$ rpki-client -vvvf rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft File: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft (raw, json) Hash identifier: Ei5+DgYRhavmymPVNRgcSkTs84+JcvYUY37kq1o5waE= Subject key identifier: 4A:6F:A9:AF:72:55:3C:1D:8C:54:FA:11:56:A3:02:59:CB:B7:AB:CA Authority key identifier: BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 Certificate issuer: /CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Certificate serial: 0CE65592B978C87A8402F98DA197BA749617E324 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 04:29:01 +0000 Manifest this update: Thu 17 Sep 2026 04:24:01 +0000 Manifest next update: Fri 18 Sep 2026 04:40:01 +0000 Files and hashes: 1: 323430353a633563303a3a2f33322d3438203d3e20313339393736.roa (hash: bK2fsV+VK/o1aLXTk9/ke6JBkK1wOgjAm/5MH3N06d0=) 2: 3130332e3134372e3235342e302f32342d3234203d3e20313334363534.roa (hash: 1yaaJ9G5o/7m18fGAiY33Sl2tkngDENHDH33T1CdcHc=) 3: 3130332e3134372e3235352e302f32342d3234203d3e20313334363534.roa (hash: P+tA2MRxWl0o3RHVswwy2Vb5fc9y+6/a967dCUK4/QA=) 4: BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl (hash: rNPWIMhxsw9xtGT3LMAPPHMiouVsdIWUUt65GsF3/TM=) 5: 323430353a633563303a666630303a3a2f34302d3438203d3e20313334363534.roa (hash: GxX5lfBpXcjqMmca1p8RO5KpzC5umjRU6XwnA7zvfuQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e6:55:92:b9:78:c8:7a:84:02:f9:8d:a1:97:ba:74:96:17:e3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5788B9D9BEA734CE494C9762645F7B8B4EE750 Validity Not Before: Sep 17 04:24:01 2026 GMT Not After : Sep 18 04:40:01 2026 GMT Subject: CN=4A6FA9AF72553C1D8C54FA1156A30259CBB7ABCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:6b:ff:90:c4:3e:99:1e:17:8c:e8:df:5f: 2f:57:63:bc:a3:8a:a8:90:f7:c2:bc:2c:e5:26:3e: 5f:0c:d4:1a:10:e4:03:de:64:8d:0b:25:e9:d7:06: 82:32:5f:7e:47:cf:14:4f:f9:25:aa:d3:23:ba:56: d3:33:36:94:70:c5:0c:d1:c3:9a:33:40:36:d3:dd: ee:fc:c5:58:d9:98:8f:b8:0b:80:40:39:2a:93:b3: 26:41:ff:07:53:40:40:5d:9b:9a:f9:f8:b2:1b:58: 37:40:54:72:30:a3:95:1f:6e:72:4e:79:51:45:4d: 9b:fa:ac:1f:5f:c2:c7:be:30:85:c0:c3:76:d3:1c: 7f:7c:1b:b2:4f:4e:a2:1c:91:4a:c5:9c:85:fc:60: da:15:29:96:f3:7b:4e:a3:ea:e1:dc:2a:5d:4b:20: a0:54:cb:d1:e1:15:a8:3e:60:d9:9b:aa:72:9d:95: f9:cb:8f:3a:09:f4:c2:68:c9:82:3a:4b:d3:79:0e: 4e:2e:02:39:28:00:3d:23:e2:eb:18:45:51:33:a9: bf:2b:a3:12:d8:1a:4f:fb:81:6f:c5:76:b5:c1:c2: ef:a9:f7:5e:f2:37:9b:2f:ce:61:48:b0:35:8d:df: 3a:26:61:9e:f2:f1:4c:18:57:f5:07:dd:17:f9:82: fa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6F:A9:AF:72:55:3C:1D:8C:54:FA:11:56:A3:02:59:CB:B7:AB:CA X509v3 Authority Key Identifier: keyid:BA:57:88:B9:D9:BE:A7:34:CE:49:4C:97:62:64:5F:7B:8B:4E:E7:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/BA5788B9D9BEA734CE494C9762645F7B8B4EE750.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:72:cc:e6:2d:da:ab:bc:19:ab:c5:7d:a4:50:6d:9f:77:f8: ac:68:fc:1b:75:5f:9a:d8:a9:7a:38:b0:70:2f:4e:d5:31:0c: fa:4d:99:c8:00:89:09:63:d0:d0:65:67:6c:43:f0:df:21:f6: 1d:cc:6e:3b:18:1a:74:2a:77:af:8e:9a:cb:ce:b5:ae:60:bc: 80:a2:1c:1c:d8:bd:6e:1e:75:f5:40:4c:9d:3c:49:e5:02:0a: 43:11:e4:d5:a3:b7:de:65:bd:e9:ea:ca:f0:bd:b5:13:1f:3b: b2:ef:cc:15:c5:4c:fa:e5:3c:d7:3f:80:04:c5:db:a2:fd:44: 3a:e5:b1:5c:a5:03:6f:d7:d2:68:d9:aa:0e:74:30:2c:b0:29: dd:0a:37:52:f3:a6:6e:1d:b3:48:89:af:86:0a:56:7e:f3:8c: 36:08:3d:85:c6:98:3e:69:3e:2c:b5:c5:00:36:65:72:e8:7f: 61:50:78:65:a4:01:8f:7b:96:6f:a1:d7:a7:bf:37:67:da:fc: 5f:78:d1:a9:58:23:f2:89:23:11:eb:19:02:e6:c5:f7:9f:03: 8f:31:89:fb:e8:79:eb:26:07:da:6a:fb:d3:e7:65:a7:cd:98: 8e:da:5f:ad:82:62:77:b9:5f:b6:0b:7d:8e:14:be:1e:da:5a: d2:80:91:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOZVkrl4yHqEAvmNoZe6dJYX4yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4 QjRFRTc1MDAeFw0yNjA5MTcwNDI0MDFaFw0yNjA5MTgwNDQwMDFaMDMxMTAvBgNV BAMTKDRBNkZBOUFGNzI1NTNDMUQ4QzU0RkExMTU2QTMwMjU5Q0JCN0FCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFGv/kMQ+mR4XjOjfXy9XY7yj iqiQ98K8LOUmPl8M1BoQ5APeZI0LJenXBoIyX35HzxRP+SWq0yO6VtMzNpRwxQzR w5ozQDbT3e78xVjZmI+4C4BAOSqTsyZB/wdTQEBdm5r5+LIbWDdAVHIwo5UfbnJO eVFFTZv6rB9fwse+MIXAw3bTHH98G7JPTqIckUrFnIX8YNoVKZbze06j6uHcKl1L IKBUy9HhFag+YNmbqnKdlfnLjzoJ9MJoyYI6S9N5Dk4uAjkoAD0j4usYRVEzqb8r oxLYGk/7gW/FdrXBwu+p917yN5svzmFIsDWN3zomYZ7y8UwYV/UH3Rf5gvrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSm+pr3JVPB2MVPoRVqMCWcu3q8owHwYDVR0j BBgwFoAUuleIudm+pzTOSUyXYmRfe4tO51AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjBlNDc1MGUtNDM5My00M2VjLTlhYjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlE OUJFQTczNENFNDk0Qzk3NjI2NDVGN0I4QjRFRTc1MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTU3ODhCOUQ5QkVBNzM0Q0U0OTRDOTc2MjY0NUY3QjhCNEVF NzUwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjBlNDc1MGUtNDM5My00M2VjLTlh YjUtZDI0N2JiYzA3ZDg2LzAvQkE1Nzg4QjlEOUJFQTczNENFNDk0Qzk3NjI2NDVG N0I4QjRFRTc1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRyzOYt2qu8GavFfaRQbZ93+Kxo/Bt1X5rY qXo4sHAvTtUxDPpNmcgAiQlj0NBlZ2xD8N8h9h3MbjsYGnQqd6+OmsvOta5gvICi HBzYvW4edfVATJ08SeUCCkMR5NWjt95lvenqyvC9tRMfO7LvzBXFTPrlPNc/gATF 26L9RDrlsVylA2/X0mjZqg50MCywKd0KN1Lzpm4ds0iJr4YKVn7zjDYIPYXGmD5p Piy1xQA2ZXLof2FQeGWkAY97lm+h16e/N2fa/F940alYI/KJIxHrGQLmxfefA48x ifvoeesmB9pq+9PnZafNmI7aX62CYne5X7YLfY4Uvh7aWtKAkSI= -----END CERTIFICATE-----Generated at Thu Sep 17 16:27:21 2026 by rpki-client