$ rpki-client -vvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: 05buRA1fW6/sHP4vz6PaYA3O0BC0qnkyVI69dKTmCFQ= Subject key identifier: 08:46:DB:0C:9F:7C:EC:D3:79:BD:E0:34:D4:8A:2A:BB:89:52:00:35 Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 1B30A3B4B4846A2B9C140157E34B7DFE8D019462 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:48:39 +0000 Manifest this update: Mon 20 Jul 2026 13:43:39 +0000 Manifest next update: Tue 21 Jul 2026 17:25:39 +0000 Files and hashes: 1: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: +pRdkea6f9b/suG1qot09cn5EJTePHJGAqvhRI6xjCQ=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:30:a3:b4:b4:84:6a:2b:9c:14:01:57:e3:4b:7d:fe:8d:01:94:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Jul 20 13:43:39 2026 GMT Not After : Jul 21 17:25:39 2026 GMT Subject: CN=0846DB0C9F7CECD379BDE034D48A2ABB89520035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:d3:2c:4a:1b:5a:62:08:1d:83:b1:c5:66: c4:7d:fc:cf:ab:8d:72:ec:cb:dc:f1:f2:44:d1:a1: 34:73:59:4b:41:c4:5e:59:11:47:d9:b4:f6:8b:a6: d7:d5:28:5a:be:e2:95:44:8d:1f:a4:68:7d:1a:b6: c3:f4:46:2a:a1:89:d0:3d:8e:75:7c:70:50:a7:57: 59:46:df:ad:fe:ad:e4:33:91:cb:ac:b8:7f:94:bb: cd:16:63:53:79:15:cd:84:2d:0c:a0:be:8a:0c:da: 91:86:3a:95:8d:2e:f4:8d:f3:4c:15:91:64:b7:e9: 04:74:89:46:28:1d:ea:d2:12:f7:bb:f4:75:af:2e: a8:04:3c:c8:e0:7b:2c:b0:40:9c:4c:67:9d:bc:75: 2a:8d:3f:d3:a6:4d:a0:8f:0a:a2:87:6e:01:c2:7c: 15:c7:af:7b:99:5c:95:97:48:b9:73:49:96:a2:79: c2:ea:f3:9c:f7:97:dc:c8:0f:fc:86:63:b8:6e:d5: fa:67:ef:a7:a7:e6:e8:36:c7:84:1b:77:3e:f5:e2: 96:12:cd:5c:0c:11:d8:f4:11:af:d0:03:92:44:0f: 9d:9e:1c:84:a9:5f:5b:6a:f3:ee:bd:53:95:52:d6: 77:f3:32:df:41:ad:cf:c1:37:81:0d:03:c3:1b:4b: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:46:DB:0C:9F:7C:EC:D3:79:BD:E0:34:D4:8A:2A:BB:89:52:00:35 X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:97:c3:69:a1:f2:a5:92:37:5d:d8:98:96:da:50:de:1b:ce: 75:06:ab:1a:83:94:77:06:6a:7f:3f:83:d5:18:7f:b3:fa:ba: 94:25:da:fb:15:50:87:44:84:a3:9c:23:a9:8e:ac:70:62:5c: db:39:a6:17:f4:02:10:0d:89:85:65:e3:12:ab:f3:89:eb:71: cc:09:c9:b1:f0:6b:d8:fa:6e:e8:a0:4c:c0:4a:02:dd:ba:ab: 8f:6a:c5:d9:5b:b3:6c:0b:c6:82:ab:5b:ee:57:17:b2:9a:a6: 10:89:b4:b9:95:40:95:bd:24:10:c3:24:7c:96:ec:5a:da:e3: 2b:df:6a:e8:b2:cd:c7:d8:09:5b:3d:5b:e2:58:70:d7:f8:a0: ab:4f:b0:f9:98:a5:b6:d1:ef:e1:20:66:41:a1:c3:d8:81:9a: 33:c4:51:08:ec:2a:63:63:5f:33:d6:d8:02:dd:05:25:65:65: 73:c4:1d:4f:73:f8:a3:21:a5:ae:99:86:3d:40:13:52:c0:0f: 98:ba:80:00:fb:ca:b7:a9:84:59:ef:ac:aa:3a:0a:a6:0f:b9: 72:ed:b8:5c:ec:cb:0f:54:3e:c3:4a:02:48:b7:76:2d:92:bd: 08:53:c7:c6:1d:c5:70:ff:5b:88:fe:4b:27:2e:45:5f:c9:ad: 69:fb:a5:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzCjtLSEaiucFAFX40t9/o0BlGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA3MjAxMzQzMzlaFw0yNjA3MjExNzI1MzlaMDMxMTAvBgNV BAMTKDA4NDZEQjBDOUY3Q0VDRDM3OUJERTAzNEQ0OEEyQUJCODk1MjAwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXOtMsShtaYggdg7HFZsR9/M+r jXLsy9zx8kTRoTRzWUtBxF5ZEUfZtPaLptfVKFq+4pVEjR+kaH0atsP0RiqhidA9 jnV8cFCnV1lG363+reQzkcusuH+Uu80WY1N5Fc2ELQygvooM2pGGOpWNLvSN80wV kWS36QR0iUYoHerSEve79HWvLqgEPMjgeyywQJxMZ528dSqNP9OmTaCPCqKHbgHC fBXHr3uZXJWXSLlzSZaiecLq85z3l9zID/yGY7hu1fpn76en5ug2x4Qbdz714pYS zVwMEdj0Ea/QA5JED52eHISpX1tq8+69U5VS1nfzMt9Brc/BN4ENA8MbSx4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCEbbDJ987NN5veA01Ioqu4lSADUwHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKXw2mh8qWSN13YmJbaUN4bznUGqxqDlHcG an8/g9UYf7P6upQl2vsVUIdEhKOcI6mOrHBiXNs5phf0AhANiYVl4xKr84nrccwJ ybHwa9j6buigTMBKAt26q49qxdlbs2wLxoKrW+5XF7KaphCJtLmVQJW9JBDDJHyW 7Fra4yvfauiyzcfYCVs9W+JYcNf4oKtPsPmYpbbR7+EgZkGhw9iBmjPEUQjsKmNj XzPW2ALdBSVlZXPEHU9z+KMhpa6Zhj1AE1LAD5i6gAD7yrephFnvrKo6CqYPuXLt uFzsyw9UPsNKAki3di2SvQhTx8YdxXD/W4j+SycuRV/JrWn7pfk= -----END CERTIFICATE-----Generated at Tue Jul 21 06:54:57 2026 by rpki-client