$ rpki-client -vvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: FxT4Ub492Fn5IdmG/r+L960Jtnh2AJJz8gl8ZKFwi6E= Subject key identifier: 40:60:C5:36:E1:A3:5D:DC:32:BC:CF:C3:32:2C:56:02:CD:D2:DE:C4 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 261882F571F59A0B9CAE7E8A0E2D5EE2211B2F46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:31:30 +0000 Manifest this update: Tue 21 Jul 2026 00:26:30 +0000 Manifest next update: Wed 22 Jul 2026 00:39:30 +0000 Files and hashes: 1: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: E2SWnFtsumtWOXDOFTMOf7fmodCLNLtg7NVItJ+FeVA=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:18:82:f5:71:f5:9a:0b:9c:ae:7e:8a:0e:2d:5e:e2:21:1b:2f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Jul 21 00:26:30 2026 GMT Not After : Jul 22 00:39:30 2026 GMT Subject: CN=4060C536E1A35DDC32BCCFC3322C5602CDD2DEC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:63:76:33:7c:1a:a3:02:ba:3e:71:19:34:3b: 60:d5:11:15:57:89:46:2f:ce:ae:20:38:f4:89:c2: 17:c4:82:c6:2c:83:68:29:34:76:c3:66:32:fe:6f: e0:8a:79:5f:58:cb:a5:70:e0:74:19:ed:2a:41:16: dc:89:1d:fa:c6:b2:a0:d1:49:92:01:f4:ff:2e:5e: 0e:a5:35:c8:2b:20:cd:0f:f7:bd:c4:e8:82:11:cb: ce:30:09:9b:b4:17:4b:44:43:60:02:98:d8:28:fd: da:cd:ac:35:18:b7:ee:25:f4:73:02:5a:26:fd:4a: 8c:12:06:39:92:86:98:2c:8e:71:b5:ac:6a:5a:a7: 31:5c:9c:f2:e7:14:ca:58:9d:bc:8c:83:06:3b:ee: 2b:97:ac:11:9d:2a:60:2b:57:58:31:3b:9a:4e:62: 25:3e:e9:f6:4b:24:ea:eb:b4:73:86:21:88:f8:8c: 0d:75:ea:5a:aa:5b:75:3c:e9:37:21:c1:e8:3f:15: 9c:dc:1d:f3:29:0e:43:7c:e5:07:eb:15:1a:26:58: 6d:7c:fb:bb:51:f7:41:f1:df:7d:a5:8a:77:ce:4a: ca:a8:cf:83:fd:af:a6:81:30:de:71:44:81:2f:4a: bc:e5:03:81:ba:fa:70:b7:7c:0d:aa:d9:d9:fd:1d: 11:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:60:C5:36:E1:A3:5D:DC:32:BC:CF:C3:32:2C:56:02:CD:D2:DE:C4 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d3:9f:24:bc:4d:a6:42:15:e9:87:e0:69:ac:61:fc:88:34: 22:91:eb:42:26:b3:28:06:04:8a:3b:e7:fd:99:e5:91:5e:11: 74:3d:26:34:fb:1b:48:cb:47:89:fc:28:78:95:6c:ec:83:04: ec:a6:93:bb:76:31:a3:29:6e:e2:be:35:91:c9:ff:c5:83:d4: 79:a6:5d:a6:8e:fa:c8:63:e9:f4:57:99:1c:03:36:08:cb:13: d8:6e:ff:f0:f2:1f:22:d7:87:53:a3:4f:d8:93:b3:1c:c5:0c: 8e:e5:e8:a2:7b:21:17:2d:44:d4:1c:0a:8b:0f:f2:35:c5:be: 67:31:a1:7e:7b:51:48:fe:92:b1:c9:0a:62:14:89:c7:09:04: f9:f6:c9:00:b1:6c:cf:02:c2:6f:8c:e4:52:e8:93:ed:2f:3a: a8:34:1d:90:72:b3:c9:52:0a:fd:f4:7f:94:18:bb:bb:bf:78: cc:69:c8:2f:32:50:79:6f:b3:7b:36:61:e4:fe:a1:67:57:13: 7b:bc:ab:56:5b:89:a3:6e:28:9a:73:fd:be:aa:ba:c9:3b:e3: 76:04:6f:dd:2c:18:82:76:85:08:26:3b:84:33:e0:e4:9e:29: fb:6c:94:69:1e:39:3c:3e:e2:a1:f6:95:d8:31:72:16:af:2d: 25:c7:a4:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhiC9XH1mgucrn6KDi1e4iEbL0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA3MjEwMDI2MzBaFw0yNjA3MjIwMDM5MzBaMDMxMTAvBgNV BAMTKDQwNjBDNTM2RTFBMzVEREMzMkJDQ0ZDMzMyMkM1NjAyQ0REMkRFQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdY3YzfBqjAro+cRk0O2DVERVX iUYvzq4gOPSJwhfEgsYsg2gpNHbDZjL+b+CKeV9Yy6Vw4HQZ7SpBFtyJHfrGsqDR SZIB9P8uXg6lNcgrIM0P973E6IIRy84wCZu0F0tEQ2ACmNgo/drNrDUYt+4l9HMC Wib9SowSBjmShpgsjnG1rGpapzFcnPLnFMpYnbyMgwY77iuXrBGdKmArV1gxO5pO YiU+6fZLJOrrtHOGIYj4jA116lqqW3U86Tchweg/FZzcHfMpDkN85QfrFRomWG18 +7tR90Hx332linfOSsqoz4P9r6aBMN5xRIEvSrzlA4G6+nC3fA2q2dn9HRExAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGDFNuGjXdwyvM/DMixWAs3S3sQwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/TnyS8TaZCFemH4GmsYfyINCKR60ImsygG BIo75/2Z5ZFeEXQ9JjT7G0jLR4n8KHiVbOyDBOymk7t2MaMpbuK+NZHJ/8WD1Hmm XaaO+shj6fRXmRwDNgjLE9hu//DyHyLXh1OjT9iTsxzFDI7l6KJ7IRctRNQcCosP 8jXFvmcxoX57UUj+krHJCmIUiccJBPn2yQCxbM8Cwm+M5FLok+0vOqg0HZBys8lS Cv30f5QYu7u/eMxpyC8yUHlvs3s2YeT+oWdXE3u8q1ZbiaNuKJpz/b6qusk743YE b90sGIJ2hQgmO4Qz4OSeKftslGkeOTw+4qH2ldgxchavLSXHpC4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:49:39 2026 by rpki-client