$ rpki-client -vvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json) Hash identifier: QngZxVokeCzTVwEfEYZrk5+OsJ33AgFlR6f8bu17R/o= Subject key identifier: F0:BD:0F:0D:3E:79:58:69:C6:A9:55:44:0F:0C:EB:A4:D6:03:F6:0E Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Certificate serial: 24BDBE98FCAD3BA4BCC0A01E645D4DFCAAADD8DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 13:38:22 +0000 Manifest this update: Mon 20 Jul 2026 13:33:22 +0000 Manifest next update: Tue 21 Jul 2026 17:14:22 +0000 Files and hashes: 1: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=) 2: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: AJaqIeCmsaE36F+E1BH9P0PiAko8oW/bNvKnew4NGq4=) 3: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=) 4: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=) 5: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bd:be:98:fc:ad:3b:a4:bc:c0:a0:1e:64:5d:4d:fc:aa:ad:d8:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Validity Not Before: Jul 20 13:33:22 2026 GMT Not After : Jul 21 17:14:22 2026 GMT Subject: CN=F0BD0F0D3E795869C6A955440F0CEBA4D603F60E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:a6:79:6b:09:44:88:52:d6:54:5d:61:94: 1c:cf:3d:ef:b7:47:50:d9:ff:10:ed:60:6c:5a:45: 32:57:81:5d:6f:f0:aa:87:b1:b0:5b:7c:c8:1e:85: ac:4a:d4:ed:6a:00:33:a8:04:86:00:4e:b4:5e:88: b4:d2:e7:2a:bf:47:9b:34:69:ca:3d:76:3f:e0:7c: 0a:27:dd:dc:c8:ed:66:51:84:98:e9:55:b3:c2:7e: 31:9f:44:23:2c:87:ee:cb:41:a2:7c:26:e5:74:48: f6:74:89:9d:d5:15:5f:eb:38:f6:7d:37:97:38:9a: d4:2e:a8:25:2b:56:d4:a5:03:47:c9:cf:e9:a2:2f: 85:2a:3c:6a:16:9a:6d:d2:f3:d3:de:54:e5:d9:82: 04:56:41:de:22:bc:90:44:92:66:eb:b9:65:96:aa: f7:8a:bd:f4:d1:ea:eb:44:08:fe:c1:e6:96:5e:57: 06:64:88:ed:f4:82:85:92:ba:8b:95:a8:6b:23:f4: 5b:85:0d:f2:46:f5:8c:05:13:9d:21:fd:00:bc:3f: 00:b6:6b:75:23:5d:27:ff:89:ec:62:40:d5:aa:8f: 84:28:cb:56:28:c8:63:87:65:5e:1c:aa:40:55:c7: 42:6a:b0:fb:88:c6:4d:e2:08:2b:71:f5:7d:e9:8d: 1a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BD:0F:0D:3E:79:58:69:C6:A9:55:44:0F:0C:EB:A4:D6:03:F6:0E X509v3 Authority Key Identifier: keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:19:35:5e:ec:6b:93:cd:ca:4b:1d:79:cb:e6:8d:ab:0c:0e: c5:96:4c:5b:d2:8a:07:d6:03:c4:08:2d:cb:3e:75:c2:5b:35: ce:fd:13:be:74:ee:a1:d6:08:9f:b1:20:d2:e2:cb:5a:3d:f5: 23:c2:1b:15:c3:48:42:37:0d:1a:5a:3b:57:f2:89:6d:b3:d5: 82:26:7d:53:0b:0d:03:71:54:52:83:d0:ec:a3:fa:81:d3:fb: 28:6e:82:1f:5b:7f:a3:11:f6:c4:a6:70:b1:d6:eb:13:85:95: 1f:f0:e6:5d:ab:5a:e8:c1:38:83:38:68:f5:86:59:be:5e:3b: eb:d1:1f:28:97:25:fe:bb:7e:cc:f1:99:ec:8a:b0:75:7b:59: 29:02:47:a9:f4:e4:e0:fa:17:76:15:6f:dd:30:16:31:b7:bc: 83:df:8c:86:d3:e1:7f:5f:97:1a:7f:f2:47:89:75:fa:4f:9a: b1:1e:19:d1:6d:fa:fd:0d:2d:7c:7d:b7:29:11:fa:53:ba:fc: 6b:a8:8a:d6:f4:41:08:c3:cc:92:f4:3a:c9:03:34:6d:29:8b: 47:17:23:5a:d3:ae:4f:91:72:84:6e:50:0a:ff:6f:87:39:54: 37:04:71:03:f0:81:b6:3a:58:dc:12:14:d8:55:fb:4f:03:81: 39:b9:a9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJL2+mPytO6S8wKAeZF1N/Kqt2NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4 QjRFRTc1MDAeFw0yNjA3MjAxMzMzMjJaFw0yNjA3MjExNzE0MjJaMDMxMTAvBgNV BAMTKEYwQkQwRjBEM0U3OTU4NjlDNkE5NTU0NDBGMENFQkE0RDYwM0Y2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvV6Z5awlEiFLWVF1hlBzPPe+3 R1DZ/xDtYGxaRTJXgV1v8KqHsbBbfMgehaxK1O1qADOoBIYATrReiLTS5yq/R5s0 aco9dj/gfAon3dzI7WZRhJjpVbPCfjGfRCMsh+7LQaJ8JuV0SPZ0iZ3VFV/rOPZ9 N5c4mtQuqCUrVtSlA0fJz+miL4UqPGoWmm3S89PeVOXZggRWQd4ivJBEkmbruWWW qveKvfTR6utECP7B5pZeVwZkiO30goWSuouVqGsj9FuFDfJG9YwFE50h/QC8PwC2 a3UjXSf/iexiQNWqj4Qoy1YoyGOHZV4cqkBVx0JqsPuIxk3iCCtx9X3pjRoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8L0PDT55WGnGqVVEDwzrpNYD9g4wHwYDVR0j BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVG N0I4QjRFRTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAZNV7sa5PNyksdecvmjasMDsWWTFvSigfW A8QILcs+dcJbNc79E7507qHWCJ+xINLiy1o99SPCGxXDSEI3DRpaO1fyiW2z1YIm fVMLDQNxVFKD0Oyj+oHT+yhugh9bf6MR9sSmcLHW6xOFlR/w5l2rWujBOIM4aPWG Wb5eO+vRHyiXJf67fszxmeyKsHV7WSkCR6n05OD6F3YVb90wFjG3vIPfjIbT4X9f lxp/8keJdfpPmrEeGdFt+v0NLXx9tykR+lO6/Guoitb0QQjDzJL0OskDNG0pi0cX I1rTrk+RcoRuUAr/b4c5VDcEcQPwgbY6WNwSFNhV+08DgTm5qWU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:33 2026 by rpki-client