$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: C9ec3dbUUcu4c0JphP8uuJB8lh10IikCs/E7/O56Gq8= Subject key identifier: 96:F0:32:37:59:EF:B6:21:F9:4D:18:C0:2A:B6:6C:CD:B1:D4:EC:19 Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 6957423AAFE137D6DCC1DE96F5A0A8071EDCCFCD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 01:50:50 +0000 Manifest this update: Thu 17 Sep 2026 01:45:50 +0000 Manifest next update: Fri 18 Sep 2026 04:40:50 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: xTQek5IMScx5xOw4uDE/wBwVgmt6G05N6LvbKWL3Urs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:57:42:3a:af:e1:37:d6:dc:c1:de:96:f5:a0:a8:07:1e:dc:cf:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: Sep 17 01:45:50 2026 GMT Not After : Sep 18 04:40:50 2026 GMT Subject: CN=96F0323759EFB621F94D18C02AB66CCDB1D4EC19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:4c:96:41:f0:d9:8c:fb:88:c1:73:bb:66: 66:b4:d6:44:fa:17:f9:97:2b:a1:75:09:8c:ae:2b: 65:40:c3:98:18:0b:e0:c7:01:d0:80:ea:a6:c5:29: de:bd:49:0c:91:3b:0e:36:a0:a2:96:ae:be:05:53: cf:f6:86:f4:d5:0c:97:ce:8c:1b:28:e4:3e:b3:4f: 55:96:ce:4b:b7:30:d7:42:3f:58:42:bb:44:e7:b7: 2c:0c:9c:c3:3f:70:23:02:01:ea:9a:e4:44:d4:a2: 80:c8:6e:2c:da:ee:4f:f4:44:8c:85:10:95:2f:04: 07:b4:b4:7f:ff:2d:64:41:93:ce:c7:67:df:1d:f8: 31:47:60:e6:84:6d:84:28:6a:1e:fb:4d:2a:9a:6a: 65:b2:fc:1f:41:da:17:61:c0:44:f3:fc:c4:a0:51: c7:2e:cc:fe:9e:e5:ed:b8:bd:72:37:91:cb:14:66: ce:95:f2:33:a5:cc:34:e6:b2:7d:d0:be:b2:90:15: 8b:10:7f:4d:95:e9:16:b8:11:f2:95:83:4d:40:ea: d9:90:e7:00:8b:64:c9:7b:b6:14:69:4b:e6:91:c0: 09:c5:52:1a:38:c6:dd:37:63:bc:21:1c:ca:d0:a3: 38:fe:93:de:bd:41:55:d3:bc:05:e8:85:7c:3b:2d: 6b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F0:32:37:59:EF:B6:21:F9:4D:18:C0:2A:B6:6C:CD:B1:D4:EC:19 X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d1:b3:96:ff:a5:d2:1a:33:bb:0a:6c:96:dd:30:e0:a7:e4: cc:1f:22:d2:94:f6:a4:37:57:15:19:e3:39:58:49:c8:f1:f4: bf:75:1c:ff:c0:d5:93:8d:72:ab:06:01:0c:38:fa:43:88:b0: 54:06:1e:a9:b9:4b:70:9e:5a:0d:db:56:2a:8e:f2:d3:25:df: 92:a9:ec:d7:f5:f7:22:8d:85:33:b6:db:13:ef:82:bc:a9:12: b2:39:55:7b:0a:ad:b0:11:8b:c5:f5:a0:2a:a0:d9:be:66:8b: bd:cb:44:d6:9b:08:d3:0f:bc:4b:48:e3:d0:ab:e6:0f:9d:99: f5:29:d0:6f:98:b1:19:d0:cf:19:d5:cd:ba:e6:c4:ff:9e:20: 12:59:a5:21:d6:70:f5:a5:88:47:f7:08:c3:fe:fc:c0:65:53: 0a:78:e2:94:89:31:a1:b4:fc:ee:2c:4a:92:08:30:7b:37:9a: cf:cb:99:92:5e:44:4c:a9:ab:c8:3b:02:1d:e2:03:3e:34:9b: d8:76:d2:4f:c0:0a:23:fc:33:00:c0:6c:b4:04:e4:c3:c1:f4: ad:16:7c:bd:15:02:09:a1:98:d9:83:76:b8:f3:c8:ad:de:16: f3:95:a8:4a:da:d6:9c:ed:28:75:22:1e:9f:dd:ce:de:0c:b9: 0c:03:ed:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVdCOq/hN9bcwd6W9aCoBx7cz80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA5MTcwMTQ1NTBaFw0yNjA5MTgwNDQwNTBaMDMxMTAvBgNV BAMTKDk2RjAzMjM3NTlFRkI2MjFGOTREMThDMDJBQjY2Q0NEQjFENEVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYt0yWQfDZjPuIwXO7Zma01kT6 F/mXK6F1CYyuK2VAw5gYC+DHAdCA6qbFKd69SQyROw42oKKWrr4FU8/2hvTVDJfO jBso5D6zT1WWzku3MNdCP1hCu0TntywMnMM/cCMCAeqa5ETUooDIbiza7k/0RIyF EJUvBAe0tH//LWRBk87HZ98d+DFHYOaEbYQoah77TSqaamWy/B9B2hdhwETz/MSg UccuzP6e5e24vXI3kcsUZs6V8jOlzDTmsn3QvrKQFYsQf02V6Ra4EfKVg01A6tmQ 5wCLZMl7thRpS+aRwAnFUho4xt03Y7whHMrQozj+k969QVXTvAXohXw7LWubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlvAyN1nvtiH5TRjAKrZszbHU7BkwHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3Rs5b/pdIaM7sKbJbdMOCn5MwfItKU9qQ3 VxUZ4zlYScjx9L91HP/A1ZONcqsGAQw4+kOIsFQGHqm5S3CeWg3bViqO8tMl35Kp 7Nf19yKNhTO22xPvgrypErI5VXsKrbARi8X1oCqg2b5mi73LRNabCNMPvEtI49Cr 5g+dmfUp0G+YsRnQzxnVzbrmxP+eIBJZpSHWcPWliEf3CMP+/MBlUwp44pSJMaG0 /O4sSpIIMHs3ms/LmZJeREypq8g7Ah3iAz40m9h20k/ACiP8MwDAbLQE5MPB9K0W fL0VAgmhmNmDdrjzyK3eFvOVqEra1pztKHUiHp/dzt4MuQwD7bk= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:05 2026 by rpki-client