$ rpki-client -vvvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: oeHkLIKMWe4kHewko01+oO8TNiVVAI6yxusGunNQOjk= Subject key identifier: CA:3B:E1:B1:44:92:9E:BA:54:2F:E8:95:CA:2C:26:C7:4F:6E:92:B1 Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 627DA184348A9AFB5A55C1CC145E2BC5F46A6857 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: A3 Signing time: Tue 01 Sep 2026 02:47:25 +0000 Manifest this update: Tue 01 Sep 2026 02:42:25 +0000 Manifest next update: Wed 02 Sep 2026 06:16:25 +0000 Files and hashes: 1: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) 2: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: oQV6fRLL+QMUbZ11aY2Qgy7p+GAEqQiOoj4DfbDA/9c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 02:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7d:a1:84:34:8a:9a:fb:5a:55:c1:cc:14:5e:2b:c5:f4:6a:68:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Sep 1 02:42:25 2026 GMT Not After : Sep 2 06:16:25 2026 GMT Subject: CN=CA3BE1B144929EBA542FE895CA2C26C74F6E92B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:53:9c:de:1d:01:be:68:03:23:e0:62:dd: a7:24:3b:8b:22:e4:80:85:93:47:d0:b7:e3:7a:d2: 03:0a:27:a6:a8:e6:9c:50:5d:69:ec:f9:b5:eb:c7: 73:7b:de:a1:d7:15:13:0f:3e:4a:9d:2d:be:c9:82: 76:41:fd:51:65:db:f5:77:4d:c6:31:a7:8b:52:22: 45:18:54:a8:81:c3:29:81:7e:28:18:f3:9c:fb:c2: 02:88:c6:83:9c:e4:4e:90:f3:0a:42:b8:bb:59:8d: f4:78:a8:c1:61:e3:27:bd:2a:15:0c:8c:72:eb:70: d0:50:34:7b:33:71:8b:c8:b2:0e:35:c2:bb:e0:b0: 66:8c:c1:ca:2f:7e:92:c2:d1:b5:05:0f:b4:7e:cc: 19:fc:80:20:d9:64:7c:df:89:82:ba:dc:23:ef:cb: 02:8c:3f:68:98:c3:b9:20:23:16:30:b1:ac:25:2b: 8e:b0:a3:6d:2a:7a:3d:86:61:f6:bf:b2:66:90:87: 4f:f3:be:7f:43:d9:79:62:c4:67:bf:05:9e:61:87: a1:64:53:6c:f8:d0:f7:62:b7:68:ae:8b:a3:8f:95: 64:e2:25:7c:07:7a:52:b3:fc:a8:fc:7b:c5:af:13: c3:5b:8b:e5:6e:83:1a:09:d2:1b:b6:77:a9:95:86: 9b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:3B:E1:B1:44:92:9E:BA:54:2F:E8:95:CA:2C:26:C7:4F:6E:92:B1 X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6b:e4:7e:6b:b2:9a:9a:f6:df:27:09:57:dd:ca:61:b1:32: d3:1f:f6:d8:8c:3f:94:d8:43:fa:38:97:c2:ba:97:5d:07:31: a8:30:89:70:c9:74:3a:db:85:ba:ba:19:e7:82:e1:7c:ab:e1: 15:4c:ad:38:ba:f2:6c:82:40:b1:35:16:33:f6:38:f8:50:8e: 95:d0:59:81:46:36:b3:5d:94:35:0c:02:b5:4b:cf:51:d1:ec: 3a:6b:89:40:ea:0b:f9:ec:e5:3e:8f:c8:4f:19:5f:3b:c0:fc: 54:01:3d:64:0b:e7:9e:5a:cf:6b:85:d0:ac:a8:43:17:f0:89: b0:08:ca:f3:4e:66:86:4d:0c:c1:9d:dd:07:bb:e1:8c:10:2c: 10:27:ff:15:ee:32:12:a2:80:10:4b:98:b4:ea:48:e9:d1:4e: c9:8e:d3:e5:7f:06:bb:4e:12:f9:67:7a:7d:c3:d3:7d:1e:7b: 40:2a:89:71:96:0a:4f:d0:65:89:53:df:65:c2:5c:9c:5e:82: 60:09:64:3f:fd:0a:c4:73:02:ce:5b:c1:8d:49:8b:79:38:b7: 32:3c:59:42:7a:58:c1:24:98:19:02:b0:cf:ec:ba:16:1b:38: c2:2d:e3:3a:8b:4d:e3:66:25:b5:99:dd:cb:7b:74:28:a5:a9: d3:02:45:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYn2hhDSKmvtaVcHMFF4rxfRqaFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA5MDEwMjQyMjVaFw0yNjA5MDIwNjE2MjVaMDMxMTAvBgNV BAMTKENBM0JFMUIxNDQ5MjlFQkE1NDJGRTg5NUNBMkMyNkM3NEY2RTkyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iFOc3h0BvmgDI+Bi3ackO4si 5ICFk0fQt+N60gMKJ6ao5pxQXWns+bXrx3N73qHXFRMPPkqdLb7JgnZB/VFl2/V3 TcYxp4tSIkUYVKiBwymBfigY85z7wgKIxoOc5E6Q8wpCuLtZjfR4qMFh4ye9KhUM jHLrcNBQNHszcYvIsg41wrvgsGaMwcovfpLC0bUFD7R+zBn8gCDZZHzfiYK63CPv ywKMP2iYw7kgIxYwsawlK46wo20qej2GYfa/smaQh0/zvn9D2XlixGe/BZ5hh6Fk U2z40Pdit2iui6OPlWTiJXwHelKz/Kj8e8WvE8Nbi+VugxoJ0hu2d6mVhpuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyjvhsUSSnrpUL+iVyiwmx09ukrEwHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9r5H5rspqa9t8nCVfdymGxMtMf9tiMP5TY Q/o4l8K6l10HMagwiXDJdDrbhbq6GeeC4Xyr4RVMrTi68myCQLE1FjP2OPhQjpXQ WYFGNrNdlDUMArVLz1HR7DpriUDqC/ns5T6PyE8ZXzvA/FQBPWQL555az2uF0Kyo QxfwibAIyvNOZoZNDMGd3Qe74YwQLBAn/xXuMhKigBBLmLTqSOnRTsmO0+V/BrtO Evlnen3D030ee0AqiXGWCk/QZYlT32XCXJxegmAJZD/9CsRzAs5bwY1Ji3k4tzI8 WUJ6WMEkmBkCsM/suhYbOMIt4zqLTeNmJbWZ3ct7dCilqdMCRVA= -----END CERTIFICATE-----Generated at Tue Sep 1 06:21:00 2026 by rpki-client