$ rpki-client -vvf rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft File: BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft (raw, json) Hash identifier: Oki0gfVEPIC9AeptruPyllgwlhElS31OIIF4Ia/mOUc= Subject key identifier: 3F:0C:AE:38:40:3F:6C:15:06:D4:BB:D8:24:B3:FB:0D:93:6E:9F:50 Authority key identifier: BA:79:42:F7:10:A9:6D:2E:58:44:CB:59:FF:50:B4:A1:B5:7D:EE:75 Certificate issuer: /CN=BA7942F710A96D2E5844CB59FF50B4A1B57DEE75 Certificate serial: 5ECF4E67BEACF6BB942B277D019823BE26ADFFD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:24:24 +0000 Manifest this update: Wed 17 Jun 2026 05:19:24 +0000 Manifest next update: Thu 18 Jun 2026 05:46:24 +0000 Files and hashes: 1: BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl (hash: AhNsMNqm+W33igcvJVhaJsqoEDxpsLzGJKmJiWEoFGo=) 2: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: gB2XAgMbpkCp6GRXXto6VwaneP5fQ+ewIgMqwQ77ASc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:cf:4e:67:be:ac:f6:bb:94:2b:27:7d:01:98:23:be:26:ad:ff:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA7942F710A96D2E5844CB59FF50B4A1B57DEE75 Validity Not Before: Jun 17 05:19:24 2026 GMT Not After : Jun 18 05:46:24 2026 GMT Subject: CN=3F0CAE38403F6C1506D4BBD824B3FB0D936E9F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:26:96:5b:63:be:95:2d:4c:36:cd:ab:26: 53:87:4a:33:14:6e:cb:f6:45:cc:5f:d6:12:f1:e5: 5b:71:c9:96:f4:c2:a8:b5:4f:9c:69:df:9c:2b:4f: 8b:2a:4a:76:de:01:f4:ae:22:3c:cf:3f:6c:27:3b: 28:a4:be:93:06:4b:6b:2a:35:ae:6e:f3:23:6a:f8: a2:78:c4:39:4f:ac:c2:f2:be:4c:a3:ec:f5:89:fe: b8:51:7e:e4:ce:38:71:42:12:f1:ff:89:8a:8d:5a: 69:80:9f:ba:14:c5:d2:02:ef:b4:5d:e3:14:1e:26: 3c:8b:b5:8f:ea:db:d5:c9:0d:4a:1e:0c:fe:8d:7d: f3:ae:b0:77:0b:c0:bf:bb:a3:c1:4d:99:ce:5d:57: 4a:f2:26:6a:45:96:d6:7a:58:08:82:63:66:3c:16: 9c:0a:5a:0c:ba:87:40:37:9b:f6:77:dc:b2:5d:10: 41:59:11:c3:13:c1:cf:e6:8f:a9:8b:cb:6d:ce:25: 33:a9:45:5f:89:59:ad:74:9e:15:2f:8d:b8:c6:6f: d7:0c:c6:dd:4e:92:3a:fa:35:73:03:70:9c:f0:fe: 21:06:fa:af:18:ea:87:ca:35:6d:72:06:e9:d3:66: fd:63:a3:96:25:b1:d7:81:7f:b3:e6:72:9d:2e:7a: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0C:AE:38:40:3F:6C:15:06:D4:BB:D8:24:B3:FB:0D:93:6E:9F:50 X509v3 Authority Key Identifier: keyid:BA:79:42:F7:10:A9:6D:2E:58:44:CB:59:FF:50:B4:A1:B5:7D:EE:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/BA7942F710A96D2E5844CB59FF50B4A1B57DEE75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6d:ef:a9:e2:29:02:fd:3c:93:d1:66:91:32:5e:44:8d:d6: 75:f6:39:5f:c4:f5:78:72:1a:7b:28:62:df:75:3b:50:cc:3f: 27:67:35:1b:2b:57:74:48:b6:e0:f7:56:1b:06:6a:fc:71:5f: 44:fa:fb:1a:3a:cb:27:3a:d3:c9:1f:c5:65:d7:f1:9d:ad:b8: 74:ff:f2:df:56:6a:0b:b0:98:58:5d:0f:ef:ab:a5:11:3d:fc: f0:67:b6:d0:ef:5a:1d:d5:92:85:27:dc:58:5e:07:52:41:ed: 3c:52:a5:37:1c:c2:89:b8:08:2f:3c:99:bf:c6:6d:75:01:41: 38:f5:ed:db:ef:8b:34:1d:cf:8b:9e:64:28:95:53:8e:64:bb: b6:4a:66:48:32:2b:06:a0:5e:6f:2b:78:62:4b:5a:ca:14:88: 9b:b6:0d:c4:70:5e:e9:94:39:f6:96:c6:be:20:08:54:d0:69: 9e:1c:d4:2a:87:d4:d3:75:3b:46:d4:ba:d8:28:98:8b:79:3d: 9a:7f:d8:66:c2:94:5d:c1:c9:7d:0c:0b:04:ab:de:52:ab:d0: 3c:18:a9:b3:6b:06:2f:63:1d:76:bf:9b:41:96:51:d0:e0:49: 61:17:b4:19:2d:fd:ba:6d:33:86:56:72:aa:fd:63:d8:5b:da: d4:29:0f:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXs9OZ76s9ruUKyd9AZgjviat/9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE3OTQyRjcxMEE5NkQyRTU4NDRDQjU5RkY1MEI0QTFC NTdERUU3NTAeFw0yNjA2MTcwNTE5MjRaFw0yNjA2MTgwNTQ2MjRaMDMxMTAvBgNV BAMTKDNGMENBRTM4NDAzRjZDMTUwNkQ0QkJEODI0QjNGQjBEOTM2RTlGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9diaWW2O+lS1MNs2rJlOHSjMU bsv2Rcxf1hLx5VtxyZb0wqi1T5xp35wrT4sqSnbeAfSuIjzPP2wnOyikvpMGS2sq Na5u8yNq+KJ4xDlPrMLyvkyj7PWJ/rhRfuTOOHFCEvH/iYqNWmmAn7oUxdIC77Rd 4xQeJjyLtY/q29XJDUoeDP6NffOusHcLwL+7o8FNmc5dV0ryJmpFltZ6WAiCY2Y8 FpwKWgy6h0A3m/Z33LJdEEFZEcMTwc/mj6mLy23OJTOpRV+JWa10nhUvjbjGb9cM xt1Okjr6NXMDcJzw/iEG+q8Y6ofKNW1yBunTZv1jo5YlsdeBf7Pmcp0uel2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwyuOEA/bBUG1LvYJLP7DZNun1AwHwYDVR0j BBgwFoAUunlC9xCpbS5YRMtZ/1C0obV97nUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjFjYmM5MjctZjRlMi00MTUzLWI2NmItY2UxZWMwMmQ3NDEwLzAvQkE3OTQyRjcx MEE5NkQyRTU4NDRDQjU5RkY1MEI0QTFCNTdERUU3NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTc5NDJGNzEwQTk2RDJFNTg0NENCNTlGRjUwQjRBMUI1N0RF RTc1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjFjYmM5MjctZjRlMi00MTUzLWI2 NmItY2UxZWMwMmQ3NDEwLzAvQkE3OTQyRjcxMEE5NkQyRTU4NDRDQjU5RkY1MEI0 QTFCNTdERUU3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExt76niKQL9PJPRZpEyXkSN1nX2OV/E9Xhy GnsoYt91O1DMPydnNRsrV3RItuD3VhsGavxxX0T6+xo6yyc608kfxWXX8Z2tuHT/ 8t9WaguwmFhdD++rpRE9/PBnttDvWh3VkoUn3FheB1JB7TxSpTccwom4CC88mb/G bXUBQTj17dvvizQdz4ueZCiVU45ku7ZKZkgyKwagXm8reGJLWsoUiJu2DcRwXumU OfaWxr4gCFTQaZ4c1CqH1NN1O0bUutgomIt5PZp/2GbClF3ByX0MCwSr3lKr0DwY qbNrBi9jHXa/m0GWUdDgSWEXtBkt/bptM4ZWcqr9Y9hb2tQpD/E= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:36 2026 by rpki-client