1QqTBo/oJn4EGNlTw8oAioaGUTLIvnFDHm 2LIS73UrMp+LAPggdtNN5aojjfnpsClkKgoLhvQyeSH2BHbuv3jhffFfRsH+KLpx CAmlxSQl7sLFK74LlnAPLwoc0nT1eE3Wm8US40h+oq/q14p7aKSv0Gvd0tV2+s4I YQrWAv/CERbJrx87rA/u32n0xPpNUu6mAd/9U1Bg8R3uIAJSPjpnE5wEs3Ey82xZ R+yW4PW/3rgvaQEDREYmdLqS3CTQO+wVXM9T3yGc7w20rJrBlPs= -----END CERTIFICATE-----Generated at Tue Sep 22 17:08:47 2026 by rpki-client