$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft File: BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft (raw, json) Hash identifier: d9rgry3wZRztXOmKAhdiA+ByBpRcvIF8oSncgrEufnk= Subject key identifier: C4:48:49:F6:DA:3D:CD:BA:BB:B2:A9:77:79:24:29:DB:3E:26:1B:46 Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 Certificate issuer: /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Certificate serial: 6AEE0BFB2B620CCFCE4D43DDE6AEE680B3D254DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:21:51 +0000 Manifest this update: Wed 16 Sep 2026 18:16:51 +0000 Manifest next update: Thu 17 Sep 2026 18:35:51 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=) 2: BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl (hash: Ltjj3UZ27YBXOeqcN0K8NfOoSZS73WWdnZsF5CPGg9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ee:0b:fb:2b:62:0c:cf:ce:4d:43:dd:e6:ae:e6:80:b3:d2:54:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1 Validity Not Before: Sep 16 18:16:51 2026 GMT Not After : Sep 17 18:35:51 2026 GMT Subject: CN=C44849F6DA3DCDBABBB2A977792429DB3E261B46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5d:b8:91:dc:da:c0:d8:88:e1:87:d6:49:1a: 86:8a:5f:ea:7f:9e:cb:90:b7:0e:f3:12:e1:9b:fa: 86:9e:9d:33:6d:63:76:0c:cb:43:f9:f9:82:06:ce: cd:fb:8d:46:ec:65:38:b2:c0:02:e1:9c:89:1a:f6: 1a:92:18:12:0a:e1:2a:48:8b:df:fc:84:aa:64:80: 56:0f:ab:63:ab:7a:37:d9:81:3d:cb:6a:2b:2a:a1: 71:6a:45:55:7a:8b:f4:8d:f4:e4:cc:ae:c1:46:f9: eb:70:ea:29:4c:97:8e:32:f6:f9:64:d3:36:39:ca: 39:27:c8:ad:91:14:ec:cc:2b:88:31:d3:68:0d:6d: 42:28:c9:b7:d7:f6:f3:ec:49:47:97:3a:4e:aa:67: 70:10:ba:08:87:c1:5e:af:61:16:f9:20:5f:53:58: b7:f1:8e:ef:13:90:a4:d5:3e:d5:18:34:92:ec:84: 75:95:37:78:52:1a:e3:10:b0:64:92:26:6b:5c:6f: 3c:81:b9:e3:bc:a6:3e:e2:14:c8:cd:83:cb:c6:24: 7e:e0:c8:d3:71:d1:16:92:46:f5:8b:46:0e:d7:01: 5d:e5:79:f4:ef:4f:56:7d:b0:f7:58:5f:6d:83:3d: 9f:ee:9e:31:08:98:4b:a5:50:08:78:38:54:12:07: 62:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:48:49:F6:DA:3D:CD:BA:BB:B2:A9:77:79:24:29:DB:3E:26:1B:46 X509v3 Authority Key Identifier: keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:79:2b:33:9a:36:65:90:93:0d:26:a9:77:9b:a2:bb:b9:95: 42:51:9e:ce:87:81:93:67:ec:f1:44:d5:ff:fc:b3:c4:39:2b: f8:8c:f3:32:4b:e2:dd:7e:a1:55:0a:a9:99:d1:11:e4:35:0a: 51:b8:c2:6a:18:49:6f:9e:12:c2:43:26:4b:2c:1d:77:db:b2: dd:ea:a4:92:ff:3e:45:d6:7b:f9:ea:52:60:18:53:29:99:e0: 02:03:17:1d:ef:a5:70:65:8a:9f:de:4e:dd:d4:3e:f2:62:b4: 2f:d8:ff:0f:95:c5:d4:e6:2b:b3:da:2f:5a:2d:fd:83:dd:8f: 72:53:48:24:0f:82:0e:91:ea:05:77:d5:be:09:41:a6:74:11: 72:f4:e6:4c:e9:13:af:b8:5c:a9:19:32:08:8d:f9:47:b8:89: 09:9a:49:8a:d6:76:f4:e9:35:b4:d3:40:fb:cf:24:7d:b3:38: 6f:0c:80:d9:35:eb:e4:73:a5:8f:88:50:84:f8:5e:41:ee:a8: 16:5b:d7:6e:16:f2:91:06:7d:f3:3b:e4:45:0c:b3:ac:4e:2b: 3f:e2:d7:26:fd:0e:09:a1:30:55:f9:3c:54:f9:47:a6:60:67: 3a:c7:34:b9:7e:7e:b5:06:08:3b:8c:64:82:1e:6a:ea:c2:4b: 91:aa:9a:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUau4L+ytiDM/OTUPd5q7mgLPSVN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5 MjQ0ODBEMTAeFw0yNjA5MTYxODE2NTFaFw0yNjA5MTcxODM1NTFaMDMxMTAvBgNV BAMTKEM0NDg0OUY2REEzRENEQkFCQkIyQTk3Nzc5MjQyOURCM0UyNjFCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeXbiR3NrA2Ijhh9ZJGoaKX+p/ nsuQtw7zEuGb+oaenTNtY3YMy0P5+YIGzs37jUbsZTiywALhnIka9hqSGBIK4SpI i9/8hKpkgFYPq2OrejfZgT3LaisqoXFqRVV6i/SN9OTMrsFG+etw6ilMl44y9vlk 0zY5yjknyK2RFOzMK4gx02gNbUIoybfX9vPsSUeXOk6qZ3AQugiHwV6vYRb5IF9T WLfxju8TkKTVPtUYNJLshHWVN3hSGuMQsGSSJmtcbzyBueO8pj7iFMjNg8vGJH7g yNNx0RaSRvWLRg7XAV3lefTvT1Z9sPdYX22DPZ/unjEImEulUAh4OFQSB2IDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxEhJ9to9zbq7sql3eSQp2z4mG0YwHwYDVR0j BBgwFoAUug49SPtWJiyG35c//HyYdJJEgNEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjViODQ1OWEtZTM1MS00YzhkLWJjMjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhG QjU2MjYyQzg2REY5NzNGRkM3Qzk4NzQ5MjQ0ODBEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTBFM0Q0OEZCNTYyNjJDODZERjk3M0ZGQzdDOTg3NDkyNDQ4 MEQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvQkEwRTNENDhGQjU2MjYyQzg2REY5NzNGRkM3Qzk4 NzQ5MjQ0ODBEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAR5KzOaNmWQkw0mqXeboru5lUJRns6HgZNn 7PFE1f/8s8Q5K/iM8zJL4t1+oVUKqZnREeQ1ClG4wmoYSW+eEsJDJkssHXfbst3q pJL/PkXWe/nqUmAYUymZ4AIDFx3vpXBlip/eTt3UPvJitC/Y/w+VxdTmK7PaL1ot /YPdj3JTSCQPgg6R6gV31b4JQaZ0EXL05kzpE6+4XKkZMgiN+Ue4iQmaSYrWdvTp NbTTQPvPJH2zOG8MgNk16+RzpY+IUIT4XkHuqBZb124W8pEGffM75EUMs6xOKz/i 1yb9DgmhMFX5PFT5R6ZgZzrHNLl+frUGCDuMZIIeaurCS5Gqmk0= -----END CERTIFICATE-----Generated at Thu Sep 17 09:14:41 2026 by rpki-client