$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft File: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft (raw, json) Hash identifier: Fv+v7o914d2G8lf0dCDZKqx8ewEbbRAWhDZfZ8kVVa8= Subject key identifier: F5:2C:2E:D0:71:FB:FB:9F:2C:C5:0C:FB:7E:9B:8D:42:72:BF:97:77 Authority key identifier: BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 Certificate issuer: /CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Certificate serial: 543B7B2D07C8651189DEF17946BE04A56528DBDB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft Manifest number: F3 Signing time: Sat 31 Oct 2026 22:40:58 +0000 Manifest this update: Sat 31 Oct 2026 22:35:58 +0000 Manifest next update: Mon 02 Nov 2026 01:48:58 +0000 Files and hashes: 1: BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl (hash: pQ6DCNZC0VRydlOI5phGcs4EyuGe1YePui3QWKTL+fE=) 2: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: ecbLm05zQBSilErebG558HI4LAmRy170h81zwnXJv1A=) 3: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: XmBvtpkJORjd9iaWiI6ARvFoOmWWW/B+vmHlPEWjmJQ=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: kOTwCOzki+cXWmA+1JXqqpeFg+zvpKbGuzCgIDh09ZM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:3b:7b:2d:07:c8:65:11:89:de:f1:79:46:be:04:a5:65:28:db:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABBB62F4D7B076FCACBFF810726CEF7B2DBF243 Validity Not Before: Oct 31 22:35:58 2026 GMT Not After : Nov 2 01:48:58 2026 GMT Subject: CN=F52C2ED071FBFB9F2CC50CFB7E9B8D4272BF9777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:99:bf:84:c2:af:79:f6:b7:e5:0c:a4:8e: 6c:aa:27:57:68:a0:e1:9a:9b:f2:fd:90:12:a0:ce: ad:0d:bb:f9:86:f8:fa:0f:dd:72:f1:07:6e:90:8f: 7f:e9:03:18:0f:5b:44:d6:39:e2:d1:ab:02:7f:7e: 28:29:cf:41:1a:05:85:3d:cb:f4:7f:2b:8c:6a:c5: b7:ac:9d:27:10:52:8d:0f:c4:82:e8:ea:53:d8:b1: 86:ea:3c:2b:0c:aa:a0:72:94:1d:5b:b0:6e:c3:bb: 58:8a:a1:78:c8:72:64:21:de:66:6f:cb:90:9a:7d: ee:fd:f5:e5:cf:2b:b5:ba:3e:86:64:e6:84:9c:f3: c1:20:5a:6f:c5:2f:5f:27:f8:41:f8:52:55:88:f8: ed:b8:c1:46:85:86:78:31:52:85:34:0f:35:28:fe: 81:e7:53:8f:c5:c0:14:bb:a1:2b:64:4c:1b:83:83: f7:47:9b:bd:0e:a2:7b:cc:44:da:43:80:ef:7f:e8: a8:0f:fc:19:20:5a:a8:15:d2:23:2c:27:25:ce:9d: 25:84:28:df:4b:4d:d7:07:7d:bb:b4:10:31:f4:58: 75:3e:bb:b6:6d:99:8b:b0:de:26:49:65:f4:ae:9b: 44:37:63:77:fb:88:5c:52:0b:42:83:88:c8:b2:4b: db:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2C:2E:D0:71:FB:FB:9F:2C:C5:0C:FB:7E:9B:8D:42:72:BF:97:77 X509v3 Authority Key Identifier: keyid:BA:BB:B6:2F:4D:7B:07:6F:CA:CB:FF:81:07:26:CE:F7:B2:DB:F2:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/BABBB62F4D7B076FCACBFF810726CEF7B2DBF243.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b8:14:52:44:72:38:fc:5f:0b:36:ba:04:87:61:7f:e9:e9: 4a:89:f9:e6:c4:6e:ac:f5:fa:49:ce:63:95:28:66:a6:40:a1: 11:8a:30:6d:2a:0b:f5:27:85:dd:4f:56:95:49:7a:33:23:e0: 83:3f:1a:00:31:d8:91:9f:2b:17:15:b8:0c:cd:5d:2d:7e:c4: 02:b5:de:3c:4f:ea:31:0b:23:46:7e:3b:99:13:f3:76:86:6b: 5a:20:ba:87:99:3c:91:a0:10:22:28:cf:18:d0:86:52:de:f9: 3c:09:63:6a:60:b6:89:a8:92:43:37:19:43:19:3e:c1:4a:a6: 59:45:1d:95:81:32:d0:db:f5:70:e5:29:15:d2:b2:42:fd:c7: a3:24:58:ee:be:a6:29:a0:86:4b:e7:23:0f:81:cf:97:0c:b5: db:f5:02:10:98:1e:de:c7:4c:dd:44:ff:11:0c:1f:5d:89:58: 72:3b:7e:6d:40:29:5d:d9:a3:85:78:3d:38:f7:1c:d2:ae:3d: 6b:ac:11:43:45:f5:e3:62:49:7f:ec:d8:3c:10:b8:bb:be:ce: d2:7e:39:2d:c4:58:4e:ad:e1:25:d3:36:27:de:86:a1:db:05: 8a:e2:cb:48:18:e5:dc:34:4f:0d:0a:d8:7d:cb:e4:9d:b8:53: 25:da:98:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDt7LQfIZRGJ3vF5Rr4EpWUo29swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdC MkRCRjI0MzAeFw0yNjEwMzEyMjM1NThaFw0yNjExMDIwMTQ4NThaMDMxMTAvBgNV BAMTKEY1MkMyRUQwNzFGQkZCOUYyQ0M1MENGQjdFOUI4RDQyNzJCRjk3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VZm/hMKvefa35QykjmyqJ1do oOGam/L9kBKgzq0Nu/mG+PoP3XLxB26Qj3/pAxgPW0TWOeLRqwJ/figpz0EaBYU9 y/R/K4xqxbesnScQUo0PxILo6lPYsYbqPCsMqqBylB1bsG7Du1iKoXjIcmQh3mZv y5Cafe799eXPK7W6PoZk5oSc88EgWm/FL18n+EH4UlWI+O24wUaFhngxUoU0DzUo /oHnU4/FwBS7oStkTBuDg/dHm70OonvMRNpDgO9/6KgP/BkgWqgV0iMsJyXOnSWE KN9LTdcHfbu0EDH0WHU+u7ZtmYuw3iZJZfSum0Q3Y3f7iFxSC0KDiMiyS9t/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Swu0HH7+58sxQz7fpuNQnK/l3cwHwYDVR0j BBgwFoAUuru2L017B2/Ky/+BBybO97Lb8kMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTYzNWE0NTEtYzMwNC00NWY1LWI3ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0 RDdCMDc2RkNBQ0JGRjgxMDcyNkNFRjdCMkRCRjI0My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCQjYyRjREN0IwNzZGQ0FDQkZGODEwNzI2Q0VGN0IyREJG MjQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQkFCQkI2MkY0RDdCMDc2RkNBQ0JGRjgxMDcyNkNF RjdCMkRCRjI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG4FFJEcjj8Xws2ugSHYX/p6UqJ+ebEbqz1 +knOY5UoZqZAoRGKMG0qC/Unhd1PVpVJejMj4IM/GgAx2JGfKxcVuAzNXS1+xAK1 3jxP6jELI0Z+O5kT83aGa1oguoeZPJGgECIozxjQhlLe+TwJY2pgtomokkM3GUMZ PsFKpllFHZWBMtDb9XDlKRXSskL9x6MkWO6+pimghkvnIw+Bz5cMtdv1AhCYHt7H TN1E/xEMH12JWHI7fm1AKV3Zo4V4PTj3HNKuPWusEUNF9eNiSX/s2DwQuLu+ztJ+ OS3EWE6t4SXTNifehqHbBYriy0gY5dw0Tw0K2H3L5J24UyXamJw= -----END CERTIFICATE-----Generated at Sun Nov 1 01:52:51 2026 by rpki-client