$ rpki-client -vvvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: cEzPg1dSYhPhFWO4hjxtwMoPy3r0lrTF98tMsvji4Mg= Subject key identifier: 2F:68:05:5A:5B:33:1D:98:45:D7:97:1F:46:D0:9B:79:AA:97:C7:04 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 3A560B42009B6EC637E0750B2B18CF8565CCD284 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 06:06:02 +0000 Manifest this update: Thu 17 Sep 2026 06:01:02 +0000 Manifest next update: Fri 18 Sep 2026 06:48:02 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 2: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: T5Krl70ZoIHpfDRw/pE2dSQxTTpXMW+vCXcDi2d+3bQ=) 3: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) 4: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:48:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:56:0b:42:00:9b:6e:c6:37:e0:75:0b:2b:18:cf:85:65:cc:d2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Sep 17 06:01:02 2026 GMT Not After : Sep 18 06:48:02 2026 GMT Subject: CN=2F68055A5B331D9845D7971F46D09B79AA97C704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:06:5a:29:47:71:a6:28:31:9a:cd:5f:68: 6b:85:66:05:c6:63:7f:c6:45:1b:db:95:56:ab:4d: 49:6e:da:2b:08:1e:c4:8d:6f:91:45:b3:b6:d2:57: 53:da:24:35:05:b5:63:d6:82:e1:3a:29:06:7c:1a: db:a9:da:47:4f:00:71:68:ce:5e:4d:75:32:98:46: 0c:37:96:b7:3e:03:78:c4:bf:54:a6:20:bf:79:7c: 06:84:bc:77:75:41:62:d6:04:b7:08:70:0b:1a:7a: 79:d3:66:af:1e:96:a3:00:aa:98:42:36:2f:60:e2: 49:1f:2a:c0:6b:d0:6b:4d:49:17:53:4e:2a:74:7f: 31:19:b4:2f:b8:de:03:18:b0:99:40:2d:27:12:91: ea:47:52:94:e0:f6:b5:bd:0e:4c:0a:42:3d:cf:c4: 8e:11:ff:e4:c7:85:af:a0:83:6b:32:75:41:1b:0a: bc:29:22:a4:15:22:3c:24:23:79:de:64:0e:05:83: 01:bf:b5:cb:27:47:83:42:69:da:98:be:ba:a5:99: 8a:08:a6:d4:a5:0f:f0:c1:c9:a2:a0:6b:55:d2:9b: e0:78:fd:d7:98:a6:c0:38:61:e3:5f:15:11:03:e3: c0:02:8f:73:63:4a:e2:6e:2d:88:dd:ed:28:af:72: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:68:05:5A:5B:33:1D:98:45:D7:97:1F:46:D0:9B:79:AA:97:C7:04 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:15:80:6a:38:7e:3a:ce:de:de:ca:b2:a3:13:e3:fb:8c:69: 6c:ab:28:71:6c:55:2d:1e:d9:74:27:e7:8b:a0:c2:14:f2:09: bb:13:82:8c:80:80:bc:53:c8:4f:d3:ce:79:2c:26:7f:f7:37: 05:06:f8:a3:2f:2e:f1:e8:5a:c8:78:d4:58:21:de:4a:e3:95: 1a:c4:b5:3f:5e:43:8c:04:35:b1:2b:ec:83:8e:2b:37:3d:44: 2a:31:ac:76:27:02:3e:98:87:b7:86:f6:fe:09:e9:64:a5:bd: d3:69:d0:d0:24:6e:11:c8:06:2c:22:36:16:8f:88:09:ce:c8: 28:1b:c0:13:8d:9c:e3:6e:72:90:5f:ea:23:98:53:9e:76:8f: e9:30:7f:dc:68:b1:2c:a3:e7:3b:5b:a2:28:14:b5:55:40:82: fe:0c:dd:fd:5e:23:d2:04:ad:03:73:3c:70:1f:c4:b4:43:d1: fd:eb:2c:83:73:8f:d1:91:1d:6a:23:85:1a:ae:0c:58:4f:8b: bd:b6:d2:c6:9b:d8:0d:c2:1b:12:f7:82:33:19:65:8b:10:a3: cc:dc:ef:c2:03:85:62:bd:65:91:42:f8:7a:cd:05:e8:e4:ea: e0:1c:d4:bc:03:fb:97:72:54:9b:9e:ec:a0:8e:10:0c:b7:b2: 30:aa:38:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlYLQgCbbsY34HULKxjPhWXM0oQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA5MTcwNjAxMDJaFw0yNjA5MTgwNjQ4MDJaMDMxMTAvBgNV BAMTKDJGNjgwNTVBNUIzMzFEOTg0NUQ3OTcxRjQ2RDA5Qjc5QUE5N0M3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjvwZaKUdxpigxms1faGuFZgXG Y3/GRRvblVarTUlu2isIHsSNb5FFs7bSV1PaJDUFtWPWguE6KQZ8Gtup2kdPAHFo zl5NdTKYRgw3lrc+A3jEv1SmIL95fAaEvHd1QWLWBLcIcAsaennTZq8elqMAqphC Ni9g4kkfKsBr0GtNSRdTTip0fzEZtC+43gMYsJlALScSkepHUpTg9rW9DkwKQj3P xI4R/+THha+gg2sydUEbCrwpIqQVIjwkI3neZA4FgwG/tcsnR4NCadqYvrqlmYoI ptSlD/DByaKga1XSm+B4/deYpsA4YeNfFRED48ACj3NjSuJuLYjd7SivckTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL2gFWlszHZhF15cfRtCbeaqXxwQwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8VgGo4fjrO3t7KsqMT4/uMaWyrKHFsVS0e 2XQn54ugwhTyCbsTgoyAgLxTyE/TznksJn/3NwUG+KMvLvHoWsh41Fgh3krjlRrE tT9eQ4wENbEr7IOOKzc9RCoxrHYnAj6Yh7eG9v4J6WSlvdNp0NAkbhHIBiwiNhaP iAnOyCgbwBONnONucpBf6iOYU552j+kwf9xosSyj5ztboigUtVVAgv4M3f1eI9IE rQNzPHAfxLRD0f3rLINzj9GRHWojhRquDFhPi7220sab2A3CGxL3gjMZZYsQo8zc 78IDhWK9ZZFC+HrNBejk6uAc1LwD+5dyVJue7KCOEAy3sjCqOEA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:57:42 2026 by rpki-client