$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: WPvAf1Ret3GH0DggocH9Wc6JUviAPMVRk5ZDQHTIO8g= Subject key identifier: D8:B9:89:F7:D1:26:DA:50:D7:EA:65:A9:6B:4A:AC:C3:E2:7B:D8:41 Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 2D3178983181DF6FC62B1CF7BE0980DAF4AF0B59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: 55 Signing time: Sat 04 Jul 2026 05:39:24 +0000 Manifest this update: Sat 04 Jul 2026 05:34:24 +0000 Manifest next update: Sun 05 Jul 2026 07:47:24 +0000 Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 2: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: xxpIIf/R+hUGW6XGAdygJ0CykntYSrpN424TQ23ycGQ=) 3: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) 4: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 05:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:31:78:98:31:81:df:6f:c6:2b:1c:f7:be:09:80:da:f4:af:0b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Jul 4 05:34:24 2026 GMT Not After : Jul 5 07:47:24 2026 GMT Subject: CN=D8B989F7D126DA50D7EA65A96B4AACC3E27BD841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:67:5c:ad:db:7e:2c:8f:a8:c1:4f:fa:96: b0:06:af:ed:0b:90:62:7f:e8:6c:b2:02:b7:9e:0b: f2:db:80:9e:97:7b:fa:b8:28:8f:4f:a4:6f:d9:73: 03:74:7b:a4:8a:2a:a2:30:23:6c:db:f6:fd:7f:7d: 8f:76:0e:41:98:d9:a3:f4:3f:7d:4f:10:ab:16:e5: 71:e9:1f:5d:cf:05:b6:cf:91:ff:a9:a2:6a:e6:95: 90:18:6e:2d:67:90:04:c8:fb:e9:52:53:e1:38:57: cd:08:3c:b5:97:fb:87:c3:84:f8:ac:d6:ba:9d:25: c0:c3:bb:cc:f8:1e:b6:d5:69:80:6f:f0:1f:87:3b: 1a:e4:a8:02:e1:67:c7:d1:25:8c:98:eb:52:c9:43: d1:76:57:f2:15:65:10:a2:0d:1a:d5:af:b0:77:8f: 15:36:c1:11:48:a8:c8:fc:05:c8:29:d0:32:ca:f2: 07:12:94:23:18:83:3a:d6:63:62:12:25:21:a7:dd: 7a:a4:16:a4:29:ae:61:b0:e6:8c:2a:67:9b:8a:87: 11:e4:72:01:34:e4:5f:60:fd:0c:19:47:70:44:2b: 99:eb:88:0d:b2:17:d8:73:90:08:61:b2:43:d1:ac: 72:79:bc:30:c6:64:90:ba:56:8e:71:42:90:3b:9d: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B9:89:F7:D1:26:DA:50:D7:EA:65:A9:6B:4A:AC:C3:E2:7B:D8:41 X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9d:75:24:86:b6:1e:9a:ad:3d:44:e7:a4:d3:68:6f:e0:0e: f2:2b:3e:44:6b:3d:e0:de:ab:2a:c6:0a:f1:65:f8:ff:61:67: 0f:a6:b6:85:82:83:44:5b:11:6f:a4:88:04:21:06:d1:8f:ae: b4:70:b9:ba:74:13:a5:b7:46:6b:98:12:b8:ec:df:d5:11:eb: 0a:31:b9:78:8c:cd:7b:a4:3c:bd:4a:4f:33:2e:48:ab:24:30: 53:db:2c:0f:bd:68:d4:3a:47:be:3c:48:33:ad:da:8f:ea:ed: 4a:43:5b:a8:09:fa:01:18:da:11:ae:72:18:80:45:4a:98:55: 23:2e:3d:d5:65:3f:44:46:b0:88:ab:d3:93:00:d9:e1:97:4d: 10:83:db:83:cd:94:1a:41:bb:f6:83:07:70:14:72:b2:69:0c: 8f:0a:cb:4f:c2:89:2b:24:33:68:36:51:dc:c6:eb:45:25:27: 0c:42:05:98:51:b1:27:60:43:f0:24:7f:42:c9:60:2f:16:9e: de:cb:05:62:5e:cd:4e:f5:c6:0b:08:e7:df:a8:e0:50:c8:99: 62:48:aa:52:51:1b:9d:02:70:23:bc:0e:6e:82:9c:8d:04:33: 60:1b:a6:02:33:3f:fe:c4:34:04:78:ad:97:53:9e:b3:69:70: c2:d6:02:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTF4mDGB32/GKxz3vgmA2vSvC1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA3MDQwNTM0MjRaFw0yNjA3MDUwNzQ3MjRaMDMxMTAvBgNV BAMTKEQ4Qjk4OUY3RDEyNkRBNTBEN0VBNjVBOTZCNEFBQ0MzRTI3QkQ4NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2O2dcrdt+LI+owU/6lrAGr+0L kGJ/6GyyAreeC/LbgJ6Xe/q4KI9PpG/ZcwN0e6SKKqIwI2zb9v1/fY92DkGY2aP0 P31PEKsW5XHpH13PBbbPkf+pomrmlZAYbi1nkATI++lSU+E4V80IPLWX+4fDhPis 1rqdJcDDu8z4HrbVaYBv8B+HOxrkqALhZ8fRJYyY61LJQ9F2V/IVZRCiDRrVr7B3 jxU2wRFIqMj8Bcgp0DLK8gcSlCMYgzrWY2ISJSGn3XqkFqQprmGw5owqZ5uKhxHk cgE05F9g/QwZR3BEK5nriA2yF9hzkAhhskPRrHJ5vDDGZJC6Vo5xQpA7nSUlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2LmJ99Em2lDX6mWpa0qsw+J72EEwHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2ddSSGth6arT1E56TTaG/gDvIrPkRrPeDe qyrGCvFl+P9hZw+mtoWCg0RbEW+kiAQhBtGPrrRwubp0E6W3RmuYErjs39UR6wox uXiMzXukPL1KTzMuSKskMFPbLA+9aNQ6R748SDOt2o/q7UpDW6gJ+gEY2hGuchiA RUqYVSMuPdVlP0RGsIir05MA2eGXTRCD24PNlBpBu/aDB3AUcrJpDI8Ky0/CiSsk M2g2UdzG60UlJwxCBZhRsSdgQ/Akf0LJYC8Wnt7LBWJezU71xgsI59+o4FDImWJI qlJRG50CcCO8Dm6CnI0EM2AbpgIzP/7ENAR4rZdTnrNpcMLWAlM= -----END CERTIFICATE-----Generated at Sat Jul 4 17:05:35 2026 by rpki-client