$ rpki-client -vvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json) Hash identifier: 7uo11kGAkwlhlKVM/aSHmx4GSBvta9Sn4VrFBAqOoK0= Subject key identifier: 5F:72:19:3C:B4:E8:4C:D1:2D:3A:31:4A:95:66:72:0D:B2:C4:A8:4C Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Certificate serial: 12E2957A4380079664E65085471C75508A03404D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft Manifest number: 73 Signing time: Mon 27 Jul 2026 23:06:06 +0000 Manifest this update: Mon 27 Jul 2026 23:01:06 +0000 Manifest next update: Wed 29 Jul 2026 02:51:06 +0000 Files and hashes: 1: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: Ti/EQ7Grcm2n4sFpsws9KxFSNfHiT2acJAOHAiTn6rA=) 2: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=) 4: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 23:59:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e2:95:7a:43:80:07:96:64:e6:50:85:47:1c:75:50:8a:03:40:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Validity Not Before: Jul 27 23:01:06 2026 GMT Not After : Jul 29 02:51:06 2026 GMT Subject: CN=5F72193CB4E84CD12D3A314A9566720DB2C4A84C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:b1:0d:23:7e:32:00:3c:b6:2c:8f:e5:cf: 56:f7:45:24:8d:b4:aa:2d:4b:f5:36:e4:d2:af:60: d5:73:1e:97:de:6b:91:fd:90:bc:fe:f3:f3:32:b4: ae:9b:1e:7c:6d:29:84:84:c0:c7:49:f4:18:a1:e8: 0a:40:fb:12:2a:d7:c5:45:23:67:2c:94:3b:4b:41: 84:7e:19:51:6f:26:62:37:65:29:e6:98:93:a9:43: 73:96:bb:21:02:9c:be:40:a1:32:b4:39:e6:5e:91: 72:6f:93:fc:56:40:f6:70:c4:d7:9f:f6:32:f5:53: ff:f7:0e:6e:a0:93:f5:fc:4b:5f:b9:c3:a7:fe:4b: 2f:0a:12:47:54:37:32:d0:65:a2:81:3b:a8:05:a4: 90:2e:b4:e2:16:61:26:49:91:c9:b2:39:65:21:be: 47:d8:c6:04:48:1b:c2:ab:fa:a0:b3:aa:97:e2:df: 18:b3:aa:4b:d7:ea:18:60:72:20:e3:bb:0e:f1:0f: f3:16:c5:3a:26:8e:ca:77:d4:13:f0:c9:87:07:79: 6f:6f:c6:ad:7d:a7:88:f1:fc:e9:01:fc:51:09:47: fa:14:a9:a9:14:b8:e2:99:9f:9a:88:05:1f:3c:62: ad:ed:3c:eb:29:02:4c:8a:96:ac:cb:10:93:c8:51: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:72:19:3C:B4:E8:4C:D1:2D:3A:31:4A:95:66:72:0D:B2:C4:A8:4C X509v3 Authority Key Identifier: keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:31:4d:4a:3e:fd:9a:df:b8:02:dd:a1:d0:f9:42:0f:fa:62: 6d:b7:b5:79:e9:ea:60:4a:d3:7c:d5:18:84:0b:d6:42:32:2c: 50:29:c4:00:25:64:50:dc:b5:29:f7:96:54:87:12:b5:aa:9f: 38:1d:44:c3:0a:d8:57:04:9b:b5:28:f4:58:1f:47:33:6f:a9: 30:8c:9f:80:1e:5a:c1:b3:34:e0:7c:2f:fa:08:7a:7a:3d:68: aa:6d:f6:74:b4:f4:e4:8c:e4:3e:63:d0:b3:62:c6:09:16:d8: 76:7e:61:4e:4e:24:6e:92:52:a9:a8:5c:96:eb:4e:02:41:d6: 01:d0:43:68:32:1e:0e:f9:d4:df:ae:66:bc:5d:80:5a:de:33: ac:7f:47:a8:77:49:5f:3e:e3:77:7e:62:e4:e4:de:ba:b3:cb: 70:3e:c9:32:f6:96:58:e1:e0:5c:14:84:f6:8e:85:b6:40:32: 70:cc:26:b2:f2:0f:54:9b:fc:93:3a:45:c4:71:cb:5c:02:d0: ba:6b:12:14:24:a8:96:c7:d2:d6:4c:b1:24:46:6f:ad:59:c2: 4f:91:d6:52:59:c8:fc:82:5c:6e:e3:aa:d3:03:de:2b:17:37: 22:5a:fb:a9:64:ee:d6:73:63:ee:0c:53:59:ab:e1:06:45:ba: 78:1b:19:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuKVekOAB5Zk5lCFRxx1UIoDQE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdC MkRCRjI0MzAeFw0yNjA3MjcyMzAxMDZaFw0yNjA3MjkwMjUxMDZaMDMxMTAvBgNV BAMTKDVGNzIxOTNDQjRFODRDRDEyRDNBMzE0QTk1NjY3MjBEQjJDNEE4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW7ENI34yADy2LI/lz1b3RSSN tKotS/U25NKvYNVzHpfea5H9kLz+8/MytK6bHnxtKYSEwMdJ9Bih6ApA+xIq18VF I2cslDtLQYR+GVFvJmI3ZSnmmJOpQ3OWuyECnL5AoTK0OeZekXJvk/xWQPZwxNef 9jL1U//3Dm6gk/X8S1+5w6f+Sy8KEkdUNzLQZaKBO6gFpJAutOIWYSZJkcmyOWUh vkfYxgRIG8Kr+qCzqpfi3xizqkvX6hhgciDjuw7xD/MWxTomjsp31BPwyYcHeW9v xq19p4jx/OkB/FEJR/oUqakUuOKZn5qIBR88Yq3tPOspAkyKlqzLEJPIUQC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX3IZPLToTNEtOjFKlWZyDbLEqEwwHwYDVR0j BBgwFoAUuru2L017B2/Ky/+BBybO97Lb8kMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYzNWE0NTEtYzMwNC00NWY1LWI3ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0 RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdCMkRCRjI0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCQjYyRjREN0IwNzZGQ0FDQkZGODEwNzI2Q0VGN0IyREJG MjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNF RjdCMkRCRjI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0xTUo+/ZrfuALdodD5Qg/6Ym23tXnp6mBK 03zVGIQL1kIyLFApxAAlZFDctSn3llSHErWqnzgdRMMK2FcEm7Uo9FgfRzNvqTCM n4AeWsGzNOB8L/oIeno9aKpt9nS09OSM5D5j0LNixgkW2HZ+YU5OJG6SUqmoXJbr TgJB1gHQQ2gyHg751N+uZrxdgFreM6x/R6h3SV8+43d+YuTk3rqzy3A+yTL2lljh 4FwUhPaOhbZAMnDMJrLyD1Sb/JM6RcRxy1wC0LprEhQkqJbH0tZMsSRGb61Zwk+R 1lJZyPyCXG7jqtMD3isXNyJa+6lk7tZzY+4MU1mr4QZFungbGX8= -----END CERTIFICATE-----Generated at Tue Jul 28 02:47:00 2026 by rpki-client