$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: u5NWu+8SE/B9mE9AGKhr/107wFX8we8Coej1BsXOg9A= Subject key identifier: EF:D3:B1:71:EF:8B:22:21:1C:5C:80:5D:B0:AD:D1:9F:EC:07:78:22 Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 7D711E3C23FA69CDDA90ED14345032CD54BE9517 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 20:23:52 +0000 Manifest this update: Tue 16 Jun 2026 20:18:52 +0000 Manifest next update: Wed 17 Jun 2026 20:47:52 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: pi8e7MqA/cIHxfhdY7vtv8Yf4LVyj3G0Tfck+1PiD/E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 20:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:1e:3c:23:fa:69:cd:da:90:ed:14:34:50:32:cd:54:be:95:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: Jun 16 20:18:52 2026 GMT Not After : Jun 17 20:47:52 2026 GMT Subject: CN=EFD3B171EF8B22211C5C805DB0ADD19FEC077822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:19:76:bc:4a:79:83:10:60:cf:35:19:4f: 90:d6:c2:b7:d5:1e:85:35:9c:53:e8:ad:f7:ff:db: 17:81:ed:6a:b4:8d:fc:96:31:17:01:dc:80:18:04: b8:df:7f:b1:ab:94:66:a5:79:a3:c0:55:af:8b:ec: eb:b1:9c:cf:89:b0:91:9f:6e:4d:57:92:1f:c4:26: 36:a3:76:fa:a9:39:10:72:5d:56:58:53:03:21:87: 00:71:9d:5d:7e:06:66:49:e9:96:6a:df:03:d8:ab: e9:f8:8f:30:a2:71:7f:33:44:70:7a:f5:ae:eb:a5: 71:bd:fc:21:67:14:5f:8a:27:c8:a2:2d:fc:ff:35: ef:8b:e3:00:3e:42:d1:dc:b0:20:90:cb:9a:62:fb: 0b:88:1c:74:ec:b5:b9:db:9d:90:a5:5b:7b:5b:00: f3:44:a8:0d:4e:e6:68:a3:f2:93:e3:1b:32:81:1a: 85:c1:4e:5f:4a:f9:ae:63:d3:83:ac:d4:17:6b:7f: bb:2d:9b:eb:8d:f4:90:61:37:74:47:f7:ce:5a:6f: b9:cd:00:8c:b8:c4:5c:f4:ba:6a:18:d3:7c:aa:91: 89:35:b2:ed:d1:09:99:1f:27:3f:c1:5a:e0:7f:fd: 73:6f:c7:5f:fc:08:fa:06:e9:e7:4a:ad:c3:9e:17: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D3:B1:71:EF:8B:22:21:1C:5C:80:5D:B0:AD:D1:9F:EC:07:78:22 X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:59:57:66:68:20:25:e2:f5:e0:0c:bf:e9:d9:d2:b4:ad:c9: d9:28:09:72:f3:45:02:e6:9a:4d:f8:c5:00:f0:ca:ce:1e:bf: b1:86:cd:86:3e:d7:e6:dd:72:b1:33:eb:74:06:9c:72:01:58: 3d:e6:7b:bf:42:7d:51:84:ee:f4:26:5d:79:89:c0:39:07:2b: fb:77:9e:6c:aa:1a:73:f3:90:ff:2a:b8:29:0e:c1:42:2d:8a: 19:8c:a4:5f:1a:34:b8:9b:74:64:91:1d:ab:37:ba:47:70:77: 5f:a5:39:f1:f7:61:28:ba:dc:c0:01:89:bd:c9:2a:2d:f3:31: 15:db:aa:63:e1:5e:ea:d0:f8:16:aa:ac:01:bc:5c:24:44:5b: bb:25:e3:fc:40:07:5c:a3:cf:6f:79:5d:0f:5e:ae:aa:91:97: 46:27:9c:a6:75:dd:dc:3e:3b:36:e0:1e:11:67:c0:0e:ae:81: e6:86:40:3f:fe:e2:69:a5:4f:73:af:cc:c3:2e:5f:3a:a9:dc: 0d:7f:e2:84:4d:93:eb:0e:5f:1b:19:4a:c8:84:e5:ad:81:ac: d8:18:57:a5:f6:1c:1c:e5:3d:3c:7f:a5:64:93:5b:f8:a5:fc: 94:ad:45:4c:96:b9:f6:4b:d9:ed:a7:d9:0b:29:c0:82:c4:c6: 94:d4:19:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXEePCP6ac3akO0UNFAyzVS+lRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA2MTYyMDE4NTJaFw0yNjA2MTcyMDQ3NTJaMDMxMTAvBgNV BAMTKEVGRDNCMTcxRUY4QjIyMjExQzVDODA1REIwQUREMTlGRUMwNzc4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMRl2vEp5gxBgzzUZT5DWwrfV HoU1nFPorff/2xeB7Wq0jfyWMRcB3IAYBLjff7GrlGaleaPAVa+L7OuxnM+JsJGf bk1Xkh/EJjajdvqpORByXVZYUwMhhwBxnV1+BmZJ6ZZq3wPYq+n4jzCicX8zRHB6 9a7rpXG9/CFnFF+KJ8iiLfz/Ne+L4wA+QtHcsCCQy5pi+wuIHHTstbnbnZClW3tb APNEqA1O5mij8pPjGzKBGoXBTl9K+a5j04Os1Bdrf7stm+uN9JBhN3RH985ab7nN AIy4xFz0umoY03yqkYk1su3RCZkfJz/BWuB//XNvx1/8CPoG6edKrcOeF4OHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79Oxce+LIiEcXIBdsK3Rn+wHeCIwHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANZV2ZoICXi9eAMv+nZ0rStydkoCXLzRQLm mk34xQDwys4ev7GGzYY+1+bdcrEz63QGnHIBWD3me79CfVGE7vQmXXmJwDkHK/t3 nmyqGnPzkP8quCkOwUItihmMpF8aNLibdGSRHas3ukdwd1+lOfH3YSi63MABib3J Ki3zMRXbqmPhXurQ+BaqrAG8XCREW7sl4/xAB1yjz295XQ9erqqRl0YnnKZ13dw+ OzbgHhFnwA6ugeaGQD/+4mmlT3OvzMMuXzqp3A1/4oRNk+sOXxsZSsiE5a2BrNgY V6X2HBzlPTx/pWSTW/il/JStRUyWufZL2e2n2QspwILExpTUGfQ= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:18 2026 by rpki-client