$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft File: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft (raw, json) Hash identifier: 7kTO4qATJ4RzgdImdnU733xJavmL5iaI5E4qjFAqCyc= Subject key identifier: 68:D7:A8:E2:4A:B1:3C:76:0A:B2:25:45:FA:F7:0A:62:5E:08:73:DE Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 5C44295790CA31CF8D7739FF21B16F15D89C854D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft Manifest number: 93 Signing time: Thu 20 Aug 2026 09:14:01 +0000 Manifest this update: Thu 20 Aug 2026 09:09:01 +0000 Manifest next update: Fri 21 Aug 2026 10:15:01 +0000 Files and hashes: 1: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl (hash: rXkoa98vXqAeCXkIEKZLUhwJMdxLP4BuAiqQtLDXR0I=) 2: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: 6KPoXiqtvd9nuyAco4ru4jZgNuQNFI930Qn7LAylJPg=) 3: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc=) 4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:44:29:57:90:ca:31:cf:8d:77:39:ff:21:b1:6f:15:d8:9c:85:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: Aug 20 09:09:01 2026 GMT Not After : Aug 21 10:15:01 2026 GMT Subject: CN=68D7A8E24AB13C760AB22545FAF70A625E0873DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:85:e2:98:25:20:02:44:bf:0b:8f:1c:ad: 92:e9:62:2d:81:c0:5c:8c:47:f1:fc:ea:33:02:07: e7:5c:0b:5b:d1:ad:9d:30:c7:68:ca:5a:0b:3c:ac: ce:40:21:23:ff:b3:6e:6b:37:10:8a:53:0a:35:6b: 87:ed:49:03:9f:4d:4f:4f:f1:3e:6f:bc:ed:4e:6c: 70:ac:0f:7d:e2:9a:2c:2c:45:64:92:30:56:75:d1: e3:b5:bc:43:dd:7e:f0:18:1f:90:81:5c:67:85:48: 95:0f:30:fe:9d:48:a9:67:1b:25:c9:63:66:a9:1a: 50:24:c8:53:72:08:6e:1c:08:7d:d7:46:d0:54:6d: 81:1c:d8:52:5f:44:eb:19:8e:00:d0:72:c9:a2:ff: 4a:45:77:1c:70:a0:1d:68:0a:af:61:35:54:b5:52: c1:69:7d:51:04:c4:33:0e:4c:36:cc:e5:b2:35:c7: 90:d2:fe:26:85:fc:ad:4a:e1:df:f5:f2:68:95:ed: 6a:c5:48:f0:ae:e4:ab:1c:39:96:dc:b0:d8:83:91: fe:55:e3:c3:da:12:e8:af:96:76:c4:d7:e0:2f:27: d0:dd:f0:0a:56:80:bd:95:27:3b:4f:dc:56:5a:f6: 14:0f:48:c8:9e:16:62:6a:cf:e5:38:48:ce:e4:40: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:A8:E2:4A:B1:3C:76:0A:B2:25:45:FA:F7:0A:62:5E:08:73:DE X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:08:64:91:ef:5d:64:c1:c2:28:11:41:99:02:2b:99:ab:89: 26:14:ae:af:ed:f9:33:00:c9:f5:3d:c5:9e:98:af:ee:9a:92: fb:df:17:7a:b0:25:63:2f:81:96:1a:70:b1:ca:7a:73:3e:73: de:a4:51:38:98:36:8e:3d:5d:54:c2:c0:43:20:27:2f:44:f2: d1:7f:1e:6e:8d:bd:04:a1:6f:d4:58:8a:86:6a:7d:cc:50:2c: dc:14:90:7f:10:68:58:52:ef:d2:f9:a5:74:02:f8:af:1a:bf: ba:da:5d:f9:58:fb:99:d3:68:e2:0f:06:f8:31:f6:cc:0c:e6: 84:52:80:b0:48:29:fb:8c:41:b3:d9:fc:fe:90:54:3e:f5:bb: d2:e4:ea:a4:d4:34:00:c4:0c:9c:65:87:ad:02:84:a2:8c:e3: d7:aa:d5:9a:76:39:fa:32:07:f5:51:73:d1:f6:ea:06:1d:cc: 30:09:8d:93:b9:92:3f:6b:3f:5c:a5:c5:c5:67:fb:2d:f7:9b: 86:fb:04:41:0c:39:81:34:89:7c:3e:dc:e0:87:98:50:5b:1e: c7:b0:06:d1:03:3e:02:7b:ae:53:ea:15:bb:58:35:b1:9a:42: 15:ee:29:44:94:8e:a3:50:96:a6:21:27:b3:c6:1b:53:17:a0: 52:5c:1c:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEQpV5DKMc+Ndzn/IbFvFdichU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA4MjAwOTA5MDFaFw0yNjA4MjExMDE1MDFaMDMxMTAvBgNV BAMTKDY4RDdBOEUyNEFCMTNDNzYwQUIyMjU0NUZBRjcwQTYyNUUwODczREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWYXimCUgAkS/C48crZLpYi2B wFyMR/H86jMCB+dcC1vRrZ0wx2jKWgs8rM5AISP/s25rNxCKUwo1a4ftSQOfTU9P 8T5vvO1ObHCsD33imiwsRWSSMFZ10eO1vEPdfvAYH5CBXGeFSJUPMP6dSKlnGyXJ Y2apGlAkyFNyCG4cCH3XRtBUbYEc2FJfROsZjgDQcsmi/0pFdxxwoB1oCq9hNVS1 UsFpfVEExDMOTDbM5bI1x5DS/iaF/K1K4d/18miV7WrFSPCu5KscOZbcsNiDkf5V 48PaEuivlnbE1+AvJ9Dd8ApWgL2VJztP3FZa9hQPSMieFmJqz+U4SM7kQNGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNeo4kqxPHYKsiVF+vcKYl4Ic94wHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQz MTQyQkRGM0M2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAIZJHvXWTBwigRQZkCK5mriSYUrq/t+TMA yfU9xZ6Yr+6akvvfF3qwJWMvgZYacLHKenM+c96kUTiYNo49XVTCwEMgJy9E8tF/ Hm6NvQShb9RYioZqfcxQLNwUkH8QaFhS79L5pXQC+K8av7raXflY+5nTaOIPBvgx 9swM5oRSgLBIKfuMQbPZ/P6QVD71u9Lk6qTUNADEDJxlh60ChKKM49eq1Zp2Ofoy B/VRc9H26gYdzDAJjZO5kj9rP1ylxcVn+y33m4b7BEEMOYE0iXw+3OCHmFBbHsew BtEDPgJ7rlPqFbtYNbGaQhXuKUSUjqNQlqYhJ7PGG1MXoFJcHPs= -----END CERTIFICATE-----Generated at Thu Aug 20 13:33:47 2026 by rpki-client