$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft File: BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft (raw, json) Hash identifier: VJAD12zQYtefU5XYzUxhQrAezqqa41WnG6TMUe9fva4= Subject key identifier: E2:F4:56:8C:9C:90:82:C6:A7:05:52:C9:2A:7B:B3:64:70:6E:94:08 Authority key identifier: BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 Certificate issuer: /CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Certificate serial: 49751AB6B317F0FFB1991763708240F30CE85691 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 19:55:03 +0000 Manifest this update: Fri 19 Jun 2026 19:50:03 +0000 Manifest next update: Sat 20 Jun 2026 22:29:03 +0000 Files and hashes: 1: BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl (hash: tj1g9LT9xFsBXzX8in3giMGnEsswz0uFW6DsRIcEQNE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:75:1a:b6:b3:17:f0:ff:b1:99:17:63:70:82:40:f3:0c:e8:56:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7A75433F2325B129ECDCF50EE73BB537AE5370 Validity Not Before: Jun 19 19:50:03 2026 GMT Not After : Jun 20 22:29:03 2026 GMT Subject: CN=E2F4568C9C9082C6A70552C92A7BB364706E9408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:19:61:1a:60:0d:f9:48:07:5c:85:c4:c1: e5:c0:d8:c2:1a:8a:d4:dd:f7:73:2a:30:97:a4:cf: e8:41:b1:89:ac:28:54:f4:c4:46:56:b9:6a:e7:58: 4a:88:a4:fd:17:f5:2a:f6:89:90:7f:67:d9:a7:38: 73:17:99:d9:a3:bb:20:0f:85:d8:e8:13:63:89:83: 6f:c8:c0:a8:ef:8c:dc:6a:97:e3:aa:c2:aa:1d:35: b3:33:b8:2b:7f:b1:4f:cf:88:93:d1:5e:00:f3:47: 72:17:b0:98:fc:50:52:63:ee:8c:28:0f:de:54:50: 7b:3a:22:e7:14:69:76:0d:40:e0:23:f1:58:01:34: 18:1e:46:1f:48:1d:f9:89:94:83:b4:63:7b:24:04: 7a:9a:96:56:43:15:75:54:18:0a:f8:45:f7:91:28: ac:3e:bb:98:ab:d8:76:1e:38:97:6b:f4:6e:64:ee: d1:3e:98:81:86:c9:5c:99:b2:8a:18:6f:c2:9b:55: 8e:03:b3:ee:42:7b:e9:47:3a:1e:ca:75:3a:88:14: ee:aa:61:67:5d:73:3d:c5:6e:57:43:4e:9b:27:4f: bc:55:e9:64:31:1c:d3:a5:21:08:00:c4:d4:af:7b: 86:fd:f7:d9:b0:13:e6:86:aa:4b:61:61:df:a7:d4: af:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F4:56:8C:9C:90:82:C6:A7:05:52:C9:2A:7B:B3:64:70:6E:94:08 X509v3 Authority Key Identifier: keyid:BA:7A:75:43:3F:23:25:B1:29:EC:DC:F5:0E:E7:3B:B5:37:AE:53:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7A75433F2325B129ECDCF50EE73BB537AE5370.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/BA7A75433F2325B129ECDCF50EE73BB537AE5370.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:94:43:66:76:89:39:8c:8b:2a:90:8a:66:0b:97:93:cb: 60:0f:9a:b3:7a:0a:61:1e:c0:72:06:e6:8f:24:bb:81:b1:a9: 28:42:0f:44:f9:e1:81:88:bc:5a:35:86:5f:4f:d4:99:7c:32: 1d:91:77:a5:15:30:13:63:5e:98:64:ac:0f:b4:78:73:75:1a: a6:40:07:15:2e:23:5c:b0:96:9b:8a:d3:50:e0:a2:02:c2:06: e8:5e:25:49:4f:f7:6c:3a:59:a6:2c:f1:d9:61:c4:5b:b8:fb: 24:33:a0:45:5e:8d:2f:8e:8e:72:a1:d8:42:e9:f8:70:bc:6d: 7f:15:8d:d8:4d:56:c5:ab:1a:c9:04:67:43:e9:d4:fb:fb:49: 90:7b:20:ac:7a:61:46:dc:47:98:b0:ce:cc:f1:8d:2a:13:9a: aa:09:4c:57:b0:6c:a7:09:5f:75:a8:51:e1:2b:f6:87:32:59: 49:51:08:0d:98:fe:69:6a:4f:0a:1b:4a:de:af:a2:46:fc:7a: 0d:6e:9d:23:1a:66:43:c3:04:db:be:e7:be:e3:01:01:86:a4: 9e:04:56:8b:77:5f:20:f8:5d:2b:68:dd:85:03:3c:d1:1e:47: 9b:68:e3:ce:d2:c2:25:c7:8e:6f:91:fc:aa:91:cd:f2:67:f8: 0d:a4:bf:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXUatrMX8P+xmRdjcIJA8wzoVpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUz N0FFNTM3MDAeFw0yNjA2MTkxOTUwMDNaFw0yNjA2MjAyMjI5MDNaMDMxMTAvBgNV BAMTKEUyRjQ1NjhDOUM5MDgyQzZBNzA1NTJDOTJBN0JCMzY0NzA2RTk0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KxlhGmAN+UgHXIXEweXA2MIa itTd93MqMJekz+hBsYmsKFT0xEZWuWrnWEqIpP0X9Sr2iZB/Z9mnOHMXmdmjuyAP hdjoE2OJg2/IwKjvjNxql+OqwqodNbMzuCt/sU/PiJPRXgDzR3IXsJj8UFJj7owo D95UUHs6IucUaXYNQOAj8VgBNBgeRh9IHfmJlIO0Y3skBHqallZDFXVUGAr4RfeR KKw+u5ir2HYeOJdr9G5k7tE+mIGGyVyZsooYb8KbVY4Ds+5Ce+lHOh7KdTqIFO6q YWddcz3FbldDTpsnT7xV6WQxHNOlIQgAxNSve4b999mwE+aGqkthYd+n1K+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vRWjJyQgsanBVLJKnuzZHBulAgwHwYDVR0j BBgwFoAUunp1Qz8jJbEp7Nz1Duc7tTeuU3AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzA2ODUzMDctODRlYS00ZmUzLWJiN2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMz RjIzMjVCMTI5RUNEQ0Y1MEVFNzNCQjUzN0FFNTM3MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTdBNzU0MzNGMjMyNUIxMjlFQ0RDRjUwRUU3M0JCNTM3QUU1 MzcwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzA2ODUzMDctODRlYS00ZmUzLWJi N2MtZmIyODk1Mzc4NzQyLzAvQkE3QTc1NDMzRjIzMjVCMTI5RUNEQ0Y1MEVFNzNC QjUzN0FFNTM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFx/lENmdok5jIsqkIpmC5eTy2APmrN6CmEe wHIG5o8ku4GxqShCD0T54YGIvFo1hl9P1Jl8Mh2Rd6UVMBNjXphkrA+0eHN1GqZA BxUuI1ywlpuK01DgogLCBuheJUlP92w6WaYs8dlhxFu4+yQzoEVejS+OjnKh2ELp +HC8bX8VjdhNVsWrGskEZ0Pp1Pv7SZB7IKx6YUbcR5iwzszxjSoTmqoJTFewbKcJ X3WoUeEr9ocyWUlRCA2Y/mlqTwobSt6vokb8eg1unSMaZkPDBNu+577jAQGGpJ4E Vot3XyD4XSto3YUDPNEeR5to487SwiXHjm+R/KqRzfJn+A2kv8c= -----END CERTIFICATE-----Generated at Sat Jun 20 09:16:17 2026 by rpki-client