$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: ZwTrocXM5k9vRBN80zTzX9T2Hcd2crF3Xmrdl+UI0jI= Subject key identifier: 72:89:26:DD:9E:77:51:E9:76:17:A0:DC:B0:71:0B:47:C5:D0:4A:CA Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 688E396D97E5FCF932EB5115E25E41DCAC0E6ABD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 16:50:14 +0000 Manifest this update: Tue 02 Jun 2026 16:45:14 +0000 Manifest next update: Wed 03 Jun 2026 19:35:14 +0000 Files and hashes: 1: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: dLMdjEyRflC3sVLqC1ChQ319Jihg4Vcc7bfXibttoI4=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8e:39:6d:97:e5:fc:f9:32:eb:51:15:e2:5e:41:dc:ac:0e:6a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Jun 2 16:45:14 2026 GMT Not After : Jun 3 19:35:14 2026 GMT Subject: CN=728926DD9E7751E97617A0DCB0710B47C5D04ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:64:76:6f:4f:7c:99:3f:e1:a8:1c:06:b5: e2:53:84:b8:8e:95:05:5c:5d:43:e8:82:69:10:40: 80:10:eb:4f:1b:80:69:bc:48:02:0d:55:79:10:71: 5a:5d:81:1d:8c:1a:d4:bf:51:10:34:9f:06:7d:0e: d7:5b:80:d5:c1:e4:53:2e:f3:8d:8a:25:b3:6b:96: 30:ef:c6:17:6f:0e:6a:2d:52:79:ce:26:2b:24:10: 03:ae:70:c6:36:0b:89:5d:74:e8:61:ed:39:05:f1: 18:f3:e1:bb:57:ac:9f:2e:b2:a1:71:fe:9e:3c:9c: 88:b1:02:ce:82:ee:fe:72:b1:9a:f1:60:6a:a3:70: 57:07:03:f9:6c:6a:47:20:7d:c1:19:75:5c:47:88: 29:5e:e4:a9:19:56:d5:0c:1c:64:10:80:ef:17:9b: 37:60:bf:25:cb:5a:27:f7:18:dc:9b:a0:88:53:6d: 02:a5:f0:ee:1e:b0:a8:d3:dc:d8:b1:43:b5:20:f6: 39:68:3a:f2:84:4e:21:82:c7:b3:08:37:03:96:a3: 49:05:32:3c:b7:26:b7:8a:24:69:57:03:6e:05:a3: 69:b6:20:4f:da:7c:75:90:ef:1b:b4:be:0b:a7:6a: fd:3a:82:44:27:b9:af:32:c1:45:97:95:0e:69:1f: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:89:26:DD:9E:77:51:E9:76:17:A0:DC:B0:71:0B:47:C5:D0:4A:CA X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:42:e2:37:69:3b:3d:23:7c:b3:4b:ca:95:78:50:67:5b:b9: b5:ec:08:a0:fa:96:6a:ea:11:57:d2:81:02:aa:2a:12:fe:80: 02:a5:5f:41:e8:6a:94:50:c4:fb:4b:6e:a4:9f:67:eb:4d:27: 43:48:98:4e:33:f5:8d:73:f3:97:b0:50:96:0e:4a:fe:1b:24: 6e:d0:15:1c:7e:b8:62:6a:a3:e2:6e:25:5b:1d:20:05:6c:a0: 3d:95:47:f0:71:5a:01:50:be:33:fc:cc:bf:ae:e7:80:c0:d9: fb:63:25:0f:e8:51:e6:23:01:19:c5:90:41:db:53:89:92:03: 17:01:1b:a3:ca:ae:6c:2c:fc:74:79:c6:ed:af:8a:07:f5:3b: 52:60:c6:f1:1c:61:85:f1:aa:19:92:c4:85:fa:b8:55:fd:b3: 58:e9:9f:2c:30:f2:b8:78:fa:85:80:db:8a:25:15:19:61:8f: 5e:6f:23:79:ab:ed:9c:6c:40:5a:1d:d0:87:a7:d5:d8:49:59: 7e:3a:98:16:e1:1c:f8:65:31:6b:23:33:dc:fc:00:d7:ac:a5: e5:a2:1f:a9:ee:6f:ac:6a:06:b2:85:14:8d:cd:22:d3:52:c3: 36:d8:a7:1e:bc:56:ed:ce:e9:a4:41:3d:64:c6:a6:7a:8c:e8: f7:2b:32:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaI45bZfl/Pky61EV4l5B3KwOar0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA2MDIxNjQ1MTRaFw0yNjA2MDMxOTM1MTRaMDMxMTAvBgNV BAMTKDcyODkyNkREOUU3NzUxRTk3NjE3QTBEQ0IwNzEwQjQ3QzVEMDRBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2GR2b098mT/hqBwGteJThLiO lQVcXUPogmkQQIAQ608bgGm8SAINVXkQcVpdgR2MGtS/URA0nwZ9DtdbgNXB5FMu 842KJbNrljDvxhdvDmotUnnOJiskEAOucMY2C4lddOhh7TkF8Rjz4btXrJ8usqFx /p48nIixAs6C7v5ysZrxYGqjcFcHA/lsakcgfcEZdVxHiCle5KkZVtUMHGQQgO8X mzdgvyXLWif3GNyboIhTbQKl8O4esKjT3NixQ7Ug9jloOvKETiGCx7MINwOWo0kF Mjy3JreKJGlXA24Fo2m2IE/afHWQ7xu0vgunav06gkQnua8ywUWXlQ5pH7mPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcokm3Z53Uel2F6DcsHELR8XQSsowHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRC4jdpOz0jfLNLypV4UGdbubXsCKD6lmrq EVfSgQKqKhL+gAKlX0HoapRQxPtLbqSfZ+tNJ0NImE4z9Y1z85ewUJYOSv4bJG7Q FRx+uGJqo+JuJVsdIAVsoD2VR/BxWgFQvjP8zL+u54DA2ftjJQ/oUeYjARnFkEHb U4mSAxcBG6PKrmws/HR5xu2vigf1O1JgxvEcYYXxqhmSxIX6uFX9s1jpnyww8rh4 +oWA24olFRlhj15vI3mr7ZxsQFod0Ien1dhJWX46mBbhHPhlMWsjM9z8ANespeWi H6nub6xqBrKFFI3NItNSwzbYpx68Vu3O6aRBPWTGpnqM6PcrMkI= -----END CERTIFICATE-----Generated at Wed Jun 3 04:18:42 2026 by rpki-client