$ rpki-client -vvf rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft File: 00BA333E1070BAC4039454B475BAA9D7802B83D6.mft (raw, json) Hash identifier: GGjVMMfqwjsmVDuud6/MMy28THMvG4U3BeUUezh5zCo= Subject key identifier: 14:F1:6A:53:92:F3:EE:84:FB:99:A0:76:E3:FD:29:D0:42:4F:3E:EE Authority key identifier: 00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 Certificate issuer: /CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Certificate serial: 6275BD13C57337E9C2CD0CA6C58C2221D37EA0BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 08:25:23 +0000 Manifest this update: Tue 02 Jun 2026 08:20:23 +0000 Manifest next update: Wed 03 Jun 2026 11:30:23 +0000 Files and hashes: 1: 3130332e3234342e3130372e302f32342d3234203d3e20313531353432.roa (hash: IhRU7xqMF7ymzp1jTbklUO54eBcVkN56coUh2E855Uc=) 2: 3130332e3234342e3130362e302f32342d3234203d3e20313531353432.roa (hash: u58hGkofFGWAycHfS2yt+5KkCwu1d003TmCn4MuzF24=) 3: 3130332e3234342e3130362e302f32332d3234203d3e20313531353432.roa (hash: TkJj4PfQ/aDGlDkDNfKuq4Lop3tC8gbIR74WO1bqwO8=) 4: 00BA333E1070BAC4039454B475BAA9D7802B83D6.crl (hash: PNbNJWPapZxO7aTVsIkD+1wUgBBns461mXDJbc19fVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:75:bd:13:c5:73:37:e9:c2:cd:0c:a6:c5:8c:22:21:d3:7e:a0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00BA333E1070BAC4039454B475BAA9D7802B83D6 Validity Not Before: Jun 2 08:20:23 2026 GMT Not After : Jun 3 11:30:23 2026 GMT Subject: CN=14F16A5392F3EE84FB99A076E3FD29D0424F3EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:fc:1f:a0:e1:0e:20:61:77:8e:52:77:53: 10:28:d7:9b:49:d6:fc:16:9c:f1:a7:49:9d:3a:c7: de:90:68:b4:f9:51:34:ff:a3:c6:d3:90:41:d0:eb: a4:80:27:72:a3:fe:c7:7e:86:83:e2:98:9b:b2:9a: c4:86:d4:d4:19:63:fb:af:b3:fa:47:76:cf:61:32: f5:aa:e3:f9:2f:76:8b:bc:47:16:ad:37:3e:f8:91: ab:bf:84:15:c4:34:95:3e:64:ee:49:d0:fa:4c:e8: eb:a0:51:7b:36:a4:f1:74:46:bf:8b:8d:05:ac:d4: 59:cb:13:37:25:fb:83:fb:5f:9b:7f:1c:3d:d6:6e: 63:6a:33:c7:ae:f8:60:3c:7a:0d:b8:7f:ed:e7:b7: d4:a0:ec:07:07:c6:8b:18:49:79:27:8e:9b:a5:23: 7b:32:08:4d:3d:16:c9:ed:ee:87:d6:46:75:1f:a8: ca:6f:62:16:c6:cb:57:4e:c6:91:09:7c:43:28:f4: 47:bb:5c:2d:00:71:1b:77:26:31:fd:3d:0e:bb:b2: d6:cb:92:ae:28:eb:98:e7:29:1d:58:19:bb:78:5f: 62:2e:49:be:67:5e:8e:28:bb:c8:13:dd:21:a3:51: 00:22:c4:12:88:39:93:4f:de:e6:28:44:58:e9:41: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F1:6A:53:92:F3:EE:84:FB:99:A0:76:E3:FD:29:D0:42:4F:3E:EE X509v3 Authority Key Identifier: keyid:00:BA:33:3E:10:70:BA:C4:03:94:54:B4:75:BA:A9:D7:80:2B:83:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/00BA333E1070BAC4039454B475BAA9D7802B83D6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80db0dec-f49a-4e7c-856b-b1f0540b1e25/0/00BA333E1070BAC4039454B475BAA9D7802B83D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5e:eb:3b:46:06:44:3e:8b:57:ca:c9:72:49:ff:8b:4e:71: 07:bc:ac:d1:07:ca:f9:09:fb:fc:af:78:13:05:8c:6b:44:39: 78:c3:fa:17:d4:e8:d3:e8:a0:60:c0:03:4d:3c:9b:0c:ff:c9: 45:12:78:8d:1a:23:97:35:0e:45:92:0f:30:af:2f:d9:96:30: 7c:e4:83:10:54:b9:38:eb:32:d6:98:2a:ae:fe:0e:49:11:2e: ad:61:d4:33:d7:e6:86:dc:99:91:55:95:28:a7:0f:a8:51:40: d1:43:58:bb:ce:fb:f6:87:0e:49:74:05:36:42:bd:80:bf:ec: c4:91:6d:2d:c4:12:38:10:2e:6e:0e:41:02:2d:f7:24:5d:54: 87:f9:8b:2f:62:1e:c1:74:4c:f2:9a:c3:69:67:f6:5e:dd:0b: d3:ac:ff:ac:a8:87:23:8f:01:01:da:04:89:01:bf:da:be:bb: 38:f5:c5:03:6f:1c:05:72:a3:39:ed:15:2c:8c:10:21:5d:8a: ad:37:39:ba:fb:b2:47:c2:93:54:e3:53:3c:b4:bb:35:8c:3f: b4:bd:c0:0b:59:66:ad:bc:66:d0:b4:fc:e2:38:5c:b6:5d:f4: 1b:bc:34:bf:15:c4:91:bb:6b:65:fb:34:25:8c:9e:3c:89:36: 93:1e:97:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnW9E8VzN+nCzQymxYwiIdN+oL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4 MDJCODNENjAeFw0yNjA2MDIwODIwMjNaFw0yNjA2MDMxMTMwMjNaMDMxMTAvBgNV BAMTKDE0RjE2QTUzOTJGM0VFODRGQjk5QTA3NkUzRkQyOUQwNDI0RjNFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuBvwfoOEOIGF3jlJ3UxAo15tJ 1vwWnPGnSZ06x96QaLT5UTT/o8bTkEHQ66SAJ3Kj/sd+hoPimJuymsSG1NQZY/uv s/pHds9hMvWq4/kvdou8RxatNz74kau/hBXENJU+ZO5J0PpM6OugUXs2pPF0Rr+L jQWs1FnLEzcl+4P7X5t/HD3WbmNqM8eu+GA8eg24f+3nt9Sg7AcHxosYSXknjpul I3syCE09Fsnt7ofWRnUfqMpvYhbGy1dOxpEJfEMo9Ee7XC0AcRt3JjH9PQ67stbL kq4o65jnKR1YGbt4X2IuSb5nXo4ou8gT3SGjUQAixBKIOZNP3uYoRFjpQcCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPFqU5Lz7oT7maB24/0p0EJPPu4wHwYDVR0j BBgwFoAUALozPhBwusQDlFS0dbqp14Arg9YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBkYjBkZWMtZjQ5YS00ZTdjLTg1NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0Ux MDcwQkFDNDAzOTQ1NEI0NzVCQUE5RDc4MDJCODNENi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMEJBMzMzRTEwNzBCQUM0MDM5NDU0QjQ3NUJBQTlENzgwMkI4 M0Q2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBkYjBkZWMtZjQ5YS00ZTdjLTg1 NmItYjFmMDU0MGIxZTI1LzAvMDBCQTMzM0UxMDcwQkFDNDAzOTQ1NEI0NzVCQUE5 RDc4MDJCODNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5e6ztGBkQ+i1fKyXJJ/4tOcQe8rNEHyvkJ +/yveBMFjGtEOXjD+hfU6NPooGDAA008mwz/yUUSeI0aI5c1DkWSDzCvL9mWMHzk gxBUuTjrMtaYKq7+DkkRLq1h1DPX5obcmZFVlSinD6hRQNFDWLvO+/aHDkl0BTZC vYC/7MSRbS3EEjgQLm4OQQIt9yRdVIf5iy9iHsF0TPKaw2ln9l7dC9Os/6yohyOP AQHaBIkBv9q+uzj1xQNvHAVyozntFSyMECFdiq03Obr7skfCk1TjUzy0uzWMP7S9 wAtZZq28ZtC0/OI4XLZd9Bu8NL8VxJG7a2X7NCWMnjyJNpMel4M= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:45 2026 by rpki-client