
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft
File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json)
Hash identifier: YZUjJgq9sB0TPCMGhBLUB0oRw24TG9Kkc8ctuFooDAg=
Subject key identifier: 98:A6:C7:BD:10:35:47:0F:98:7C:D2:F2:40:58:9B:C7:99:40:F4:0A
Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43
Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243
Certificate serial: 63040BCB81544B125F7414BC13565A3B2ED26DF2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 19:40:55 +0000
Manifest this update: Tue 12 May 2026 19:35:55 +0000
Manifest next update: Wed 13 May 2026 20:49:55 +0000
Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=)
2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=)
3: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: tTHM2h6LDS5+skof+/AkGRkhAC3VBBSjQAlxIOU0+A8=)
4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl
rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:04:0b:cb:81:54:4b:12:5f:74:14:bc:13:56:5a:3b:2e:d2:6d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243
Validity
Not Before: May 12 19:35:55 2026 GMT
Not After : May 13 20:49:55 2026 GMT
Subject: CN=98A6C7BD1035470F987CD2F240589BC79940F40A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:e9:23:c2:2f:f2:f8:a0:0f:76:61:67:27:
c8:e7:26:ff:82:13:3a:d7:61:85:eb:00:38:79:ea:
90:e7:90:74:c6:66:14:f7:cd:7a:de:4b:4e:8f:bd:
ea:15:7a:ef:31:49:43:84:5b:a6:9e:db:d0:01:c2:
94:5b:93:b6:ff:fc:95:e1:00:4d:46:de:db:fa:37:
3e:6a:68:03:b4:c0:c8:6b:4a:a3:7c:d3:cd:11:c0:
cc:9e:23:a3:ca:90:a9:da:e9:9e:25:c2:98:c7:a2:
35:37:80:dc:7f:ed:fe:82:c4:14:26:86:47:f4:ee:
52:a6:0c:79:eb:3f:aa:1f:06:9e:60:30:fd:18:2a:
7f:2b:0f:b3:ec:6a:f9:1f:29:0c:04:45:a9:a4:86:
8f:3c:50:d5:f8:ab:4c:32:e3:33:0e:4c:17:33:bd:
a5:1d:f8:92:39:d0:8a:77:7f:b8:4b:0f:3c:69:d0:
99:5b:02:76:e8:b6:6e:10:2f:dd:7f:dd:7f:89:8c:
07:c7:be:b0:46:61:42:f3:f0:4b:c0:e1:e9:9e:1e:
63:e3:8e:b1:52:34:e3:af:87:ab:e5:72:53:b7:2c:
2c:02:91:27:1b:ea:2e:9c:3e:ab:bd:7e:3a:60:6a:
a9:f2:0a:4b:ef:73:2a:76:31:87:66:9b:9a:7a:5d:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A6:C7:BD:10:35:47:0F:98:7C:D2:F2:40:58:9B:C7:99:40:F4:0A
X509v3 Authority Key Identifier:
keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3f:f4:fa:53:c8:d4:6a:b4:97:29:c3:07:8d:4d:45:24:e0:
f0:9e:36:bd:4f:99:a7:cd:9d:99:87:ba:ca:b4:99:63:f8:15:
c8:13:26:ed:0e:e8:a8:c5:db:7d:50:54:28:fb:02:84:77:65:
e4:49:11:08:cc:99:e9:19:48:ef:98:1e:0c:12:b4:07:d7:62:
7f:d2:74:0a:4c:4e:f8:a3:08:08:a7:ec:e3:b1:f9:a6:62:8c:
42:a3:d9:1c:18:70:70:9b:fa:3c:0d:a5:db:a0:d7:e1:03:e2:
e0:32:d3:bc:36:ab:5b:37:45:43:fc:af:e5:51:8f:9b:42:c5:
f6:0f:6b:b4:37:c8:ac:3d:10:06:20:15:32:5c:e5:e7:50:1e:
ea:29:89:e6:b1:9c:84:68:d7:2d:7f:2a:ce:78:b2:f8:cb:c1:
71:3c:d5:82:7a:de:19:55:5d:1f:ab:5b:99:e6:b2:4e:3d:ef:
15:c4:ae:4c:c7:5d:06:ff:85:a1:e7:b6:b7:a5:d4:ea:e0:68:
6a:2b:10:25:59:bc:bb:58:24:05:5c:7a:d2:47:1b:a2:33:22:
52:b5:d8:94:24:55:08:38:36:e5:f6:8b:5e:38:dd:b3:d0:30:
55:da:c0:69:77:7c:ea:0d:81:d5:70:37:8c:2f:3c:f3:01:ea:
d0:99:d3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:58 2026 by rpki-client