$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft File: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft (raw, json) Hash identifier: XBivCQbTF8UYE7Ihmzc6gFQWmeR1JFC4aVtedGMAOxM= Subject key identifier: 4F:14:8F:9F:10:1F:3E:A3:0F:60:1E:EF:FE:A0:C2:E1:1E:31:C7:FD Authority key identifier: BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 Certificate issuer: /CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Certificate serial: 038A2B9116F9AE1FAAEF2E6333F1FB8140145A0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 17:42:13 +0000 Manifest this update: Fri 19 Jun 2026 17:37:13 +0000 Manifest next update: Sat 20 Jun 2026 20:19:13 +0000 Files and hashes: 1: BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl (hash: hBhzeQqPVmMt4JNsVeQITHUDYSDPmINka9OP9lPz7lA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 20:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8a:2b:91:16:f9:ae:1f:aa:ef:2e:63:33:f1:fb:81:40:14:5a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1 Validity Not Before: Jun 19 17:37:13 2026 GMT Not After : Jun 20 20:19:13 2026 GMT Subject: CN=4F148F9F101F3EA30F601EEFFEA0C2E11E31C7FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:6b:72:0a:e3:5e:dd:9b:b1:ff:46:9c:d2: 02:de:db:ce:40:f2:1a:9d:a6:c6:69:e3:7b:48:e0: a8:3a:0d:94:b3:8e:35:96:95:c1:34:79:02:d4:ce: e6:56:32:ff:0b:fe:9f:98:d5:fb:c0:cc:17:81:e3: ba:9c:8e:ff:86:1c:21:e0:88:10:40:96:07:51:4f: 47:86:a7:53:06:78:75:63:98:69:08:00:fc:4d:c8: 60:49:3f:c2:1e:7b:28:4a:2f:2b:3b:bf:5f:46:0c: 92:39:78:59:3a:97:7c:21:b1:2c:f2:82:23:a8:c0: d3:64:98:9e:a4:35:3a:b8:cf:43:17:61:9f:72:4d: 02:57:dd:f9:fa:df:54:e1:94:33:38:73:98:16:88: 2d:d8:6b:ae:c4:9c:a4:61:3d:19:dc:27:c4:8d:09: 2d:7c:a9:05:83:a1:02:72:ee:c5:91:13:03:be:cc: 98:97:db:8f:12:eb:71:f9:6c:cf:ea:e2:3c:8f:d0: 6f:ec:81:d0:c7:71:17:4d:e5:28:7e:fb:03:7c:bd: 70:12:16:8f:3a:7c:f3:92:e0:96:08:9a:09:5d:be: d8:8c:b7:c5:5f:35:fe:fc:fb:6c:3f:bf:16:8f:f4: 38:f8:c7:eb:7d:5e:47:0b:4b:d3:1f:7b:24:ee:27: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:14:8F:9F:10:1F:3E:A3:0F:60:1E:EF:FE:A0:C2:E1:1E:31:C7:FD X509v3 Authority Key Identifier: keyid:BA:BB:8C:48:2C:D1:A5:86:AE:3E:AD:42:D5:0E:63:A5:8C:B3:B3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/BABB8C482CD1A586AE3EAD42D50E63A58CB3B3A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:75:43:40:63:5d:70:93:44:df:eb:8d:4e:2f:7d:da:24:8d: ba:e2:93:f6:23:16:03:a8:0c:95:62:8a:69:f1:cb:fd:d7:04: 5d:c2:aa:a0:ff:00:7a:bf:fd:50:a1:fa:32:7a:00:d2:34:95: c8:78:da:0a:b1:7c:e4:fe:dc:87:ca:49:e7:b6:a9:f5:2b:d8: 12:e4:a9:cb:1a:56:cc:f8:5d:b0:52:5f:86:c1:98:f8:9b:6a: 5b:05:dd:89:f3:96:05:96:11:37:89:4b:94:8c:3f:a0:2e:73: d9:86:7e:af:88:69:63:cd:11:1a:04:69:c9:22:cc:56:8e:8f: 01:6a:40:1f:e7:27:c9:7e:1b:d7:06:ab:8a:30:43:85:bb:da: 54:79:fa:45:d6:63:b9:54:5b:e2:96:d3:e5:84:98:49:9f:8b: eb:d5:97:30:2f:37:7f:eb:a8:85:ba:72:f0:e4:95:b2:4b:84: 1d:16:6b:2d:40:e8:0f:3c:63:9f:6a:5b:e3:9e:7d:95:5b:b6: d4:32:e9:4f:10:1a:57:34:c6:bd:d9:1a:d3:56:f0:0b:05:b8: cb:a0:a7:54:02:ab:85:71:e9:d3:ae:4d:aa:36:16:46:2e:89: e2:7d:c0:0b:aa:91:a6:eb:7c:e7:c9:c9:d8:7c:34:e0:c4:97: b5:c5:f1:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4orkRb5rh+q7y5jM/H7gUAUWgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4 Q0IzQjNBMTAeFw0yNjA2MTkxNzM3MTNaFw0yNjA2MjAyMDE5MTNaMDMxMTAvBgNV BAMTKDRGMTQ4RjlGMTAxRjNFQTMwRjYwMUVFRkZFQTBDMkUxMUUzMUM3RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLWtyCuNe3Zux/0ac0gLe285A 8hqdpsZp43tI4Kg6DZSzjjWWlcE0eQLUzuZWMv8L/p+Y1fvAzBeB47qcjv+GHCHg iBBAlgdRT0eGp1MGeHVjmGkIAPxNyGBJP8IeeyhKLys7v19GDJI5eFk6l3whsSzy giOowNNkmJ6kNTq4z0MXYZ9yTQJX3fn631ThlDM4c5gWiC3Ya67EnKRhPRncJ8SN CS18qQWDoQJy7sWREwO+zJiX248S63H5bM/q4jyP0G/sgdDHcRdN5Sh++wN8vXAS Fo86fPOS4JYImgldvtiMt8VfNf78+2w/vxaP9Dj4x+t9XkcLS9MfeyTuJ8bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTxSPnxAfPqMPYB7v/qDC4R4xx/0wHwYDVR0j BBgwFoAUuruMSCzRpYauPq1C1Q5jpYyzs6EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWE3ZDdiMzgtZDY2Yi00M2IzLTkxZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgy Q0QxQTU4NkFFM0VBRDQyRDUwRTYzQTU4Q0IzQjNBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUJCOEM0ODJDRDFBNTg2QUUzRUFENDJENTBFNjNBNThDQjNC M0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvQkFCQjhDNDgyQ0QxQTU4NkFFM0VBRDQyRDUwRTYz QTU4Q0IzQjNBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE11Q0BjXXCTRN/rjU4vfdokjbrik/YjFgOo DJViimnxy/3XBF3CqqD/AHq//VCh+jJ6ANI0lch42gqxfOT+3IfKSee2qfUr2BLk qcsaVsz4XbBSX4bBmPibalsF3YnzlgWWETeJS5SMP6Auc9mGfq+IaWPNERoEacki zFaOjwFqQB/nJ8l+G9cGq4owQ4W72lR5+kXWY7lUW+KW0+WEmEmfi+vVlzAvN3/r qIW6cvDklbJLhB0Way1A6A88Y59qW+OefZVbttQy6U8QGlc0xr3ZGtNW8AsFuMug p1QCq4Vx6dOuTao2FkYuieJ9wAuqkabrfOfJydh8NODEl7XF8Q8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:16 2026 by rpki-client