$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json) Hash identifier: Nv365iiHcbvglAUqYYfKEt2dni0TUHfDbrMoRmfXGA4= Subject key identifier: FD:E0:ED:73:A1:65:9B:2F:1B:5E:FB:4B:07:BA:14:18:54:D2:AD:A8 Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Certificate serial: 1E96E78FACDAFD7C97265726106BC4DFEBCF3D85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 05:37:21 +0000 Manifest this update: Fri 25 Sep 2026 05:32:21 +0000 Manifest next update: Sat 26 Sep 2026 08:31:21 +0000 Files and hashes: 1: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=) 2: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: Tb+c2SQedpZ102WJmgxndnBViCSP6DgXLZP1RTf/iXE=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=) 4: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:96:e7:8f:ac:da:fd:7c:97:26:57:26:10:6b:c4:df:eb:cf:3d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Validity Not Before: Sep 25 05:32:21 2026 GMT Not After : Sep 26 08:31:21 2026 GMT Subject: CN=FDE0ED73A1659B2F1B5EFB4B07BA141854D2ADA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:63:4b:fb:4e:7f:6d:4a:71:f3:ae:3d:ef:0b: 4c:b7:39:91:64:7d:1e:a9:f9:12:c4:8f:9a:35:5e: c3:7c:2f:fb:ea:ee:ed:12:96:8d:5f:24:35:b6:1f: 80:07:7a:86:31:91:84:98:63:d9:7a:a2:ed:aa:86: 19:78:4d:90:6d:16:36:a5:55:e0:15:ac:47:c6:76: 9e:e2:f3:a1:3d:0c:50:e2:44:f4:6d:58:28:3f:b7: 3e:c4:c5:a2:5c:07:55:93:a0:07:06:20:61:d0:3e: 9e:98:5a:29:81:ee:87:fa:fd:27:1e:29:53:02:b9: 1a:20:4d:0a:d7:a7:61:ae:fd:61:52:1b:79:ed:90: 8f:9c:36:99:3e:62:66:40:67:1d:81:c5:32:1a:71: d0:6e:23:6e:6c:ea:c2:e8:8b:3e:0c:26:60:92:0a: 4a:6b:64:f4:55:c5:1e:20:9a:64:98:32:53:0d:c7: aa:db:41:2c:d1:e3:fa:c1:f3:f9:a7:2b:7f:33:ad: b8:39:f0:74:0d:53:94:c4:bd:31:2f:15:e5:a9:d8: 52:78:f5:45:79:42:40:bd:84:a0:22:f8:1d:48:97: 69:40:b8:90:69:81:8e:f7:d0:c8:84:fd:5b:64:d1: 14:4f:b8:c1:3e:67:47:8a:24:8f:8f:af:b7:cc:1e: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E0:ED:73:A1:65:9B:2F:1B:5E:FB:4B:07:BA:14:18:54:D2:AD:A8 X509v3 Authority Key Identifier: keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:34:69:05:fb:7b:88:6e:ee:f0:45:2d:63:49:e9:00:7f: 85:d4:60:a5:ce:3e:37:71:80:5e:17:a0:e1:34:8b:f3:dd:cd: 70:60:6a:a6:ec:f4:11:94:2c:a1:95:db:41:bf:80:ca:37:fc: dd:4f:4a:55:d4:aa:48:ff:4a:47:d1:6a:71:7b:dd:42:9b:fe: b7:ac:8a:cd:c1:55:a9:4a:87:f6:bf:ec:31:88:ae:ce:28:26: d8:2b:58:cc:6b:1c:44:ac:54:ff:b5:5d:23:e0:dc:59:c3:86: 52:5d:a2:5c:56:fe:e7:52:70:2a:0d:f2:89:5a:b9:ad:f5:8b: 3f:85:72:84:86:e5:bf:a0:d8:54:4c:44:ba:1e:34:c0:48:56: c6:6d:8c:39:7b:23:57:a0:a8:5c:69:dc:43:3e:b3:8a:e0:dd: e1:f9:fd:a2:b8:c5:08:3c:15:7e:27:18:30:df:44:45:b9:88: d7:7d:94:5f:31:42:48:b1:1f:02:29:cc:8b:1a:cc:ea:e9:02: bb:01:c3:80:0e:c2:05:b7:36:39:07:c0:ad:ce:b6:86:b5:ba: 1f:06:9a:25:6a:40:7f:3a:d5:a2:8b:13:23:b5:db:dd:bd:ab: 9e:73:c3:00:e8:2e:f2:52:41:68:de:19:03:fb:46:aa:f0:b9: b0:46:1d:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpbnj6za/XyXJlcmEGvE3+vPPYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdC MkRCRjI0MzAeFw0yNjA5MjUwNTMyMjFaFw0yNjA5MjYwODMxMjFaMDMxMTAvBgNV BAMTKEZERTBFRDczQTE2NTlCMkYxQjVFRkI0QjA3QkExNDE4NTREMkFEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRY0v7Tn9tSnHzrj3vC0y3OZFk fR6p+RLEj5o1XsN8L/vq7u0Slo1fJDW2H4AHeoYxkYSYY9l6ou2qhhl4TZBtFjal VeAVrEfGdp7i86E9DFDiRPRtWCg/tz7ExaJcB1WToAcGIGHQPp6YWimB7of6/Sce KVMCuRogTQrXp2Gu/WFSG3ntkI+cNpk+YmZAZx2BxTIacdBuI25s6sLoiz4MJmCS CkprZPRVxR4gmmSYMlMNx6rbQSzR4/rB8/mnK38zrbg58HQNU5TEvTEvFeWp2FJ4 9UV5QkC9hKAi+B1Il2lAuJBpgY730MiE/Vtk0RRPuME+Z0eKJI+Pr7fMHpQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/eDtc6Flmy8bXvtLB7oUGFTSragwHwYDVR0j BBgwFoAUuru2L017B2/Ky/+BBybO97Lb8kMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYzNWE0NTEtYzMwNC00NWY1LWI3ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0 RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdCMkRCRjI0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCQjYyRjREN0IwNzZGQ0FDQkZGODEwNzI2Q0VGN0IyREJG MjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNF RjdCMkRCRjI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGDNGkF+3uIbu7wRS1jSekAf4XUYKXOPjdx gF4XoOE0i/PdzXBgaqbs9BGULKGV20G/gMo3/N1PSlXUqkj/SkfRanF73UKb/res is3BValKh/a/7DGIrs4oJtgrWMxrHESsVP+1XSPg3FnDhlJdolxW/udScCoN8ola ua31iz+FcoSG5b+g2FRMRLoeNMBIVsZtjDl7I1egqFxp3EM+s4rg3eH5/aK4xQg8 FX4nGDDfREW5iNd9lF8xQkixHwIpzIsazOrpArsBw4AOwgW3NjkHwK3Otoa1uh8G miVqQH861aKLEyO12929q55zwwDoLvJSQWjeGQP7RqrwubBGHaw= -----END CERTIFICATE-----Generated at Fri Sep 25 21:25:28 2026 by rpki-client