$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: hu2nsp6G53MKqAgxUUwD3a9mkdGuHfYhOXEApSmElhM= Subject key identifier: F1:AE:2F:55:22:5C:39:86:4A:49:BA:DA:3A:FB:06:CE:56:D3:A7:06 Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 7D8E47A0E6B45E769C4D0982442E2592ADFC1F92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: BD Signing time: Mon 21 Sep 2026 12:52:22 +0000 Manifest this update: Mon 21 Sep 2026 12:47:22 +0000 Manifest next update: Tue 22 Sep 2026 15:30:22 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: YgnCELyCQKVmHedH5+t+RDQtpIxxXujijei81S/VzwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8e:47:a0:e6:b4:5e:76:9c:4d:09:82:44:2e:25:92:ad:fc:1f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: Sep 21 12:47:22 2026 GMT Not After : Sep 22 15:30:22 2026 GMT Subject: CN=F1AE2F55225C39864A49BADA3AFB06CE56D3A706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:3a:91:c8:9b:4a:d0:bc:e1:bb:01:d7:96: a8:34:98:e4:04:81:93:6a:cb:ca:32:fd:d8:fe:7e: 23:cc:7c:83:23:32:47:55:c5:fa:e0:dc:4c:d0:6c: e3:23:09:f3:d4:53:39:ba:1d:da:50:db:68:ae:2a: ee:9e:84:cd:b0:69:95:f4:8b:a9:0e:1b:22:49:76: 7c:41:61:2a:95:3f:a9:b5:e8:a7:52:c7:63:b6:ca: 4f:1a:6e:aa:1b:bc:dd:e5:68:23:12:e3:4e:67:20: 35:4d:cb:a2:af:0f:58:1a:da:04:10:6d:d7:1d:d5: 03:a0:cf:6a:d2:31:38:fc:53:da:73:4c:f5:ca:6e: 0f:91:03:09:ec:f2:f2:00:ce:cc:db:0b:1b:8d:41: a4:8a:e9:c0:c0:8f:31:ae:9d:34:dd:9b:61:b6:f4: dd:07:1b:46:aa:90:64:01:43:99:f9:14:3a:2d:19: 1a:ce:1d:6a:bd:cc:6c:be:63:9b:75:93:dd:f5:04: cf:cf:c9:26:ac:25:b5:12:14:e6:c2:ac:0d:c6:2b: 7f:8d:f9:ab:8b:59:04:98:f4:77:d7:4d:b0:5a:f0: 56:91:d4:de:d2:8b:b6:d2:a4:87:95:4d:56:29:7b: 50:18:c7:90:0e:c9:c7:bc:89:52:68:09:18:7c:70: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AE:2F:55:22:5C:39:86:4A:49:BA:DA:3A:FB:06:CE:56:D3:A7:06 X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:75:39:4f:91:a9:b1:18:f1:e5:c6:0d:77:df:20:75:4e:b2: 7e:d1:6f:d3:db:f5:c8:f1:95:df:31:e2:83:cd:47:94:a2:bd: d0:ab:6c:28:cc:79:bc:4a:1e:00:3e:22:34:d4:4c:3d:fd:a9: 4d:00:c5:ab:40:98:d9:09:a4:9a:40:e8:f3:14:a0:91:0b:72: ba:2c:2d:f8:d9:c6:eb:7d:61:9f:e3:94:a6:0b:29:5d:66:22: 58:bd:01:2c:6e:b4:a8:83:72:c8:eb:a0:65:60:89:ce:bb:13: e5:8a:e2:b6:aa:17:14:a9:c3:61:c1:03:b5:4d:93:41:1a:19: 57:81:40:01:12:8b:1a:ba:7a:bc:75:a2:1c:92:4c:55:17:5c: b6:a5:e8:2f:a4:23:82:52:12:67:ce:9c:38:b0:ae:94:51:72: d8:db:53:0c:05:e2:03:6f:3a:b4:32:6e:ad:8e:e2:75:32:68: 3b:b8:24:8b:1e:e4:dd:dd:9c:8d:e1:09:5b:ab:9f:e9:38:bc: bc:5b:45:8d:58:ff:ff:51:be:4d:00:29:fb:a6:04:c8:d2:e6: 88:8c:75:ac:00:13:a8:9c:1f:1e:2a:93:de:a1:0b:e1:a8:30: 72:21:4a:c0:66:fe:98:0d:31:d7:63:40:46:14:a4:51:3f:3f: 30:3b:1c:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfY5HoOa0XnacTQmCRC4lkq38H5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA5MjExMjQ3MjJaFw0yNjA5MjIxNTMwMjJaMDMxMTAvBgNV BAMTKEYxQUUyRjU1MjI1QzM5ODY0QTQ5QkFEQTNBRkIwNkNFNTZEM0E3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeWjqRyJtK0LzhuwHXlqg0mOQE gZNqy8oy/dj+fiPMfIMjMkdVxfrg3EzQbOMjCfPUUzm6HdpQ22iuKu6ehM2waZX0 i6kOGyJJdnxBYSqVP6m16KdSx2O2yk8abqobvN3laCMS405nIDVNy6KvD1ga2gQQ bdcd1QOgz2rSMTj8U9pzTPXKbg+RAwns8vIAzszbCxuNQaSK6cDAjzGunTTdm2G2 9N0HG0aqkGQBQ5n5FDotGRrOHWq9zGy+Y5t1k931BM/PySasJbUSFObCrA3GK3+N +auLWQSY9HfXTbBa8FaR1N7Si7bSpIeVTVYpe1AYx5AOyce8iVJoCRh8cGK7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8a4vVSJcOYZKSbraOvsGzlbTpwYwHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB1OU+RqbEY8eXGDXffIHVOsn7Rb9Pb9cjx ld8x4oPNR5SivdCrbCjMebxKHgA+IjTUTD39qU0AxatAmNkJpJpA6PMUoJELcros LfjZxut9YZ/jlKYLKV1mIli9ASxutKiDcsjroGVgic67E+WK4raqFxSpw2HBA7VN k0EaGVeBQAESixq6erx1ohySTFUXXLal6C+kI4JSEmfOnDiwrpRRctjbUwwF4gNv OrQybq2O4nUyaDu4JIse5N3dnI3hCVurn+k4vLxbRY1Y//9Rvk0AKfumBMjS5oiM dawAE6icHx4qk96hC+GoMHIhSsBm/pgNMddjQEYUpFE/PzA7HAY= -----END CERTIFICATE-----Generated at Tue Sep 22 02:53:28 2026 by rpki-client