$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: SXykLsx4h3+1WppXHL0UJUv5lDiZTtYasemDA+kFUBw= Subject key identifier: 89:67:7B:BE:EC:94:09:96:B7:14:03:56:34:EC:CC:9B:18:9A:F4:01 Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 36CABE5FCE81B6065DD37F46C2036DADEA15B2D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:56:37 +0000 Manifest this update: Fri 24 Jul 2026 01:51:37 +0000 Manifest next update: Sat 25 Jul 2026 04:56:37 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: pbsydvNzKe5L1aG9ApxO23gLXldIPkvz8VLzJ5i6iqY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ca:be:5f:ce:81:b6:06:5d:d3:7f:46:c2:03:6d:ad:ea:15:b2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: Jul 24 01:51:37 2026 GMT Not After : Jul 25 04:56:37 2026 GMT Subject: CN=89677BBEEC940996B714035634ECCC9B189AF401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:0d:ef:a8:66:0a:13:69:53:8a:13:e7:97: c5:76:62:1a:b3:99:32:cd:20:9e:b2:ed:cc:f9:53: 18:82:a3:57:6f:33:aa:63:31:66:6d:99:32:3b:14: 82:68:b3:9d:df:47:b1:ac:02:84:8f:d6:c7:75:9b: 88:ce:15:63:7d:8b:88:89:28:c1:3e:0b:10:a3:bb: c6:1f:bd:66:84:f2:48:d0:51:74:9c:7e:4b:29:c6: a6:85:5c:52:24:a3:2a:78:56:89:14:b0:92:b9:3a: 47:6a:b7:e8:f3:5a:ca:de:63:08:33:e2:dc:64:4e: 7d:f7:ae:af:f9:e0:51:3f:3b:3e:ea:7c:1a:fd:5d: e3:e2:d8:2b:c4:2e:36:d0:03:a1:88:f9:8f:a0:95: 75:0c:41:36:49:03:02:4b:66:d3:e4:33:7d:8d:a9: 2c:d8:af:90:d1:88:5c:95:49:96:fd:21:14:d1:1c: 52:43:5b:bf:04:7b:0f:54:59:c0:59:95:8a:74:b9: 87:c3:6b:96:c5:05:ad:e6:47:94:2c:28:b4:d6:d2: 9a:3e:c1:29:52:93:d3:b6:94:6a:99:4a:6e:5a:92: 38:47:40:7d:06:a9:73:fd:cf:68:f3:8e:ac:64:56: 51:26:7a:03:c0:be:e9:04:31:86:0b:be:d7:84:ac: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:67:7B:BE:EC:94:09:96:B7:14:03:56:34:EC:CC:9B:18:9A:F4:01 X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:58:1d:d7:ba:27:ae:29:83:f4:e3:fb:45:9c:b8:fd:97:37: 8e:88:85:67:d0:81:99:bd:76:1e:e2:68:87:a6:26:fc:88:0e: 01:c4:51:99:00:bb:27:f1:ff:0b:6c:8f:96:20:35:c5:db:2c: 65:54:1c:b2:19:92:07:7d:ac:a6:41:e1:28:17:f6:6f:ff:41: e5:cb:a2:88:93:f1:8f:3b:80:e7:52:d8:db:ff:95:24:41:e4: c2:4f:aa:65:d6:6a:69:be:f7:8b:8f:c1:3c:47:f6:3d:cf:1b: 7d:c2:c5:98:e9:2e:8d:7d:e5:90:96:ed:d3:6b:0d:a7:6b:2b: 2d:04:ab:85:bb:df:80:df:87:e4:28:2a:34:15:b4:87:b8:23: 08:7d:59:7c:54:14:1a:49:f9:ee:50:e6:13:78:41:a3:4d:aa: 2c:2d:db:b5:1e:5f:ef:22:93:0c:a2:27:26:47:b7:93:7c:45: a0:08:56:75:de:24:e6:38:01:b6:e6:b0:72:2f:40:19:d4:a9: c8:84:8b:95:7a:20:12:a6:79:65:ff:76:57:85:17:55:5c:89: 60:20:91:a9:ea:b9:47:9d:3a:7a:90:0c:78:56:da:cd:6d:1e: ec:15:2e:07:9d:99:59:9f:b1:c9:05:f7:f7:ce:e5:00:5c:bb: 45:ad:78:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsq+X86BtgZd039GwgNtreoVstYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA3MjQwMTUxMzdaFw0yNjA3MjUwNDU2MzdaMDMxMTAvBgNV BAMTKDg5Njc3QkJFRUM5NDA5OTZCNzE0MDM1NjM0RUNDQzlCMTg5QUY0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yA3vqGYKE2lTihPnl8V2Yhqz mTLNIJ6y7cz5UxiCo1dvM6pjMWZtmTI7FIJos53fR7GsAoSP1sd1m4jOFWN9i4iJ KME+CxCju8YfvWaE8kjQUXScfkspxqaFXFIkoyp4VokUsJK5Okdqt+jzWsreYwgz 4txkTn33rq/54FE/Oz7qfBr9XePi2CvELjbQA6GI+Y+glXUMQTZJAwJLZtPkM32N qSzYr5DRiFyVSZb9IRTRHFJDW78Eew9UWcBZlYp0uYfDa5bFBa3mR5QsKLTW0po+ wSlSk9O2lGqZSm5akjhHQH0GqXP9z2jzjqxkVlEmegPAvukEMYYLvteErKLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiWd7vuyUCZa3FANWNOzMmxia9AEwHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtYHde6J64pg/Tj+0WcuP2XN46IhWfQgZm9 dh7iaIemJvyIDgHEUZkAuyfx/wtsj5YgNcXbLGVUHLIZkgd9rKZB4SgX9m//QeXL ooiT8Y87gOdS2Nv/lSRB5MJPqmXWamm+94uPwTxH9j3PG33CxZjpLo195ZCW7dNr DadrKy0Eq4W734Dfh+QoKjQVtIe4Iwh9WXxUFBpJ+e5Q5hN4QaNNqiwt27UeX+8i kwyiJyZHt5N8RaAIVnXeJOY4AbbmsHIvQBnUqciEi5V6IBKmeWX/dleFF1VciWAg kanquUedOnqQDHhW2s1tHuwVLgedmVmfsckF9/fO5QBcu0WteJY= -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:24 2026 by rpki-client