
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
File: BA80E957332B450B1641062F6C02C57C817FFCB6.mft (raw, json)
Hash identifier: mY0J9fFm7C3ZZRpvdcXzbhqPC9t9dFeJEJmPndvEh18=
Subject key identifier: F0:05:51:47:5D:38:13:5B:17:72:33:CA:6B:21:F4:B4:FE:AE:C0:4D
Authority key identifier: BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6
Certificate issuer: /CN=BA80E957332B450B1641062F6C02C57C817FFCB6
Certificate serial: 04D40A629CEE73ED857DB5E76669DEC21FE64440
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 08:21:52 +0000
Manifest this update: Mon 21 Sep 2026 08:16:52 +0000
Manifest next update: Tue 22 Sep 2026 08:28:52 +0000
Files and hashes: 1: 3130332e3135322e39342e302f32342d3234203d3e203435333132.roa (hash: vdfBPceXwpY5dy9UQmH5kp+LVhfFpi2lPvmv6OBSPuw=)
2: 3130332e3135322e39342e302f32342d3234203d3e20313432333039.roa (hash: oeu8Yxj+v1wvdi72zoiErwEhlqXcs2n8V9EKs/WYb/M=)
3: BA80E957332B450B1641062F6C02C57C817FFCB6.crl (hash: 99BB2VhJA2FIsQPIPXLHVYKxoxzcKYpq/19GxvV317U=)
4: 3130332e3135322e39352e302f32342d3234203d3e20313432333039.roa (hash: fmZr6mR64+/oamhPKvoeeSHz1zG8LAjl2Kt18+AfseI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl
rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d4:0a:62:9c:ee:73:ed:85:7d:b5:e7:66:69:de:c2:1f:e6:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA80E957332B450B1641062F6C02C57C817FFCB6
Validity
Not Before: Sep 21 08:16:52 2026 GMT
Not After : Sep 22 08:28:52 2026 GMT
Subject: CN=F00551475D38135B177233CA6B21F4B4FEAEC04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:06:0f:89:db:55:a5:32:66:80:b2:18:9d:
32:62:16:5f:2c:63:8b:ff:09:7c:6a:fc:98:35:49:
7b:8f:bb:b7:6e:8a:b7:4b:db:b7:54:88:fb:a4:12:
d5:cf:c8:e2:55:f8:09:90:40:9b:18:0d:a4:23:82:
46:e6:2c:28:1d:8d:13:ae:d3:e8:1b:4f:49:c6:26:
ca:b5:df:3f:5d:db:2b:c8:33:a9:60:4b:78:40:e9:
d6:c4:34:95:1a:c0:6a:f1:1a:d0:f4:a8:94:76:bf:
0d:24:8b:2f:53:52:18:05:fa:a1:b4:f8:a1:bd:f9:
37:5a:6b:e3:06:05:d7:96:b6:85:d8:d2:aa:49:99:
06:06:fd:5c:ba:8d:a7:81:b8:2d:7d:b6:6b:9a:14:
b1:82:c2:bd:83:85:7c:eb:2f:68:76:96:19:bc:99:
43:48:bc:e3:7d:8a:24:0c:60:ca:c9:aa:f1:76:ee:
58:09:8d:06:1e:bb:72:0c:d3:0c:8a:13:29:cd:d6:
0c:50:fb:79:89:1a:f5:4d:c4:7c:86:a1:12:e4:aa:
02:c7:59:e6:f9:b1:61:82:28:45:54:13:98:b8:ad:
51:ef:9d:d5:02:0f:a9:3a:28:c9:83:1a:6e:22:37:
34:20:67:df:87:8e:68:38:10:69:62:dc:56:07:5c:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:51:47:5D:38:13:5B:17:72:33:CA:6B:21:F4:B4:FE:AE:C0:4D
X509v3 Authority Key Identifier:
keyid:BA:80:E9:57:33:2B:45:0B:16:41:06:2F:6C:02:C5:7C:81:7F:FC:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA80E957332B450B1641062F6C02C57C817FFCB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b3d14cb-ccc2-46d2-8e31-16f5bec0acd8/0/BA80E957332B450B1641062F6C02C57C817FFCB6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9c:57:84:25:d6:44:2b:cd:58:0c:d2:5f:6e:3d:5c:87:a4:
7a:b2:7e:13:9f:96:e8:79:df:4c:8b:e3:35:1c:5c:5f:8b:3b:
82:cc:72:f0:66:6e:a8:53:33:2b:10:8f:22:28:95:e3:b4:42:
f3:af:a9:8d:a7:03:0c:a9:38:be:36:52:c6:99:73:99:8c:63:
6c:ab:42:10:83:57:5c:51:69:19:cf:01:65:23:6a:1a:cd:59:
a1:65:63:84:30:fc:82:68:c8:e9:04:47:88:c6:eb:f3:55:94:
08:ea:18:47:45:df:4c:f8:f7:08:34:fa:2e:95:bb:4b:93:51:
bc:6c:c5:11:69:47:a9:2c:7f:d9:f0:d2:7b:3d:d1:2f:0a:c2:
18:56:d4:9e:31:b7:6d:c6:36:57:d0:93:55:6f:52:bf:58:06:
58:53:70:c3:ba:f7:bb:72:23:c7:cd:fa:d0:1e:dc:96:b8:a7:
97:f5:8d:d3:df:38:31:27:8f:92:f3:8d:f5:4d:7a:03:a4:cd:
4b:e4:e6:a7:62:6d:51:0c:de:55:dc:a6:04:bd:c6:6a:3f:ef:
26:10:c3:a2:b0:0a:43:db:23:80:97:a8:24:92:62:40:57:9b:
a7:05:a6:67:f3:77:54:4a:cd:f9:c9:eb:60:19:50:b6:e7:16:
d3:46:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:44:57 2026 by rpki-client