$ rpki-client -vvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json) Hash identifier: GAo0b//KD7YNiw1sUdOXVK6D5loR4sfrdybTQEUcCqs= Subject key identifier: 6A:0F:7D:BC:ED:36:09:1E:80:0A:E1:8A:D2:D7:89:17:8E:FC:3D:FC Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Certificate serial: 66E39C895F8ACDE68F957784D8003A46EAAD0EF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft Manifest number: 37 Signing time: Fri 12 Jun 2026 10:07:46 +0000 Manifest this update: Fri 12 Jun 2026 10:02:46 +0000 Manifest next update: Sat 13 Jun 2026 13:15:46 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=) 2: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: c+MC3qYG+ZFQDMBECVslEJ4HBHlgUdBJQbOIQMLpQuc=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e3:9c:89:5f:8a:cd:e6:8f:95:77:84:d8:00:3a:46:ea:ad:0e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Validity Not Before: Jun 12 10:02:46 2026 GMT Not After : Jun 13 13:15:46 2026 GMT Subject: CN=6A0F7DBCED36091E800AE18AD2D789178EFC3DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:5b:28:a1:44:2d:1f:d6:ad:1c:67:4b:1a: c2:e4:82:3f:f3:9a:73:00:c0:d0:6a:51:3c:0b:72: b6:88:a7:b2:d8:62:0f:8f:e6:9d:b0:f2:f6:15:33: f9:71:b9:0b:6f:a4:47:45:39:f2:1d:a0:68:1b:79: 77:a5:2b:37:ff:ce:bd:ee:eb:a8:b9:e5:43:ee:2b: 0c:35:95:d9:7d:74:b1:75:91:dd:6e:79:dd:fc:73: 55:99:16:c2:12:39:17:e4:26:e7:ff:74:e1:d2:72: f9:19:6a:20:44:88:c4:16:9f:14:07:81:f2:c5:17: b2:8d:97:db:4f:8c:7e:3d:3e:0e:9d:e2:24:90:2c: 98:c1:dc:f0:f2:52:bf:dd:f6:82:4d:0a:b0:37:8e: c0:86:56:63:4a:1c:90:a6:33:2b:4f:96:b4:93:22: 23:60:83:61:9e:ab:d3:21:12:03:0a:ce:90:63:6c: 43:80:b1:9f:68:f2:35:bb:25:53:3e:90:0a:33:5d: 0b:d1:02:a3:e0:be:0b:09:04:17:b0:aa:35:8f:0c: c4:fe:f0:ce:5f:b7:42:1f:8c:36:92:99:5a:a5:3b: d1:70:96:ac:0f:2c:74:1d:51:5a:50:17:0c:d4:9c: 2b:7b:f8:68:b8:57:b4:3b:87:9d:f5:dd:f8:24:3c: 0e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:7D:BC:ED:36:09:1E:80:0A:E1:8A:D2:D7:89:17:8E:FC:3D:FC X509v3 Authority Key Identifier: keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a2:69:8a:6b:5c:2a:81:37:1a:56:35:f6:fb:e3:60:83:80: 3c:25:86:32:e6:af:7a:ac:60:e9:29:06:bc:db:3d:36:8a:46: 0d:5b:b7:9f:08:4b:71:b4:80:93:ef:b5:ff:00:c2:54:fc:aa: be:52:a1:44:41:0f:6c:97:20:d1:48:0c:9d:40:37:23:46:20: fa:88:5f:6a:f6:46:b8:36:de:a5:3b:1e:8f:bd:56:b4:cc:f3: 49:11:98:28:03:63:8d:a7:f9:6a:e3:e6:b3:8d:61:2d:26:9d: 57:8c:ab:6f:0b:6e:44:23:b6:59:fd:a2:19:bc:28:bc:b5:b3: b8:33:af:72:f2:27:fd:6a:37:65:4d:8a:1b:19:3a:fc:e8:ca: 29:d9:d6:be:35:a2:ae:96:f7:b5:86:d5:f7:b2:e1:49:7b:49: 33:0c:a7:be:38:1d:38:3b:76:37:53:39:61:a4:86:c1:3c:7b: 41:ed:b8:fd:bd:03:0e:10:4f:b3:43:d0:f4:3c:14:c2:e4:76: 7e:f7:cf:07:ea:29:e6:a7:27:d8:ac:94:27:bb:3e:95:e9:6a: 95:ed:78:8b:45:92:8b:88:4f:30:0b:85:e9:f6:80:89:44:f8: ae:b7:3e:a1:27:08:ad:e6:b8:87:5b:e8:92:b8:cf:37:ac:74: 4d:56:dd:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZuOciV+KzeaPlXeE2AA6RuqtDvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdC MkRCRjI0MzAeFw0yNjA2MTIxMDAyNDZaFw0yNjA2MTMxMzE1NDZaMDMxMTAvBgNV BAMTKDZBMEY3REJDRUQzNjA5MUU4MDBBRTE4QUQyRDc4OTE3OEVGQzNERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2fVsooUQtH9atHGdLGsLkgj/z mnMAwNBqUTwLcraIp7LYYg+P5p2w8vYVM/lxuQtvpEdFOfIdoGgbeXelKzf/zr3u 66i55UPuKww1ldl9dLF1kd1ued38c1WZFsISORfkJuf/dOHScvkZaiBEiMQWnxQH gfLFF7KNl9tPjH49Pg6d4iSQLJjB3PDyUr/d9oJNCrA3jsCGVmNKHJCmMytPlrST IiNgg2Geq9MhEgMKzpBjbEOAsZ9o8jW7JVM+kAozXQvRAqPgvgsJBBewqjWPDMT+ 8M5ft0IfjDaSmVqlO9FwlqwPLHQdUVpQFwzUnCt7+Gi4V7Q7h5313fgkPA5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUag99vO02CR6ACuGK0teJF478PfwwHwYDVR0j BBgwFoAUuru2L017B2/Ky/+BBybO97Lb8kMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYzNWE0NTEtYzMwNC00NWY1LWI3ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0 RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdCMkRCRjI0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCQjYyRjREN0IwNzZGQ0FDQkZGODEwNzI2Q0VGN0IyREJG MjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNF RjdCMkRCRjI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKiaYprXCqBNxpWNfb742CDgDwlhjLmr3qs YOkpBrzbPTaKRg1bt58IS3G0gJPvtf8AwlT8qr5SoURBD2yXINFIDJ1ANyNGIPqI X2r2Rrg23qU7Ho+9VrTM80kRmCgDY42n+Wrj5rONYS0mnVeMq28LbkQjtln9ohm8 KLy1s7gzr3LyJ/1qN2VNihsZOvzoyinZ1r41oq6W97WG1fey4Ul7STMMp744HTg7 djdTOWGkhsE8e0HtuP29Aw4QT7ND0PQ8FMLkdn73zwfqKeanJ9islCe7PpXpapXt eItFkouITzALhen2gIlE+K63PqEnCK3muIdb6JK4zzesdE1W3SY= -----END CERTIFICATE-----Generated at Fri Jun 12 14:36:31 2026 by rpki-client