$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: nSPLPTABR/aPCYHlZgpux9/su6qV26e7EFcG3VbmXik= Subject key identifier: 04:3F:7F:18:A3:6C:3E:8B:2A:F5:16:35:EA:EC:13:52:2C:EB:97:8C Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 4EEA6350EE8CB2152C526D50F2F263BBD1DF6033 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: BF Signing time: Wed 23 Sep 2026 05:02:13 +0000 Manifest this update: Wed 23 Sep 2026 04:57:13 +0000 Manifest next update: Thu 24 Sep 2026 05:09:13 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: whanMHuepjzgJTJNBx+xJRSo33jZyQxXigklJwNjotA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ea:63:50:ee:8c:b2:15:2c:52:6d:50:f2:f2:63:bb:d1:df:60:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: Sep 23 04:57:13 2026 GMT Not After : Sep 24 05:09:13 2026 GMT Subject: CN=043F7F18A36C3E8B2AF51635EAEC13522CEB978C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:11:cb:87:d1:02:a0:d3:ac:f6:52:b6:d0:5d: 06:fa:a5:23:79:71:4e:fb:6e:b5:c3:db:30:0c:85: b9:45:c0:c0:9d:70:e5:75:15:31:1b:99:69:70:ba: 57:a2:66:39:4f:54:44:22:75:0f:21:17:b9:5d:49: 6b:b6:4b:3a:ca:02:b1:3d:fd:a2:30:05:7a:24:89: d7:ee:3e:92:95:6d:93:0f:17:3b:e3:c7:e0:c8:27: 4c:22:c3:a8:f3:78:16:6b:1c:4d:d7:5b:43:b6:ca: 8a:f5:c1:86:39:ab:98:8b:b7:ef:e4:37:27:88:9d: 71:62:46:e9:c4:46:da:d9:bb:2c:da:9a:90:8b:0b: 97:d6:f6:c0:ca:2f:c5:52:60:8f:a1:dc:a4:1a:93: 2b:31:9d:15:d0:9c:3c:b6:45:c5:bd:2e:95:8c:f5: 0e:fd:38:00:cb:d4:aa:d1:5b:57:b0:83:18:cf:43: 18:ac:36:ad:91:66:c5:d2:2c:db:c3:87:7f:a7:88: 5b:5a:6a:77:3a:32:67:e3:18:28:5a:6f:3f:70:47: 1d:02:72:c0:59:d9:5c:ee:59:63:ba:27:9e:70:cf: 67:58:e4:71:29:d5:4f:d4:36:96:6f:fe:fb:40:96: 9e:44:c5:eb:b3:1b:55:d7:81:81:12:3c:8b:67:88: 18:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3F:7F:18:A3:6C:3E:8B:2A:F5:16:35:EA:EC:13:52:2C:EB:97:8C X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:94:a0:f4:ae:bc:5f:23:80:58:17:32:b7:5c:e3:23:4a:32: 6f:5f:96:9f:41:51:bd:dc:be:a3:a0:1f:49:aa:74:4a:92:c7: b3:69:93:4f:37:03:ce:b1:14:11:82:07:f8:8c:ae:0f:32:6f: 4d:7f:9e:10:ac:62:53:db:3c:24:07:ad:bd:f4:a1:3e:7d:b9: 60:41:01:73:dd:d5:a5:7e:21:3b:c7:30:b7:21:ef:8d:be:c4: cb:97:bf:ab:7c:59:39:2f:ba:af:1c:6c:20:56:eb:bd:45:9d: 9a:41:dc:fa:0b:74:a8:d5:56:38:6e:b8:02:51:b4:46:26:2f: 61:a2:4d:52:dc:f2:d6:4a:85:fc:3b:16:a2:02:4f:a2:5a:bb: 67:db:63:89:0e:a8:31:cf:f2:6f:c2:c6:04:9a:84:d2:1d:8a: ce:0b:9e:fd:27:8b:e9:0e:b8:10:fd:ae:21:35:41:5e:44:a0: 7c:2e:9a:19:15:3d:cb:92:de:7e:8f:b2:9b:9f:db:92:68:7a: 20:df:06:ff:0d:c2:6a:0a:ad:9d:b3:7e:73:6b:db:2c:e5:71: e4:95:40:49:26:dc:a6:91:43:46:e8:4f:68:e7:34:1d:47:ac: 37:58:15:0d:7f:ee:e6:05:4b:88:77:48:59:8c:52:b9:16:a0: 66:9a:9b:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTupjUO6MshUsUm1Q8vJju9HfYDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA5MjMwNDU3MTNaFw0yNjA5MjQwNTA5MTNaMDMxMTAvBgNV BAMTKDA0M0Y3RjE4QTM2QzNFOEIyQUY1MTYzNUVBRUMxMzUyMkNFQjk3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLEcuH0QKg06z2UrbQXQb6pSN5 cU77brXD2zAMhblFwMCdcOV1FTEbmWlwuleiZjlPVEQidQ8hF7ldSWu2SzrKArE9 /aIwBXokidfuPpKVbZMPFzvjx+DIJ0wiw6jzeBZrHE3XW0O2yor1wYY5q5iLt+/k NyeInXFiRunERtrZuyzampCLC5fW9sDKL8VSYI+h3KQakysxnRXQnDy2RcW9LpWM 9Q79OADL1KrRW1ewgxjPQxisNq2RZsXSLNvDh3+niFtaanc6MmfjGChabz9wRx0C csBZ2VzuWWO6J55wz2dY5HEp1U/UNpZv/vtAlp5ExeuzG1XXgYESPItniBgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBD9/GKNsPosq9RY16uwTUizrl4wwHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWUoPSuvF8jgFgXMrdc4yNKMm9flp9BUb3c vqOgH0mqdEqSx7Npk083A86xFBGCB/iMrg8yb01/nhCsYlPbPCQHrb30oT59uWBB AXPd1aV+ITvHMLch742+xMuXv6t8WTkvuq8cbCBW671FnZpB3PoLdKjVVjhuuAJR tEYmL2GiTVLc8tZKhfw7FqICT6Jau2fbY4kOqDHP8m/CxgSahNIdis4Lnv0ni+kO uBD9riE1QV5EoHwumhkVPcuS3n6Pspuf25JoeiDfBv8NwmoKrZ2zfnNr2yzlceSV QEkm3KaRQ0boT2jnNB1HrDdYFQ1/7uYFS4h3SFmMUrkWoGaam7U= -----END CERTIFICATE-----Generated at Wed Sep 23 20:17:57 2026 by rpki-client