$ rpki-client -vvf rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft File: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft (raw, json) Hash identifier: 4CBN+WOsGKOlxLoqzHSoBTlvVchaaVGe8TBGxFdzTnQ= Subject key identifier: 91:59:16:A4:F2:FE:3F:1F:63:A0:F2:AA:1B:EC:1E:BA:8F:FA:87:17 Authority key identifier: BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 Certificate issuer: /CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Certificate serial: 64F04E297564233989634F71273866A8B0C846BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 21:01:20 +0000 Manifest this update: Fri 19 Jun 2026 20:56:20 +0000 Manifest next update: Sat 20 Jun 2026 23:31:20 +0000 Files and hashes: 1: BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl (hash: 6HAtZPI7p6tliAYT23LuJJE97+OBX5pkW2UmuHtb+DQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f0:4e:29:75:64:23:39:89:63:4f:71:27:38:66:a8:b0:c8:46:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1 Validity Not Before: Jun 19 20:56:20 2026 GMT Not After : Jun 20 23:31:20 2026 GMT Subject: CN=915916A4F2FE3F1F63A0F2AA1BEC1EBA8FFA8717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:0b:a5:4d:72:03:26:75:0e:e3:88:af:94: eb:69:d0:34:71:29:d4:aa:89:17:10:af:ed:ae:04: d8:93:31:82:ca:f3:1c:c8:40:06:35:f6:11:97:8c: 4d:4a:27:cc:fd:15:06:fb:dd:3e:b6:0c:e2:ba:fc: fc:89:ec:5f:e6:1b:af:69:2b:f4:7a:0e:ee:e9:73: 49:aa:f1:03:01:f4:ac:e0:65:7f:ef:d7:01:58:a4: b1:33:10:3e:00:c7:c1:34:d7:ee:91:3d:25:aa:dd: 85:0e:fc:e7:e1:73:47:6c:a3:af:20:7d:b1:7b:bc: e4:d9:5c:77:97:29:cb:e8:77:8f:06:8e:e5:55:86: 2a:a1:47:b6:3e:85:e0:c6:5f:82:84:79:66:73:88: e6:95:2b:42:2f:fd:9b:f1:11:f0:c0:c6:a8:01:5e: 83:78:0f:0a:2a:d4:b6:33:d9:fa:92:0c:b3:d2:91: 15:e4:86:d6:e7:4b:ca:42:e6:46:0f:69:73:42:32: 90:80:33:ee:4a:f4:10:ca:6c:b1:85:69:bf:92:fe: 9f:6a:13:e7:03:db:1b:52:8d:8c:4c:6f:b0:cf:54: 64:f1:16:35:48:01:37:d8:be:c7:ff:bb:f3:05:47: 20:ed:a7:de:79:22:b2:18:b6:b0:c0:b1:70:a6:13: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:59:16:A4:F2:FE:3F:1F:63:A0:F2:AA:1B:EC:1E:BA:8F:FA:87:17 X509v3 Authority Key Identifier: keyid:BB:88:F2:4C:5D:BE:FF:DF:77:66:0E:D1:E6:F9:F5:8E:23:2F:C0:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/BB88F24C5DBEFFDF77660ED1E6F9F58E232FC0B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8a:3a:e6:bb:d3:95:d1:49:5d:7d:c9:08:a3:86:53:3f:06: 36:aa:e8:4e:0b:fa:d1:d1:ba:61:db:3f:ef:d6:0f:35:cf:f2: 49:e0:55:c8:14:d7:4c:31:90:33:06:5e:be:5c:d8:66:27:0e: 07:c6:87:bf:69:fa:38:af:4a:1f:17:da:83:d7:bf:d5:a4:af: 44:55:0f:b1:c4:a4:4f:a6:f4:40:b7:b4:68:dd:ea:be:d3:a9: 04:71:5f:36:6e:06:82:4c:3f:09:39:e8:1e:e3:ec:df:00:da: 88:ac:f6:ee:0d:43:ad:e6:a3:04:b7:ed:ca:e7:af:8e:cc:02: 1c:ff:ca:10:4e:99:1f:87:aa:7a:60:87:3d:1b:28:a0:76:48: b6:b4:3d:f4:3f:3e:a8:e4:93:c3:db:96:54:3e:98:83:53:98: a2:07:5a:c8:c6:4c:a4:3d:de:14:41:b3:ac:15:4d:76:77:66: de:4a:83:66:0b:51:9b:70:9c:69:19:3a:26:e9:db:09:ad:20: 11:7f:1b:66:ac:36:54:0c:da:d9:ca:37:b6:21:e5:fd:3a:f3: c4:00:cc:b0:38:5c:d6:61:3c:a8:44:e0:91:4e:a3:a9:0b:8b: 41:b6:18:9b:1b:74:7a:07:8a:d4:6d:05:41:99:86:0a:2a:11: 47:96:86:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZPBOKXVkIzmJY09xJzhmqLDIRrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1OEUy MzJGQzBCMTAeFw0yNjA2MTkyMDU2MjBaFw0yNjA2MjAyMzMxMjBaMDMxMTAvBgNV BAMTKDkxNTkxNkE0RjJGRTNGMUY2M0EwRjJBQTFCRUMxRUJBOEZGQTg3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUjgulTXIDJnUO44ivlOtp0DRx KdSqiRcQr+2uBNiTMYLK8xzIQAY19hGXjE1KJ8z9FQb73T62DOK6/PyJ7F/mG69p K/R6Du7pc0mq8QMB9KzgZX/v1wFYpLEzED4Ax8E01+6RPSWq3YUO/Ofhc0dso68g fbF7vOTZXHeXKcvod48GjuVVhiqhR7Y+heDGX4KEeWZziOaVK0Iv/ZvxEfDAxqgB XoN4Dwoq1LYz2fqSDLPSkRXkhtbnS8pC5kYPaXNCMpCAM+5K9BDKbLGFab+S/p9q E+cD2xtSjYxMb7DPVGTxFjVIATfYvsf/u/MFRyDtp955IrIYtrDAsXCmE92lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkVkWpPL+Px9joPKqG+weuo/6hxcwHwYDVR0j BBgwFoAUu4jyTF2+/993Zg7R5vn1jiMvwLEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmRhMGNkZDktN2YzMS00ZjFmLWFiMDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1 REJFRkZERjc3NjYwRUQxRTZGOUY1OEUyMzJGQzBCMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQjg4RjI0QzVEQkVGRkRGNzc2NjBFRDFFNkY5RjU4RTIzMkZD MEIxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvQkI4OEYyNEM1REJFRkZERjc3NjYwRUQxRTZGOUY1 OEUyMzJGQzBCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2KOua705XRSV19yQijhlM/Bjaq6E4L+tHR umHbP+/WDzXP8kngVcgU10wxkDMGXr5c2GYnDgfGh79p+jivSh8X2oPXv9Wkr0RV D7HEpE+m9EC3tGjd6r7TqQRxXzZuBoJMPwk56B7j7N8A2ois9u4NQ63mowS37crn r47MAhz/yhBOmR+Hqnpghz0bKKB2SLa0PfQ/Pqjkk8PbllQ+mINTmKIHWsjGTKQ9 3hRBs6wVTXZ3Zt5Kg2YLUZtwnGkZOibp2wmtIBF/G2asNlQM2tnKN7Yh5f0688QA zLA4XNZhPKhE4JFOo6kLi0G2GJsbdHoHitRtBUGZhgoqEUeWhls= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:05 2026 by rpki-client