$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft File: BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft (raw, json) Hash identifier: ARvaYhkd9aczzE93T0rT4ANQLhzgD94MMA4i2At+LGA= Subject key identifier: A1:9B:C9:2D:AF:5A:84:C9:5F:19:D5:07:D0:25:B4:F5:EE:6C:B3:17 Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 Certificate issuer: /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Certificate serial: 2379E027E17A549B2A1FC6F59F0477A3993BC3E1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 17:43:23 +0000 Manifest this update: Mon 20 Jul 2026 17:38:23 +0000 Manifest next update: Tue 21 Jul 2026 18:20:23 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=) 2: BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl (hash: tAOCNzJBKnpRQCUKk+uGda/Flqxd4C+CvATsYiyJYkU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:79:e0:27:e1:7a:54:9b:2a:1f:c6:f5:9f:04:77:a3:99:3b:c3:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Validity Not Before: Jul 20 17:38:23 2026 GMT Not After : Jul 21 18:20:23 2026 GMT Subject: CN=A19BC92DAF5A84C95F19D507D025B4F5EE6CB317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1d:a1:47:9d:32:f9:73:d8:b3:42:63:c4:bf: 78:77:ba:9a:11:8f:9e:71:48:ac:93:70:88:83:f5: a3:c3:1e:fe:aa:4a:29:64:6e:74:b2:c7:60:b0:0a: 68:5b:0c:d8:94:03:c3:b2:10:2c:a8:36:61:36:39: 56:d1:37:a8:e4:40:1a:99:2d:ed:30:bd:13:7f:81: c2:f5:94:e3:63:90:76:61:d6:b4:df:8d:bc:79:9c: 87:a7:14:30:1b:a6:f5:62:3d:1a:1b:fe:98:ff:7d: 47:3e:4d:c2:8d:cf:3f:b7:25:88:ae:ab:2f:8c:f7: 6e:10:f6:81:c3:16:69:49:87:22:f6:e4:05:dd:27: 1c:8b:97:ab:d1:01:56:99:54:fe:5c:5e:6d:42:6a: 56:0c:42:71:c5:96:81:a7:25:3d:34:f4:90:29:ff: 5c:aa:a7:af:52:b0:25:1e:f9:64:d7:39:30:b5:e0: 23:78:f1:4d:80:83:c4:17:b1:f8:ea:ce:c3:66:dc: 20:ab:fb:79:62:51:5e:e8:c1:03:30:2d:a9:2b:ec: ea:0a:1c:67:20:67:39:dc:39:e5:71:06:cc:0c:68: b8:e0:96:fb:d6:23:cd:3e:a6:34:41:e4:e2:93:e0: c8:d0:5a:15:9a:74:d2:eb:75:58:5e:15:01:a7:c5: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9B:C9:2D:AF:5A:84:C9:5F:19:D5:07:D0:25:B4:F5:EE:6C:B3:17 X509v3 Authority Key Identifier: keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:74:69:49:e4:a2:7b:46:23:95:f0:be:0b:6a:06:af:ed: fa:5e:da:dd:d1:44:c3:b0:fc:85:01:0b:ad:9e:37:d1:96:cf: 60:a8:e5:1b:f3:2c:04:51:0d:1e:10:80:02:d0:b1:94:87:bb: 74:d7:e6:ae:71:7f:ba:f0:52:71:92:bb:51:d9:a1:86:01:a3: c0:85:fb:84:03:e3:ad:82:9c:88:e8:ee:a1:05:36:47:49:47: 09:2f:12:3a:45:0b:36:e0:9d:1a:a6:8f:93:df:d0:7d:ed:18: 40:5f:ad:37:69:bb:99:77:54:6f:fc:e6:26:14:18:3b:b9:b3: 41:e3:26:28:d4:3d:56:d9:c0:b5:44:d4:4f:1e:00:01:f6:d0: 34:45:8e:05:6b:a0:7b:d6:0c:a2:9c:16:98:29:9d:af:97:9e: ef:46:a4:8e:d7:21:97:28:bd:7a:73:31:b1:b6:99:32:b4:5d: a5:5c:e1:d4:70:bf:78:0a:15:79:c8:82:a8:f3:a9:5d:34:c6: e4:12:bf:d8:cb:09:01:b5:9d:7d:66:44:a8:13:e3:68:85:5d: ba:d0:e5:12:c3:07:3c:70:b9:0d:93:78:ba:52:37:0f:2d:16: 93:fa:f9:eb:0f:02:c8:d1:34:af:28:91:1d:98:19:11:84:2a: 5c:25:39:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3ngJ+F6VJsqH8b1nwR3o5k7w+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5 MjQ0ODBEMTAeFw0yNjA3MjAxNzM4MjNaFw0yNjA3MjExODIwMjNaMDMxMTAvBgNV BAMTKEExOUJDOTJEQUY1QTg0Qzk1RjE5RDUwN0QwMjVCNEY1RUU2Q0IzMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHaFHnTL5c9izQmPEv3h3upoR j55xSKyTcIiD9aPDHv6qSilkbnSyx2CwCmhbDNiUA8OyECyoNmE2OVbRN6jkQBqZ Le0wvRN/gcL1lONjkHZh1rTfjbx5nIenFDAbpvViPRob/pj/fUc+TcKNzz+3JYiu qy+M924Q9oHDFmlJhyL25AXdJxyLl6vRAVaZVP5cXm1CalYMQnHFloGnJT009JAp /1yqp69SsCUe+WTXOTC14CN48U2Ag8QXsfjqzsNm3CCr+3liUV7owQMwLakr7OoK HGcgZzncOeVxBswMaLjglvvWI80+pjRB5OKT4MjQWhWadNLrdVheFQGnxZEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZvJLa9ahMlfGdUH0CW09e5ssxcwHwYDVR0j BBgwFoAUug49SPtWJiyG35c//HyYdJJEgNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjViODQ1OWEtZTM1MS00YzhkLWJjMjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhG QjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5MjQ0ODBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTBFM0Q0OEZCNTYyNjJDODZERjk3M0ZGQzdDOTg3NDkyNDQ4 MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4 NzQ5MjQ0ODBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWsdGlJ5KJ7RiOV8L4Lagav7fpe2t3RRMOw /IUBC62eN9GWz2Co5RvzLARRDR4QgALQsZSHu3TX5q5xf7rwUnGSu1HZoYYBo8CF +4QD462CnIjo7qEFNkdJRwkvEjpFCzbgnRqmj5Pf0H3tGEBfrTdpu5l3VG/85iYU GDu5s0HjJijUPVbZwLVE1E8eAAH20DRFjgVroHvWDKKcFpgpna+Xnu9GpI7XIZco vXpzMbG2mTK0XaVc4dRwv3gKFXnIgqjzqV00xuQSv9jLCQG1nX1mRKgT42iFXbrQ 5RLDBzxwuQ2TeLpSNw8tFpP6+esPAsjRNK8okR2YGRGEKlwlOQU= -----END CERTIFICATE-----Generated at Tue Jul 21 08:54:48 2026 by rpki-client