$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft File: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft (raw, json) Hash identifier: jiMUG6Tn/hx3bVj23E0nEiW6r95pO/ASOrrYgXE2HEk= Subject key identifier: B0:33:06:43:71:2D:C3:D6:06:EA:20:31:48:31:B3:21:9C:F9:7A:A7 Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 21D8915B831030E0DB32605D96D4E1B5D96C80DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft Manifest number: BD Signing time: Sun 20 Sep 2026 11:00:43 +0000 Manifest this update: Sun 20 Sep 2026 10:55:43 +0000 Manifest next update: Mon 21 Sep 2026 13:41:43 +0000 Files and hashes: 1: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl (hash: Au6yJwHOFeWOvj5LiI/CqUK8YPCxCcibDJjSlBVMrpk=) 2: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: 6KPoXiqtvd9nuyAco4ru4jZgNuQNFI930Qn7LAylJPg=) 3: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc=) 4: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 13:41:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d8:91:5b:83:10:30:e0:db:32:60:5d:96:d4:e1:b5:d9:6c:80:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: Sep 20 10:55:43 2026 GMT Not After : Sep 21 13:41:43 2026 GMT Subject: CN=B0330643712DC3D606EA20314831B3219CF97AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:00:2d:8c:b5:96:44:22:fa:93:c7:f1:cb: 89:63:24:30:7d:01:36:0d:2b:6f:b8:65:8d:61:90: e8:2c:3a:e0:d7:ac:c0:1b:9f:ce:a2:b3:3a:56:bb: 15:49:be:90:eb:7a:5d:7d:f0:97:0b:de:c3:3b:7f: 9b:a8:cf:23:1d:84:a4:e0:a9:0e:f3:4b:10:f3:36: a1:cc:ff:bb:96:ab:7d:40:36:d8:61:95:4e:eb:cf: 3d:72:d0:4e:a1:1f:22:10:9f:79:50:9d:a3:8b:a4: 98:5a:6d:c8:56:07:38:cd:40:f2:9b:41:10:77:92: 59:e5:ec:13:ef:a9:e1:ed:c5:9a:1b:53:61:d7:a6: 38:9b:86:f6:72:6f:d7:72:cb:05:f6:8d:c5:bf:40: bc:84:dd:dc:a7:38:13:33:fb:f9:3b:02:0b:97:13: e0:6b:c5:7f:f1:b3:09:a4:59:0f:41:8e:f0:1b:64: aa:39:bf:82:7f:e9:94:a4:ec:bf:72:cf:58:25:87: 64:76:f5:c3:37:dc:b4:76:41:17:60:3c:71:24:88: da:b8:86:15:ed:7d:45:1c:a7:f2:80:98:f3:59:c6: 1e:78:8e:00:cf:95:3f:a0:1c:10:0b:17:f0:21:6b: df:39:4c:7d:f1:a5:16:eb:5c:3d:ca:ea:c2:0b:9f: 4a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:33:06:43:71:2D:C3:D6:06:EA:20:31:48:31:B3:21:9C:F9:7A:A7 X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:20:0f:56:e2:ee:9f:ab:ee:3b:6f:a1:84:9b:aa:62:9e:ba: fb:7f:86:d6:cd:54:92:2e:b7:63:eb:cb:53:c3:cc:5d:da:f7: 8c:14:70:6b:79:8f:40:4e:da:5e:a6:40:38:da:34:61:7e:d5: 5a:c6:b6:c1:9b:4f:cb:3d:bb:79:74:eb:1c:47:aa:cd:35:95: 4c:fa:44:d3:f0:2d:2a:68:70:1c:96:9c:cb:1b:12:b7:fa:d0: 1a:55:16:1a:7c:a0:f2:4e:54:c7:40:34:ca:75:94:fb:eb:9a: e1:75:68:cf:c9:1a:33:81:60:41:16:0e:ca:cc:23:14:7a:c2: 67:b5:6d:76:43:7f:e6:72:9c:ca:9e:f2:8b:f7:e3:9b:c9:69: 36:51:d6:03:3c:d5:0d:69:01:90:27:ae:6e:9b:7d:71:ed:77: 7a:a0:12:70:b1:a6:e6:72:54:e6:16:ce:9b:c2:f3:ee:30:da: 6d:42:49:78:56:6f:fd:24:71:cc:e5:84:f6:f5:a2:90:fa:51: a3:bf:c8:67:d0:29:dc:fd:1a:ae:e9:e0:11:96:64:29:d5:a6: 96:7b:36:db:4b:bd:71:92:c8:67:2a:b9:e7:b9:b3:f4:54:d3: fd:e9:28:a4:91:5a:68:da:4c:9e:1d:25:6c:10:98:a8:24:bc: 4f:a4:95:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdiRW4MQMODbMmBdltThtdlsgN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA5MjAxMDU1NDNaFw0yNjA5MjExMzQxNDNaMDMxMTAvBgNV BAMTKEIwMzMwNjQzNzEyREMzRDYwNkVBMjAzMTQ4MzFCMzIxOUNGOTdBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AQAtjLWWRCL6k8fxy4ljJDB9 ATYNK2+4ZY1hkOgsOuDXrMAbn86iszpWuxVJvpDrel198JcL3sM7f5uozyMdhKTg qQ7zSxDzNqHM/7uWq31ANthhlU7rzz1y0E6hHyIQn3lQnaOLpJhabchWBzjNQPKb QRB3klnl7BPvqeHtxZobU2HXpjibhvZyb9dyywX2jcW/QLyE3dynOBMz+/k7AguX E+BrxX/xswmkWQ9BjvAbZKo5v4J/6ZSk7L9yz1glh2R29cM33LR2QRdgPHEkiNq4 hhXtfUUcp/KAmPNZxh54jgDPlT+gHBALF/Aha985TH3xpRbrXD3K6sILn0qjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDMGQ3Etw9YG6iAxSDGzIZz5eqcwHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQz MTQyQkRGM0M2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMgD1bi7p+r7jtvoYSbqmKeuvt/htbNVJIu t2Pry1PDzF3a94wUcGt5j0BO2l6mQDjaNGF+1VrGtsGbT8s9u3l06xxHqs01lUz6 RNPwLSpocByWnMsbErf60BpVFhp8oPJOVMdANMp1lPvrmuF1aM/JGjOBYEEWDsrM IxR6wme1bXZDf+ZynMqe8ov345vJaTZR1gM81Q1pAZAnrm6bfXHtd3qgEnCxpuZy VOYWzpvC8+4w2m1CSXhWb/0kcczlhPb1opD6UaO/yGfQKdz9Gq7p4BGWZCnVppZ7 NttLvXGSyGcquee5s/RU0/3pKKSRWmjaTJ4dJWwQmKgkvE+kle4= -----END CERTIFICATE-----Generated at Mon Sep 21 06:32:10 2026 by rpki-client