$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: 8F1DMD5N7SlcCmrZlpMzwQ7Iyx0XrNj57pLOLqxjbWI= Subject key identifier: B6:DC:01:7C:F6:00:1B:81:C0:C9:05:DF:13:1E:CC:B0:05:77:C0:6A Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 2390555DAED9AE14918EF75C99DDC621AC1B5A70 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 07:09:49 +0000 Manifest this update: Tue 21 Jul 2026 07:04:49 +0000 Manifest next update: Wed 22 Jul 2026 08:58:49 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: +1Uj5j5l+FByZnVUQtaU4BfI2G6oT+ae3MA3PxhSDO0=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:90:55:5d:ae:d9:ae:14:91:8e:f7:5c:99:dd:c6:21:ac:1b:5a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Jul 21 07:04:49 2026 GMT Not After : Jul 22 08:58:49 2026 GMT Subject: CN=B6DC017CF6001B81C0C905DF131ECCB00577C06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:55:9e:e9:31:f2:b4:9d:7b:be:44:d7:1d: 35:57:ba:81:bb:a1:9b:2f:b4:ef:0d:12:4b:4a:53: 0a:f1:f6:44:e4:9c:54:65:e9:0d:ca:65:e9:95:cc: d6:16:85:e3:70:21:7e:ee:9b:bf:2c:a4:18:68:13: cc:83:c5:05:57:3e:a9:ad:c6:a5:c2:4f:d7:22:3d: 6f:12:24:3e:2d:48:a6:50:44:d3:9f:05:b2:15:ea: 0d:c6:1a:a6:a2:d8:0a:e7:f1:cd:dc:b4:63:24:c0: 16:c9:74:99:fe:c8:64:71:41:52:89:78:f5:4f:15: 5f:22:3c:c4:92:22:63:7b:d0:99:9f:dc:5e:f7:83: 17:fd:32:d5:7a:5e:e8:07:c9:e4:8b:9c:0b:1b:e1: 5c:61:c5:83:78:3c:65:a4:68:ad:ae:b1:9b:f6:2d: 47:b9:99:29:78:b1:19:40:ea:c6:a6:3d:7a:73:ce: a9:07:51:2c:5a:25:54:9d:99:c3:5d:f0:d6:42:43: 4a:71:65:d7:23:d7:f5:76:c0:72:24:1e:c8:00:43: 68:98:c2:42:74:1c:8a:36:e1:0b:85:d8:eb:4d:35: c2:39:d2:2d:1e:1c:84:ce:50:85:af:c2:a4:4e:77: 2d:1f:b6:1d:2a:8c:33:4c:7c:7e:81:2b:e9:04:89: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DC:01:7C:F6:00:1B:81:C0:C9:05:DF:13:1E:CC:B0:05:77:C0:6A X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c9:e0:25:27:50:03:05:41:01:0e:c8:0c:b3:ac:af:03:55: ab:50:85:47:1a:8a:33:65:d4:de:83:d3:69:d2:ea:c9:ac:fe: 90:14:8e:44:71:b5:69:a8:bf:8b:d8:9e:6e:40:9a:fc:0d:2b: 43:a6:2a:fd:04:8f:65:c0:0e:97:72:2d:ea:30:0d:ec:0d:ed: 8b:f1:ba:c3:48:82:4d:57:f2:c9:0e:b6:36:e7:b0:1c:e0:fb: 4b:5f:d4:2a:29:12:fe:24:c7:fd:b4:85:65:cb:59:9a:e1:8b: 6f:6a:b8:68:f9:5c:34:77:25:96:20:2c:5f:92:c2:21:1e:81: 76:2c:b6:ea:c6:ff:21:20:7c:4d:c4:db:18:00:93:a5:62:86: 11:93:44:2c:b3:1b:7b:70:bc:d5:c7:00:00:72:dc:9c:cd:e3: 43:bb:45:32:96:c0:e6:ec:0b:4c:0a:c5:a0:c6:04:5e:52:f0: e4:36:38:db:73:19:c5:27:b1:c7:b4:46:2e:85:35:3c:2e:49: 68:83:1d:29:71:ac:5a:00:47:42:0c:40:05:48:ae:b9:65:dd: db:0b:24:57:fc:3a:3c:22:93:08:fc:59:e2:76:4b:ee:fb:5e: 75:66:e1:b4:8d:7f:4a:28:fe:85:2c:8f:bd:a7:84:58:62:51: 53:4d:99:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5BVXa7ZrhSRjvdcmd3GIawbWnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjA3MjEwNzA0NDlaFw0yNjA3MjIwODU4NDlaMDMxMTAvBgNV BAMTKEI2REMwMTdDRjYwMDFCODFDMEM5MDVERjEzMUVDQ0IwMDU3N0MwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLFWe6THytJ17vkTXHTVXuoG7 oZsvtO8NEktKUwrx9kTknFRl6Q3KZemVzNYWheNwIX7um78spBhoE8yDxQVXPqmt xqXCT9ciPW8SJD4tSKZQRNOfBbIV6g3GGqai2Arn8c3ctGMkwBbJdJn+yGRxQVKJ ePVPFV8iPMSSImN70Jmf3F73gxf9MtV6XugHyeSLnAsb4VxhxYN4PGWkaK2usZv2 LUe5mSl4sRlA6samPXpzzqkHUSxaJVSdmcNd8NZCQ0pxZdcj1/V2wHIkHsgAQ2iY wkJ0HIo24QuF2OtNNcI50i0eHITOUIWvwqROdy0fth0qjDNMfH6BK+kEiU4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttwBfPYAG4HAyQXfEx7MsAV3wGowHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrJ4CUnUAMFQQEOyAyzrK8DVatQhUcaijNl 1N6D02nS6sms/pAUjkRxtWmov4vYnm5AmvwNK0OmKv0Ej2XADpdyLeowDewN7Yvx usNIgk1X8skOtjbnsBzg+0tf1CopEv4kx/20hWXLWZrhi29quGj5XDR3JZYgLF+S wiEegXYsturG/yEgfE3E2xgAk6VihhGTRCyzG3twvNXHAABy3JzN40O7RTKWwObs C0wKxaDGBF5S8OQ2ONtzGcUnsce0Ri6FNTwuSWiDHSlxrFoAR0IMQAVIrrll3dsL JFf8Ojwikwj8WeJ2S+77XnVm4bSNf0oo/oUsj72nhFhiUVNNmVE= -----END CERTIFICATE-----Generated at Tue Jul 21 08:39:55 2026 by rpki-client