$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft File: BA730019A764CE08DFEDCCED34F19CB1993086B7.mft (raw, json) Hash identifier: 9WUREcU8evYyojJGtmqTXNkdgqxy4eGkHQ2HDiGrdEw= Subject key identifier: 73:B2:0F:88:CA:B2:84:93:50:6E:7D:B4:4F:ED:0B:41:50:DE:80:D4 Authority key identifier: BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 Certificate issuer: /CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Certificate serial: 10C3256876630BDA4DD47F6BD9EEAB05626C1749 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:03:42 +0000 Manifest this update: Wed 16 Sep 2026 23:58:42 +0000 Manifest next update: Fri 18 Sep 2026 03:53:42 +0000 Files and hashes: 1: BA730019A764CE08DFEDCCED34F19CB1993086B7.crl (hash: 7dEyXrUG9Ls2RoZPfckL+1n5lnAs1wvcxl9LvRH+nzQ=) 2: 323030313a6466343a366430303a3a2f34382d3438203d3e20313337333734.roa (hash: +4kyqyr3JOavzrsg8xHYA+KSmEmJpxdTHr9HlN8gt/w=) 3: 3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (hash: jrCGIMs+3/NQ10XTEN+OmCFfx2C9UKWvLfwdHQdgg/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c3:25:68:76:63:0b:da:4d:d4:7f:6b:d9:ee:ab:05:62:6c:17:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA730019A764CE08DFEDCCED34F19CB1993086B7 Validity Not Before: Sep 16 23:58:42 2026 GMT Not After : Sep 18 03:53:42 2026 GMT Subject: CN=73B20F88CAB28493506E7DB44FED0B4150DE80D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:c7:e7:e6:5c:27:f6:ac:60:51:36:a7:15: fe:e4:2b:7a:e0:15:16:20:0c:df:bd:5e:49:e6:6a: 98:83:76:07:50:21:2d:c6:c3:99:68:7e:de:21:f1: 30:d9:94:53:ed:a8:d1:59:4a:ef:3a:18:97:12:00: be:03:62:2c:b0:99:56:ee:11:fd:c0:c0:0e:75:93: bc:27:d7:95:bc:1e:de:44:0b:d7:97:dc:7d:11:5d: 22:a2:b0:01:b1:29:25:88:7b:e6:d0:79:77:a5:12: 7b:64:a3:2e:05:65:99:e8:18:00:cf:2b:32:88:4e: 12:62:2b:4d:72:2d:12:e9:20:ea:be:c6:20:07:0f: bb:1b:d6:1f:9f:f1:fb:73:bf:c0:ef:c5:70:54:d1: d7:58:25:6c:ed:2b:ab:0e:45:8b:47:b4:8b:27:4e: ae:d1:57:cd:7b:be:b3:c5:ff:75:59:17:b0:c6:8c: e1:68:94:d0:7c:f0:28:ed:a3:6e:b4:f5:0a:ea:3a: 50:b9:d9:61:4c:7f:88:f9:81:ad:84:02:2b:54:95: 31:d7:c0:9a:e2:d6:e6:b4:91:74:c1:bf:23:67:e9: aa:94:33:67:13:26:d0:1e:cd:3b:fd:9f:f8:03:d3: 9c:73:20:72:1d:f0:be:90:75:55:27:76:9a:4d:42: 75:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B2:0F:88:CA:B2:84:93:50:6E:7D:B4:4F:ED:0B:41:50:DE:80:D4 X509v3 Authority Key Identifier: keyid:BA:73:00:19:A7:64:CE:08:DF:ED:CC:ED:34:F1:9C:B1:99:30:86:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA730019A764CE08DFEDCCED34F19CB1993086B7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/BA730019A764CE08DFEDCCED34F19CB1993086B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:e1:30:43:18:b3:50:36:3e:04:b7:5b:51:a3:9c:d6:94:89: 57:72:32:06:30:26:05:80:ce:0d:50:98:63:f9:d6:3b:34:65: a4:a1:6f:7f:a1:f7:d9:be:58:5f:27:9c:13:a5:f7:ec:b7:e5: 54:78:7a:83:2f:4a:b3:d2:cb:14:6b:bd:e9:a2:4f:5b:48:ac: 7c:71:64:35:b5:4a:0d:36:d2:98:f7:2f:a8:1d:08:1b:66:5c: 02:25:35:8f:1f:de:e7:f5:05:69:8b:0a:2d:5d:14:5c:69:1e: eb:00:bf:d4:26:b5:26:98:30:57:d6:2d:85:5e:98:b3:a7:39: 10:33:dd:4a:57:8b:78:a4:8e:ba:8e:1e:43:6a:f7:e7:73:01: ed:44:83:87:dd:1b:10:39:d2:53:63:96:15:83:ba:6c:12:68: 20:15:6c:5e:ec:9e:61:33:11:43:d3:48:76:df:e7:f1:4e:94: b4:15:6a:30:61:02:47:92:1c:66:4d:ee:90:33:6f:00:eb:4c: 7f:bf:9d:ea:25:8c:58:80:87:5e:9e:5c:f5:e9:50:3d:17:62: 36:b5:9b:b0:ff:93:41:57:18:27:11:94:76:5b:a9:69:da:dc: 9d:0d:19:cb:37:68:68:6a:ee:bb:e3:64:96:e7:78:71:56:09: a1:1f:45:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMMlaHZjC9pN1H9r2e6rBWJsF0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5 OTMwODZCNzAeFw0yNjA5MTYyMzU4NDJaFw0yNjA5MTgwMzUzNDJaMDMxMTAvBgNV BAMTKDczQjIwRjg4Q0FCMjg0OTM1MDZFN0RCNDRGRUQwQjQxNTBERTgwRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2usfn5lwn9qxgUTanFf7kK3rg FRYgDN+9XknmapiDdgdQIS3Gw5loft4h8TDZlFPtqNFZSu86GJcSAL4DYiywmVbu Ef3AwA51k7wn15W8Ht5EC9eX3H0RXSKisAGxKSWIe+bQeXelEntkoy4FZZnoGADP KzKIThJiK01yLRLpIOq+xiAHD7sb1h+f8ftzv8DvxXBU0ddYJWztK6sORYtHtIsn Tq7RV817vrPF/3VZF7DGjOFolNB88Cjto2609QrqOlC52WFMf4j5ga2EAitUlTHX wJri1ua0kXTBvyNn6aqUM2cTJtAezTv9n/gD05xzIHId8L6QdVUndppNQnXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc7IPiMqyhJNQbn20T+0LQVDegNQwHwYDVR0j BBgwFoAUunMAGadkzgjf7cztNPGcsZkwhrcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE2NmYzNTAtZTY0Mi00MDJmLThhYzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlB NzY0Q0UwOERGRURDQ0VEMzRGMTlDQjE5OTMwODZCNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTczMDAxOUE3NjRDRTA4REZFRENDRUQzNEYxOUNCMTk5MzA4 NkI3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE2NmYzNTAtZTY0Mi00MDJmLThh YzMtNmFlZjdlMTFhYWMzLzAvQkE3MzAwMTlBNzY0Q0UwOERGRURDQ0VEMzRGMTlD QjE5OTMwODZCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPhMEMYs1A2PgS3W1GjnNaUiVdyMgYwJgWA zg1QmGP51js0ZaShb3+h99m+WF8nnBOl9+y35VR4eoMvSrPSyxRrvemiT1tIrHxx ZDW1Sg020pj3L6gdCBtmXAIlNY8f3uf1BWmLCi1dFFxpHusAv9QmtSaYMFfWLYVe mLOnORAz3UpXi3ikjrqOHkNq9+dzAe1Eg4fdGxA50lNjlhWDumwSaCAVbF7snmEz EUPTSHbf5/FOlLQVajBhAkeSHGZN7pAzbwDrTH+/neoljFiAh16eXPXpUD0XYja1 m7D/k0FXGCcRlHZbqWna3J0NGcs3aGhq7rvjZJbneHFWCaEfRUQ= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:23 2026 by rpki-client