$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json) Hash identifier: nTDTQZl4cWr7QrSXLmK9+UNUKmYOfpkLGXJzGhWnfpM= Subject key identifier: E1:C7:3B:78:79:AA:EF:0A:A3:6A:10:DF:A8:48:BC:5B:B4:A4:A4:CE Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Certificate serial: 5344487AEC05B50D6B765D7587CD97E5C43CB094 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 13:05:26 +0000 Manifest this update: Sat 13 Jun 2026 13:00:26 +0000 Manifest next update: Sun 14 Jun 2026 14:54:26 +0000 Files and hashes: 1: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: uxiZ/Zfg4O0fMU2P043Pk/72oRPHKjGfg3WGDy809yc=) 2: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=) 3: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=) 4: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:44:48:7a:ec:05:b5:0d:6b:76:5d:75:87:cd:97:e5:c4:3c:b0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6 Validity Not Before: Jun 13 13:00:26 2026 GMT Not After : Jun 14 14:54:26 2026 GMT Subject: CN=E1C73B7879AAEF0AA36A10DFA848BC5BB4A4A4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:b0:b4:fa:90:f5:fb:b9:6d:b4:fe:76:91: 0f:65:0b:a2:e4:d4:5d:db:39:2b:ec:1b:2a:de:5c: f9:a9:e1:33:29:30:ee:41:66:39:82:68:d4:84:43: d7:be:1b:6a:28:03:1e:9c:21:d5:62:eb:6e:16:6b: 7e:d0:3f:6c:d7:29:40:a4:6c:a5:ec:9b:1b:88:d7: 94:e1:f0:f1:98:7d:e5:1a:6e:3b:17:a9:55:69:ae: 69:b8:8c:1c:31:35:b0:b6:16:46:47:79:8c:0e:a8: f5:b4:d6:59:af:8e:be:ed:22:fe:e4:41:4f:a2:30: 20:d1:d0:02:5a:cd:27:71:01:cd:c6:61:4c:54:31: 7d:77:2a:3c:62:b5:bc:62:a1:27:72:f6:20:e0:d4: 75:3a:34:f3:8d:02:8e:53:3f:81:19:d2:e5:6b:4d: 25:2c:92:b2:d6:57:b1:1d:d5:56:1d:37:7d:1c:f9: 77:e0:72:37:a8:65:ab:5b:08:97:14:46:90:f1:e0: 43:c9:94:39:6d:d3:0f:0f:45:fb:05:03:11:0d:aa: 5c:62:46:e5:97:a0:7a:9e:f4:1c:4f:74:e4:aa:e1: f8:a2:e5:c1:cf:a4:49:ae:4b:f0:f0:27:23:a4:ea: b8:e3:65:ef:e6:47:13:0c:87:70:46:a0:53:fa:bd: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C7:3B:78:79:AA:EF:0A:A3:6A:10:DF:A8:48:BC:5B:B4:A4:A4:CE X509v3 Authority Key Identifier: keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0d:3c:6a:7a:de:9b:bf:de:73:0a:88:1e:e4:4b:bb:34:8d: 37:f0:31:27:07:d2:48:fc:e7:d8:42:18:6e:c1:b5:48:87:6d: c2:27:93:85:bd:06:1b:c3:3b:ea:14:56:6e:37:91:b6:c3:4b: 2b:a1:1e:a4:c4:51:2e:e3:e2:d5:66:a9:9c:8d:16:7e:b0:41: ce:e9:fa:61:bd:e8:9b:34:90:28:bb:83:44:83:55:c4:23:d5: 8b:d4:6e:54:71:cb:fc:43:2e:fd:a7:c1:e3:99:ce:0e:27:55: 0b:45:19:e8:00:45:d1:7b:1c:38:7c:ca:7e:da:92:36:ea:43: fc:8b:b9:a0:e1:9f:96:71:d3:88:e4:ec:57:66:9e:10:a6:64: 37:01:11:b1:1f:ea:40:cc:5f:b0:06:67:12:c6:11:4d:c9:e6: 1c:df:50:bd:8c:a3:5b:3f:29:69:66:8a:10:35:b5:26:fe:ac: 88:4b:6e:fb:24:1b:87:8c:09:c1:82:0e:03:3d:e9:23:9b:a1: 03:fa:65:68:47:a4:cf:76:1a:bc:7f:61:7b:43:1d:3a:8f:a6: 94:c5:d3:b3:07:02:a7:a6:2a:16:e9:e3:9c:7b:eb:96:1d:c7: 7d:a1:d4:98:10:ed:35:7d:7e:0d:30:09:9c:2b:65:30:10:53: c9:62:a6:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0RIeuwFtQ1rdl11h82X5cQ8sJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4 MTdGRkNCNjAeFw0yNjA2MTMxMzAwMjZaFw0yNjA2MTQxNDU0MjZaMDMxMTAvBgNV BAMTKEUxQzczQjc4NzlBQUVGMEFBMzZBMTBERkE4NDhCQzVCQjRBNEE0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcW7C0+pD1+7lttP52kQ9lC6Lk 1F3bOSvsGyreXPmp4TMpMO5BZjmCaNSEQ9e+G2ooAx6cIdVi624Wa37QP2zXKUCk bKXsmxuI15Th8PGYfeUabjsXqVVprmm4jBwxNbC2FkZHeYwOqPW01lmvjr7tIv7k QU+iMCDR0AJazSdxAc3GYUxUMX13KjxitbxioSdy9iDg1HU6NPONAo5TP4EZ0uVr TSUskrLWV7Ed1VYdN30c+XfgcjeoZatbCJcURpDx4EPJlDlt0w8PRfsFAxENqlxi RuWXoHqe9BxPdOSq4fii5cHPpEmuS/DwJyOk6rjjZe/mRxMMh3BGoFP6vTRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cc7eHmq7wqjahDfqEi8W7SkpM4wHwYDVR0j BBgwFoAUuoDpVzMrRQsWQQYvbALFfIF//LYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWIzZDE0Y2ItY2NjMi00NmQyLThlMzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTcz MzJCNDUwQjE2NDEwNjJGNkMwMkM1N0M4MTdGRkNCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTgwRTk1NzMzMkI0NTBCMTY0MTA2MkY2QzAyQzU3QzgxN0ZG Q0I2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWIzZDE0Y2ItY2NjMi00NmQyLThl MzEtMTZmNWJlYzBhY2Q4LzAvQkE4MEU5NTczMzJCNDUwQjE2NDEwNjJGNkMwMkM1 N0M4MTdGRkNCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8NPGp63pu/3nMKiB7kS7s0jTfwMScH0kj8 59hCGG7BtUiHbcInk4W9BhvDO+oUVm43kbbDSyuhHqTEUS7j4tVmqZyNFn6wQc7p +mG96Js0kCi7g0SDVcQj1YvUblRxy/xDLv2nweOZzg4nVQtFGegARdF7HDh8yn7a kjbqQ/yLuaDhn5Zx04jk7FdmnhCmZDcBEbEf6kDMX7AGZxLGEU3J5hzfUL2Mo1s/ KWlmihA1tSb+rIhLbvskG4eMCcGCDgM96SOboQP6ZWhHpM92Grx/YXtDHTqPppTF 07MHAqemKhbp45x765Ydx32h1JgQ7TV9fg0wCZwrZTAQU8lippo= -----END CERTIFICATE-----Generated at Sat Jun 13 23:12:35 2026 by rpki-client