$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft File: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft (raw, json) Hash identifier: DEKslTla3tXz+tIvuh9lnB3Blfp4wE73fiwfAUn30Ho= Subject key identifier: 23:31:14:20:8B:1A:D6:DE:5A:F5:91:A1:D4:D3:52:00:A5:F2:8F:62 Authority key identifier: BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 Certificate issuer: /CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Certificate serial: 3EA64BD4ED8F6D16827647D31ACCE3EE90186243 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 17:02:46 +0000 Manifest this update: Tue 28 Jul 2026 16:57:46 +0000 Manifest next update: Wed 29 Jul 2026 19:35:46 +0000 Files and hashes: 1: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: +/Z+l46w62+euzVttfTbUpjA36xrgfvJsPvniMmOZIM=) 2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: 34SELdnrb0ReXu8mxgFx5LIh/fNfXuwnNwVvGgL+Ivc=) 3: BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl (hash: dkKC9lCk82T5mARlUalsHx3dz048QmkC62dCEJ4MvJQ=) 4: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: 6KPoXiqtvd9nuyAco4ru4jZgNuQNFI930Qn7LAylJPg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a6:4b:d4:ed:8f:6d:16:82:76:47:d3:1a:cc:e3:ee:90:18:62:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67 Validity Not Before: Jul 28 16:57:46 2026 GMT Not After : Jul 29 19:35:46 2026 GMT Subject: CN=233114208B1AD6DE5AF591A1D4D35200A5F28F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:84:22:5b:9d:1a:2c:d7:bc:45:16:25:40: 7d:2d:67:ae:dd:0e:53:be:cf:78:91:77:23:c7:3c: ce:ce:7e:3c:23:fc:fb:1e:c5:b1:42:8c:f4:fd:01: 48:a0:8f:66:4b:3d:7a:53:0d:ca:6b:fa:29:c3:fd: 7e:10:d2:69:14:63:44:6e:bb:d9:bc:6a:68:f9:f7: b3:2c:07:e9:88:20:33:db:70:fd:02:c2:70:40:12: 16:2d:a9:98:a1:c1:2f:8f:e1:10:9d:a3:ab:23:ff: ea:c4:a2:85:98:08:17:0c:cc:ec:27:03:18:2f:68: d2:1c:f1:b3:be:c1:48:e7:7d:62:e2:e1:d7:49:5d: 30:75:84:7a:56:c9:13:52:e3:cb:34:7e:43:6d:45: ab:a3:31:d1:14:7a:0d:85:ab:3c:31:51:4c:31:b0: b5:a9:13:cf:fa:88:6f:3e:83:82:19:74:40:22:21: 39:72:a4:c5:61:6c:22:79:70:7e:11:d3:07:86:a9: 1e:92:36:98:93:28:1a:4f:31:23:3d:d0:53:52:24: a3:3e:ae:a3:34:fa:75:35:65:24:d5:5b:c3:9e:15: 19:39:5f:d3:89:7b:5d:c0:b4:04:a7:70:b2:68:5e: c1:d7:c5:b3:24:6a:a9:44:20:14:c0:8b:86:15:47: 65:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:31:14:20:8B:1A:D6:DE:5A:F5:91:A1:D4:D3:52:00:A5:F2:8F:62 X509v3 Authority Key Identifier: keyid:BA:5A:38:A4:D0:FB:8A:AA:8D:D1:8E:1F:B3:9A:43:14:2B:DF:3C:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/BA5A38A4D0FB8AAA8DD18E1FB39A43142BDF3C67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bb:86:5c:71:f2:8f:a0:29:90:ca:96:a8:d4:fd:46:b3:04: ff:ad:a2:20:8c:7e:ad:c6:cc:8c:bd:27:f8:f4:21:86:ff:07: 62:36:68:c7:41:17:f8:0d:14:08:43:1b:e4:ad:d7:23:46:56: 99:50:f5:b9:15:ed:7a:63:18:fc:50:55:9b:f7:95:7d:b1:27: 09:6b:48:5d:72:7a:e7:66:ee:8c:77:b9:8f:09:00:b9:86:1f: a0:13:6e:1f:60:8a:3b:b9:40:49:ef:2d:f0:70:3d:81:ee:30: 10:ee:51:36:0b:cb:cb:9e:74:b1:2a:10:97:ff:16:53:aa:01: 8d:4f:be:a8:53:e1:3a:9a:65:8e:b9:08:ba:70:81:25:36:1d: c5:ca:98:7f:1f:42:47:dc:c6:31:cb:54:a2:e1:c6:10:c0:8c: 6f:7c:0b:bf:7f:03:56:2e:81:1d:24:2d:fd:ff:78:f9:f1:6a: 08:c7:40:f1:53:00:5e:12:0b:4e:e8:06:c1:30:51:30:21:ce: 48:b9:cd:72:96:aa:d6:66:97:c4:d2:89:b0:74:dd:ec:70:7f: 47:2c:65:75:79:e5:25:82:61:35:af:be:1d:61:c2:ed:ec:0f: 40:bf:c0:da:dc:a6:84:25:65:09:9c:8f:b3:42:65:42:67:34: 6d:41:59:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqZL1O2PbRaCdkfTGszj7pAYYkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQzMTQy QkRGM0M2NzAeFw0yNjA3MjgxNjU3NDZaFw0yNjA3MjkxOTM1NDZaMDMxMTAvBgNV BAMTKDIzMzExNDIwOEIxQUQ2REU1QUY1OTFBMUQ0RDM1MjAwQTVGMjhGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOIQiW50aLNe8RRYlQH0tZ67d DlO+z3iRdyPHPM7Ofjwj/PsexbFCjPT9AUigj2ZLPXpTDcpr+inD/X4Q0mkUY0Ru u9m8amj597MsB+mIIDPbcP0CwnBAEhYtqZihwS+P4RCdo6sj/+rEooWYCBcMzOwn AxgvaNIc8bO+wUjnfWLi4ddJXTB1hHpWyRNS48s0fkNtRaujMdEUeg2FqzwxUUwx sLWpE8/6iG8+g4IZdEAiITlypMVhbCJ5cH4R0weGqR6SNpiTKBpPMSM90FNSJKM+ rqM0+nU1ZSTVW8OeFRk5X9OJe13AtASncLJoXsHXxbMkaqlEIBTAi4YVR2VrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIzEUIIsa1t5a9ZGh1NNSAKXyj2IwHwYDVR0j BBgwFoAUulo4pND7iqqN0Y4fs5pDFCvfPGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmZkODBkOTYtZWYxYi00NGIyLTkwM2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTRE MEZCOEFBQThERDE4RTFGQjM5QTQzMTQyQkRGM0M2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTVBMzhBNEQwRkI4QUFBOEREMThFMUZCMzlBNDMxNDJCREYz QzY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQkE1QTM4QTREMEZCOEFBQThERDE4RTFGQjM5QTQz MTQyQkRGM0M2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ27hlxx8o+gKZDKlqjU/UazBP+toiCMfq3G zIy9J/j0IYb/B2I2aMdBF/gNFAhDG+St1yNGVplQ9bkV7XpjGPxQVZv3lX2xJwlr SF1yeudm7ox3uY8JALmGH6ATbh9giju5QEnvLfBwPYHuMBDuUTYLy8uedLEqEJf/ FlOqAY1PvqhT4TqaZY65CLpwgSU2HcXKmH8fQkfcxjHLVKLhxhDAjG98C79/A1Yu gR0kLf3/ePnxagjHQPFTAF4SC07oBsEwUTAhzki5zXKWqtZml8TSibB03exwf0cs ZXV55SWCYTWvvh1hwu3sD0C/wNrcpoQlZQmcj7NCZUJnNG1BWRQ= -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:05 2026 by rpki-client