$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: mEr6dm7KwyB+AHbQ4ZVVu1YNeFiMKPD2lM88PCKtN1k= Subject key identifier: AB:27:4F:07:0A:2C:3E:54:02:FC:6F:77:0A:2D:72:8E:D0:51:0A:6B Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 19CBC9010FBB647B8CB8A1038B50928F1FF600C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:40:32 +0000 Manifest this update: Thu 17 Sep 2026 01:35:32 +0000 Manifest next update: Fri 18 Sep 2026 02:54:32 +0000 Files and hashes: 1: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: bnFUbOMuw1sO9B+0EBI66184iiDHnppvqWDQo1cCHeQ=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cb:c9:01:0f:bb:64:7b:8c:b8:a1:03:8b:50:92:8f:1f:f6:00:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Sep 17 01:35:32 2026 GMT Not After : Sep 18 02:54:32 2026 GMT Subject: CN=AB274F070A2C3E5402FC6F770A2D728ED0510A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:66:bc:6a:d8:63:29:80:fe:bf:52:5d:a5: 45:33:18:d5:b2:3b:4a:5a:81:9f:30:07:55:6b:d5: 91:c5:88:d8:70:0f:bd:94:bd:f9:88:6e:00:22:9b: 5a:be:5e:62:5f:07:9e:20:2d:36:82:c9:9e:b2:6c: 18:9d:90:0e:4e:b2:63:14:35:01:fb:80:bf:ae:fb: 7b:58:80:78:41:22:c1:a9:af:60:5b:e6:ee:9d:ed: 89:b1:69:16:e5:59:1e:79:f3:73:bc:fd:c3:13:81: 21:b4:f8:18:c3:0a:37:0b:69:ee:50:82:a2:23:58: 56:60:0b:28:e3:72:45:e6:79:42:cb:37:22:5c:fc: 4d:dd:67:c1:d4:e9:28:e7:7e:04:a5:07:c8:70:c8: 56:75:e8:46:e8:39:b5:f7:d6:f7:6e:5e:06:54:da: 29:6c:9e:45:64:38:d3:aa:da:dd:96:2a:d8:59:70: db:f3:b6:ea:d7:04:28:20:a6:e5:ca:cf:98:2b:dd: fc:da:d9:65:e8:64:26:99:1e:81:91:d8:e3:af:65: f0:69:f7:5d:1e:5f:97:6b:20:a0:5c:84:50:16:b9: e7:96:40:44:bc:67:9f:a4:47:6f:de:bd:83:6d:64: 6d:8c:8f:8c:f4:fc:d2:c1:ca:13:b3:46:fc:02:c5: f8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:27:4F:07:0A:2C:3E:54:02:FC:6F:77:0A:2D:72:8E:D0:51:0A:6B X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:91:a5:21:97:f5:6e:e8:a3:2b:6a:50:f9:bf:f1:3a:36:49: ef:98:d2:d4:70:2b:0a:5e:e3:b8:e2:5a:68:bd:d2:c3:02:9c: cc:10:f5:1e:f2:e9:34:e7:12:0b:7a:6c:9f:ed:a6:a4:f0:0a: 20:91:df:65:a8:ea:2c:53:10:9c:23:47:71:4b:66:17:93:6d: 78:0b:1e:bc:46:04:19:69:3d:01:04:85:22:12:15:4b:1a:67: 82:e6:4a:53:9e:fa:f6:2e:cf:4b:2a:9d:be:a3:a6:13:dd:3a: 06:51:ca:99:ed:e0:56:30:88:b7:46:ed:37:32:54:92:40:04: 83:c3:d1:80:d1:90:c6:db:e0:09:bd:54:b9:43:2a:8c:af:be: 4c:f7:36:3b:03:6e:8a:59:42:8a:b1:78:e1:5a:e1:15:44:79: 49:c6:bb:3f:ab:77:11:37:de:13:50:1d:05:35:66:ea:00:92: 3b:fa:ac:11:14:5b:c2:cb:08:02:4e:ad:f4:f0:ee:f2:28:81: 15:02:c0:91:cb:f4:7d:0d:56:cc:40:0b:de:ff:e0:4a:0e:c7: 7d:0e:26:96:69:ee:fc:3a:43:d0:33:33:e1:65:97:ed:bd:09: c4:a1:38:25:46:dd:dd:55:59:24:b8:1b:bb:e4:d3:34:1e:17: 87:ee:d0:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcvJAQ+7ZHuMuKEDi1CSjx/2AMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA5MTcwMTM1MzJaFw0yNjA5MTgwMjU0MzJaMDMxMTAvBgNV BAMTKEFCMjc0RjA3MEEyQzNFNTQwMkZDNkY3NzBBMkQ3MjhFRDA1MTBBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjWa8athjKYD+v1JdpUUzGNWy O0pagZ8wB1Vr1ZHFiNhwD72UvfmIbgAim1q+XmJfB54gLTaCyZ6ybBidkA5OsmMU NQH7gL+u+3tYgHhBIsGpr2Bb5u6d7YmxaRblWR5583O8/cMTgSG0+BjDCjcLae5Q gqIjWFZgCyjjckXmeULLNyJc/E3dZ8HU6SjnfgSlB8hwyFZ16EboObX31vduXgZU 2ilsnkVkONOq2t2WKthZcNvzturXBCggpuXKz5gr3fza2WXoZCaZHoGR2OOvZfBp 910eX5drIKBchFAWueeWQES8Z5+kR2/evYNtZG2Mj4z0/NLByhOzRvwCxfhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqydPBwosPlQC/G93Ci1yjtBRCmswHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASRpSGX9W7ooytqUPm/8To2Se+Y0tRwKwpe 47jiWmi90sMCnMwQ9R7y6TTnEgt6bJ/tpqTwCiCR32Wo6ixTEJwjR3FLZheTbXgL HrxGBBlpPQEEhSISFUsaZ4LmSlOe+vYuz0sqnb6jphPdOgZRypnt4FYwiLdG7Tcy VJJABIPD0YDRkMbb4Am9VLlDKoyvvkz3NjsDbopZQoqxeOFa4RVEeUnGuz+rdxE3 3hNQHQU1ZuoAkjv6rBEUW8LLCAJOrfTw7vIogRUCwJHL9H0NVsxAC97/4EoOx30O JpZp7vw6Q9AzM+Fll+29CcShOCVG3d1VWSS4G7vk0zQeF4fu0B0= -----END CERTIFICATE-----Generated at Thu Sep 17 10:01:43 2026 by rpki-client