$ rpki-client -vvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: WJS3dRPCpYawPREF4JZuevUm5QBnvnalh+qpN1xjW/M= Subject key identifier: 48:8D:5F:20:C1:0A:BB:5E:DA:F3:85:51:59:64:1C:47:31:E7:3F:F0 Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 278F33358362A1297E0C6357B5C8DB7B661DC016 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 14:58:17 +0000 Manifest this update: Thu 23 Jul 2026 14:53:17 +0000 Manifest next update: Fri 24 Jul 2026 15:52:17 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: cadz8f7r3IJGv7wDseY07/mPbECH8qxnHTXL/WWlkk0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8f:33:35:83:62:a1:29:7e:0c:63:57:b5:c8:db:7b:66:1d:c0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: Jul 23 14:53:17 2026 GMT Not After : Jul 24 15:52:17 2026 GMT Subject: CN=488D5F20C10ABB5EDAF3855159641C4731E73FF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:7a:4d:ab:f4:01:76:45:9c:f6:61:59:c4: 62:4c:c7:91:56:83:41:9f:9d:ae:6a:5b:e4:4e:4f: 8a:ef:a8:03:e2:2c:88:37:22:c7:00:55:cd:2a:c1: 61:ce:c2:6a:58:ec:19:61:1f:75:1d:29:5d:c0:23: fb:07:2b:cb:fc:cd:3a:5e:35:02:bc:3a:d2:6e:19: 0e:f8:83:64:ae:de:ef:37:62:74:58:9d:eb:48:7d: 05:cc:e3:3e:75:f6:08:34:50:c4:80:6b:98:e6:5e: c9:2f:95:a8:22:6d:8a:97:e5:49:f1:b5:1e:37:db: 9a:a8:ae:d9:d1:40:b3:2d:59:f1:47:6f:f3:38:ab: 34:c7:9a:36:d9:14:7f:be:a8:4f:9c:73:27:71:1f: 30:29:16:d4:2d:c5:c6:d2:ae:ba:93:c5:7c:18:cd: 62:a1:1d:97:f7:04:5d:8f:d2:b4:08:93:0e:75:f6: 59:6a:ba:89:a9:5c:73:da:69:58:75:a8:5a:9c:aa: 03:d8:55:7f:df:e6:a4:1a:ec:36:8e:68:6e:20:02: e8:b0:f6:69:0a:17:60:f1:84:25:e7:aa:f7:a4:32: fb:2a:6d:7c:57:6e:5f:0f:28:b8:49:c1:e0:6e:6b: ec:3e:d9:2f:24:cd:5e:b3:8b:a2:85:68:ee:79:95: f4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:5F:20:C1:0A:BB:5E:DA:F3:85:51:59:64:1C:47:31:E7:3F:F0 X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3b:e8:60:86:95:38:09:c5:88:63:71:e7:2c:92:88:b0:2b: 8b:eb:78:eb:ca:93:3c:c2:e5:f9:07:73:46:78:86:9e:84:79: 79:9e:5d:57:af:71:74:94:74:e8:6a:1a:3a:ee:02:4a:1b:4c: b5:b9:b2:df:4f:99:01:af:8d:8a:f3:0a:7d:0b:99:a5:7f:72: a9:f0:2e:53:04:3d:d3:a5:ea:2e:9f:df:a3:5c:e6:5f:d7:d9: eb:e7:6a:20:21:80:7d:d0:b9:dd:ae:ca:7a:be:2d:08:8a:7b: d0:40:ed:44:38:c0:6a:92:89:65:f9:31:37:5f:c9:89:cf:0c: 43:2f:e8:69:82:e1:61:ac:28:a7:d1:00:40:06:ce:d1:4e:85: ec:46:dd:82:b9:34:c7:70:e9:0f:f9:92:98:8f:96:ca:0c:9f: 17:b0:50:aa:70:d6:97:e7:ad:02:96:48:08:73:b1:38:b2:a5: 37:26:eb:78:51:88:62:63:b9:62:c6:f2:8b:89:ad:61:36:be: df:26:f7:e3:34:59:95:6f:81:bf:64:71:d1:12:ff:34:5a:fa: f3:75:8f:68:ce:34:85:f0:e6:d2:a3:7e:d5:e6:16:4e:5f:a9: ac:57:c0:78:5b:7c:da:fd:38:d1:0e:9d:99:b9:2c:61:87:05: ba:dd:54:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ48zNYNioSl+DGNXtcjbe2YdwBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA3MjMxNDUzMTdaFw0yNjA3MjQxNTUyMTdaMDMxMTAvBgNV BAMTKDQ4OEQ1RjIwQzEwQUJCNUVEQUYzODU1MTU5NjQxQzQ3MzFFNzNGRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsT3pNq/QBdkWc9mFZxGJMx5FW g0Gfna5qW+ROT4rvqAPiLIg3IscAVc0qwWHOwmpY7BlhH3UdKV3AI/sHK8v8zTpe NQK8OtJuGQ74g2Su3u83YnRYnetIfQXM4z519gg0UMSAa5jmXskvlagibYqX5Unx tR4325qortnRQLMtWfFHb/M4qzTHmjbZFH++qE+ccydxHzApFtQtxcbSrrqTxXwY zWKhHZf3BF2P0rQIkw519llquompXHPaaVh1qFqcqgPYVX/f5qQa7DaOaG4gAuiw 9mkKF2DxhCXnqvekMvsqbXxXbl8PKLhJweBua+w+2S8kzV6zi6KFaO55lfQJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSI1fIMEKu17a84VRWWQcRzHnP/AwHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH076GCGlTgJxYhjcecskoiwK4vreOvKkzzC 5fkHc0Z4hp6EeXmeXVevcXSUdOhqGjruAkobTLW5st9PmQGvjYrzCn0LmaV/cqnw LlMEPdOl6i6f36Nc5l/X2evnaiAhgH3Qud2uynq+LQiKe9BA7UQ4wGqSiWX5MTdf yYnPDEMv6GmC4WGsKKfRAEAGztFOhexG3YK5NMdw6Q/5kpiPlsoMnxewUKpw1pfn rQKWSAhzsTiypTcm63hRiGJjuWLG8ouJrWE2vt8m9+M0WZVvgb9kcdES/zRa+vN1 j2jONIXw5tKjftXmFk5fqaxXwHhbfNr9ONEOnZm5LGGHBbrdVAU= -----END CERTIFICATE-----Generated at Fri Jul 24 07:36:16 2026 by rpki-client