$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: TkatVrpJKkVMo6IropLYYF99b8MVFvjWx+yHNwWKY7U= Subject key identifier: AB:44:19:72:AC:13:78:E6:9A:D1:17:1B:2C:05:B5:2F:C2:BF:31:8A Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 2C012EF6528EE2E62A42E69E5CDBD1F1B4AC731F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: 0D Signing time: Tue 12 May 2026 03:48:15 +0000 Manifest this update: Tue 12 May 2026 03:43:15 +0000 Manifest next update: Wed 13 May 2026 06:29:15 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: hFj1DnOT+SlgSjNjydQuzopNRfGwDJRQZzHtLP6ZHU0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:01:2e:f6:52:8e:e2:e6:2a:42:e6:9e:5c:db:d1:f1:b4:ac:73:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: May 12 03:43:15 2026 GMT Not After : May 13 06:29:15 2026 GMT Subject: CN=AB441972AC1378E69AD1171B2C05B52FC2BF318A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:73:16:8c:b6:fe:96:c2:e1:f4:13:95:ea: d3:c9:34:3f:ed:26:c1:6a:ee:8b:56:f7:93:aa:33: eb:a6:ce:a8:98:46:19:8b:b5:df:9b:8d:b2:39:de: 8c:2a:58:97:d1:78:88:5b:1d:2f:9b:df:3c:57:36: 9d:ac:62:0d:ce:99:34:7b:89:a3:71:6d:64:da:66: b3:49:0f:30:56:23:3e:31:8b:d1:64:39:96:ef:9b: 3c:d4:f1:25:63:03:30:73:d2:41:1a:5b:b1:48:e8: 24:30:93:2d:4d:31:4d:2c:75:4d:f7:55:d7:87:8f: af:4c:a9:8c:d3:66:cc:4d:d7:82:79:24:a6:97:86: 0f:c5:74:a3:99:10:7a:19:b4:52:40:6e:39:64:e6: 30:da:15:f4:02:96:97:e2:d0:6e:0c:5a:cb:dd:f3: 64:2e:83:40:9d:77:3d:43:94:ef:46:1f:68:87:5a: 5e:1b:c6:7a:3e:88:7c:16:d1:85:b0:4d:f8:0e:d4: 27:ac:60:ae:7f:b2:1e:84:1e:66:8f:d4:fa:66:78: a7:97:80:1d:0f:d8:0d:0c:b2:88:26:f1:20:ab:d5: d3:71:db:73:5b:e6:70:92:75:45:97:04:71:df:85: a7:f2:23:4f:ec:59:8a:0b:1a:d5:fa:c5:68:72:c1: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:44:19:72:AC:13:78:E6:9A:D1:17:1B:2C:05:B5:2F:C2:BF:31:8A X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2d:d2:d0:9e:7d:1e:1d:26:5f:59:cb:a5:74:2d:9a:a1:1a: 0a:0c:63:cb:a1:8c:69:36:80:21:6a:bb:49:eb:5c:bf:38:14: 65:43:a8:6f:ba:ce:2a:21:1b:4b:6e:4b:3c:59:39:9e:77:06: fd:b0:b2:0c:f1:8f:92:6c:00:a6:eb:2d:b4:29:7a:5a:1c:f3: b5:7e:43:61:a9:43:f9:eb:ec:5f:31:13:96:78:77:8f:1f:79: f9:e5:b9:9f:40:1d:7c:e1:dc:a3:12:21:e0:aa:6a:55:65:8c: ff:e2:6b:f6:80:c7:49:fb:80:04:23:c5:d6:8f:7f:1f:7d:f3: 84:42:7b:8b:9f:61:3a:79:fd:22:ff:30:76:ba:b4:d0:5f:6c: 90:9d:7c:83:38:bd:ab:4b:85:f1:bb:57:97:65:0d:5d:42:a7: 3c:b5:a1:41:ad:46:bb:85:aa:6e:9d:75:e2:02:e1:e4:dc:a2: 11:2d:f7:54:31:1c:df:71:ff:46:7c:0c:fc:b9:78:bb:24:13: 73:bc:be:aa:a5:d3:02:5e:74:20:01:c8:7c:e4:c3:31:c4:96: 07:46:71:7f:45:2f:12:0b:82:f9:bb:ca:f4:36:56:6d:83:5c: 93:aa:08:e3:41:04:f5:ae:cb:18:cc:bd:0a:5c:c6:21:20:a5: f5:fd:d5:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAEu9lKO4uYqQuaeXNvR8bSscx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA1MTIwMzQzMTVaFw0yNjA1MTMwNjI5MTVaMDMxMTAvBgNV BAMTKEFCNDQxOTcyQUMxMzc4RTY5QUQxMTcxQjJDMDVCNTJGQzJCRjMxOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ZXMWjLb+lsLh9BOV6tPJND/t JsFq7otW95OqM+umzqiYRhmLtd+bjbI53owqWJfReIhbHS+b3zxXNp2sYg3OmTR7 iaNxbWTaZrNJDzBWIz4xi9FkOZbvmzzU8SVjAzBz0kEaW7FI6CQwky1NMU0sdU33 VdeHj69MqYzTZsxN14J5JKaXhg/FdKOZEHoZtFJAbjlk5jDaFfQClpfi0G4MWsvd 82Qug0Cddz1DlO9GH2iHWl4bxno+iHwW0YWwTfgO1CesYK5/sh6EHmaP1PpmeKeX gB0P2A0Msogm8SCr1dNx23Nb5nCSdUWXBHHfhafyI0/sWYoLGtX6xWhywbc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq0QZcqwTeOaa0RcbLAW1L8K/MYowHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4t0tCefR4dJl9Zy6V0LZqhGgoMY8uhjGk2 gCFqu0nrXL84FGVDqG+6ziohG0tuSzxZOZ53Bv2wsgzxj5JsAKbrLbQpeloc87V+ Q2GpQ/nr7F8xE5Z4d48fefnluZ9AHXzh3KMSIeCqalVljP/ia/aAx0n7gAQjxdaP fx9984RCe4ufYTp5/SL/MHa6tNBfbJCdfIM4vatLhfG7V5dlDV1Cpzy1oUGtRruF qm6ddeIC4eTcohEt91QxHN9x/0Z8DPy5eLskE3O8vqql0wJedCAByHzkwzHElgdG cX9FLxILgvm7yvQ2Vm2DXJOqCONBBPWuyxjMvQpcxiEgpfX91QY= -----END CERTIFICATE-----Generated at Tue May 12 22:33:19 2026 by rpki-client