$ rpki-client -vvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: dndy/fYYLokwP/inqsGytP0CpLd77JLduo4HbVeHE1g= Subject key identifier: 7D:A9:21:66:0F:19:A5:9C:A7:9C:00:86:4A:EB:89:51:A3:52:CF:8E Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 68D73A5F1A21DA49251DFFAAA004D5C8922DE893 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: 14 Signing time: Sat 16 May 2026 07:38:43 +0000 Manifest this update: Sat 16 May 2026 07:33:43 +0000 Manifest next update: Sun 17 May 2026 11:26:43 +0000 Files and hashes: 1: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: T3SMoJQNhMRteQL0gruedhawYAZ/sOFPZ5QF0XpwvH8=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 09:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d7:3a:5f:1a:21:da:49:25:1d:ff:aa:a0:04:d5:c8:92:2d:e8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: May 16 07:33:43 2026 GMT Not After : May 17 11:26:43 2026 GMT Subject: CN=7DA921660F19A59CA79C00864AEB8951A352CF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:aa:b7:b8:17:ce:39:0d:fb:d9:56:6f:6d: 11:1a:c7:a3:d0:fa:a8:4d:0d:a1:ae:94:94:7f:4f: c6:f1:be:63:c4:4b:c1:8a:94:a1:90:29:bd:86:a3: 06:ca:36:23:ca:71:27:c0:2b:91:46:9f:df:e4:26: 52:94:fa:ed:2f:5f:05:e8:d1:1f:79:ee:91:be:72: 64:66:97:5c:e0:9d:2e:9e:6a:61:1f:91:41:e0:1b: 93:ea:0c:a9:a6:b1:ea:98:db:11:1b:84:12:b5:45: ce:1c:cf:7c:ef:4a:71:26:ae:bc:8f:78:73:13:3e: 15:45:90:26:ea:fb:0a:74:57:e6:94:1c:89:58:06: 86:b2:5c:a5:59:9b:13:2a:e8:3a:83:83:e3:d2:0f: 52:0d:8e:16:b4:69:e1:25:3d:c9:a2:6e:a6:4b:eb: f4:41:4d:82:1a:28:e8:fe:40:1c:5a:39:50:b8:68: b8:7c:3d:2e:0a:90:0f:d7:51:d8:b6:73:7e:93:81: 9a:01:2b:71:15:9f:da:6f:89:55:d9:dc:bb:f2:96: 22:57:f5:e8:d7:6a:0e:c2:01:06:ef:7c:ac:30:d4: 49:1d:15:e9:52:71:b0:39:d6:9b:ff:38:02:58:b0: 90:a5:00:48:ec:bf:67:17:b7:11:93:49:29:d3:fb: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:21:66:0F:19:A5:9C:A7:9C:00:86:4A:EB:89:51:A3:52:CF:8E X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e8:f9:c5:ad:3c:c4:e0:f0:ff:6e:9a:76:4f:f6:ac:97:69: ed:10:65:be:06:90:df:85:60:75:cf:76:a8:6d:53:e7:d5:b2: 79:18:c6:c7:62:0e:17:68:0c:28:e1:8e:29:08:35:4d:fd:0f: 27:61:6d:e0:f4:69:ea:c6:e3:4e:b9:e6:73:ce:a2:70:c8:43: 5a:b6:e3:0a:f0:c2:d7:6b:39:33:9d:fe:ef:a9:80:39:b7:17: 3a:ce:20:71:8e:d1:10:02:e4:ff:fd:ce:5a:0b:31:32:5e:df: c7:0b:b1:e8:2d:60:95:3d:50:6d:83:23:18:aa:92:9a:d7:fb: b5:62:66:25:75:9a:a9:d5:fa:51:d6:a0:5c:2c:55:6a:1c:a0: df:35:af:0e:35:a9:9d:00:79:98:98:e4:98:e8:c4:7f:ae:15: 3a:25:91:ae:72:9e:40:f1:1c:79:a4:11:0a:ef:08:d6:5c:ae: 67:23:ea:87:c0:b3:ca:09:5b:c7:9e:cd:db:57:59:98:86:3c: cf:cb:0e:2f:0d:41:dc:30:ea:63:4c:2b:eb:42:06:95:85:e1: d5:23:31:2b:0a:95:75:c2:be:1d:be:06:dc:ba:71:6f:73:54: c8:1a:1e:3e:ff:68:d4:c3:ef:ea:6e:19:a9:28:33:ce:1e:e5: 2d:e7:7f:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNc6Xxoh2kklHf+qoATVyJIt6JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA1MTYwNzMzNDNaFw0yNjA1MTcxMTI2NDNaMDMxMTAvBgNV BAMTKDdEQTkyMTY2MEYxOUE1OUNBNzlDMDA4NjRBRUI4OTUxQTM1MkNGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU+6q3uBfOOQ372VZvbREax6PQ +qhNDaGulJR/T8bxvmPES8GKlKGQKb2GowbKNiPKcSfAK5FGn9/kJlKU+u0vXwXo 0R957pG+cmRml1zgnS6eamEfkUHgG5PqDKmmseqY2xEbhBK1Rc4cz3zvSnEmrryP eHMTPhVFkCbq+wp0V+aUHIlYBoayXKVZmxMq6DqDg+PSD1INjha0aeElPcmibqZL 6/RBTYIaKOj+QBxaOVC4aLh8PS4KkA/XUdi2c36TgZoBK3EVn9pviVXZ3LvyliJX 9ejXag7CAQbvfKww1EkdFelScbA51pv/OAJYsJClAEjsv2cXtxGTSSnT+zklAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfakhZg8ZpZynnACGSuuJUaNSz44wHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADro+cWtPMTg8P9umnZP9qyXae0QZb4GkN+F YHXPdqhtU+fVsnkYxsdiDhdoDCjhjikINU39DydhbeD0aerG40655nPOonDIQ1q2 4wrwwtdrOTOd/u+pgDm3FzrOIHGO0RAC5P/9zloLMTJe38cLsegtYJU9UG2DIxiq kprX+7ViZiV1mqnV+lHWoFwsVWocoN81rw41qZ0AeZiY5JjoxH+uFTolka5ynkDx HHmkEQrvCNZcrmcj6ofAs8oJW8eezdtXWZiGPM/LDi8NQdww6mNMK+tCBpWF4dUj MSsKlXXCvh2+Bty6cW9zVMgaHj7/aNTD7+puGakoM84e5S3nf4w= -----END CERTIFICATE-----Generated at Sat May 16 16:40:16 2026 by rpki-client