$ rpki-client -vvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: t8mggAjolocQinQh9WQUzWE55Pzd4qJOklIZN3+mgd8= Subject key identifier: FF:CE:DE:A8:26:5F:F7:66:A0:5B:A4:94:CB:CD:2D:DD:74:A0:11:F7 Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 77C8C45DA03FCEFD4C5886F28D5D769E681380F4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 21:25:10 +0000 Manifest this update: Tue 16 Jun 2026 21:20:10 +0000 Manifest next update: Thu 18 Jun 2026 00:06:10 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: 7t2UOoxSPrpKRZaFj/TAjV4kPCB3jgPcPULhcd70y4w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c8:c4:5d:a0:3f:ce:fd:4c:58:86:f2:8d:5d:76:9e:68:13:80:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: Jun 16 21:20:10 2026 GMT Not After : Jun 18 00:06:10 2026 GMT Subject: CN=FFCEDEA8265FF766A05BA494CBCD2DDD74A011F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e7:a4:80:19:02:de:f1:a3:f7:d0:81:e4:a1: 3b:fb:d6:ec:b5:b5:d7:be:60:d1:a6:72:fe:fb:25: 9b:17:60:5d:ca:01:e2:55:b4:a0:ef:4c:2b:89:13: 93:8d:84:cb:21:89:71:ad:79:6c:d8:ed:c3:1c:ab: ac:71:62:9a:77:17:bb:b8:90:90:dc:8e:49:69:ac: 11:66:14:c7:92:3b:ff:8f:83:ae:64:26:8e:4a:b1: 70:be:0b:1d:40:62:e6:72:c4:d1:9a:c3:cc:f6:57: 11:42:cd:f5:86:b8:ba:2d:97:3e:43:51:2c:0b:37: f0:e6:51:14:0d:4b:74:6c:47:ff:ea:68:52:b3:52: f3:0c:76:2f:5d:35:d1:41:76:1e:0a:5f:5e:fa:46: ea:3b:53:7a:d4:19:78:0d:70:73:a1:d5:70:5f:70: be:f5:5a:d4:76:3a:2a:9a:d4:e8:1d:16:a6:79:e2: 2c:18:ab:fc:27:4d:cc:97:61:27:5a:77:4d:55:96: 9f:4f:cb:7a:cc:38:a1:ea:3c:0e:d4:24:52:0c:82: 77:b0:23:b7:5c:67:8d:d8:72:4d:a4:60:9b:f3:4d: a8:e1:21:d1:c0:e7:94:6b:f4:35:6b:31:3f:13:4a: 30:a2:62:10:07:c4:75:61:44:6d:0f:b9:0b:b0:59: 1c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:CE:DE:A8:26:5F:F7:66:A0:5B:A4:94:CB:CD:2D:DD:74:A0:11:F7 X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:50:c9:7b:ea:af:80:dc:38:17:95:37:59:6e:d7:25:ef:4b: 12:26:a9:be:a3:97:24:73:f2:12:a3:d5:e2:b9:84:19:76:f6: e5:34:4a:92:a4:b1:5a:07:c1:fa:3a:6c:46:ec:2e:c3:9c:c7: 32:8d:79:3d:a0:cb:dd:eb:be:8d:00:a8:ef:06:59:45:f6:bd: ec:e0:68:2b:d5:a9:c0:41:c9:4f:b3:9b:35:2f:a5:e5:41:c8: f8:12:7e:29:b4:b5:e2:f1:40:db:83:94:e5:ab:c9:6a:35:53: 1a:d4:63:66:ea:81:8b:4c:cf:80:c5:15:39:f6:c1:70:e8:73: 7a:97:c2:14:62:1c:5a:18:a9:95:76:9c:af:f3:18:93:95:d3: 61:47:74:f1:e6:2d:94:ac:6e:d2:8e:22:81:fc:ca:4f:72:85: 2a:c4:64:eb:ed:5a:a9:d4:d1:2f:18:68:72:8f:bb:e9:b9:17: 53:f6:7f:29:f6:6a:31:55:8d:b4:55:7d:37:42:b4:79:8a:d8: 72:53:ce:a9:ee:ae:7d:3a:82:0b:f6:4a:e4:3b:8e:c9:2c:f2: e1:16:dc:7d:2e:08:ee:35:fe:ad:f0:d4:db:e9:9a:1e:12:92: 2b:ae:00:95:8b:cf:6f:41:1f:a9:0d:c8:31:a4:e6:57:5f:40: 0e:d7:c9:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8jEXaA/zv1MWIbyjV12nmgTgPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA2MTYyMTIwMTBaFw0yNjA2MTgwMDA2MTBaMDMxMTAvBgNV BAMTKEZGQ0VERUE4MjY1RkY3NjZBMDVCQTQ5NENCQ0QyRERENzRBMDExRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs56SAGQLe8aP30IHkoTv71uy1 tde+YNGmcv77JZsXYF3KAeJVtKDvTCuJE5ONhMshiXGteWzY7cMcq6xxYpp3F7u4 kJDcjklprBFmFMeSO/+Pg65kJo5KsXC+Cx1AYuZyxNGaw8z2VxFCzfWGuLotlz5D USwLN/DmURQNS3RsR//qaFKzUvMMdi9dNdFBdh4KX176Ruo7U3rUGXgNcHOh1XBf cL71WtR2Oiqa1OgdFqZ54iwYq/wnTcyXYSdad01Vlp9Py3rMOKHqPA7UJFIMgnew I7dcZ43Yck2kYJvzTajhIdHA55Rr9DVrMT8TSjCiYhAHxHVhRG0PuQuwWRwzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/87eqCZf92agW6SUy80t3XSgEfcwHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNQyXvqr4DcOBeVN1lu1yXvSxImqb6jlyRz 8hKj1eK5hBl29uU0SpKksVoHwfo6bEbsLsOcxzKNeT2gy93rvo0AqO8GWUX2vezg aCvVqcBByU+zmzUvpeVByPgSfim0teLxQNuDlOWryWo1UxrUY2bqgYtMz4DFFTn2 wXDoc3qXwhRiHFoYqZV2nK/zGJOV02FHdPHmLZSsbtKOIoH8yk9yhSrEZOvtWqnU 0S8YaHKPu+m5F1P2fyn2ajFVjbRVfTdCtHmK2HJTzqnurn06ggv2SuQ7jsks8uEW 3H0uCO41/q3w1Nvpmh4SkiuuAJWLz29BH6kNyDGk5ldfQA7XyUo= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:23 2026 by rpki-client