$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: 4Clucff3lPoepxofROhMVUCk8faAwxyoZTnWNEG6kcs= Subject key identifier: 4F:D6:DB:E7:FA:CD:2D:46:59:01:65:7E:51:7E:F7:C2:5C:1F:BE:D0 Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 06FB5E79BC3906C3E0723560D57F2C13CC857BFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: A6 Signing time: Thu 03 Sep 2026 10:40:12 +0000 Manifest this update: Thu 03 Sep 2026 10:35:12 +0000 Manifest next update: Fri 04 Sep 2026 12:34:12 +0000 Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) 3: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: qJcf2EaxB6fJ1B3uulZf6B8/SQc34B6/mP+coeNoCYY=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:fb:5e:79:bc:39:06:c3:e0:72:35:60:d5:7f:2c:13:cc:85:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Sep 3 10:35:12 2026 GMT Not After : Sep 4 12:34:12 2026 GMT Subject: CN=4FD6DBE7FACD2D465901657E517EF7C25C1FBED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:6e:1f:b6:0a:3b:98:7e:f7:25:6b:fe:af: 6c:61:a6:ad:30:b2:a2:af:b0:56:e9:02:a7:6f:19: 1c:6f:ff:ce:3d:f4:33:7e:b5:b5:59:1d:c5:8d:ec: 3b:ab:67:e4:67:04:ca:55:73:89:12:a9:b4:28:91: 8d:86:ab:c9:7e:1a:44:6b:bc:7a:3d:53:0c:dc:24: 83:47:48:1f:59:1f:f6:b2:98:45:40:c6:a3:be:13: ca:ba:82:63:44:2b:32:3b:7b:af:04:e4:d0:a3:da: 14:35:39:33:d5:8f:66:48:31:d4:b4:f1:91:bc:61: ee:4d:3b:ac:8a:5c:47:62:81:33:ee:05:f1:30:df: 8f:a3:9d:59:ab:f6:3c:cb:a4:86:3f:1f:18:55:d7: c7:c9:ab:04:67:c5:09:64:9d:4c:d9:84:0d:a8:93: 0f:20:53:c9:75:f5:67:0c:76:d9:6a:27:5f:99:9c: 73:3d:e0:70:21:62:45:47:85:3b:e4:30:4f:e2:b3: f1:cb:29:59:8a:e6:26:d6:58:a6:41:55:14:df:7a: 73:a9:30:d5:62:f1:ec:04:b7:04:36:77:62:c9:94: 4c:d1:aa:4e:af:93:b4:2f:1d:2c:d2:c0:c6:3c:fa: 4a:6c:f1:2f:68:60:5d:a1:22:ab:64:a8:53:4c:0c: c1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:DB:E7:FA:CD:2D:46:59:01:65:7E:51:7E:F7:C2:5C:1F:BE:D0 X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:0d:cc:f1:e0:38:d0:2f:40:82:07:1f:43:d2:32:b0:82:95: 32:a1:f9:f6:68:3c:56:2c:60:c6:af:aa:ef:11:ce:9c:d6:9c: 95:ed:7e:3f:21:90:66:59:e3:61:39:82:40:83:e4:08:71:6d: 34:12:a9:1b:af:be:04:c8:9b:dc:6a:9a:a6:9c:17:17:99:57: d9:e0:19:fc:86:24:86:fa:02:10:b4:e2:99:71:f5:24:f4:af: a1:e3:2c:2b:68:e2:fb:32:d8:b7:40:9b:91:5a:ed:c9:a4:7b: dd:c5:3c:7d:b9:c3:a6:8e:e0:e3:64:85:21:fb:10:92:23:e3: 6c:94:27:16:0f:62:bf:8a:c6:68:06:30:11:6e:b4:d6:92:4a: 52:c9:ab:c5:cb:b0:bc:d9:ab:49:f8:2a:13:68:df:22:be:5f: c2:cd:69:c6:7b:3e:7e:c8:67:fd:79:08:67:fa:12:96:4a:ea: bf:ef:fd:5f:ea:db:ed:7f:a0:98:5f:1d:21:a4:b7:6d:42:d3: 3b:c3:72:7e:93:0f:9e:53:b6:bb:a2:d4:8c:4d:eb:c1:3f:4a: da:50:39:da:44:2b:cf:cd:d4:10:c2:23:57:dd:0b:8f:72:81: a4:54:34:5f:88:85:26:f1:22:fa:77:50:85:e5:7d:82:f6:62: e0:de:52:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvteebw5BsPgcjVg1X8sE8yFe/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA5MDMxMDM1MTJaFw0yNjA5MDQxMjM0MTJaMDMxMTAvBgNV BAMTKDRGRDZEQkU3RkFDRDJENDY1OTAxNjU3RTUxN0VGN0MyNUMxRkJFRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/W4ftgo7mH73JWv+r2xhpq0w sqKvsFbpAqdvGRxv/8499DN+tbVZHcWN7DurZ+RnBMpVc4kSqbQokY2Gq8l+GkRr vHo9UwzcJINHSB9ZH/aymEVAxqO+E8q6gmNEKzI7e68E5NCj2hQ1OTPVj2ZIMdS0 8ZG8Ye5NO6yKXEdigTPuBfEw34+jnVmr9jzLpIY/HxhV18fJqwRnxQlknUzZhA2o kw8gU8l19WcMdtlqJ1+ZnHM94HAhYkVHhTvkME/is/HLKVmK5ibWWKZBVRTfenOp MNVi8ewEtwQ2d2LJlEzRqk6vk7QvHSzSwMY8+kps8S9oYF2hIqtkqFNMDMEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9bb5/rNLUZZAWV+UX73wlwfvtAwHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0NzPHgONAvQIIHH0PSMrCClTKh+fZoPFYs YMavqu8RzpzWnJXtfj8hkGZZ42E5gkCD5AhxbTQSqRuvvgTIm9xqmqacFxeZV9ng GfyGJIb6AhC04plx9ST0r6HjLCto4vsy2LdAm5Fa7cmke93FPH25w6aO4ONkhSH7 EJIj42yUJxYPYr+KxmgGMBFutNaSSlLJq8XLsLzZq0n4KhNo3yK+X8LNacZ7Pn7I Z/15CGf6EpZK6r/v/V/q2+1/oJhfHSGkt21C0zvDcn6TD55Ttrui1IxN68E/StpQ OdpEK8/N1BDCI1fdC49ygaRUNF+IhSbxIvp3UIXlfYL2YuDeUmE= -----END CERTIFICATE-----Generated at Thu Sep 3 20:08:11 2026 by rpki-client