$ rpki-client -vvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: ntDtVl/8KzDYPB2Z5lSqcoC50bibqGCbzrunfOmyqUY= Subject key identifier: E8:0D:84:3C:56:B7:80:2F:F5:1C:2E:A6:1E:7F:D2:C4:66:9E:8B:84 Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 22536D6054F1E213E2FE134656BC2DA26D9A971A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: 0D Signing time: Tue 12 May 2026 05:56:42 +0000 Manifest this update: Tue 12 May 2026 05:51:42 +0000 Manifest next update: Wed 13 May 2026 08:08:42 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: OZZiCivPkdjabcT/DF0jV/bpXAjDNhsu9yqgckILwyU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:53:6d:60:54:f1:e2:13:e2:fe:13:46:56:bc:2d:a2:6d:9a:97:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: May 12 05:51:42 2026 GMT Not After : May 13 08:08:42 2026 GMT Subject: CN=E80D843C56B7802FF51C2EA61E7FD2C4669E8B84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:97:b0:3e:1f:6b:5a:7b:e4:8f:b0:d9:0f: ba:e7:7f:3d:23:8e:dc:94:91:9b:c0:4a:2a:78:51: 51:e8:31:77:7c:a5:27:60:0e:99:d1:0e:b7:b0:51: 8e:0a:0c:56:e1:23:23:f4:bd:6f:a5:b4:f1:25:8e: e1:81:65:8c:f0:06:5f:6a:b7:a2:c2:87:51:e5:6e: 84:24:29:39:21:d3:4c:4b:5f:89:16:92:40:63:86: 69:38:a9:d9:8e:97:42:28:f1:38:05:b9:0e:95:63: a0:ed:00:a3:29:66:ec:37:e4:54:f5:68:41:37:86: 6b:00:2e:c8:98:cb:53:94:32:5c:bd:ef:58:62:ea: 50:8c:cc:0b:61:70:e9:fd:fb:3a:34:bc:80:dd:ac: c9:c2:86:bf:5f:ed:d4:ee:5a:2f:91:cb:98:5c:83: 7c:f6:a6:fe:f2:51:88:23:b3:72:a8:78:b7:df:c3: df:6e:44:93:c8:37:69:f1:51:2c:46:a4:e2:67:51: 7d:0f:71:ff:dc:78:00:ec:8f:bb:96:b8:ae:ee:04: 0e:f8:1b:57:f1:3b:df:9b:da:6a:07:9a:22:72:0a: 8e:cf:3b:ae:23:b7:9e:31:02:07:cb:d9:f5:7f:dc: 2d:51:9c:45:0e:45:a3:95:d8:72:4c:41:68:12:05: 10:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0D:84:3C:56:B7:80:2F:F5:1C:2E:A6:1E:7F:D2:C4:66:9E:8B:84 X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:66:e8:ba:28:ad:a1:ff:50:3c:44:b8:ba:aa:66:d0:3a:06: 03:ee:56:38:f8:4d:5b:64:7d:5f:6c:a2:7d:12:dc:9e:5a:d1: 99:99:d9:13:2b:8e:e2:43:77:ea:1b:40:26:d2:98:00:23:ca: aa:5c:ed:ff:0d:03:d5:fb:07:d5:99:29:39:6a:7c:a1:97:8a: 72:e1:20:d0:54:ec:d7:37:2c:ae:ab:4b:17:7f:f7:99:f8:f1: f7:c6:14:42:47:b0:b1:39:0c:d9:bd:b6:de:73:89:67:e6:32: 9a:33:2f:90:03:2a:d1:2e:9e:94:34:3c:3f:c5:93:3c:fb:69: 73:e3:e8:e7:96:73:68:5a:1e:77:b8:ec:19:d3:cb:26:3d:bc: 31:5d:db:be:cd:28:86:d8:93:13:c8:77:d0:86:a1:3a:00:db: 31:bd:0d:0e:dd:6e:62:a6:f3:99:b3:92:af:49:92:95:d8:b2: 0a:48:79:07:a2:ff:f1:10:f8:13:68:a7:ca:37:9e:53:ae:cf: ed:68:9b:53:6d:27:d1:47:59:23:13:09:bb:9d:b5:28:c7:06: 02:be:5e:f2:f2:88:25:23:40:5e:b6:59:13:ed:a8:57:37:c9: de:3f:67:6e:fd:c8:d8:d1:37:49:aa:40:f6:7c:16:b6:f6:15: 57:f7:ca:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlNtYFTx4hPi/hNGVrwtom2alxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA1MTIwNTUxNDJaFw0yNjA1MTMwODA4NDJaMDMxMTAvBgNV BAMTKEU4MEQ4NDNDNTZCNzgwMkZGNTFDMkVBNjFFN0ZEMkM0NjY5RThCODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXJewPh9rWnvkj7DZD7rnfz0j jtyUkZvASip4UVHoMXd8pSdgDpnRDrewUY4KDFbhIyP0vW+ltPEljuGBZYzwBl9q t6LCh1HlboQkKTkh00xLX4kWkkBjhmk4qdmOl0Io8TgFuQ6VY6DtAKMpZuw35FT1 aEE3hmsALsiYy1OUMly971hi6lCMzAthcOn9+zo0vIDdrMnChr9f7dTuWi+Ry5hc g3z2pv7yUYgjs3KoeLffw99uRJPIN2nxUSxGpOJnUX0Pcf/ceADsj7uWuK7uBA74 G1fxO9+b2moHmiJyCo7PO64jt54xAgfL2fV/3C1RnEUORaOV2HJMQWgSBRCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6A2EPFa3gC/1HC6mHn/SxGaei4QwHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJm6LooraH/UDxEuLqqZtA6BgPuVjj4TVtk fV9son0S3J5a0ZmZ2RMrjuJDd+obQCbSmAAjyqpc7f8NA9X7B9WZKTlqfKGXinLh INBU7Nc3LK6rSxd/95n48ffGFEJHsLE5DNm9tt5ziWfmMpozL5ADKtEunpQ0PD/F kzz7aXPj6OeWc2haHne47BnTyyY9vDFd277NKIbYkxPId9CGoToA2zG9DQ7dbmKm 85mzkq9JkpXYsgpIeQei//EQ+BNop8o3nlOuz+1om1NtJ9FHWSMTCbudtSjHBgK+ XvLyiCUjQF62WRPtqFc3yd4/Z279yNjRN0mqQPZ8Frb2FVf3ym4= -----END CERTIFICATE-----Generated at Tue May 12 23:45:50 2026 by rpki-client