$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json) Hash identifier: PTrSEvdZ67psDOnUHsV0kYCIrWBIZCR5s8+j00Ly2Ak= Subject key identifier: 40:83:FD:8E:01:38:84:31:A3:CC:57:69:FB:29:3F:04:28:24:C2:E4 Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Certificate serial: 75BC5A6528230D2D5C313230E11E64EF8F458368 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft Manifest number: AF Signing time: Fri 11 Sep 2026 01:32:54 +0000 Manifest this update: Fri 11 Sep 2026 01:27:54 +0000 Manifest next update: Sat 12 Sep 2026 04:52:54 +0000 Files and hashes: 1: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: rH9uh2o+o8HK4N0kguZY/YUIk9alTj/IQJLS0vySf98=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=) 3: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 04:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bc:5a:65:28:23:0d:2d:5c:31:32:30:e1:1e:64:ef:8f:45:83:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Validity Not Before: Sep 11 01:27:54 2026 GMT Not After : Sep 12 04:52:54 2026 GMT Subject: CN=4083FD8E01388431A3CC5769FB293F042824C2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:10:6c:70:ef:51:cf:9d:c3:99:6e:d8:db: ba:de:cc:4b:0f:56:6f:18:3c:22:5f:64:19:0c:3c: aa:e2:46:0b:e4:11:8f:c3:c4:08:77:4f:8e:56:97: 91:79:d5:98:0a:7e:14:10:12:9e:bd:0a:62:37:97: f0:36:ae:90:cf:52:c2:b5:4b:ab:a4:85:20:8d:0e: a3:50:5f:2c:a2:9e:b1:ca:86:89:29:d7:da:69:79: 61:9f:09:15:d2:18:58:c4:42:3b:b0:7d:21:39:1c: 4c:87:88:47:ea:53:be:ca:f8:14:e0:a3:37:d0:84: 68:04:16:58:1a:3f:94:f8:e5:a1:96:27:f5:43:00: 7c:b6:93:51:05:e4:66:0d:fb:22:a1:73:59:11:3c: 9e:81:1a:6e:65:c1:e2:33:1e:09:a3:cd:91:3c:5b: 3b:fd:9e:0c:5b:6e:75:29:50:7a:69:e1:bd:43:48: bc:ea:44:59:4e:4e:4f:f4:b0:db:70:52:9a:66:95: 32:da:ed:8e:91:59:fa:ab:65:9b:38:d4:3f:2c:dc: 85:ea:16:80:9f:7f:2b:77:9a:28:a0:68:f6:79:10: 59:a1:ad:4d:1d:8c:58:b0:6d:d6:9d:c8:ad:37:94: dc:46:61:bc:89:6a:73:ce:ce:87:9f:86:7d:83:58: a2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:83:FD:8E:01:38:84:31:A3:CC:57:69:FB:29:3F:04:28:24:C2:E4 X509v3 Authority Key Identifier: keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f0:51:a7:18:17:1a:f5:42:6e:07:7f:8e:91:a1:ef:ce:c8: 9e:25:fa:bf:82:1a:d8:bb:02:b0:1b:b0:e9:3a:1d:1b:bf:a4: c1:e1:c3:45:af:a9:72:ec:0c:09:96:9c:02:c7:3c:b4:ea:a8: 95:5f:7c:33:3c:5c:e0:96:fa:72:61:ef:5c:a6:c1:8a:41:51: 85:a5:63:4a:c6:75:4d:ef:31:69:2a:5b:ac:96:9a:ff:83:c0: 94:d7:8d:0a:6e:bf:ca:e5:f7:ee:ff:3d:3a:d2:58:7b:c8:2d: 3d:04:1d:7c:fb:c3:2b:53:04:30:52:ce:3f:ea:52:5d:07:cb: 64:5e:17:41:65:ff:0b:43:9b:05:20:f6:45:28:dd:65:77:74: 3d:db:07:ba:16:b6:bf:8d:ea:d5:69:fd:93:06:ef:cf:0b:6a: 52:4a:6a:20:cd:a7:13:77:c1:e5:b8:e4:d8:0b:9f:18:08:7f: ed:35:af:b7:70:b7:ae:6b:2c:f1:34:19:05:a6:95:56:e6:e8: 80:e2:f4:72:18:e5:a5:77:ae:24:a2:9f:39:bd:87:e8:4e:60: c2:ba:21:dc:00:49:b1:3a:09:48:d0:e3:c5:07:e9:0d:ce:c5: b2:f0:f7:9b:13:a8:b2:f5:fe:e1:11:51:0e:21:53:5a:54:c3: 47:e9:e8:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbxaZSgjDS1cMTIw4R5k749Fg2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdC MkRCRjI0MzAeFw0yNjA5MTEwMTI3NTRaFw0yNjA5MTIwNDUyNTRaMDMxMTAvBgNV BAMTKDQwODNGRDhFMDEzODg0MzFBM0NDNTc2OUZCMjkzRjA0MjgyNEMyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQxBscO9Rz53DmW7Y27rezEsP Vm8YPCJfZBkMPKriRgvkEY/DxAh3T45Wl5F51ZgKfhQQEp69CmI3l/A2rpDPUsK1 S6ukhSCNDqNQXyyinrHKhokp19ppeWGfCRXSGFjEQjuwfSE5HEyHiEfqU77K+BTg ozfQhGgEFlgaP5T45aGWJ/VDAHy2k1EF5GYN+yKhc1kRPJ6BGm5lweIzHgmjzZE8 Wzv9ngxbbnUpUHpp4b1DSLzqRFlOTk/0sNtwUppmlTLa7Y6RWfqrZZs41D8s3IXq FoCffyt3miigaPZ5EFmhrU0djFiwbdadyK03lNxGYbyJanPOzoefhn2DWKJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIP9jgE4hDGjzFdp+yk/BCgkwuQwHwYDVR0j BBgwFoAUuru2L017B2/Ky/+BBybO97Lb8kMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYzNWE0NTEtYzMwNC00NWY1LWI3ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0 RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdCMkRCRjI0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCQjYyRjREN0IwNzZGQ0FDQkZGODEwNzI2Q0VGN0IyREJG MjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNF RjdCMkRCRjI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPwUacYFxr1Qm4Hf46Roe/OyJ4l+r+CGti7 ArAbsOk6HRu/pMHhw0WvqXLsDAmWnALHPLTqqJVffDM8XOCW+nJh71ymwYpBUYWl Y0rGdU3vMWkqW6yWmv+DwJTXjQpuv8rl9+7/PTrSWHvILT0EHXz7wytTBDBSzj/q Ul0Hy2ReF0Fl/wtDmwUg9kUo3WV3dD3bB7oWtr+N6tVp/ZMG788LalJKaiDNpxN3 weW45NgLnxgIf+01r7dwt65rLPE0GQWmlVbm6IDi9HIY5aV3riSinzm9h+hOYMK6 IdwASbE6CUjQ48UH6Q3OxbLw95sTqLL1/uERUQ4hU1pUw0fp6Kk= -----END CERTIFICATE-----Generated at Fri Sep 11 09:49:26 2026 by rpki-client