$ rpki-client -vvf rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft File: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft (raw, json) Hash identifier: o/CRk29lhbdgBzWun7rjAB8XOo4t0xPpUF7fPp6spoc= Subject key identifier: 9B:A8:6F:69:6D:AC:E4:73:D7:49:F5:F4:C7:DE:BB:53:59:F1:FD:C9 Authority key identifier: BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C Certificate issuer: /CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Certificate serial: 4EFB6E019F55756E485F8397D3556A4752D70E1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:40:09 +0000 Manifest this update: Thu 18 Jun 2026 02:35:09 +0000 Manifest next update: Fri 19 Jun 2026 03:34:09 +0000 Files and hashes: 1: 3136302e32352e3137382e302f32342d3234203d3e20313533303735.roa (hash: 38K5sAQjb+p+j0jaQg6iZ50hxbINutZm4v5XssXTvIk=) 2: 3136302e32352e3137392e302f32342d3234203d3e20313533303735.roa (hash: P41vY0hE4/fOxPq6Kkw/xasNl7gj2h7Qpzh5dZmTPvY=) 3: 3136302e32352e3137382e302f32332d3234203d3e20313533303735.roa (hash: emzicFPb20ntNDPhnqdIZfGTkDlbHTjV6qlycOCsU9Y=) 4: BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl (hash: TDocBgbXitKFHvyLkzcFwmAsUi3W7O/FdTTpCuql0jA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fb:6e:01:9f:55:75:6e:48:5f:83:97:d3:55:6a:47:52:d7:0e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA973B32B2177C10441FFA1198AD30A3ACABB9C Validity Not Before: Jun 18 02:35:09 2026 GMT Not After : Jun 19 03:34:09 2026 GMT Subject: CN=9BA86F696DACE473D749F5F4C7DEBB5359F1FDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:6f:37:21:d0:2a:d7:5c:3a:79:42:3e:d2: 7d:59:15:8b:c0:fd:ca:66:a3:8b:7b:36:43:ef:15: 4f:a4:06:2d:5d:f4:20:80:01:03:52:bd:6d:bb:95: bd:c9:89:d5:bf:50:f4:bf:b3:d0:41:cd:cb:73:38: 9a:f0:98:a6:df:d8:a5:ee:71:26:6d:2a:e1:63:ed: 8d:b5:eb:fc:4d:cd:74:c6:fb:31:5a:16:d4:cc:2e: 73:c4:54:e7:c9:42:e5:0b:65:ef:33:0f:6f:98:42: 64:1a:bd:54:d5:0e:35:55:3b:89:77:1c:e8:57:05: d3:29:a0:d3:31:a6:7d:b1:3d:7f:32:97:49:35:26: fb:c4:21:6d:cf:39:23:e3:1a:0c:79:e4:f8:44:fa: 10:43:00:2e:1b:3b:53:c4:a6:f3:09:06:d5:66:ce: d4:67:07:a7:91:52:be:04:d8:0d:65:da:ca:26:e8: 05:da:79:eb:e6:64:61:ba:99:49:d2:52:67:62:94: d3:6c:3b:0e:d2:6b:cf:25:aa:64:62:fb:6c:ad:4d: c9:ce:73:95:0a:7e:5b:a4:20:ae:bd:3f:9e:f0:82: 95:4b:2e:6c:84:b4:3f:bd:b8:37:56:7c:cb:0f:05: b7:9f:76:66:0c:39:8e:23:68:a1:8a:bc:e5:b8:4f: 8e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A8:6F:69:6D:AC:E4:73:D7:49:F5:F4:C7:DE:BB:53:59:F1:FD:C9 X509v3 Authority Key Identifier: keyid:BA:A9:73:B3:2B:21:77:C1:04:41:FF:A1:19:8A:D3:0A:3A:CA:BB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87c432e0-dc3e-42cc-bcc0-629b16206c9a/0/BAA973B32B2177C10441FFA1198AD30A3ACABB9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5e:57:b4:4c:e1:ec:bd:37:f8:ea:11:c6:87:8b:15:9c:75: d5:93:39:8e:44:db:5d:8d:36:f1:63:4f:fb:16:71:f8:3e:8e: 55:0d:3a:04:47:51:80:24:b3:55:ff:83:16:ce:41:56:e8:c3: 8f:95:0b:0d:e0:69:8a:4d:29:da:9a:3c:47:a0:62:93:08:c1: 00:1c:38:cd:c4:19:8d:c3:09:8e:f9:71:f5:be:a7:e9:00:3d: a5:0c:85:82:e6:9e:fe:ed:7c:7e:ee:a9:36:0c:a1:ad:74:87: fa:e5:89:0c:fd:1a:70:a9:ed:03:08:2d:6e:ed:1a:aa:18:43: cd:92:27:9f:4c:fd:d7:ef:80:a7:14:c7:bc:2c:1b:32:ac:c9: ff:ed:6f:3b:63:40:22:34:27:3d:c7:af:f6:9e:d2:95:9e:86: 72:1f:fd:62:08:3c:c7:88:4b:b8:cd:8a:b0:63:23:3d:ab:76: c9:f7:62:f6:64:0f:0c:b3:5f:03:20:2d:e0:a9:45:2a:fc:ac: d3:f7:e4:6e:be:5b:7a:04:d9:f0:0d:15:f2:c5:8b:dd:c4:de: 8d:92:20:d8:a1:f6:18:88:02:45:2a:50:3a:4a:ff:9f:75:70: 02:96:2d:72:77:a6:8b:9a:96:26:fb:5b:1e:20:e9:29:ee:5d: 57:50:06:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvtuAZ9VdW5IX4OX01VqR1LXDh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQzMEEz QUNBQkI5QzAeFw0yNjA2MTgwMjM1MDlaFw0yNjA2MTkwMzM0MDlaMDMxMTAvBgNV BAMTKDlCQTg2RjY5NkRBQ0U0NzNENzQ5RjVGNEM3REVCQjUzNTlGMUZEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sW83IdAq11w6eUI+0n1ZFYvA /cpmo4t7NkPvFU+kBi1d9CCAAQNSvW27lb3JidW/UPS/s9BBzctzOJrwmKbf2KXu cSZtKuFj7Y216/xNzXTG+zFaFtTMLnPEVOfJQuULZe8zD2+YQmQavVTVDjVVO4l3 HOhXBdMpoNMxpn2xPX8yl0k1JvvEIW3POSPjGgx55PhE+hBDAC4bO1PEpvMJBtVm ztRnB6eRUr4E2A1l2som6AXaeevmZGG6mUnSUmdilNNsOw7Sa88lqmRi+2ytTcnO c5UKflukIK69P57wgpVLLmyEtD+9uDdWfMsPBbefdmYMOY4jaKGKvOW4T47JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6hvaW2s5HPXSfX0x967U1nx/ckwHwYDVR0j BBgwFoAUuqlzsyshd8EEQf+hGYrTCjrKu5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODdjNDMyZTAtZGMzZS00MmNjLWJjYzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMy QjIxNzdDMTA0NDFGRkExMTk4QUQzMEEzQUNBQkI5Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CQUE5NzNCMzJCMjE3N0MxMDQ0MUZGQTExOThBRDMwQTNBQ0FC QjlDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODdjNDMyZTAtZGMzZS00MmNjLWJj YzAtNjI5YjE2MjA2YzlhLzAvQkFBOTczQjMyQjIxNzdDMTA0NDFGRkExMTk4QUQz MEEzQUNBQkI5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxeV7RM4ey9N/jqEcaHixWcddWTOY5E212N NvFjT/sWcfg+jlUNOgRHUYAks1X/gxbOQVbow4+VCw3gaYpNKdqaPEegYpMIwQAc OM3EGY3DCY75cfW+p+kAPaUMhYLmnv7tfH7uqTYMoa10h/rliQz9GnCp7QMILW7t GqoYQ82SJ59M/dfvgKcUx7wsGzKsyf/tbztjQCI0Jz3Hr/ae0pWehnIf/WIIPMeI S7jNirBjIz2rdsn3YvZkDwyzXwMgLeCpRSr8rNP35G6+W3oE2fANFfLFi93E3o2S INih9hiIAkUqUDpK/591cAKWLXJ3poualib7Wx4g6SnuXVdQBio= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:14 2026 by rpki-client