$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: RLVUcFgA8L5Gxw8TWTOJqTGiTRPefrHiIl1YXCUI86k= Subject key identifier: 41:8C:38:24:04:84:1C:8E:42:11:D2:F7:25:78:94:F9:2A:EC:FD:1D Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 25FA5D3CD47A7963CD29FA9DD574F1380CFB1283 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 10:43:57 +0000 Manifest this update: Thu 24 Sep 2026 10:38:56 +0000 Manifest next update: Fri 25 Sep 2026 12:20:56 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: 8u2NSYr58ryPcN9dbLQW7YbuCFdY+RVnjQqkxDhiDes=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fa:5d:3c:d4:7a:79:63:cd:29:fa:9d:d5:74:f1:38:0c:fb:12:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: Sep 24 10:38:56 2026 GMT Not After : Sep 25 12:20:56 2026 GMT Subject: CN=418C382404841C8E4211D2F7257894F92AECFD1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:19:8c:78:88:27:f4:6a:c3:f4:85:8e:53:6a: 79:12:e6:37:d2:36:6e:48:13:da:aa:1a:d8:01:7c: ba:b6:6b:18:4b:ea:02:ba:20:81:a6:f7:f7:16:3f: 2e:63:97:91:d8:da:7a:bf:eb:d1:82:70:c6:57:d9: 16:4d:0e:95:0e:84:7f:18:cf:14:ca:6c:ae:81:62: 8e:28:5c:59:fd:b2:86:a8:c6:60:7f:a2:54:b4:0e: e7:a7:ef:ac:24:02:22:60:a7:80:eb:9d:ec:34:76: 39:e0:70:db:70:f6:72:75:5a:31:bc:b4:7a:0d:24: fc:d0:be:ff:8d:86:cc:f9:7a:76:63:fc:df:c9:db: fb:6a:ca:c2:32:9c:f4:47:6d:cf:1f:9f:fa:93:bd: 51:53:2a:9c:14:39:eb:63:ea:c7:f3:69:4b:a9:df: 6a:64:c7:d1:02:7e:23:16:77:2c:c8:7c:a6:32:ba: 90:a3:cf:cc:11:4b:56:f0:77:af:ca:c3:0b:a2:e2: 2f:3b:ea:f2:1a:96:0e:1c:8c:f2:06:d9:84:95:c7: 00:fa:9b:83:fa:d5:2a:f1:60:17:ea:ac:d1:e4:e8: 93:a4:93:c5:be:f9:90:54:63:b9:dc:48:17:a9:b5: ec:1a:3b:1b:b8:6b:da:04:a1:65:69:f0:fa:34:44: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8C:38:24:04:84:1C:8E:42:11:D2:F7:25:78:94:F9:2A:EC:FD:1D X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:01:69:0d:79:39:c3:55:12:fa:ca:04:69:74:49:40:63:c0: 9e:97:4d:dc:6e:f8:01:60:fd:c6:e5:e9:8e:b0:9f:70:0a:17: 4c:3b:2a:63:d7:c8:3a:ab:fd:bd:07:8d:f0:73:af:ef:a6:e4: 64:9d:54:58:11:44:b5:c8:03:17:43:98:1a:b7:39:a7:f7:d5: 01:51:57:31:05:ef:2a:4e:d4:13:28:29:a4:23:2d:6c:d8:66: 16:88:08:f1:87:55:5c:14:1c:41:a2:a3:78:27:69:bb:3a:19: 0f:62:2b:ca:63:21:60:58:55:0f:74:69:cb:46:84:2d:36:1d: 16:2a:e4:57:33:98:f5:40:1a:f8:88:0c:82:b6:27:a6:b0:c4: 65:2e:2c:b0:93:f6:01:45:2a:49:ac:04:db:64:21:97:bf:f0: ea:48:54:8c:ff:93:9e:b4:87:d7:b7:1a:aa:61:19:bc:cc:b2: cc:11:c6:0e:c6:a7:f9:97:2f:9e:46:4b:c9:2f:1e:44:61:e6: 22:61:bf:18:09:6f:d8:f8:74:16:1a:50:10:b7:37:67:65:d9: 5e:48:7d:5f:f2:c3:2c:24:0a:bd:fa:c6:f2:b6:23:8c:94:d2: a1:c4:be:d5:04:85:dd:5b:53:dd:1c:94:20:04:6a:7f:11:30: 98:df:72:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfpdPNR6eWPNKfqd1XTxOAz7EoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA5MjQxMDM4NTZaFw0yNjA5MjUxMjIwNTZaMDMxMTAvBgNV BAMTKDQxOEMzODI0MDQ4NDFDOEU0MjExRDJGNzI1Nzg5NEY5MkFFQ0ZEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMGYx4iCf0asP0hY5TankS5jfS Nm5IE9qqGtgBfLq2axhL6gK6IIGm9/cWPy5jl5HY2nq/69GCcMZX2RZNDpUOhH8Y zxTKbK6BYo4oXFn9soaoxmB/olS0Duen76wkAiJgp4Drnew0djngcNtw9nJ1WjG8 tHoNJPzQvv+Nhsz5enZj/N/J2/tqysIynPRHbc8fn/qTvVFTKpwUOetj6sfzaUup 32pkx9ECfiMWdyzIfKYyupCjz8wRS1bwd6/Kwwui4i876vIalg4cjPIG2YSVxwD6 m4P61SrxYBfqrNHk6JOkk8W++ZBUY7ncSBeptewaOxu4a9oEoWVp8Po0RDE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYw4JASEHI5CEdL3JXiU+Srs/R0wHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsBaQ15OcNVEvrKBGl0SUBjwJ6XTdxu+AFg /cbl6Y6wn3AKF0w7KmPXyDqr/b0HjfBzr++m5GSdVFgRRLXIAxdDmBq3Oaf31QFR VzEF7ypO1BMoKaQjLWzYZhaICPGHVVwUHEGio3gnabs6GQ9iK8pjIWBYVQ90actG hC02HRYq5FczmPVAGviIDIK2J6awxGUuLLCT9gFFKkmsBNtkIZe/8OpIVIz/k560 h9e3GqphGbzMsswRxg7Gp/mXL55GS8kvHkRh5iJhvxgJb9j4dBYaUBC3N2dl2V5I fV/ywywkCr36xvK2I4yU0qHEvtUEhd1bU90clCAEan8RMJjfcvs= -----END CERTIFICATE-----Generated at Thu Sep 24 13:00:11 2026 by rpki-client