$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: ArRs1Se0idVWvyuH/zIBpHUQEK3aQSe3T4on8FCl0z0= Subject key identifier: 07:4A:E1:AE:60:11:C2:9B:13:0D:A8:48:89:A3:96:DF:EA:03:32:CE Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 58888C891BD74DB49EBB235CAE0A529B7A841807 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 15:25:48 +0000 Manifest this update: Mon 21 Sep 2026 15:20:48 +0000 Manifest next update: Tue 22 Sep 2026 17:45:48 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: IyVCXZN9uOErCzk4yHy0xrOeXW/b8PZR5HQRRCEDjmA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:88:8c:89:1b:d7:4d:b4:9e:bb:23:5c:ae:0a:52:9b:7a:84:18:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: Sep 21 15:20:48 2026 GMT Not After : Sep 22 17:45:48 2026 GMT Subject: CN=074AE1AE6011C29B130DA84889A396DFEA0332CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:63:23:82:9d:fc:24:ec:4d:c8:c1:57:df: af:fa:34:4d:91:e6:20:f9:bc:e1:f4:19:81:d0:43: 3a:1a:11:16:2a:75:99:4f:9e:7c:96:d8:af:7e:75: 76:d1:06:b3:17:ce:ca:e6:b7:2e:79:67:58:1d:d3: 1b:cc:0f:fc:42:08:8f:2f:21:25:87:a1:df:34:e0: 6d:2d:f6:f7:33:38:db:0b:a4:e6:f8:a1:7e:e1:1d: 3a:f9:40:34:2f:c8:6e:fe:24:47:18:04:a6:ea:47: 4b:23:79:45:90:6f:f5:c3:9b:28:8d:ce:04:ce:57: 8f:eb:26:ed:6b:53:00:80:da:05:bd:79:65:42:c6: 08:33:7c:21:2c:4a:75:59:c1:ec:31:51:cb:b6:0c: 6f:cf:19:2e:c7:1e:1d:0f:f9:15:88:c7:9e:52:24: 4c:88:8c:9a:93:62:57:be:6d:dc:2e:01:e0:66:01: e5:f9:41:cb:9f:37:b1:bb:4e:bd:3d:20:18:08:a9: 1d:3e:ad:32:79:0a:65:0d:18:91:c3:15:1a:65:82: 7d:91:67:2b:48:ab:18:74:bf:81:af:03:12:8b:4e: d1:bc:68:80:cd:c7:c9:43:55:1c:fe:ee:db:1f:25: 90:fe:34:55:56:e5:f1:76:cd:f4:4f:13:f4:67:f3: 81:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4A:E1:AE:60:11:C2:9B:13:0D:A8:48:89:A3:96:DF:EA:03:32:CE X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1c:73:4f:8d:0d:1a:b7:ca:7a:24:e1:c3:64:56:71:9c:39: 2b:10:55:73:a2:7f:e1:47:b9:6a:53:15:5c:51:58:cc:ee:e8: 11:d1:93:2b:32:12:06:85:60:df:6d:7e:81:6d:c8:34:19:73: c3:8d:b5:7e:0b:ce:0a:71:b1:73:c2:61:db:7f:e0:65:61:99: b1:fe:69:03:4d:a9:6a:b8:6a:52:23:8d:4f:55:55:aa:b6:3c: 02:fe:7a:52:56:67:bd:a8:02:53:75:de:6a:66:db:c3:a0:03: 2f:19:34:75:9e:ae:50:88:fb:00:03:b1:a5:a4:25:96:f2:f8: 19:df:7b:41:38:cd:26:b1:75:e0:9a:3b:a7:cd:4d:56:a8:b0: 32:93:49:4e:7f:6c:43:b7:64:fd:7c:f9:ed:ea:74:40:eb:c1: b8:89:1c:58:71:09:97:07:54:19:f9:2a:7e:a1:c2:64:c5:9e: bb:cb:ab:f6:96:45:37:8c:1b:de:d0:83:37:fa:66:ca:d5:f6: 2b:7e:75:8e:25:d4:df:32:88:00:5a:0e:2f:0f:20:15:13:fd: 5c:94:83:56:25:6b:4a:50:bc:06:78:ad:73:03:4d:4d:27:5c: f9:45:76:c3:27:87:3f:f9:fc:80:3a:2c:4c:ee:e9:a1:ca:22: f0:f9:b3:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIiMiRvXTbSeuyNcrgpSm3qEGAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA5MjExNTIwNDhaFw0yNjA5MjIxNzQ1NDhaMDMxMTAvBgNV BAMTKDA3NEFFMUFFNjAxMUMyOUIxMzBEQTg0ODg5QTM5NkRGRUEwMzMyQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwi2Mjgp38JOxNyMFX36/6NE2R 5iD5vOH0GYHQQzoaERYqdZlPnnyW2K9+dXbRBrMXzsrmty55Z1gd0xvMD/xCCI8v ISWHod804G0t9vczONsLpOb4oX7hHTr5QDQvyG7+JEcYBKbqR0sjeUWQb/XDmyiN zgTOV4/rJu1rUwCA2gW9eWVCxggzfCEsSnVZwewxUcu2DG/PGS7HHh0P+RWIx55S JEyIjJqTYle+bdwuAeBmAeX5QcufN7G7Tr09IBgIqR0+rTJ5CmUNGJHDFRplgn2R ZytIqxh0v4GvAxKLTtG8aIDNx8lDVRz+7tsfJZD+NFVW5fF2zfRPE/Rn84GXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB0rhrmARwpsTDahIiaOW3+oDMs4wHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0cc0+NDRq3ynok4cNkVnGcOSsQVXOif+FH uWpTFVxRWMzu6BHRkysyEgaFYN9tfoFtyDQZc8ONtX4LzgpxsXPCYdt/4GVhmbH+ aQNNqWq4alIjjU9VVaq2PAL+elJWZ72oAlN13mpm28OgAy8ZNHWerlCI+wADsaWk JZby+Bnfe0E4zSaxdeCaO6fNTVaosDKTSU5/bEO3ZP18+e3qdEDrwbiJHFhxCZcH VBn5Kn6hwmTFnrvLq/aWRTeMG97Qgzf6ZsrV9it+dY4l1N8yiABaDi8PIBUT/VyU g1Yla0pQvAZ4rXMDTU0nXPlFdsMnhz/5/IA6LEzu6aHKIvD5szM= -----END CERTIFICATE-----Generated at Tue Sep 22 09:20:09 2026 by rpki-client