$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: UWP+Lv6om/vTv/OoSVrI5C9MyU0iDINKQL3im1zuPeU= Subject key identifier: 83:32:68:A5:82:95:FA:E8:FE:8C:A3:5D:F7:75:48:A2:D1:34:43:A3 Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 72C7D5B9B0EDF8435F9251E7CCB1F20FE52D3719 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 02:36:43 +0000 Manifest this update: Thu 17 Sep 2026 02:31:43 +0000 Manifest next update: Fri 18 Sep 2026 03:58:43 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: dFwppnRf+LVz401kfOhjFG+WIs9dr62AAh6qT1O2DtY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c7:d5:b9:b0:ed:f8:43:5f:92:51:e7:cc:b1:f2:0f:e5:2d:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: Sep 17 02:31:43 2026 GMT Not After : Sep 18 03:58:43 2026 GMT Subject: CN=833268A58295FAE8FE8CA35DF77548A2D13443A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:e5:0c:35:f6:7a:a0:a6:d3:b7:0b:35:53: f8:dc:d7:81:24:ae:62:93:53:db:64:4f:38:8c:e0: ef:42:da:ab:d1:94:69:72:79:ad:28:48:57:3e:51: 2b:24:5a:73:51:f9:a2:f0:2f:d3:2b:bb:56:f6:c9: e2:17:69:9b:c0:c7:ae:f4:1b:c4:f8:6b:b7:b3:52: b9:f6:69:8c:bb:b7:62:0e:2b:1d:89:44:fc:9d:18: b9:58:e0:ab:1b:8d:62:48:73:c6:87:ca:1d:54:00: 21:82:72:42:b7:d6:96:a4:58:e0:5f:ca:73:db:6c: 92:6d:e0:b8:53:a5:8b:82:72:d8:e0:ce:bf:e5:8e: e6:c3:b7:b0:d9:3e:ea:68:5b:51:a8:47:92:29:86: 9c:72:be:98:bd:00:83:58:6f:ff:46:d1:70:ad:c3: 75:e8:03:4a:ad:3f:dc:99:08:dd:51:a7:bb:f9:a2: 0c:60:f2:84:35:a4:b8:6f:ce:9e:93:1c:40:de:f6: be:bc:b1:66:a3:77:be:99:f9:4c:91:65:98:e4:b1: e4:92:be:02:d0:36:06:b8:3b:10:9b:6f:b9:d8:1e: a7:cb:66:b0:e9:04:82:4e:3a:0f:4f:fd:ff:16:ae: f2:a5:d8:6d:d7:f8:aa:c4:db:ee:ee:5d:e2:32:98: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:32:68:A5:82:95:FA:E8:FE:8C:A3:5D:F7:75:48:A2:D1:34:43:A3 X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:a1:66:c8:60:9c:9e:5a:d9:f2:30:27:1a:3e:e7:36:b2:54: f4:df:30:e6:d3:07:3b:ba:af:b0:1b:d9:ab:42:71:c9:f8:06: 9a:5e:8b:fe:e4:c5:69:38:bb:23:f4:b0:78:8e:97:2f:a2:33: 78:5f:0c:3a:b6:70:89:67:ef:ba:cf:af:e6:34:42:6b:43:d2: 55:1d:ef:43:57:d0:b7:70:7c:68:28:8f:d6:34:b0:8d:ac:e9: d0:08:81:b3:b7:c8:c1:cd:51:43:bb:fb:f9:e0:e2:69:c5:85: 1d:c4:87:a4:29:c2:bf:50:28:2b:bb:67:45:7f:54:bd:61:c7: ba:8f:57:db:20:41:4b:0e:32:6c:e1:e6:f2:ce:16:2b:3d:d3: eb:03:e9:ca:97:bd:98:dc:0e:68:25:f7:f8:9e:ff:92:78:1c: cd:7a:47:c5:41:2d:34:ae:a8:ed:fb:5c:d7:30:21:02:39:36: 50:89:cb:30:82:0f:e2:02:92:79:31:6c:b1:7c:ee:c7:23:ea: 96:53:26:e7:90:9d:5b:7c:1a:46:31:9b:3e:f5:57:1d:2a:3d: 63:02:03:21:f5:6b:ee:79:6b:80:9a:5a:61:6c:27:db:fd:0a: f4:c0:4e:17:ef:a1:a9:9e:3f:eb:1b:39:29:88:03:8f:dc:12: ee:37:97:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsfVubDt+ENfklHnzLHyD+UtNxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA5MTcwMjMxNDNaFw0yNjA5MTgwMzU4NDNaMDMxMTAvBgNV BAMTKDgzMzI2OEE1ODI5NUZBRThGRThDQTM1REY3NzU0OEEyRDEzNDQzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrN+UMNfZ6oKbTtws1U/jc14Ek rmKTU9tkTziM4O9C2qvRlGlyea0oSFc+USskWnNR+aLwL9Mru1b2yeIXaZvAx670 G8T4a7ezUrn2aYy7t2IOKx2JRPydGLlY4KsbjWJIc8aHyh1UACGCckK31pakWOBf ynPbbJJt4LhTpYuCctjgzr/ljubDt7DZPupoW1GoR5Iphpxyvpi9AINYb/9G0XCt w3XoA0qtP9yZCN1Rp7v5ogxg8oQ1pLhvzp6THEDe9r68sWajd76Z+UyRZZjkseSS vgLQNga4OxCbb7nYHqfLZrDpBIJOOg9P/f8WrvKl2G3X+KrE2+7uXeIymGWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzJopYKV+uj+jKNd93VIotE0Q6MwHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAChZshgnJ5a2fIwJxo+5zayVPTfMObTBzu6 r7Ab2atCccn4Bppei/7kxWk4uyP0sHiOly+iM3hfDDq2cIln77rPr+Y0QmtD0lUd 70NX0LdwfGgoj9Y0sI2s6dAIgbO3yMHNUUO7+/ng4mnFhR3Eh6Qpwr9QKCu7Z0V/ VL1hx7qPV9sgQUsOMmzh5vLOFis90+sD6cqXvZjcDmgl9/ie/5J4HM16R8VBLTSu qO37XNcwIQI5NlCJyzCCD+ICknkxbLF87scj6pZTJueQnVt8GkYxmz71Vx0qPWMC AyH1a+55a4CaWmFsJ9v9CvTAThfvoameP+sbOSmIA4/cEu43l8c= -----END CERTIFICATE-----Generated at Thu Sep 17 10:13:08 2026 by rpki-client