$ rpki-client -vvf rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft File: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft (raw, json) Hash identifier: HQOecMNJbwxZuaJH4e4StZw0GBTbHMbAE0cE3ynRJMU= Subject key identifier: E9:1C:A8:11:05:46:24:94:C4:D4:3B:D8:C1:10:EF:06:28:23:58:F2 Authority key identifier: BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 Certificate issuer: /CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Certificate serial: 658F306A1F16E03BD4DB17AC5288B23FD588527C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft Manifest number: 92 Signing time: Thu 20 Aug 2026 07:21:48 +0000 Manifest this update: Thu 20 Aug 2026 07:16:48 +0000 Manifest next update: Fri 21 Aug 2026 11:08:48 +0000 Files and hashes: 1: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: oPvC3i/lrZuDzfOmiLwK2jYBsKG2L4fiPPqahjcNpFg=) 2: BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl (hash: JYY85COY8KWgi0N72QwmJnnWGUKltEHGTZyuEUHDoGk=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Z144p4vK3Wc0Wvxj3ow3CyTWpjreny/dO0BWeCNgJ+I=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: hoI4Z+yZlJFn+WHGYBiSiySAQlgqw69H0i3XEwm8T7w=) 5: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: K6H7szwO6ti+xX+3grJSvrA81wCwhPJ39G60g97CTBE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:8f:30:6a:1f:16:e0:3b:d4:db:17:ac:52:88:b2:3f:d5:88:52:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA4294A62FFBF344CA7AF61DA13D0994A0000E3 Validity Not Before: Aug 20 07:16:48 2026 GMT Not After : Aug 21 11:08:48 2026 GMT Subject: CN=E91CA81105462494C4D43BD8C110EF06282358F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:82:79:ab:4a:33:98:e6:84:48:8e:31:16: 9c:91:82:6d:a3:c9:f1:d9:f8:cf:73:f7:35:de:a0: ee:a3:31:e5:61:96:56:ba:f4:97:b2:3a:1f:5f:2b: e4:b6:81:f1:1c:bf:a3:b1:8e:be:ac:15:f8:2b:c3: 5b:28:00:3d:17:c6:01:b3:21:47:cc:cb:f5:3b:0a: 08:99:2e:b4:8e:ba:4f:bf:06:8b:7c:5b:3b:34:e1: 08:0f:36:48:a6:3b:de:c7:10:ff:d1:b5:f1:a6:d5: 63:1e:7a:08:e1:44:e6:66:ae:d1:2f:b6:99:ad:82: 32:0b:66:86:cb:b1:f1:ae:8b:70:60:3b:fb:f0:6f: 16:b8:e0:35:1e:90:b0:f8:cc:93:bf:65:50:c9:3f: 57:cc:ca:ee:5c:3a:7e:b7:7f:38:bc:67:43:0c:58: e5:b7:a6:f1:4a:c1:5b:ed:40:e2:31:87:88:8b:e3: 6b:93:5e:3e:9c:27:27:eb:ba:67:ac:84:9e:1c:7b: f9:1d:a9:54:7a:61:9a:77:f7:ea:2b:5a:bc:bc:68: 22:43:5e:25:30:56:73:97:a1:fe:2a:a5:83:ad:b6: ec:69:8e:d7:7d:97:30:26:da:20:54:92:ff:0c:31: 6c:b6:d9:77:9c:f1:90:55:9e:35:79:7e:5a:78:94: c4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1C:A8:11:05:46:24:94:C4:D4:3B:D8:C1:10:EF:06:28:23:58:F2 X509v3 Authority Key Identifier: keyid:BA:A4:29:4A:62:FF:BF:34:4C:A7:AF:61:DA:13:D0:99:4A:00:00:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/BAA4294A62FFBF344CA7AF61DA13D0994A0000E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2b:d3:5e:dc:74:0c:34:9c:f5:d4:23:13:16:eb:c2:5e:00: 7f:eb:97:63:21:0c:3a:97:4a:bf:64:26:44:bc:0c:2c:f0:c0: aa:f1:a9:1f:71:03:fb:75:f6:f5:2b:16:80:3e:05:24:e1:76: db:62:dc:c4:83:dd:0f:20:34:b6:b6:5b:7e:0e:5b:56:6b:cc: 36:b0:de:7a:f2:2e:d6:41:28:c7:25:2f:ea:19:2f:e0:93:ed: 8d:20:c3:6e:e3:09:85:22:7c:0f:b4:d2:96:66:35:a7:3d:77: 2c:a2:1c:b9:7f:20:cc:08:2d:60:a2:91:f4:8e:dc:a3:3c:59: 07:19:8a:38:94:ec:db:c8:43:15:67:cb:0e:59:4a:72:2d:ce: 29:ab:19:e4:7d:ea:5d:db:ec:7c:15:86:d6:9f:3e:0f:bf:f2: 54:c2:b6:3e:89:f7:a7:cd:01:b3:95:16:c4:12:ec:60:1f:f1: 6f:12:14:27:93:b2:a9:3b:dd:21:97:8f:69:5e:14:a9:7f:7e: ac:9b:ed:f9:ec:1c:72:0a:3f:61:3f:14:7b:66:ee:ac:ce:ef: 90:31:7f:c6:42:06:6f:f3:14:61:23:ee:af:f8:c5:61:06:0f: 99:f8:73:3a:f1:29:91:7e:06:34:bf:58:d7:82:a0:77:e6:d9: fc:ba:c5:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZY8wah8W4DvU2xesUoiyP9WIUnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0 QTAwMDBFMzAeFw0yNjA4MjAwNzE2NDhaFw0yNjA4MjExMTA4NDhaMDMxMTAvBgNV BAMTKEU5MUNBODExMDU0NjI0OTRDNEQ0M0JEOEMxMTBFRjA2MjgyMzU4RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+s4J5q0ozmOaESI4xFpyRgm2j yfHZ+M9z9zXeoO6jMeVhlla69JeyOh9fK+S2gfEcv6Oxjr6sFfgrw1soAD0XxgGz IUfMy/U7CgiZLrSOuk+/Bot8Wzs04QgPNkimO97HEP/RtfGm1WMeegjhROZmrtEv tpmtgjILZobLsfGui3BgO/vwbxa44DUekLD4zJO/ZVDJP1fMyu5cOn63fzi8Z0MM WOW3pvFKwVvtQOIxh4iL42uTXj6cJyfrumeshJ4ce/kdqVR6YZp39+orWry8aCJD XiUwVnOXof4qpYOttuxpjtd9lzAm2iBUkv8MMWy22Xec8ZBVnjV5flp4lMTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6RyoEQVGJJTE1DvYwRDvBigjWPIwHwYDVR0j BBgwFoAUuqQpSmL/vzRMp69h2hPQmUoAAOMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjczYWI3OWQtMDBkNS00OWNiLWFjMTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2 MkZGQkYzNDRDQTdBRjYxREExM0QwOTk0QTAwMDBFMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUE0Mjk0QTYyRkZCRjM0NENBN0FGNjFEQTEzRDA5OTRBMDAw MEUzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvQkFBNDI5NEE2MkZGQkYzNDRDQTdBRjYxREExM0Qw OTk0QTAwMDBFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsr017cdAw0nPXUIxMW68JeAH/rl2MhDDqX Sr9kJkS8DCzwwKrxqR9xA/t19vUrFoA+BSThdtti3MSD3Q8gNLa2W34OW1ZrzDaw 3nryLtZBKMclL+oZL+CT7Y0gw27jCYUifA+00pZmNac9dyyiHLl/IMwILWCikfSO 3KM8WQcZijiU7NvIQxVnyw5ZSnItzimrGeR96l3b7HwVhtafPg+/8lTCtj6J96fN AbOVFsQS7GAf8W8SFCeTsqk73SGXj2leFKl/fqyb7fnsHHIKP2E/FHtm7qzO75Ax f8ZCBm/zFGEj7q/4xWEGD5n4czrxKZF+BjS/WNeCoHfm2fy6xQU= -----END CERTIFICATE-----Generated at Thu Aug 20 13:16:21 2026 by rpki-client