$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: k4mz0M3b0XIyJQSfU/evHdlTpLmBHK6rPtoMNHXETZw= Subject key identifier: 92:44:F4:D6:46:C6:11:2F:8A:27:C5:BC:5D:42:1E:52:37:4E:9B:C3 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 0EB837DB702DBCC4C98D9026D2850EC926642D88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 16:39:48 +0000 Manifest this update: Wed 16 Sep 2026 16:34:48 +0000 Manifest next update: Thu 17 Sep 2026 18:31:48 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: dPT9pzm3xinxo5p2QSwq9ZA2SEou7wtbl1u/3GebDMI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b8:37:db:70:2d:bc:c4:c9:8d:90:26:d2:85:0e:c9:26:64:2d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: Sep 16 16:34:48 2026 GMT Not After : Sep 17 18:31:48 2026 GMT Subject: CN=9244F4D646C6112F8A27C5BC5D421E52374E9BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c6:70:41:a4:e3:58:79:12:84:14:7d:1a:df: a0:52:b1:ca:36:ef:f2:f3:83:3a:54:10:7f:13:38: 93:6e:58:c7:5d:0f:ef:9e:2b:3a:6b:f1:97:ce:25: ea:1e:e0:92:7a:04:d2:92:3a:bf:a5:8b:c1:81:d2: ce:88:ce:71:53:6a:21:c6:d5:b8:aa:67:e9:73:01: 6b:15:00:3e:65:a3:6e:d5:4d:51:46:13:fa:1f:40: df:5d:ce:ba:96:3c:d1:11:41:23:33:74:55:8f:34: f7:cb:2e:11:91:23:32:a6:31:c1:69:5b:78:5a:28: e7:1d:a4:af:68:e8:02:d4:14:c6:4d:94:11:c1:84: 63:8b:0b:f7:de:67:f7:19:3c:3a:68:10:65:ca:c0: 36:eb:33:c6:7f:01:5b:41:74:8c:04:83:be:a5:d9: d9:d1:c4:c4:7c:b6:1e:a7:78:f2:af:94:a3:8b:cf: 41:be:c1:5b:42:b2:aa:75:16:6d:2e:b6:76:a1:0b: 30:6a:ec:cb:03:f1:78:8f:4d:b9:c2:e4:77:21:40: 75:08:81:d5:f9:22:a6:dd:57:53:11:5b:ef:85:2c: be:98:b5:b1:91:96:52:62:40:f2:53:ae:c7:ab:51: e0:d1:6a:3b:53:e7:61:a4:70:fa:ff:ee:d4:ff:c7: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:44:F4:D6:46:C6:11:2F:8A:27:C5:BC:5D:42:1E:52:37:4E:9B:C3 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e5:8f:13:cd:3b:73:20:1c:27:6d:2a:75:b7:90:b8:c8:69: d2:41:79:bf:65:23:d5:16:a0:2e:6a:28:b2:ea:52:81:50:d3: b0:c7:55:51:8f:f0:dc:04:29:ed:71:50:32:6f:3f:58:22:78: dc:78:68:9a:0a:63:4e:34:0d:b0:cb:53:c4:00:ff:43:dd:f4: 37:4b:96:24:71:78:fb:fa:35:29:5c:10:75:4d:3d:4c:7a:1e: 1d:3d:e2:64:8c:2f:a9:fb:7a:6d:56:58:7e:1b:d4:79:79:ff: 7f:b7:7b:1e:cb:83:ff:d5:a3:2a:a0:14:ce:67:d4:51:65:72: d0:20:2c:1d:04:57:18:4d:49:34:16:62:a6:71:3b:69:d5:eb: 5e:b1:26:98:1f:be:2c:17:c4:a7:78:91:1a:d3:1e:f4:e3:28: e7:9f:3f:ea:7c:96:4f:99:a4:51:db:09:71:e0:30:31:61:61: e6:64:1e:9f:2e:a1:87:1d:f0:9d:12:73:5a:7a:8f:ae:5b:db: 40:0c:00:de:ec:c0:e0:f3:4f:fa:49:58:5c:4e:8b:73:75:5c: 0a:b2:ad:e4:df:7b:56:f7:86:88:6d:97:0a:99:05:86:55:ee: 66:c2:06:01:82:8f:f7:3e:be:e8:75:a6:b6:a2:66:5f:45:88: 7c:2f:2e:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrg323AtvMTJjZAm0oUOySZkLYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA5MTYxNjM0NDhaFw0yNjA5MTcxODMxNDhaMDMxMTAvBgNV BAMTKDkyNDRGNEQ2NDZDNjExMkY4QTI3QzVCQzVENDIxRTUyMzc0RTlCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfxnBBpONYeRKEFH0a36BSsco2 7/LzgzpUEH8TOJNuWMddD++eKzpr8ZfOJeoe4JJ6BNKSOr+li8GB0s6IznFTaiHG 1biqZ+lzAWsVAD5lo27VTVFGE/ofQN9dzrqWPNERQSMzdFWPNPfLLhGRIzKmMcFp W3haKOcdpK9o6ALUFMZNlBHBhGOLC/feZ/cZPDpoEGXKwDbrM8Z/AVtBdIwEg76l 2dnRxMR8th6nePKvlKOLz0G+wVtCsqp1Fm0utnahCzBq7MsD8XiPTbnC5HchQHUI gdX5IqbdV1MRW++FLL6YtbGRllJiQPJTrserUeDRajtT52GkcPr/7tT/x+gjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkT01kbGES+KJ8W8XUIeUjdOm8MwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTljxPNO3MgHCdtKnW3kLjIadJBeb9lI9UW oC5qKLLqUoFQ07DHVVGP8NwEKe1xUDJvP1gieNx4aJoKY040DbDLU8QA/0Pd9DdL liRxePv6NSlcEHVNPUx6Hh094mSML6n7em1WWH4b1Hl5/3+3ex7Lg//VoyqgFM5n 1FFlctAgLB0EVxhNSTQWYqZxO2nV616xJpgfviwXxKd4kRrTHvTjKOefP+p8lk+Z pFHbCXHgMDFhYeZkHp8uoYcd8J0Sc1p6j65b20AMAN7swODzT/pJWFxOi3N1XAqy reTfe1b3hohtlwqZBYZV7mbCBgGCj/c+vuh1praiZl9FiHwvLjY= -----END CERTIFICATE-----Generated at Thu Sep 17 09:16:36 2026 by rpki-client