$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft File: BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft (raw, json) Hash identifier: E/8SjF7Vn60Jw9uIcxqlescDNZCdfDewTn0ic/qFmwo= Subject key identifier: 65:FB:3E:87:A5:24:A8:BC:1A:92:D4:FB:31:25:C4:70:2F:0D:05:05 Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 Certificate issuer: /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Certificate serial: 17D40540DE622FFC4433535CF507D03105AA36BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:28:37 +0000 Manifest this update: Tue 02 Jun 2026 19:23:37 +0000 Manifest next update: Wed 03 Jun 2026 22:52:37 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=) 2: BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl (hash: qbKwtKEulZW7gRXLzxGmbGPJixXq9b/zMEIyzJjjD20=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d4:05:40:de:62:2f:fc:44:33:53:5c:f5:07:d0:31:05:aa:36:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Validity Not Before: Jun 2 19:23:37 2026 GMT Not After : Jun 3 22:52:37 2026 GMT Subject: CN=65FB3E87A524A8BC1A92D4FB3125C4702F0D0505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:af:70:1d:34:3a:c3:5d:86:6d:6a:37:b4: c0:39:31:c0:f1:f7:5e:e5:d8:8c:a0:53:5e:b0:47: d2:34:49:b3:50:f4:e3:05:6a:ae:4b:75:04:ec:8f: c4:5e:63:97:5d:78:ca:18:28:ea:7c:b6:33:17:1e: 8e:97:49:63:08:0c:bd:82:ec:8a:e6:8a:4f:6e:8e: f0:aa:34:56:f4:3d:54:0e:aa:be:7f:84:4f:d0:16: 26:7c:f5:d5:71:6b:4d:9d:42:52:43:3e:05:e5:df: 01:90:4a:61:15:a6:3d:80:2e:76:e9:58:b7:15:15: 98:1d:48:b5:59:4e:6e:11:41:7f:74:54:c0:95:8d: 76:fb:0c:74:cd:e2:99:cf:7c:cb:83:fb:0d:a7:01: 2a:a2:14:73:29:6e:c5:73:14:3d:ea:9e:f2:c6:c6: 67:fa:45:71:d3:03:4c:49:61:32:ff:c7:59:fc:34: 85:11:6f:2e:53:1d:3e:60:5f:52:f5:34:c4:ac:a5: 8c:00:f9:d7:86:8c:1e:a9:27:80:b7:22:fe:97:07: c3:15:18:73:34:27:f9:6b:52:48:57:96:3d:11:43: c5:0b:0a:d4:3b:f1:70:e3:6e:ba:81:cd:f4:48:6a: c4:2f:31:52:53:d7:3f:39:23:a9:37:01:25:f0:dc: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FB:3E:87:A5:24:A8:BC:1A:92:D4:FB:31:25:C4:70:2F:0D:05:05 X509v3 Authority Key Identifier: keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:a2:2a:b0:60:0a:a0:8e:2a:01:1b:02:80:df:99:15:55:fe: b9:94:28:4e:ec:20:3b:4f:c2:c7:30:fd:f1:da:90:3f:79:41: f5:7d:b9:8a:cf:1e:05:37:81:99:cc:3e:91:37:2f:cf:92:9b: 96:68:6b:a3:53:84:f1:e4:ea:ce:6c:fe:ee:b3:4e:3e:9f:78: 4e:c1:07:55:ba:e3:dd:37:10:e4:cc:6a:b0:41:a9:e6:3a:85: cb:c1:7d:f7:32:06:f3:84:be:34:41:0d:8d:07:a0:3c:f2:36: 7a:4f:13:76:3c:69:c0:d6:3c:aa:27:ee:66:ee:1e:37:61:fa: 98:8c:d8:18:31:b4:49:ae:50:68:39:d9:19:af:87:f5:69:c9: 65:e0:ef:72:7c:30:05:f7:f1:aa:17:a0:d6:8c:e7:fe:1b:7d: d7:be:4a:ec:8d:f5:0f:5c:67:4a:d3:c5:4f:f9:30:ea:ff:ee: ef:c6:62:93:11:b2:5b:8f:f8:45:96:bd:0e:34:c7:0c:9a:f6: 25:d9:98:f9:d4:de:69:dc:70:71:8b:d5:96:c1:e1:98:e8:78: 40:61:ec:a0:0a:ff:17:89:76:f7:89:a0:8c:c4:a3:22:30:0b: 73:0d:88:26:13:94:46:76:3b:f2:39:39:ad:85:dd:d4:78:38: 40:8e:f6:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9QFQN5iL/xEM1Nc9QfQMQWqNr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5 MjQ0ODBEMTAeFw0yNjA2MDIxOTIzMzdaFw0yNjA2MDMyMjUyMzdaMDMxMTAvBgNV BAMTKDY1RkIzRTg3QTUyNEE4QkMxQTkyRDRGQjMxMjVDNDcwMkYwRDA1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDcq9wHTQ6w12GbWo3tMA5McDx 917l2IygU16wR9I0SbNQ9OMFaq5LdQTsj8ReY5ddeMoYKOp8tjMXHo6XSWMIDL2C 7Irmik9ujvCqNFb0PVQOqr5/hE/QFiZ89dVxa02dQlJDPgXl3wGQSmEVpj2ALnbp WLcVFZgdSLVZTm4RQX90VMCVjXb7DHTN4pnPfMuD+w2nASqiFHMpbsVzFD3qnvLG xmf6RXHTA0xJYTL/x1n8NIURby5THT5gX1L1NMSspYwA+deGjB6pJ4C3Iv6XB8MV GHM0J/lrUkhXlj0RQ8ULCtQ78XDjbrqBzfRIasQvMVJT1z85I6k3ASXw3CAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfs+h6UkqLwaktT7MSXEcC8NBQUwHwYDVR0j BBgwFoAUug49SPtWJiyG35c//HyYdJJEgNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjViODQ1OWEtZTM1MS00YzhkLWJjMjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhG QjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5MjQ0ODBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTBFM0Q0OEZCNTYyNjJDODZERjk3M0ZGQzdDOTg3NDkyNDQ4 MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4 NzQ5MjQ0ODBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6iKrBgCqCOKgEbAoDfmRVV/rmUKE7sIDtP wscw/fHakD95QfV9uYrPHgU3gZnMPpE3L8+Sm5Zoa6NThPHk6s5s/u6zTj6feE7B B1W64903EOTMarBBqeY6hcvBffcyBvOEvjRBDY0HoDzyNnpPE3Y8acDWPKon7mbu Hjdh+piM2BgxtEmuUGg52Rmvh/VpyWXg73J8MAX38aoXoNaM5/4bfde+SuyN9Q9c Z0rTxU/5MOr/7u/GYpMRsluP+EWWvQ40xwya9iXZmPnU3mnccHGL1ZbB4ZjoeEBh 7KAK/xeJdveJoIzEoyIwC3MNiCYTlEZ2O/I5Oa2F3dR4OECO9mo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:07 2026 by rpki-client