$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft File: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft (raw, json) Hash identifier: TnHsXcOVu+XilsG/+OApVR8h72I6SCSISXYNsH7ffPw= Subject key identifier: A1:4A:DF:1F:99:DE:8E:04:BE:3F:CB:38:1E:59:2A:07:96:15:FC:E4 Authority key identifier: BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B Certificate issuer: /CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Certificate serial: 0DC876DF28C75BF0D8E366399B811B75C92DB86B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft Manifest number: BF Signing time: Mon 21 Sep 2026 14:19:15 +0000 Manifest this update: Mon 21 Sep 2026 14:14:15 +0000 Manifest next update: Tue 22 Sep 2026 15:23:15 +0000 Files and hashes: 1: BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl (hash: zhmR+XR6dVGI4n9peatxrD71m2WHKnrTIO8sLQtsGEo=) 2: 3130332e3134302e33362e302f32342d3234203d3e20313338383832.roa (hash: qH/qEHKxDsf1G4yiC7ToZneWwEmX69L2twWeNOsZ4DQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c8:76:df:28:c7:5b:f0:d8:e3:66:39:9b:81:1b:75:c9:2d:b8:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA188A25E9FDBB93241A28F2C8B99417EC7D919B Validity Not Before: Sep 21 14:14:15 2026 GMT Not After : Sep 22 15:23:15 2026 GMT Subject: CN=A14ADF1F99DE8E04BE3FCB381E592A079615FCE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:8d:8e:fe:7c:93:1a:03:d0:41:cd:45:56: 89:a2:37:56:57:4a:57:6a:dc:46:e0:71:b3:29:b5: 0e:83:fd:1c:7f:d1:3f:2e:65:e8:0a:12:75:b0:01: ac:d3:48:e2:5a:4e:42:ce:23:95:33:f6:2c:ba:e9: 7b:05:82:3e:00:75:95:1e:59:ea:6e:17:dc:2c:fc: 9e:15:3d:0c:92:93:3d:94:c9:b9:97:15:9f:5d:f9: a2:9d:11:bf:76:df:33:a9:85:b8:07:80:8a:6c:eb: 0b:c9:24:c2:cb:79:e0:35:0c:8c:3d:80:bc:93:2b: 45:3f:ce:d0:4b:b0:81:64:91:8f:a1:87:27:d5:4b: 18:8e:b3:af:10:3b:4c:cd:e2:f6:d3:e8:d9:f6:bf: fc:81:f8:da:84:9d:c5:38:fe:b1:ff:4b:94:33:36: 69:5f:24:93:78:91:0a:ae:b8:53:1c:1f:f1:a3:3e: 0c:b7:81:f3:05:df:34:29:57:bd:3a:80:67:0a:97: 0b:44:7c:f4:fd:f9:a3:aa:dd:a4:b6:2a:36:95:d6: 4c:74:16:b4:da:d0:1f:01:0a:e6:01:50:21:f7:78: 81:62:35:d3:bb:02:99:9a:f7:fd:d0:6d:70:45:84: 00:a2:37:dd:32:f9:89:27:ed:92:86:77:8e:3f:02: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:4A:DF:1F:99:DE:8E:04:BE:3F:CB:38:1E:59:2A:07:96:15:FC:E4 X509v3 Authority Key Identifier: keyid:BA:18:8A:25:E9:FD:BB:93:24:1A:28:F2:C8:B9:94:17:EC:7D:91:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3404bad1-2b3e-4141-9fc5-df99b2bd0a22/0/BA188A25E9FDBB93241A28F2C8B99417EC7D919B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:55:09:88:24:a5:ee:99:1e:f1:33:8b:d0:3c:70:09:98:59: 98:a5:67:93:b4:e7:bf:af:9a:21:39:05:95:c0:95:a3:5c:7e: 7c:0f:6a:c4:e5:49:7d:cc:37:92:64:19:67:46:8a:8f:25:bd: 88:9d:22:54:89:e8:30:bf:af:d1:6d:de:a5:55:5b:85:93:0f: ae:94:be:53:ae:f0:0c:33:bb:c0:e7:59:e3:06:c3:53:7b:36: 51:a5:e2:90:89:79:55:07:cf:c1:99:6d:ac:04:fa:eb:90:64: 6b:6b:bc:4f:97:59:6b:c0:1c:23:9e:ef:19:3e:9d:70:da:bd: 68:ae:c9:a3:b1:2d:bf:f9:ec:df:26:f2:7a:88:ba:4e:0e:57: 5f:39:74:71:84:12:36:01:25:9f:58:89:3f:99:49:b1:f3:40: b4:0d:ef:78:48:e6:41:b3:83:e3:84:88:6e:f7:e3:f5:77:5a: 96:21:b2:5d:f2:c9:5c:c6:cd:1f:65:5d:b0:09:06:69:a9:53: 32:33:ca:59:ab:f3:cb:7e:e9:07:aa:46:1d:db:86:7b:2c:b7: 86:64:bb:4b:56:c7:57:2c:56:f1:21:ee:26:8f:be:ea:3b:69: c1:ee:03:5c:a4:96:55:ac:85:97:9c:f0:55:85:0c:34:02:49: a2:1f:a6:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDch23yjHW/DY42Y5m4EbdcktuGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdF QzdEOTE5QjAeFw0yNjA5MjExNDE0MTVaFw0yNjA5MjIxNTIzMTVaMDMxMTAvBgNV BAMTKEExNEFERjFGOTlERThFMDRCRTNGQ0IzODFFNTkyQTA3OTYxNUZDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3g42O/nyTGgPQQc1FVomiN1ZX Sldq3EbgcbMptQ6D/Rx/0T8uZegKEnWwAazTSOJaTkLOI5Uz9iy66XsFgj4AdZUe WepuF9ws/J4VPQySkz2UybmXFZ9d+aKdEb923zOphbgHgIps6wvJJMLLeeA1DIw9 gLyTK0U/ztBLsIFkkY+hhyfVSxiOs68QO0zN4vbT6Nn2v/yB+NqEncU4/rH/S5Qz NmlfJJN4kQquuFMcH/GjPgy3gfMF3zQpV706gGcKlwtEfPT9+aOq3aS2KjaV1kx0 FrTa0B8BCuYBUCH3eIFiNdO7Apma9/3QbXBFhACiN90y+Ykn7ZKGd44/Aj6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoUrfH5nejgS+P8s4HlkqB5YV/OQwHwYDVR0j BBgwFoAUuhiKJen9u5MkGijyyLmUF+x9kZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQwNGJhZDEtMmIzZS00MTQxLTlmYzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVF OUZEQkI5MzI0MUEyOEYyQzhCOTk0MTdFQzdEOTE5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTE4OEEyNUU5RkRCQjkzMjQxQTI4RjJDOEI5OTQxN0VDN0Q5 MTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQwNGJhZDEtMmIzZS00MTQxLTlm YzUtZGY5OWIyYmQwYTIyLzAvQkExODhBMjVFOUZEQkI5MzI0MUEyOEYyQzhCOTk0 MTdFQzdEOTE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJVCYgkpe6ZHvEzi9A8cAmYWZilZ5O057+v miE5BZXAlaNcfnwPasTlSX3MN5JkGWdGio8lvYidIlSJ6DC/r9Ft3qVVW4WTD66U vlOu8Awzu8DnWeMGw1N7NlGl4pCJeVUHz8GZbawE+uuQZGtrvE+XWWvAHCOe7xk+ nXDavWiuyaOxLb/57N8m8nqIuk4OV185dHGEEjYBJZ9YiT+ZSbHzQLQN73hI5kGz g+OEiG734/V3WpYhsl3yyVzGzR9lXbAJBmmpUzIzylmr88t+6QeqRh3bhnsst4Zk u0tWx1csVvEh7iaPvuo7acHuA1ykllWshZec8FWFDDQCSaIfpv0= -----END CERTIFICATE-----Generated at Tue Sep 22 10:39:21 2026 by rpki-client