$ rpki-client -vvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: uZq5TBtX174uLzoQ2YIV6ZrtyDa+C9BkSIzntzRXbv8= Subject key identifier: B0:94:08:B8:74:81:2A:1C:AB:55:31:ED:41:68:34:25:81:72:D8:47 Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 488923F56DF978207B48B601C55ED905E166F6ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: 61 Signing time: Mon 13 Jul 2026 09:35:33 +0000 Manifest this update: Mon 13 Jul 2026 09:30:33 +0000 Manifest next update: Tue 14 Jul 2026 13:26:33 +0000 Files and hashes: 1: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: vBy9+3eCdDT/waEbuvN5/uF7J65d1jXClBJFT/BUWlU=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 05:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:89:23:f5:6d:f9:78:20:7b:48:b6:01:c5:5e:d9:05:e1:66:f6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Jul 13 09:30:33 2026 GMT Not After : Jul 14 13:26:33 2026 GMT Subject: CN=B09408B874812A1CAB5531ED416834258172D847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:df:75:38:4e:c7:c7:5b:47:d9:49:d6:d8: 9e:cb:cd:37:8a:c8:4f:88:e9:86:25:82:8d:a0:58: d5:a8:7e:cd:f3:71:6b:5a:c1:49:92:67:40:79:9c: de:f5:ce:c9:42:62:e5:e2:17:9b:75:f6:a9:d6:d4: 6c:9c:cf:be:eb:ed:96:c4:b0:61:bd:aa:d4:53:cf: 43:d1:14:8d:70:4f:c5:86:d7:ca:d2:1f:20:ff:ce: e3:60:08:ec:18:66:18:dd:f2:30:14:ae:2f:43:c2: 44:25:83:fb:4a:dd:09:3d:b5:ad:67:72:ce:78:90: 03:b3:89:3e:0c:51:ca:e7:20:45:ab:06:9e:59:46: c1:9e:ab:40:6f:83:31:6c:a4:21:16:44:83:cb:3e: 88:b1:d1:0c:94:55:a5:2f:84:4f:ad:04:3c:ed:fb: f5:ee:5d:d7:df:f6:eb:c5:6a:05:72:e6:9c:ca:ea: 64:9e:27:8b:05:19:06:bf:2b:7b:8a:d2:ce:46:40: ec:ff:76:81:17:ef:71:e2:aa:99:6e:8d:f4:a9:d6: a9:77:b8:0d:2c:36:d9:6b:5b:e3:b0:0c:fe:8b:c3: 60:13:0f:a3:92:0b:1c:13:f2:ba:5c:b8:a4:dd:73: ca:40:5a:89:9a:6d:76:20:d8:a5:c4:e3:df:33:db: 36:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:94:08:B8:74:81:2A:1C:AB:55:31:ED:41:68:34:25:81:72:D8:47 X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:31:85:d8:7b:55:b7:12:16:3f:fc:1d:ba:a8:ae:63:eb:c7: 1a:0a:00:10:e2:16:f3:25:34:58:22:31:d2:6b:1b:30:03:31: 0a:40:69:c9:ff:f8:e6:ff:7c:77:63:10:ee:6f:90:e2:f5:cd: ea:3e:68:74:66:af:3f:a5:29:0d:af:d6:5e:e3:9c:a9:0d:59: 9e:21:2e:12:e2:1c:fe:20:c6:f2:7a:d1:0f:a4:77:53:34:32: 77:b2:db:f9:e0:9a:a9:4c:37:24:30:78:73:11:85:f0:63:a3: 36:0b:56:2c:8f:1a:9c:b6:4f:f4:a5:1e:d0:57:70:dc:ae:67: 41:35:85:4f:a5:3b:a3:e4:a6:60:f1:e9:f0:32:5c:0b:a5:2f: ba:ac:ff:20:d4:a4:ba:43:1a:f3:76:79:c1:c9:84:77:98:17: af:9d:0b:e2:b4:5b:0c:a0:98:75:ed:dd:ef:3c:03:a5:2d:77: f8:06:c0:2f:65:41:6f:c1:41:8f:97:40:df:b1:78:3d:e0:e8: b7:37:2d:dc:ca:e3:d9:0e:97:59:5a:7a:a9:34:56:7a:a6:31: 18:29:d2:45:ff:95:66:4f:4e:ce:33:84:93:4c:e3:be:33:ed: 13:7d:a2:be:3f:f2:4e:11:2f:94:aa:f1:44:2b:e6:b9:0e:c1: cc:f9:4a:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIkj9W35eCB7SLYBxV7ZBeFm9u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA3MTMwOTMwMzNaFw0yNjA3MTQxMzI2MzNaMDMxMTAvBgNV BAMTKEIwOTQwOEI4NzQ4MTJBMUNBQjU1MzFFRDQxNjgzNDI1ODE3MkQ4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4r991OE7Hx1tH2UnW2J7LzTeK yE+I6YYlgo2gWNWofs3zcWtawUmSZ0B5nN71zslCYuXiF5t19qnW1Gycz77r7ZbE sGG9qtRTz0PRFI1wT8WG18rSHyD/zuNgCOwYZhjd8jAUri9DwkQlg/tK3Qk9ta1n cs54kAOziT4MUcrnIEWrBp5ZRsGeq0BvgzFspCEWRIPLPoix0QyUVaUvhE+tBDzt +/XuXdff9uvFagVy5pzK6mSeJ4sFGQa/K3uK0s5GQOz/doEX73HiqplujfSp1ql3 uA0sNtlrW+OwDP6Lw2ATD6OSCxwT8rpcuKTdc8pAWomabXYg2KXE498z2zbBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsJQIuHSBKhyrVTHtQWg0JYFy2EcwHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0xhdh7VbcSFj/8HbqormPrxxoKABDiFvMl NFgiMdJrGzADMQpAacn/+Ob/fHdjEO5vkOL1zeo+aHRmrz+lKQ2v1l7jnKkNWZ4h LhLiHP4gxvJ60Q+kd1M0Mney2/ngmqlMNyQweHMRhfBjozYLViyPGpy2T/SlHtBX cNyuZ0E1hU+lO6PkpmDx6fAyXAulL7qs/yDUpLpDGvN2ecHJhHeYF6+dC+K0Wwyg mHXt3e88A6Utd/gGwC9lQW/BQY+XQN+xeD3g6Lc3LdzK49kOl1laeqk0VnqmMRgp 0kX/lWZPTs4zhJNM474z7RN9or4/8k4RL5Sq8UQr5rkOwcz5SoE= -----END CERTIFICATE-----Generated at Mon Jul 13 11:35:03 2026 by rpki-client