$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: jKCSRpuRYmANDeI2DwJDdYfedueTauVmK54J+55KFp8= Subject key identifier: 67:74:B6:B9:9C:E2:DB:05:3C:0F:B5:B6:14:02:C4:17:3A:A6:B8:A6 Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 3DEADE35110E6BA9061B3408C2036156D75D3ED9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 03:20:08 +0000 Manifest this update: Wed 29 Jul 2026 03:15:08 +0000 Manifest next update: Thu 30 Jul 2026 04:35:08 +0000 Files and hashes: 1: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) 3: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: iKBUzz+uQAusd3Bm8AzohSjU9dFZ1CdXfSYbJw4y08c=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ea:de:35:11:0e:6b:a9:06:1b:34:08:c2:03:61:56:d7:5d:3e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Jul 29 03:15:08 2026 GMT Not After : Jul 30 04:35:08 2026 GMT Subject: CN=6774B6B99CE2DB053C0FB5B61402C4173AA6B8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:23:83:83:68:57:6c:eb:58:88:d4:5b:06: 8e:ae:d0:7d:8b:b5:5c:45:0d:64:49:85:39:57:80: f6:f8:2c:49:ff:32:a3:13:af:d6:01:cc:b1:89:de: 87:d3:83:52:49:4d:4d:d3:45:4e:d7:c5:20:75:71: e6:9b:bf:90:5f:a7:1a:b2:78:c4:6d:f4:25:72:ff: 3d:d9:22:86:26:64:d8:5d:5a:37:92:6f:fe:8d:e2: 90:69:e4:d3:97:77:c9:9c:09:79:41:6a:4e:ca:28: 8b:de:50:51:01:9f:5b:1f:28:0c:b3:d9:76:ab:2b: 42:e2:6d:df:51:48:0d:c7:0f:e8:bb:6e:94:36:a2: 1e:86:e7:e5:3b:a3:99:23:37:56:b6:03:95:66:fb: 8c:4d:2d:a7:15:e7:24:aa:69:65:24:1f:17:3a:ac: 2d:c8:7b:c1:63:61:e0:8c:b0:fd:47:b7:f8:0e:ba: d8:6e:37:03:ff:93:e7:60:2d:95:b7:cf:33:6a:19: b8:70:79:39:31:06:1d:7e:0d:f6:4e:bd:e5:66:0e: 66:02:09:58:32:b0:06:d5:d6:f6:95:04:08:1b:0d: 96:7e:9f:7e:0b:2b:be:cc:5e:a7:88:be:da:c5:c7: 21:96:44:b5:87:ad:82:04:1b:32:15:e4:31:60:e0: cc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:74:B6:B9:9C:E2:DB:05:3C:0F:B5:B6:14:02:C4:17:3A:A6:B8:A6 X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:a2:cd:81:9d:bf:e0:33:1b:e4:da:45:31:a3:6f:18:7a: f4:bd:9b:ba:90:95:9b:99:97:b9:93:3e:d8:86:3c:75:d2:dd: b2:c9:d2:5d:0c:14:85:9d:dc:d5:5f:48:ae:ac:27:82:b9:12: 23:b9:4b:41:9b:79:83:14:14:93:58:78:7f:f7:5a:fa:26:1b: 09:f1:54:7c:90:3a:06:e9:04:cf:0a:da:97:36:ef:5d:47:a2: 94:eb:cf:df:eb:7e:da:79:30:1d:17:b1:92:f5:78:09:e0:e5: 16:9c:69:aa:ac:73:4b:78:a7:82:e3:09:73:8c:88:b0:02:2b: d9:46:b9:6e:1a:c9:4a:95:f0:58:11:2c:a6:70:57:92:ea:f6: 68:fb:ad:ad:ff:41:8d:cc:82:28:1e:56:12:9d:c9:17:38:b7: 5f:4a:73:69:cb:a9:d4:55:aa:88:24:37:95:5d:49:c5:58:7f: bb:2a:c1:6a:29:a3:bf:8f:95:37:63:31:4d:5c:92:3e:81:19: 9c:d3:98:86:7e:c9:9b:3b:66:9b:2b:48:7b:2f:08:7c:b3:75: ab:ad:3d:a2:26:15:22:11:48:0c:30:3f:a6:82:3c:5b:a6:62: 3a:cd:bb:82:4f:46:ca:ba:9c:6d:35:4a:65:97:36:0e:31:31: 23:ca:1a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPereNREOa6kGGzQIwgNhVtddPtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA3MjkwMzE1MDhaFw0yNjA3MzAwNDM1MDhaMDMxMTAvBgNV BAMTKDY3NzRCNkI5OUNFMkRCMDUzQzBGQjVCNjE0MDJDNDE3M0FBNkI4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmiODg2hXbOtYiNRbBo6u0H2L tVxFDWRJhTlXgPb4LEn/MqMTr9YBzLGJ3ofTg1JJTU3TRU7XxSB1ceabv5Bfpxqy eMRt9CVy/z3ZIoYmZNhdWjeSb/6N4pBp5NOXd8mcCXlBak7KKIveUFEBn1sfKAyz 2XarK0Libd9RSA3HD+i7bpQ2oh6G5+U7o5kjN1a2A5Vm+4xNLacV5ySqaWUkHxc6 rC3Ie8FjYeCMsP1Ht/gOuthuNwP/k+dgLZW3zzNqGbhweTkxBh1+DfZOveVmDmYC CVgysAbV1vaVBAgbDZZ+n34LK77MXqeIvtrFxyGWRLWHrYIEGzIV5DFg4MzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ3S2uZzi2wU8D7W2FALEFzqmuKYwHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRxos2Bnb/gMxvk2kUxo28YevS9m7qQlZuZ l7mTPtiGPHXS3bLJ0l0MFIWd3NVfSK6sJ4K5EiO5S0GbeYMUFJNYeH/3WvomGwnx VHyQOgbpBM8K2pc2711HopTrz9/rftp5MB0XsZL1eAng5Racaaqsc0t4p4LjCXOM iLACK9lGuW4ayUqV8FgRLKZwV5Lq9mj7ra3/QY3MgigeVhKdyRc4t19Kc2nLqdRV qogkN5VdScVYf7sqwWopo7+PlTdjMU1ckj6BGZzTmIZ+yZs7ZpsrSHsvCHyzdaut PaImFSIRSAwwP6aCPFumYjrNu4JPRsq6nG01SmWXNg4xMSPKGuc= -----END CERTIFICATE-----Generated at Wed Jul 29 08:11:01 2026 by rpki-client