$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: rasi6ROl76t9D5ab2fntUC5+AdisnEx6nJh3qsEO7YQ= Subject key identifier: 84:EE:44:82:18:83:6A:80:3D:E1:3F:4A:1B:12:0B:2F:81:A6:E5:FD Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 0196AB20845620207AAB26D848F1E33248AB1CBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: 14 Signing time: Sat 16 May 2026 15:08:12 +0000 Manifest this update: Sat 16 May 2026 15:03:12 +0000 Manifest next update: Sun 17 May 2026 18:16:12 +0000 Files and hashes: 1: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: bOhpCaAwtCxxb2IsxWw818TYPaboyXz9pTsDL7sxMA0=) 2: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 3: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) 4: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:ab:20:84:56:20:20:7a:ab:26:d8:48:f1:e3:32:48:ab:1c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: May 16 15:03:12 2026 GMT Not After : May 17 18:16:12 2026 GMT Subject: CN=84EE448218836A803DE13F4A1B120B2F81A6E5FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0d:e8:b6:89:28:33:70:33:81:97:3b:9d:16: ba:0b:f2:8e:cd:54:f5:2a:86:d0:14:7b:65:3e:ac: e8:8a:60:ad:39:66:7c:cb:68:f8:cf:bb:5f:04:cc: 06:7b:e7:0e:be:92:0e:b4:ae:82:46:95:85:bc:de: b8:59:d1:21:19:65:89:8f:25:7f:0b:ed:39:02:20: 74:06:72:a6:7d:ec:d1:ae:c3:8f:6e:ec:d1:03:10: 40:64:c5:61:e9:ff:8b:7f:80:c7:f1:e3:1a:28:e2: 8d:6e:26:b2:33:eb:a9:49:03:c4:b9:ef:46:c2:bc: 33:2a:33:6b:70:52:a7:14:3b:38:2c:e3:e5:82:5e: 57:49:d6:29:5a:d9:af:ec:47:1d:1a:f4:ba:9b:9d: df:5d:f6:44:c1:54:18:fd:36:cb:82:56:d2:dc:0b: c1:0b:1c:02:38:79:6d:ce:c8:9c:9a:dd:14:d9:53: 17:14:3e:0f:f2:e9:b5:19:d8:74:bb:6f:19:f7:53: 7c:96:12:7e:65:20:dd:4b:b5:b9:f9:d8:e6:18:5e: c7:55:a9:f6:34:8a:ff:91:48:af:10:8a:df:12:38: a0:e9:e8:96:73:9e:47:20:27:cb:4c:79:a1:63:02: 09:16:80:85:bf:c0:5b:b6:fd:63:21:e9:f2:ce:17: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EE:44:82:18:83:6A:80:3D:E1:3F:4A:1B:12:0B:2F:81:A6:E5:FD X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4f:6d:ec:9a:ab:27:3d:fa:26:94:93:47:a6:81:f1:03:79: 62:d1:fb:5d:7b:e1:d8:88:cb:cd:75:06:38:b1:44:5c:5f:c6: 80:bc:34:b7:f1:5b:21:8c:0a:de:95:27:ad:31:6a:35:33:ea: f3:86:a3:22:fa:c6:c8:89:a9:eb:aa:4c:4e:65:cd:d0:ce:21: a7:0f:90:e4:29:3b:d5:77:e2:ad:53:e2:04:d4:cb:52:80:b9: c5:7d:d3:88:4f:0b:17:a5:d2:96:db:1d:f1:03:e1:e4:96:d7: 05:db:84:66:d0:b5:e4:24:02:96:15:69:ad:43:27:5b:2c:8d: f9:00:3f:90:6a:72:a2:11:fb:9a:d4:d1:7f:d3:ca:17:28:67: 21:ca:1e:2e:8d:a0:f4:8a:0d:a9:2d:9b:b3:84:d4:6e:fd:e2: 6b:6f:19:8a:2d:dd:ac:5f:25:de:08:78:c8:73:bf:85:cc:c1: af:fb:b5:8f:d0:6d:38:80:12:fd:6f:66:c1:ba:99:c4:28:fd: 99:ad:54:36:cc:14:28:37:44:49:dd:8e:bb:7c:86:66:e2:7f: 52:28:dd:07:35:03:82:6e:b3:20:79:84:c0:cb:a1:f6:05:cd: fb:84:2c:f9:5e:f1:7d:aa:0e:03:5b:e4:d3:36:19:6c:be:67: 95:73:78:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZarIIRWICB6qybYSPHjMkirHL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA1MTYxNTAzMTJaFw0yNjA1MTcxODE2MTJaMDMxMTAvBgNV BAMTKDg0RUU0NDgyMTg4MzZBODAzREUxM0Y0QTFCMTIwQjJGODFBNkU1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Dei2iSgzcDOBlzudFroL8o7N VPUqhtAUe2U+rOiKYK05ZnzLaPjPu18EzAZ75w6+kg60roJGlYW83rhZ0SEZZYmP JX8L7TkCIHQGcqZ97NGuw49u7NEDEEBkxWHp/4t/gMfx4xoo4o1uJrIz66lJA8S5 70bCvDMqM2twUqcUOzgs4+WCXldJ1ila2a/sRx0a9Lqbnd9d9kTBVBj9NsuCVtLc C8ELHAI4eW3OyJya3RTZUxcUPg/y6bUZ2HS7bxn3U3yWEn5lIN1Ltbn52OYYXsdV qfY0iv+RSK8Qit8SOKDp6JZznkcgJ8tMeaFjAgkWgIW/wFu2/WMh6fLOF84DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhO5EghiDaoA94T9KGxILL4Gm5f0wHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZPbeyaqyc9+iaUk0emgfEDeWLR+1174diI y811BjixRFxfxoC8NLfxWyGMCt6VJ60xajUz6vOGoyL6xsiJqeuqTE5lzdDOIacP kOQpO9V34q1T4gTUy1KAucV904hPCxel0pbbHfED4eSW1wXbhGbQteQkApYVaa1D J1ssjfkAP5BqcqIR+5rU0X/TyhcoZyHKHi6NoPSKDaktm7OE1G794mtvGYot3axf Jd4IeMhzv4XMwa/7tY/QbTiAEv1vZsG6mcQo/ZmtVDbMFCg3REndjrt8hmbif1Io 3Qc1A4JusyB5hMDLofYFzfuELPle8X2qDgNb5NM2GWy+Z5VzeBc= -----END CERTIFICATE-----Generated at Sun May 17 02:26:19 2026 by rpki-client