$ rpki-client -vvf rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft File: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft (raw, json) Hash identifier: APgomDkEaUF61aNQLGn5egsOGQydRIO3PPLrZCvot+A= Subject key identifier: E7:F0:29:AA:FD:D0:E4:8A:F4:6F:36:B0:E0:D5:45:E9:60:F5:AA:67 Authority key identifier: BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D Certificate issuer: /CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Certificate serial: 51CC48A0D147AA2E29FF218BFA3CD9EDBC4480C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:30:21 +0000 Manifest this update: Tue 16 Jun 2026 17:25:21 +0000 Manifest next update: Wed 17 Jun 2026 18:22:21 +0000 Files and hashes: 1: BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl (hash: tVUnPhXECwb86qfgJlWj8JdpjL+5aM4o9Wkx10amGEU=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: RNPhf9/lBBG4ePFry8t6M8E2VZ4dh3VKskTCATQigd0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:cc:48:a0:d1:47:aa:2e:29:ff:21:8b:fa:3c:d9:ed:bc:44:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D Validity Not Before: Jun 16 17:25:21 2026 GMT Not After : Jun 17 18:22:21 2026 GMT Subject: CN=E7F029AAFDD0E48AF46F36B0E0D545E960F5AA67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c7:ee:4c:9d:ab:ac:0d:55:33:63:5d:97:e8: 06:fd:8a:b3:be:07:a5:fb:01:e5:36:dd:df:21:90: 62:f1:0b:d6:57:f7:21:3a:22:9a:a4:12:49:15:8c: b2:cf:9c:66:11:85:32:77:a3:8c:d8:62:af:00:8f: f3:7c:4b:c0:06:82:92:99:70:7d:3b:ee:77:08:4f: de:a8:6c:2e:cf:fe:3f:4f:f7:b8:2d:fa:92:e5:a7: 93:dd:e3:86:f4:16:b0:17:b3:e6:a5:6f:4b:8a:ab: 9b:af:b6:1a:00:c1:9e:99:6b:87:1a:40:d4:6b:09: 3b:c2:88:89:e9:25:72:1e:2d:e3:2a:4c:48:2e:60: ce:b6:f0:3c:c5:5c:1f:8c:df:4c:a5:8d:55:51:8b: 96:7e:e9:3e:97:71:0d:21:89:2b:86:9d:48:a3:63: 29:8b:a5:44:46:bf:50:52:e9:1a:f1:13:42:d2:57: 93:c1:1f:a2:64:67:97:57:db:39:ab:1d:7b:23:b0: d3:20:e2:0c:0b:c2:16:45:e6:ed:7a:83:bd:63:1b: 34:62:21:eb:42:52:32:4f:6e:6e:f7:83:8b:1d:05: 39:88:ba:e2:50:88:48:86:32:a5:8a:6d:bc:59:e9: 0a:a9:eb:ae:c5:87:cc:d3:7e:a8:14:3f:3b:fb:9b: a8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F0:29:AA:FD:D0:E4:8A:F4:6F:36:B0:E0:D5:45:E9:60:F5:AA:67 X509v3 Authority Key Identifier: keyid:BA:F4:A5:F1:5C:E4:19:64:6D:68:FF:C9:C7:3C:73:EF:E4:D5:A3:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/BAF4A5F15CE419646D68FFC9C73C73EFE4D5A37D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:16:f5:ae:d5:d2:7c:7b:79:8c:81:29:36:35:67:6f:85:24: 17:71:35:16:e6:e6:f2:c6:0f:34:75:c1:f2:7d:ac:ce:78:02: c2:99:c1:5b:10:36:e6:dd:a9:50:5c:c3:a9:f5:47:43:ba:38: 42:67:65:6a:2a:67:db:48:1f:86:47:e1:ec:6c:ec:b1:0b:90: 24:5f:61:d0:e0:08:92:30:7c:ac:89:23:63:92:c6:b0:fd:ee: 5e:ac:f6:bb:a9:09:5e:de:9c:41:1c:6c:e0:34:cc:63:4e:44: c3:7f:3e:4c:2d:c8:8f:ea:0f:a4:3c:fe:5c:e3:97:21:3c:7b: 77:72:52:b7:86:aa:84:d6:e5:61:ce:e8:bb:72:83:4f:47:ed: 16:92:5c:7e:e9:44:cd:25:bd:bd:e0:cb:e2:3e:81:8c:0b:a7: 88:2a:f9:16:fa:74:8b:36:f4:db:fe:11:7b:08:e5:24:8a:30: 7e:8e:19:c3:c6:e4:27:d5:8a:a0:fa:51:a7:22:3c:c0:ea:c0: 6e:16:dd:67:3d:8f:24:4b:1b:8a:be:5f:26:60:48:9f:ae:e6: 70:7b:5d:2e:65:4c:3f:b6:12:06:89:d6:1e:08:4b:5d:e4:56: d5:4d:3a:ba:8b:a0:c2:c4:03:e4:b5:a3:6b:cb:71:3f:0d:8e: c0:13:c1:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcxIoNFHqi4p/yGL+jzZ7bxEgMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzczRUZF NEQ1QTM3RDAeFw0yNjA2MTYxNzI1MjFaFw0yNjA2MTcxODIyMjFaMDMxMTAvBgNV BAMTKEU3RjAyOUFBRkREMEU0OEFGNDZGMzZCMEUwRDU0NUU5NjBGNUFBNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnx+5MnausDVUzY12X6Ab9irO+ B6X7AeU23d8hkGLxC9ZX9yE6IpqkEkkVjLLPnGYRhTJ3o4zYYq8Aj/N8S8AGgpKZ cH077ncIT96obC7P/j9P97gt+pLlp5Pd44b0FrAXs+alb0uKq5uvthoAwZ6Za4ca QNRrCTvCiInpJXIeLeMqTEguYM628DzFXB+M30yljVVRi5Z+6T6XcQ0hiSuGnUij YymLpURGv1BS6RrxE0LSV5PBH6JkZ5dX2zmrHXsjsNMg4gwLwhZF5u16g71jGzRi IetCUjJPbm73g4sdBTmIuuJQiEiGMqWKbbxZ6Qqp667Fh8zTfqgUPzv7m6iLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/Apqv3Q5Ir0bzaw4NVF6WD1qmcwHwYDVR0j BBgwFoAUuvSl8VzkGWRtaP/Jxzxz7+TVo30wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzNhZDM3NTctOTNhMC00YjMzLTkxMjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1 Q0U0MTk2NDZENjhGRkM5QzczQzczRUZFNEQ1QTM3RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQUY0QTVGMTVDRTQxOTY0NkQ2OEZGQzlDNzNDNzNFRkU0RDVB MzdELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvQkFGNEE1RjE1Q0U0MTk2NDZENjhGRkM5QzczQzcz RUZFNEQ1QTM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEW9a7V0nx7eYyBKTY1Z2+FJBdxNRbm5vLG DzR1wfJ9rM54AsKZwVsQNubdqVBcw6n1R0O6OEJnZWoqZ9tIH4ZH4exs7LELkCRf YdDgCJIwfKyJI2OSxrD97l6s9rupCV7enEEcbOA0zGNORMN/PkwtyI/qD6Q8/lzj lyE8e3dyUreGqoTW5WHO6Ltyg09H7RaSXH7pRM0lvb3gy+I+gYwLp4gq+Rb6dIs2 9Nv+EXsI5SSKMH6OGcPG5CfViqD6UaciPMDqwG4W3Wc9jyRLG4q+XyZgSJ+u5nB7 XS5lTD+2EgaJ1h4IS13kVtVNOrqLoMLEA+S1o2vLcT8NjsATweM= -----END CERTIFICATE-----Generated at Wed Jun 17 09:20:37 2026 by rpki-client