$ rpki-client -vvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: MIRtYKWN9xl7qB/s9QxluvsS9QBmqhmWiyStApMilG8= Subject key identifier: 75:39:23:E9:62:35:9A:7C:D8:76:09:27:67:F1:8C:DC:A2:5A:08:8F Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 3D0BD8CDF4C076274882D31C8AA6FBE1DDE2D65C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 17:13:12 +0000 Manifest this update: Sun 02 Aug 2026 17:08:12 +0000 Manifest next update: Mon 03 Aug 2026 17:38:12 +0000 Files and hashes: 1: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: PCfvnIPsnXXbMIA+3kC4UpF6vUhCjoUJ0bTqDIij6cM=) 2: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 3: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) 4: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:0b:d8:cd:f4:c0:76:27:48:82:d3:1c:8a:a6:fb:e1:dd:e2:d6:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Aug 2 17:08:12 2026 GMT Not After : Aug 3 17:38:12 2026 GMT Subject: CN=753923E962359A7CD876092767F18CDCA25A088F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:0a:f0:8d:07:59:77:8f:b8:f2:1c:a5:77: 32:f7:78:91:4a:0a:7c:46:30:ef:4f:3e:57:5e:e0: 14:4a:42:10:27:d7:67:9e:ed:dc:b8:6f:c5:ec:d9: df:6f:1a:54:9d:0c:63:47:53:e8:66:f8:83:0c:9d: 76:7d:d0:fc:6c:28:e1:44:e5:26:e6:38:eb:6a:c0: ff:58:1a:00:87:ec:8d:24:10:9e:7f:0a:af:7c:70: 8e:fe:4e:9a:82:57:b8:af:f1:fe:d6:4a:1e:6e:e8: 92:7e:e2:6d:d8:b2:37:68:7f:c8:aa:3c:47:7e:48: c0:38:a5:bd:11:d3:c4:64:cd:0a:a8:d4:9f:fe:25: c5:3a:40:f9:a1:89:46:b6:08:46:1f:51:16:71:6e: b4:2f:74:72:c5:8c:12:6b:d4:04:b2:d8:cb:8d:73: 46:02:d3:07:b5:e6:4d:c3:2e:99:f7:d3:f7:8e:ac: 0d:cd:6f:e1:f1:2f:1a:1f:47:29:c4:49:fc:08:f6: 33:6c:3e:d4:db:e3:dc:bf:77:87:a1:66:fb:32:9d: f7:71:71:19:e3:5b:b8:4a:9f:1e:89:61:85:a4:70: 0b:76:9a:d3:44:8c:ef:23:f7:af:db:87:c2:40:64: 79:1c:31:a6:85:79:39:a9:cb:dc:d2:98:e1:2e:bd: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:39:23:E9:62:35:9A:7C:D8:76:09:27:67:F1:8C:DC:A2:5A:08:8F X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d5:cc:47:2a:ce:fe:ce:ce:c2:8c:3d:da:03:d3:0d:30:0b: 1b:d9:99:bc:64:ce:c7:8f:e6:43:3a:dc:59:90:56:9c:ff:6c: d0:ee:c8:e7:81:f7:6e:c8:19:4a:85:cb:11:84:01:1e:65:a0: a7:42:7a:50:30:bd:e2:a8:27:2d:1b:b7:1f:a6:c6:23:00:e9: 58:3e:51:3f:de:2b:e6:05:7c:83:41:d2:92:98:f5:27:52:a9: 48:08:5f:f2:32:85:91:3e:c1:68:2a:21:8d:32:20:f0:d3:a9: f2:e5:c2:de:51:1d:40:58:4c:00:ca:77:0e:41:90:5f:3a:89: 59:b0:ef:7e:8c:e7:83:04:fe:89:77:1c:63:6d:9b:ff:17:f6: 21:3c:0b:25:0b:89:8d:0b:86:5b:9c:e5:d2:d7:11:77:f7:d1: 11:6b:f7:15:95:f1:2b:9a:d0:cd:93:5b:bf:c2:5d:63:f6:e2: 07:7b:15:14:ef:cd:e6:4c:df:1c:02:a3:9a:3a:37:33:50:e5: d1:bb:1f:20:f2:aa:3b:e0:9f:01:af:da:76:4b:4d:17:2b:89: c4:14:88:36:20:64:ab:79:44:a2:65:05:e7:e1:1c:eb:bd:fc: 42:7a:89:fe:ff:92:8f:2c:b1:13:e5:e4:d8:c3:b1:fe:be:75: 6b:57:38:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQvYzfTAdidIgtMciqb74d3i1lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA4MDIxNzA4MTJaFw0yNjA4MDMxNzM4MTJaMDMxMTAvBgNV BAMTKDc1MzkyM0U5NjIzNTlBN0NEODc2MDkyNzY3RjE4Q0RDQTI1QTA4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhdgrwjQdZd4+48hyldzL3eJFK CnxGMO9PPlde4BRKQhAn12ee7dy4b8Xs2d9vGlSdDGNHU+hm+IMMnXZ90PxsKOFE 5SbmOOtqwP9YGgCH7I0kEJ5/Cq98cI7+TpqCV7iv8f7WSh5u6JJ+4m3Ysjdof8iq PEd+SMA4pb0R08RkzQqo1J/+JcU6QPmhiUa2CEYfURZxbrQvdHLFjBJr1ASy2MuN c0YC0we15k3DLpn30/eOrA3Nb+HxLxofRynESfwI9jNsPtTb49y/d4ehZvsynfdx cRnjW7hKnx6JYYWkcAt2mtNEjO8j96/bh8JAZHkcMaaFeTmpy9zSmOEuvRM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdTkj6WI1mnzYdgknZ/GM3KJaCI8wHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADVzEcqzv7OzsKMPdoD0w0wCxvZmbxkzseP 5kM63FmQVpz/bNDuyOeB927IGUqFyxGEAR5loKdCelAwveKoJy0btx+mxiMA6Vg+ UT/eK+YFfINB0pKY9SdSqUgIX/IyhZE+wWgqIY0yIPDTqfLlwt5RHUBYTADKdw5B kF86iVmw736M54ME/ol3HGNtm/8X9iE8CyULiY0Lhluc5dLXEXf30RFr9xWV8Sua 0M2TW7/CXWP24gd7FRTvzeZM3xwCo5o6NzNQ5dG7HyDyqjvgnwGv2nZLTRcricQU iDYgZKt5RKJlBefhHOu9/EJ6if7/ko8ssRPl5NjDsf6+dWtXOPA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:43 2026 by rpki-client